Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/qPRr-ZzBZhWTCcOM-EzJRUxzV8k.roa
File: qPRr-ZzBZhWTCcOM-EzJRUxzV8k.roa (raw, json)
Hash identifier: /dsAmaCDnR/o46G9SRcNOqJGpP5qf83mcSUY7DzXgNQ=
Subject key identifier: A8:F4:6B:F9:9C:C1:66:15:93:09:C3:8C:F8:4C:C9:45:4C:73:57:C9
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018E130D477AA4DABA84F499CFDD5FB91A3F
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/qPRr-ZzBZhWTCcOM-EzJRUxzV8k.roa
Signing time: Wed 06 Mar 2024 09:17:01 +0000
ROA not before: Wed 06 Mar 2024 09:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.156.224.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.254.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
2a01:4740::/32 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:0d:47:7a:a4:da:ba:84:f4:99:cf:dd:5f:b9:1a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Mar 6 09:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8f46bf99cc166159309c38cf84cc9454c7357c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:62:5f:4f:f9:0c:5e:fd:25:ef:4a:12:42:
55:02:f1:0c:0c:14:b3:02:78:c7:78:78:c7:98:13:
9b:90:43:be:55:20:af:5c:33:d5:a4:1d:4c:0a:1d:
22:49:89:55:99:d5:dd:d0:b3:f3:25:ce:ed:e6:27:
a5:e3:1b:05:de:9e:cb:32:df:5a:e5:15:ff:43:7f:
78:ff:8c:44:dc:4f:a1:07:94:0c:58:af:e1:30:c1:
6d:95:3b:07:03:e7:c9:4e:15:6f:1f:6a:b0:97:04:
e6:af:41:78:89:89:3f:27:07:4e:88:a9:fe:0c:08:
be:2b:b6:87:43:0e:72:22:71:65:f3:b1:bf:d8:6b:
e3:1b:3d:ee:84:81:0f:3c:01:34:d4:73:d9:93:60:
36:22:50:12:e5:cc:f2:76:24:7a:c3:f9:03:10:18:
36:79:e8:d3:48:bf:23:60:f6:5b:25:e7:28:d3:a7:
34:85:ae:58:c8:a2:8b:ab:cf:b5:1a:91:18:15:c0:
b4:63:f6:6d:45:e5:93:a4:49:32:00:03:03:e5:65:
8f:33:fe:1a:ac:7a:bf:c1:f2:1f:f8:3d:de:c4:e1:
f5:58:f5:cb:ba:f8:05:1b:2c:1c:1f:91:6e:a0:0d:
c3:28:3b:4f:63:28:39:f1:38:16:37:30:9e:31:e1:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:6B:F9:9C:C1:66:15:93:09:C3:8C:F8:4C:C9:45:4C:73:57:C9
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/qPRr-ZzBZhWTCcOM-EzJRUxzV8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.254.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
26:a6:bc:d6:bb:93:7d:18:21:db:8d:0b:5d:ec:33:8d:c2:d2:
e9:f4:bc:3c:29:c5:57:2c:46:7d:8d:c7:f6:af:03:cc:13:d2:
9d:44:a3:e5:f5:84:f3:2e:19:17:b7:4c:a7:f2:86:6c:e8:56:
eb:53:d7:4c:58:1b:d7:48:15:0b:2a:0d:6d:c0:2e:5c:14:7e:
26:52:89:88:57:08:2d:75:f3:10:d9:56:37:fb:87:33:c9:27:
62:4c:98:c0:c0:a3:22:cd:8f:b9:0e:aa:86:5f:72:83:d7:aa:
bf:af:57:b0:47:71:1b:0b:14:bb:46:47:6a:13:30:af:fa:e3:
19:ff:66:6e:97:c1:a1:a9:bf:f2:0c:71:cc:05:73:b4:b5:56:
3d:b5:b3:1b:85:38:0b:f1:ec:11:c5:92:4e:54:06:83:70:35:
94:a5:03:9a:d3:54:ec:6c:be:3d:17:6d:2a:74:79:13:4c:9b:
bf:5d:18:7c:40:43:9e:ac:c4:f3:13:87:45:71:a4:32:ef:a8:
d7:19:c2:f4:c0:f9:8c:e6:2d:52:24:24:b8:ae:f2:a1:09:d4:
1c:88:1e:50:09:7a:2b:e9:c8:27:6d:99:d2:45:b0:f4:4d:14:
75:7f:5d:3a:48:28:8a:d6:ee:ec:64:a3:51:b4:4e:b6:f4:e9:
a4:26:44:1e
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgISAY4TDUd6pNq6hPSZz91fuRo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjQwMzA2MDkxNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGY0NmJmOTljYzE2NjE1OTMwOWMzOGNmODRjYzk0NTRjNzM1N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwViX0/5DF79Je9KEkJVAvEMDBSz
AnjHeHjHmBObkEO+VSCvXDPVpB1MCh0iSYlVmdXd0LPzJc7t5iel4xsF3p7LMt9a
5RX/Q394/4xE3E+hB5QMWK/hMMFtlTsHA+fJThVvH2qwlwTmr0F4iYk/JwdOiKn+
DAi+K7aHQw5yInFl87G/2GvjGz3uhIEPPAE01HPZk2A2IlAS5czydiR6w/kDEBg2
eejTSL8jYPZbJeco06c0ha5YyKKLq8+1GpEYFcC0Y/ZtReWTpEkyAAMD5WWPM/4a
rHq/wfIf+D3exOH1WPXLuvgFGywcH5FuoA3DKDtPYyg58TgWNzCeMeHaMwIDAQAB
o4IDPjCCAzowHQYDVR0OBBYEFKj0a/mcwWYVkwnDjPhMyUVMc1fJMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvcVBSci1aekJaaFdUQ2NPTS1FekpSVXh6VjhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUgYIKwYBBQUHAQcBAf8EggFBMIIBPTCBuwQCAAEwgbQD
BAAFmq4DBAItXxgDBAItkFgDBAItlRwDBAItnOADBABQ9h4DBABWabcDBABX7/4D
BABZI/kDBABZKBgDBABZLM0DBABb5NgDBABeLs4DBAC5JP4DBAC5YKIDBAG5bGgD
BAK5k4wDBAK5mCQDBAK5mPgDBAC5mZcDBAK5oCwDBAC5plQDBAC5uOQDBAC5vD0D
BAC5ybwDBAK52UADBAC58tkDBAC8d5oDBADBJFkDBADDL8IwfQQCAAIwdwMFACoB
R0ADBQMqBSjAAwUDKgX0wAMFAyoGMEADBQMqBkbAAwUDKgZKAAMFAyoGUAADBQMq
BlcAAwUDKgbfgAMFAyoG5IADBQMqB0eAAwUDKgecgAMFAyoH8sADBQMqCjCAAwUD
Kgs/QAMFAyoM2MADBQMqDOxAMA0GCSqGSIb3DQEBCwUAA4IBAQAmprzWu5N9GCHb
jQtd7DONwtLp9Lw8KcVXLEZ9jcf2rwPME9KdRKPl9YTzLhkXt0yn8oZs6FbrU9dM
WBvXSBULKg1twC5cFH4mUomIVwgtdfMQ2VY3+4czySdiTJjAwKMizY+5DqqGX3KD
16q/r1ewR3EbCxS7RkdqEzCv+uMZ/2Zul8Ghqb/yDHHMBXO0tVY9tbMbhTgL8ewR
xZJOVAaDcDWUpQOa01TsbL49F20qdHkTTJu/XRh8QEOerMTzE4dFcaQy76jXGcL0
wPmM5i1SJCS4rvKhCdQciB5QCXor6cgnbZnSRbD0TRR1f106SCiK1u7sZKNRtE62
9OmkJkQe
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:10 2025 by rpki-client