Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/B-4VLXdFGhHWIAVi7AqhWhqRsxQ.roa
File: B-4VLXdFGhHWIAVi7AqhWhqRsxQ.roa (raw, json)
Hash identifier: GobkPshTUFOdOTBvCC1n6vzJuUSn1cqU1T8oZBI7YUg=
Subject key identifier: 07:EE:15:2D:77:45:1A:11:D6:20:05:62:EC:0A:A1:5A:1A:91:B3:14
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 019487693523F785E59DBE1B983369056ABB
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/B-4VLXdFGhHWIAVi7AqhWhqRsxQ.roa
Signing time: Tue 21 Jan 2025 05:50:06 +0000
ROA not before: Tue 21 Jan 2025 05:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38917
IP address blocks: 87.255.224.0/19 maxlen: 24
87.255.224.0/20 maxlen: 24
87.255.240.0/20 maxlen: 24
87.255.248.0/22 maxlen: 24
87.255.252.0/24 maxlen: 24
109.111.64.0/19 maxlen: 24
109.111.64.0/24 maxlen: 24
109.111.70.0/24 maxlen: 24
149.255.16.0/22 maxlen: 22
176.110.192.0/21 maxlen: 21
176.110.200.0/22 maxlen: 22
176.110.206.0/23 maxlen: 23
176.110.208.0/21 maxlen: 24
185.24.112.0/22 maxlen: 24
185.86.112.0/20 maxlen: 24
188.0.192.0/20 maxlen: 20
194.32.156.0/22 maxlen: 22
217.175.32.0/20 maxlen: 24
2a04:2cc0::/32 maxlen: 32
2a04:2cc1::/32 maxlen: 32
2a04:2cc2::/32 maxlen: 32
2a04:2cc3::/32 maxlen: 32
2a04:2cc4::/32 maxlen: 32
2a04:2cc5::/32 maxlen: 32
2a04:2cc6::/32 maxlen: 32
2a04:2cc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:69:35:23:f7:85:e5:9d:be:1b:98:33:69:05:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Jan 21 05:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ee152d77451a11d6200562ec0aa15a1a91b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:5e:16:1f:5f:00:28:24:63:df:5f:c5:d8:
5f:74:66:64:1a:bc:1f:01:df:68:47:24:23:31:6e:
28:ae:3b:c8:fc:33:e1:cc:b6:a9:3d:70:bc:37:df:
d1:e6:4d:a3:3d:50:1a:d9:3e:79:b3:43:b5:71:39:
18:46:41:14:cd:14:c8:a5:92:5b:4c:d6:00:04:98:
14:05:66:b1:d8:1b:11:cc:9b:4d:bd:72:61:d4:78:
b0:bb:ea:d6:00:1c:4f:3f:2f:b9:b2:86:51:c2:35:
7c:bb:f6:03:0a:67:55:e2:28:0a:bf:27:b1:85:b7:
4b:7a:77:09:2c:f0:8e:72:bf:44:1d:cd:0e:2d:f4:
dd:12:7d:ab:6c:8b:40:1f:8e:77:7b:c3:30:b9:b3:
78:43:1d:6c:9c:a0:fb:2c:d4:44:6a:a5:17:85:3b:
38:64:7e:66:ca:62:61:8e:69:71:94:c9:e7:83:84:
f7:16:83:b6:85:f0:f0:40:b1:6b:f8:f8:60:00:3d:
99:64:d9:1d:2a:d2:92:9d:09:f2:00:a8:1f:48:87:
29:e9:90:89:a3:4f:54:9f:b2:10:38:ff:b8:6e:b2:
24:b6:c9:4d:e5:09:fe:83:0c:8b:30:66:7c:2c:d6:
e4:95:cf:be:3c:ef:21:b2:9b:6b:99:df:af:23:5f:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:15:2D:77:45:1A:11:D6:20:05:62:EC:0A:A1:5A:1A:91:B3:14
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/B-4VLXdFGhHWIAVi7AqhWhqRsxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.224.0/19
109.111.64.0/19
149.255.16.0/22
176.110.192.0-176.110.203.255
176.110.206.0-176.110.215.255
185.24.112.0/22
185.86.112.0/20
188.0.192.0/20
194.32.156.0/22
217.175.32.0/20
IPv6:
2a04:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
55:66:ab:bd:aa:40:2b:aa:62:de:bd:6e:f8:6b:d8:20:85:af:
b7:b7:e1:c6:70:ad:ce:4d:7f:94:53:2e:46:c1:81:d4:b2:a8:
17:f5:57:af:94:bd:9b:ec:3d:1c:b2:91:04:d5:d7:78:0b:0a:
7d:79:5e:f7:49:89:bd:5a:af:42:a5:dc:a5:bb:72:7f:ab:1a:
95:3f:29:67:0c:34:6f:ef:54:e0:4f:e1:ba:6a:cb:c7:f3:59:
0e:be:dd:4d:30:6d:aa:69:2f:ca:45:8c:e2:c8:ed:1b:63:7d:
6c:d0:49:5e:a8:d3:28:c3:ee:fa:da:c2:df:fa:93:95:cd:13:
95:2b:99:b6:8d:69:38:f9:db:4f:51:97:ce:8b:43:24:7f:c8:
49:6c:15:9a:2d:84:74:66:22:e7:0f:0f:3d:95:cf:2f:c4:b6:
86:fc:9b:6e:eb:af:f4:86:13:bd:28:b9:4a:be:d2:77:36:47:
8a:eb:a4:14:7a:21:90:c2:45:a1:93:63:4b:13:47:b0:8f:ac:
af:7f:d4:18:94:7f:31:a3:eb:40:42:d5:3c:5c:47:1f:bd:34:
47:e6:a0:16:c8:6f:b2:27:6e:32:31:43:80:5c:b8:62:f7:ea:
33:53:c6:79:b3:bd:cf:ac:df:f5:c6:f7:b2:ee:9d:91:43:ff:
71:a9:f0:7d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAZSHaTUj94Xlnb4bmDNpBWq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWM1NzEyZmJiY2Q4MzI0MTlkNGM1ODg0YWUzYmMzYzRh
MTZlN2IwHhcNMjUwMTIxMDU1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2VlMTUyZDc3NDUxYTExZDYyMDA1NjJlYzBhYTE1YTFhOTFiMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryFeFh9fACgkY99fxdhfdGZkGrwf
Ad9oRyQjMW4orjvI/DPhzLapPXC8N9/R5k2jPVAa2T55s0O1cTkYRkEUzRTIpZJb
TNYABJgUBWax2BsRzJtNvXJh1Hiwu+rWABxPPy+5soZRwjV8u/YDCmdV4igKvyex
hbdLencJLPCOcr9EHc0OLfTdEn2rbItAH453e8MwubN4Qx1snKD7LNREaqUXhTs4
ZH5mymJhjmlxlMnng4T3FoO2hfDwQLFr+PhgAD2ZZNkdKtKSnQnyAKgfSIcp6ZCJ
o09Un7IQOP+4brIktslN5Qn+gwyLMGZ8LNbklc++PO8hsptrmd+vI1/TJwIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFAfuFS13RRoR1iAFYuwKoVoakbMUMB8GA1UdIwQY
MBaAFG9cVxL7vNgyQZ1MWISuO8PEoW57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEt
NzU1MDUyOWQ4NDdhLzEvQi00VkxYZEZHaEhXSUFWaTdBcWhXaHFSc3hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEtNzU1MDUyOWQ4NDdh
LzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwQFV//gAwQF
bW9AAwQClf8QMAwDBAawbsADBAKwbsgwDAMEAbBuzgMEA7Bu0AMEArkYcAMEBLlW
cAMEBLwAwAMEAsIgnAMEBNmvIDANBAIAAjAHAwUDKgQswDANBgkqhkiG9w0BAQsF
AAOCAQEAVWarvapAK6pi3r1u+GvYIIWvt7fhxnCtzk1/lFMuRsGB1LKoF/VXr5S9
m+w9HLKRBNXXeAsKfXle90mJvVqvQqXcpbtyf6salT8pZww0b+9U4E/humrLx/NZ
Dr7dTTBtqmkvykWM4sjtG2N9bNBJXqjTKMPu+trC3/qTlc0TlSuZto1pOPnbT1GX
zotDJH/ISWwVmi2EdGYi5w8PPZXPL8S2hvybbuuv9IYTvSi5Sr7SdzZHiuukFHoh
kMJFoZNjSxNHsI+sr3/UGJR/MaPrQELVPFxHH700R+agFshvsiduMjFDgFy4Yvfq
M1PGebO9z6zf9cb3su6dkUP/canwfQ==
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:06 2025 by rpki-client on console.sobornost.net