Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/CXI9tnHJqkXizavmClvI3mQVAYY.roa
File: CXI9tnHJqkXizavmClvI3mQVAYY.roa (raw, json)
Hash identifier: olaSQQn3cAdH7ubY4n/KDSx/8oljij//4hraa9CiDXU=
Subject key identifier: 09:72:3D:B6:71:C9:AA:45:E2:CD:AB:E6:0A:5B:C8:DE:64:15:01:86
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 0194684E0715BB0868B67FE810B1267AB4BC
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/CXI9tnHJqkXizavmClvI3mQVAYY.roa
Signing time: Wed 15 Jan 2025 04:52:11 +0000
ROA not before: Wed 15 Jan 2025 04:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211995
IP address blocks: 46.22.225.0/24 maxlen: 24
46.22.226.0/24 maxlen: 24
46.22.227.0/24 maxlen: 24
46.22.228.0/24 maxlen: 24
46.22.229.0/24 maxlen: 24
46.22.230.0/24 maxlen: 24
46.22.231.0/24 maxlen: 24
46.22.232.0/24 maxlen: 24
46.22.233.0/24 maxlen: 24
46.22.234.0/24 maxlen: 24
46.22.235.0/24 maxlen: 24
46.22.236.0/24 maxlen: 24
46.22.237.0/24 maxlen: 24
46.22.238.0/24 maxlen: 24
46.22.239.0/24 maxlen: 24
46.28.237.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
109.237.112.0/20 maxlen: 20
109.237.112.0/24 maxlen: 24
109.237.113.0/24 maxlen: 24
109.237.114.0/24 maxlen: 24
109.237.115.0/24 maxlen: 24
109.237.116.0/24 maxlen: 24
185.55.36.0/22 maxlen: 22
185.55.36.0/24 maxlen: 24
185.55.37.0/24 maxlen: 24
185.55.38.0/24 maxlen: 24
185.55.39.0/24 maxlen: 24
185.77.3.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.233.35.0/24 maxlen: 24
194.164.222.0/24 maxlen: 24
213.142.158.0/24 maxlen: 24
2a10:d880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:4e:07:15:bb:08:68:b6:7f:e8:10:b1:26:7a:b4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Jan 15 04:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09723db671c9aa45e2cdabe60a5bc8de64150186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:2c:90:f7:c1:dc:b1:d3:b6:4e:9c:6d:bf:
28:b5:02:4a:e2:80:ea:c6:ef:ae:d1:dd:ea:39:25:
2a:5e:ad:57:d3:81:01:d8:e6:51:5d:84:1e:84:17:
fc:37:46:8f:5d:ff:e8:a0:a5:21:c8:fd:2e:e4:f4:
f1:f1:62:ca:f0:b3:08:ef:6e:09:b5:38:df:f6:32:
cc:ef:a5:6d:6a:56:64:16:3a:c0:72:5f:2a:cc:6f:
42:f9:5a:8a:e2:0b:e4:30:2d:da:c7:e4:fe:55:fc:
f1:18:e5:37:7a:b4:c1:5a:13:b4:f2:b3:fc:8b:3d:
bf:ec:f0:52:9f:13:7e:84:f0:64:9c:6f:8d:5e:08:
d4:83:f0:cd:02:d9:1f:2e:5b:52:2e:ea:26:ae:f2:
72:16:c3:35:c0:5c:1b:3f:60:c8:4b:b1:ea:41:fe:
67:96:d1:25:cf:28:95:64:8b:6f:a5:32:60:75:89:
b8:a9:78:ef:a4:50:f9:a1:5b:63:94:b5:e7:fe:84:
b3:16:26:7a:e6:b1:5c:6e:60:88:af:f4:8a:b2:23:
b0:12:69:1d:d7:e7:89:ce:70:ce:ee:79:7e:c8:89:
f7:5a:d2:6a:0f:97:2f:4d:76:ad:64:ce:46:3a:25:
04:52:9d:f9:3b:e2:c2:c4:5f:07:46:99:ec:ff:8a:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:72:3D:B6:71:C9:AA:45:E2:CD:AB:E6:0A:5B:C8:DE:64:15:01:86
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/CXI9tnHJqkXizavmClvI3mQVAYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.225.0-46.22.239.255
46.28.237.0/24
93.114.130.0/24
109.237.112.0/20
185.55.36.0/22
185.77.3.0/24
185.136.207.0/24
185.233.35.0/24
194.164.222.0/24
213.142.158.0/24
IPv6:
2a10:d880::/29
Signature Algorithm: sha256WithRSAEncryption
da:02:0b:c2:63:75:8b:bb:da:2f:73:b0:15:f7:6f:45:5e:e2:
7a:be:b5:dd:90:ce:a1:b6:8a:e2:95:56:c3:6a:6c:5c:d9:3f:
08:b4:7a:b2:b2:e5:1a:87:f6:57:d1:58:b2:e5:36:20:76:0a:
cf:c2:72:e4:de:91:39:b4:2c:7a:4b:75:f5:74:0d:ee:55:8a:
80:0d:34:7c:2b:bb:2b:b4:e4:b4:b8:a0:d5:93:a2:7c:e8:85:
89:fe:f9:8d:2a:a4:f9:7b:d0:ee:b4:c6:fb:cb:7b:88:8d:70:
c0:87:95:67:f8:bd:e1:db:1d:30:64:59:7d:ce:22:50:a9:f7:
50:db:f6:9d:ad:7c:41:78:37:13:49:d6:ab:99:1d:43:17:25:
43:92:84:a0:16:62:2e:48:49:73:23:d5:ad:b3:3c:35:de:97:
cc:5f:91:ba:5a:78:65:e2:45:fc:ed:f4:44:ef:43:a2:95:b6:
34:43:44:26:9f:a1:2b:c7:05:91:89:a5:bd:fe:59:f8:75:0d:
6a:ce:a0:c7:84:9a:e3:5d:d1:5a:5c:15:1e:e5:6c:38:ba:4e:
bf:39:72:2a:a5:a9:47:e2:dc:9c:97:ea:a2:fa:7a:94:a2:34:
0b:59:31:35:da:2b:84:67:ce:3c:bd:74:7b:67:8c:a4:37:27:
12:f1:e1:9d
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAZRoTgcVuwhotn/oELEmerS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYTY1N2YzNDI0YzhkZDU1MjE1YWY4NTNiOTMzMDdjMzY2
YzUzOGEwHhcNMjUwMTE1MDQ1MjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTcyM2RiNjcxYzlhYTQ1ZTJjZGFiZTYwYTViYzhkZTY0MTUwMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzwskPfB3LHTtk6cbb8otQJK4oDq
xu+u0d3qOSUqXq1X04EB2OZRXYQehBf8N0aPXf/ooKUhyP0u5PTx8WLK8LMI724J
tTjf9jLM76VtalZkFjrAcl8qzG9C+VqK4gvkMC3ax+T+VfzxGOU3erTBWhO08rP8
iz2/7PBSnxN+hPBknG+NXgjUg/DNAtkfLltSLuomrvJyFsM1wFwbP2DIS7HqQf5n
ltElzyiVZItvpTJgdYm4qXjvpFD5oVtjlLXn/oSzFiZ65rFcbmCIr/SKsiOwEmkd
1+eJznDO7nl+yIn3WtJqD5cvTXatZM5GOiUEUp35O+LCxF8HRpns/4oWrwIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFAlyPbZxyapF4s2r5gpbyN5kFQGGMB8GA1UdIwQY
MBaAFBKmV/NCTI3VUhWvhTuTMHw2bFOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMt
MDVmMDkzMzg1YWM4LzEvQ1hJOXRuSEpxa1hpemF2bUNsdkkzbVFWQVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMtMDVmMDkzMzg1YWM4
LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEMAwDBAAuFuED
BAQuFuADBAAuHO0DBABdcoIDBARt7XADBAK5NyQDBAC5TQMDBAC5iM8DBAC56SMD
BADCpN4DBADVjp4wDQQCAAIwBwMFAyoQ2IAwDQYJKoZIhvcNAQELBQADggEBANoC
C8JjdYu72i9zsBX3b0Ve4nq+td2QzqG2iuKVVsNqbFzZPwi0erKy5RqH9lfRWLLl
NiB2Cs/CcuTekTm0LHpLdfV0De5VioANNHwruyu05LS4oNWTonzohYn++Y0qpPl7
0O60xvvLe4iNcMCHlWf4veHbHTBkWX3OIlCp91Db9p2tfEF4NxNJ1quZHUMXJUOS
hKAWYi5ISXMj1a2zPDXel8xfkbpaeGXiRfzt9ETvQ6KVtjRDRCafoSvHBZGJpb3+
Wfh1DWrOoMeEmuNd0VpcFR7lbDi6Tr85ciqlqUfi3JyX6qL6epSiNAtZMTXaK4Rn
zjy9dHtnjKQ3JxLx4Z0=
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:58 2025 by rpki-client on console.sobornost.net