Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/D0FtQbvZQzXxktB27DUgaEKlwyA.roa
File: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (raw, json)
Hash identifier: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=
Subject key identifier: 0F:41:6D:41:BB:D9:43:35:F1:92:D0:76:EC:35:20:68:42:A5:C3:20
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 0194282359A6805F6C874943507CC623836F
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/D0FtQbvZQzXxktB27DUgaEKlwyA.roa
Signing time: Thu 02 Jan 2025 17:49:52 +0000
ROA not before: Thu 02 Jan 2025 17:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201205
IP address blocks: 37.230.120.0/21 maxlen: 21
78.24.168.0/21 maxlen: 21
147.12.64.0/19 maxlen: 24
147.12.64.0/24 maxlen: 24
176.62.136.0/21 maxlen: 21
185.29.4.0/22 maxlen: 22
185.160.220.0/22 maxlen: 24
2a01:5c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:59:a6:80:5f:6c:87:49:43:50:7c:c6:23:83:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Jan 2 17:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f416d41bbd94335f192d076ec35206842a5c320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:16:9a:b6:0e:75:92:5c:4c:ea:e1:9d:01:
4a:1b:45:fb:53:e0:3f:dc:84:d8:71:0e:e1:b8:31:
b8:cb:1d:96:62:e1:09:31:27:f7:07:ce:7c:f9:75:
06:03:ea:34:da:b1:75:56:ed:7e:f3:fd:50:f7:60:
23:59:21:06:6d:ee:00:3c:d5:96:ef:a7:c5:da:43:
31:bb:bc:f3:92:05:ca:8b:b3:1e:0b:0d:0a:d5:7f:
f9:70:20:e9:f6:af:2c:34:61:58:c0:3b:74:bd:3d:
58:45:4f:70:c1:5d:0c:90:a8:4b:2c:1f:b3:38:9c:
8a:91:33:ab:0f:ed:9c:6b:5c:73:9b:54:77:20:da:
be:1e:af:99:70:f8:fc:99:bb:03:e6:1d:c4:58:ea:
f6:ba:b9:93:42:48:eb:39:bc:75:25:d6:98:e5:4c:
2e:fe:73:ee:8b:17:1e:ac:e5:9a:a7:75:fd:d3:09:
2d:42:96:2c:f0:0c:90:d8:ce:99:ad:d3:86:db:3c:
f7:96:61:b6:e5:e0:8f:ff:82:a7:cd:94:61:ad:fa:
8c:08:19:03:c2:e6:5b:1e:72:cf:a7:3f:0f:fe:e8:
0c:16:01:cc:14:d8:33:bb:75:61:03:ae:fa:09:c2:
34:a7:6f:49:bc:0d:6b:82:86:7d:46:38:00:35:5c:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:41:6D:41:BB:D9:43:35:F1:92:D0:76:EC:35:20:68:42:A5:C3:20
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/D0FtQbvZQzXxktB27DUgaEKlwyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.120.0/21
78.24.168.0/21
147.12.64.0/19
176.62.136.0/21
185.29.4.0/22
185.160.220.0/22
IPv6:
2a01:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ff:59:7a:f2:50:3c:e4:5a:44:2a:b5:50:31:bb:3c:d6:c2:
4d:72:84:47:32:cb:d0:5f:3b:21:1e:02:e0:7b:e2:34:d2:9f:
53:55:44:3b:84:0f:43:f6:60:19:d0:60:0a:42:c2:5c:ab:f5:
bf:35:21:2a:9f:3b:07:c4:e8:71:81:bc:b1:a5:e6:73:b0:ac:
42:b4:49:73:34:b6:e2:0d:26:2b:ed:96:50:a9:4b:38:9d:ff:
e9:19:8f:31:03:86:a1:b2:fe:1a:20:4d:55:fc:44:36:8f:07:
07:4b:e4:ae:bc:72:35:00:51:cb:c4:ce:37:ea:ee:ff:ae:0d:
8a:65:00:c0:7d:7e:b7:74:0e:65:49:d9:71:c5:79:00:8c:2c:
87:a7:0e:7a:15:50:b6:31:1e:83:47:04:1a:85:a3:71:27:0b:
c8:76:5b:4b:9d:a2:bf:14:eb:a9:29:df:37:86:35:e2:dc:d4:
6f:13:c7:c8:05:6d:8a:4d:c9:19:2b:b9:c3:c2:fd:f2:5a:25:
29:fb:3d:0e:ae:cd:fa:29:6b:93:29:ad:24:0a:ec:b4:29:0d:
84:6f:28:d9:83:09:46:ba:5c:93:a7:28:f2:69:0b:b6:22:8f:
0f:99:59:1f:6f:04:e0:f8:f2:8b:f0:7e:f7:c1:a0:c9:f8:47:
69:6e:d5:a7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQoI1mmgF9sh0lDUHzGI4NvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDJmYTJjNWJhMjg5MjA0NWU3Y2Q1MGE1YWRmZDU0ZDZk
YmI4YzIwHhcNMjUwMTAyMTc0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjQxNmQ0MWJiZDk0MzM1ZjE5MmQwNzZlYzM1MjA2ODQyYTVjMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTcWmrYOdZJcTOrhnQFKG0X7U+A/
3ITYcQ7huDG4yx2WYuEJMSf3B858+XUGA+o02rF1Vu1+8/1Q92AjWSEGbe4APNWW
76fF2kMxu7zzkgXKi7MeCw0K1X/5cCDp9q8sNGFYwDt0vT1YRU9wwV0MkKhLLB+z
OJyKkTOrD+2ca1xzm1R3INq+Hq+ZcPj8mbsD5h3EWOr2urmTQkjrObx1JdaY5Uwu
/nPuixcerOWap3X90wktQpYs8AyQ2M6ZrdOG2zz3lmG25eCP/4KnzZRhrfqMCBkD
wuZbHnLPpz8P/ugMFgHMFNgzu3VhA676CcI0p29JvA1rgoZ9RjgANVzvpQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFA9BbUG72UM18ZLQduw1IGhCpcMgMB8GA1UdIwQY
MBaAFH0C+ixbookgRefNUKWt/VTW27jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUt
ODEwMzlmM2NmM2ZkLzEvRDBGdFFidlpRelh4a3RCMjdEVWdhRUtsd3lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUtODEwMzlmM2NmM2Zk
LzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDJeZ4AwQD
ThioAwQFkwxAAwQDsD6IAwQCuR0EAwQCuaDcMA0EAgACMAcDBQAqAVwAMA0GCSqG
SIb3DQEBCwUAA4IBAQBO/1l68lA85FpEKrVQMbs81sJNcoRHMsvQXzshHgLge+I0
0p9TVUQ7hA9D9mAZ0GAKQsJcq/W/NSEqnzsHxOhxgbyxpeZzsKxCtElzNLbiDSYr
7ZZQqUs4nf/pGY8xA4ahsv4aIE1V/EQ2jwcHS+SuvHI1AFHLxM436u7/rg2KZQDA
fX63dA5lSdlxxXkAjCyHpw56FVC2MR6DRwQahaNxJwvIdltLnaK/FOupKd83hjXi
3NRvE8fIBW2KTckZK7nDwv3yWiUp+z0Ors36KWuTKa0kCuy0KQ2EbyjZgwlGulyT
pyjyaQu2Io8PmVkfbwTg+PKL8H73waDJ+EdpbtWn
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net