Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/ROYXGQwHkQLzalc37wqmEqdk5r8.roa
File: ROYXGQwHkQLzalc37wqmEqdk5r8.roa (raw, json)
Hash identifier: 6H17V6BaUBP9V1noyPTAKFgtV/u7+FyrrmOepW3UQcI=
Subject key identifier: 44:E6:17:19:0C:07:91:02:F3:6A:57:37:EF:0A:A6:12:A7:64:E6:BF
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0194228D7B671F27471016552314C990CB8E
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/ROYXGQwHkQLzalc37wqmEqdk5r8.roa
Signing time: Wed 01 Jan 2025 15:48:04 +0000
ROA not before: Wed 01 Jan 2025 15:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
195.203.152.0/23 maxlen: 23
195.203.156.0/22 maxlen: 22
217.27.0.0/23 maxlen: 23
217.27.2.0/23 maxlen: 23
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7b:67:1f:27:47:10:16:55:23:14:c9:90:cb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 1 15:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44e617190c079102f36a5737ef0aa612a764e6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:4c:65:92:f2:3b:66:dd:87:52:84:d6:d8:
cf:1b:7b:13:66:05:98:e4:16:f0:e4:51:f9:ff:c2:
92:74:78:87:55:f1:c7:1b:a8:22:22:f5:33:7b:13:
d1:35:38:ff:b9:d5:55:b6:c9:71:1e:20:e9:e1:9f:
a4:6e:cb:45:d2:c7:4a:29:8d:52:e2:a2:52:bb:b6:
af:52:c4:b0:07:9e:50:ec:1c:88:d8:e6:11:8f:f5:
95:10:66:4d:8a:f5:20:9b:62:2f:38:08:aa:44:85:
50:5e:eb:b3:8e:36:a9:44:a7:d4:53:c6:88:65:ab:
50:32:c8:41:49:4f:8c:62:a9:66:13:a4:90:8c:53:
67:00:f5:fe:78:17:0a:fb:ba:39:3d:52:70:c4:ea:
92:89:b8:7d:51:5d:58:ef:64:65:7e:a0:4b:8b:8f:
88:89:7a:d6:ea:e4:5a:e0:de:6f:c8:f7:5f:fd:1e:
f0:68:ce:80:2c:a5:14:1d:fe:34:0f:ce:d4:10:c4:
70:60:9a:e8:28:80:34:d8:0e:f8:d7:02:4c:a0:cd:
76:de:81:d7:cd:c9:1d:6e:55:60:8b:fa:ec:c4:13:
fe:cf:4a:6a:b8:1f:c2:50:15:d0:11:5c:5c:ad:ce:
d3:9c:cb:f3:87:62:bb:4a:16:f2:d1:91:c0:55:14:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:17:19:0C:07:91:02:F3:6A:57:37:EF:0A:A6:12:A7:64:E6:BF
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/ROYXGQwHkQLzalc37wqmEqdk5r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0-217.27.4.255
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:78:90:3b:1e:1d:49:5c:53:3e:59:28:fa:21:29:58:e2:81:
d7:61:c0:fe:89:f6:74:55:fd:36:1b:11:4f:ab:9c:e1:32:9e:
51:21:58:f8:b4:4a:22:3c:df:89:49:33:b1:df:42:28:cf:e5:
88:9e:a9:06:03:84:53:2d:44:6e:52:6e:d1:76:bd:7c:9f:9a:
c0:8d:0e:15:1e:ef:30:88:d7:09:a4:39:96:0f:51:2c:2d:cb:
36:3b:66:4f:7a:13:33:ea:92:60:b0:f2:59:df:9e:f7:8b:18:
bd:e3:bc:12:11:8d:b1:f2:44:fa:d1:c9:39:9c:f3:b5:12:db:
e0:91:70:84:14:a4:48:53:e5:6f:5f:53:3a:18:f7:48:e7:b2:
55:08:35:1c:87:05:9b:7a:41:e4:dc:f0:11:6f:9a:e5:f9:49:
d2:c5:d8:a5:4d:8d:a3:c0:27:c8:09:d4:51:a1:b1:2c:7d:45:
7a:a5:66:f2:7c:32:d8:84:9a:6e:ac:14:7b:df:8d:5b:15:f7:
b8:5a:b4:3f:58:61:99:fc:f1:60:fe:92:fa:c4:1e:08:6b:09:
7f:97:99:12:a7:67:b5:2f:81:b9:b6:2c:dd:dd:3a:03:7c:df:
a2:15:e7:49:1e:ec:8d:46:5e:eb:40:9e:21:f2:e6:3e:dc:dd:
25:fb:c4:1c
-----BEGIN CERTIFICATE-----
MIIHNDCCBhygAwIBAgISAZQijXtnHydHEBZVIxTJkMuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm
MmNmNGUwHhcNMjUwMTAxMTU0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGU2MTcxOTBjMDc5MTAyZjM2YTU3MzdlZjBhYTYxMmE3NjRlNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cVMZZLyO2bdh1KE1tjPG3sTZgWY
5Bbw5FH5/8KSdHiHVfHHG6giIvUzexPRNTj/udVVtslxHiDp4Z+kbstF0sdKKY1S
4qJSu7avUsSwB55Q7ByI2OYRj/WVEGZNivUgm2IvOAiqRIVQXuuzjjapRKfUU8aI
ZatQMshBSU+MYqlmE6SQjFNnAPX+eBcK+7o5PVJwxOqSibh9UV1Y72RlfqBLi4+I
iXrW6uRa4N5vyPdf/R7waM6ALKUUHf40D87UEMRwYJroKIA02A741wJMoM123oHX
zckdblVgi/rsxBP+z0pquB/CUBXQEVxcrc7TnMvzh2K7Shby0ZHAVRRrKwIDAQAB
o4IEQDCCBDwwHQYDVR0OBBYEFETmFxkMB5EC82pXN+8KphKnZOa/MB8GA1UdIwQY
MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt
ODY0MjM4YmMwNDliLzEvUk9ZWEdRd0hrUUx6YWxjMzd3cW1FcWRrNXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli
LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICVAYIKwYBBQUHAQcBAf8EggJDMIICPzApBAIAATAjAwMA
lfoDBADAbewDAwDDyzALAwMA2RsDBADZGwQDBAHZGwYwggIQBAIAAjCCAggwEgMH
ACoDUAAAAQMHACoDUAAAAjASAwcAKgNQAAARAwcAKgNQAAASMBIDBwUqA1AAACAD
BwAqA1AAACIwEgMHBCoDUAAAMAMHACoDUAAAMjASAwcAKgNQAABBAwcAKgNQAABC
MBIDBwAqA1AAAFEDBwAqA1AAAFIwEgMHACoDUAAAYQMHACoDUAAAYjASAwcAKgNQ
AABxAwcAKgNQAAByMBIDBwAqA1AAAIEDBwAqA1AAAIIwEgMHACoDUAAAkQMHACoD
UAAAkjASAwcAKgNQAAEBAwcAKgNQAAECMBIDBwAqA1AAAREDBwAqA1AAARIwEgMH
ACoDUAABIQMHACoDUAABIjASAwcAKgNQAAExAwcAKgNQAAEyMBIDBwAqA1AAAUED
BwAqA1AAAUIwEgMHACoDUAABUQMHACoDUAABUjASAwcAKgNQAAFhAwcAKgNQAAFi
MBIDBwAqA1AAAXEDBwAqA1AAAXIwEgMHACoDUAABgQMHACoDUAABgjASAwcAKgNQ
AAGRAwcAKgNQAAGSMBIDBwAqA1AAAgEDBwAqA1AAAgIwEgMHACoDUAACEQMHACoD
UAACEjASAwcAKgNQAAIhAwcAKgNQAAIiMBIDBwAqA1AAAjEDBwAqA1AAAjIwEgMH
ACoDUAACQQMHACoDUAACQjASAwcAKgNQAAJRAwcAKgNQAAJSMA0GCSqGSIb3DQEB
CwUAA4IBAQB7eJA7Hh1JXFM+WSj6ISlY4oHXYcD+ifZ0Vf02GxFPq5zhMp5RIVj4
tEoiPN+JSTOx30Ioz+WInqkGA4RTLURuUm7Rdr18n5rAjQ4VHu8wiNcJpDmWD1Es
Lcs2O2ZPehMz6pJgsPJZ3573ixi947wSEY2x8kT60ck5nPO1EtvgkXCEFKRIU+Vv
X1M6GPdI57JVCDUchwWbekHk3PARb5rl+UnSxdilTY2jwCfICdRRobEsfUV6pWby
fDLYhJpurBR7341bFfe4WrQ/WGGZ/PFg/pL6xB4Iawl/l5kSp2e1L4G5tizd3ToD
fN+iFedJHuyNRl7rQJ4h8uY+3N0l+8Qc
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:26:50 2025 by rpki-client