Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/VOqmyv0A6tUGXaOA0cAm7Cr1PH4.roa
File: VOqmyv0A6tUGXaOA0cAm7Cr1PH4.roa (raw, json)
Hash identifier: GJDR6QStL+F+EE+eGcfTZ+nZqyArNRkgAaUPOJJOpB0=
Subject key identifier: 54:EA:A6:CA:FD:00:EA:D5:06:5D:A3:80:D1:C0:26:EC:2A:F5:3C:7E
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018DAE626A7C3D9A96D0958F6DF2922F9CDE
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/VOqmyv0A6tUGXaOA0cAm7Cr1PH4.roa
Signing time: Thu 15 Feb 2024 20:08:21 +0000
ROA not before: Thu 15 Feb 2024 20:08:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.102.174.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.34.171.0/24 maxlen: 24
89.36.231.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
89.40.43.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
93.115.155.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:62:6a:7c:3d:9a:96:d0:95:8f:6d:f2:92:2f:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 15 20:08:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54eaa6cafd00ead5065da380d1c026ec2af53c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:e0:1f:7c:72:96:6b:4f:0b:15:97:e0:09:
15:6d:44:12:91:11:b2:f9:35:12:5c:13:47:d1:16:
e8:63:11:09:1a:bb:9a:aa:7c:f5:f9:e8:5a:3e:cc:
f6:9f:9a:b1:d2:fc:21:e6:79:00:e3:37:a8:e5:67:
9e:1a:b3:c9:8b:2f:ed:85:60:b5:88:ad:2f:bf:cb:
d9:e9:59:31:93:39:b9:4d:8c:bc:8d:f8:3a:7d:f8:
c4:62:f2:2d:e5:33:4d:ac:3e:ad:c6:d6:3f:0e:c2:
c4:00:6d:11:66:fa:61:d3:35:9d:77:ba:85:9e:96:
bd:9e:70:c0:aa:0f:36:83:9f:5d:01:a1:c4:de:d6:
25:77:a8:0e:32:6e:e3:2b:21:9f:a4:9e:9d:42:3d:
00:6d:b8:00:d5:a8:f3:24:2d:44:63:4d:73:00:b1:
49:94:8e:d2:fb:cf:0a:d7:eb:1f:92:73:51:ec:5a:
57:38:55:98:6b:22:c0:a9:d1:3e:53:82:61:d6:37:
4e:93:de:4b:df:66:a6:9a:7a:56:13:b8:e9:13:43:
cd:9e:b5:ec:3b:28:bd:a0:2c:3e:e1:af:58:9a:f8:
42:da:81:bf:d0:17:f2:df:ba:2a:78:75:5e:06:7a:
15:45:ac:19:96:ee:b4:37:a1:af:82:42:3e:3b:eb:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:A6:CA:FD:00:EA:D5:06:5D:A3:80:D1:C0:26:EC:2A:F5:3C:7E
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/VOqmyv0A6tUGXaOA0cAm7Cr1PH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.174.0/24
84.247.20.0/24
89.34.171.0/24
89.36.231.0/24
89.37.106.0/24
89.40.43.0/24
89.42.213.0/24
93.114.69.0/24
93.115.155.0/24
94.177.113.0/24
94.177.118.0/24
188.211.249.0/24
Signature Algorithm: sha256WithRSAEncryption
30:72:bb:3e:04:74:82:33:8c:1e:d0:ba:48:5f:7b:2b:61:77:
0c:6e:3c:f3:64:a5:42:cc:b6:f8:f5:be:de:a3:91:b8:e2:33:
96:eb:ef:9d:82:7d:74:fc:82:db:94:3d:72:1a:f8:d3:2a:9f:
c4:d5:0f:1b:9b:2e:b2:54:d7:3c:e5:86:00:c7:af:1a:78:f2:
3d:3d:ff:cd:4b:4c:66:b0:11:a0:21:03:ff:63:a2:b6:0b:10:
e7:da:e8:a2:6e:7e:3b:e6:65:d5:be:89:11:4d:20:72:fc:d4:
c4:16:19:83:f2:17:68:69:91:c2:53:16:63:0c:55:0b:a6:10:
87:81:7c:9d:73:3a:da:9b:86:00:bd:76:46:64:e0:b0:c9:c1:
38:fa:ab:ee:c6:83:21:f4:44:48:a3:39:18:2d:dd:eb:06:48:
21:74:33:3e:c8:a0:6a:90:d6:1b:9b:2e:28:36:cd:de:9a:c2:
cc:51:42:22:bf:b8:da:63:3f:ac:28:f6:ff:73:91:5f:a0:c4:
1f:1e:4c:75:a5:27:fe:b9:5a:83:8a:88:d4:25:61:37:70:97:
0f:ab:c9:b9:4a:5b:b8:a5:d8:5c:3f:75:30:65:d8:fa:35:7d:
bf:22:5b:69:a2:56:df:5c:f3:2a:24:ee:58:35:22:c6:85:7e:
c9:85:6c:38
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAY2uYmp8PZqW0JWPbfKSL5zeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjQwMjE1MjAwODIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGVhYTZjYWZkMDBlYWQ1MDY1ZGEzODBkMWMwMjZlYzJhZjUzYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg3gH3xylmtPCxWX4AkVbUQSkRGy
+TUSXBNH0RboYxEJGruaqnz1+ehaPsz2n5qx0vwh5nkA4zeo5WeeGrPJiy/thWC1
iK0vv8vZ6Vkxkzm5TYy8jfg6ffjEYvIt5TNNrD6txtY/DsLEAG0RZvph0zWdd7qF
npa9nnDAqg82g59dAaHE3tYld6gOMm7jKyGfpJ6dQj0AbbgA1ajzJC1EY01zALFJ
lI7S+88K1+sfknNR7FpXOFWYayLAqdE+U4Jh1jdOk95L32ammnpWE7jpE0PNnrXs
Oyi9oCw+4a9YmvhC2oG/0Bfy37oqeHVeBnoVRawZlu60N6GvgkI+O+u8pQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFFTqpsr9AOrVBl2jgNHAJuwq9Tx+MB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvVk9xbXl2MEE2dFVHWGFPQTBjQW03Q3IxUEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALmauAwQA
VPcUAwQAWSKrAwQAWSTnAwQAWSVqAwQAWSgrAwQAWSrVAwQAXXJFAwQAXXObAwQA
XrFxAwQAXrF2AwQAvNP5MA0GCSqGSIb3DQEBCwUAA4IBAQAwcrs+BHSCM4we0LpI
X3srYXcMbjzzZKVCzLb49b7eo5G44jOW6++dgn10/ILblD1yGvjTKp/E1Q8bmy6y
VNc85YYAx68aePI9Pf/NS0xmsBGgIQP/Y6K2CxDn2uiibn475mXVvokRTSBy/NTE
FhmD8hdoaZHCUxZjDFULphCHgXydczram4YAvXZGZOCwycE4+qvuxoMh9ERIozkY
Ld3rBkghdDM+yKBqkNYbmy4oNs3emsLMUUIiv7jaYz+sKPb/c5FfoMQfHkx1pSf+
uVqDiojUJWE3cJcPq8m5Slu4pdhcP3UwZdj6NX2/IltpolbfXPMqJO5YNSLGhX7J
hWw4
-----END CERTIFICATE-----
Generated at Mon May 12 04:49:48 2025 by rpki-client