Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Bff4rC9WehOBomJppT-ehbDxZW4.roa
File: Bff4rC9WehOBomJppT-ehbDxZW4.roa (raw, json)
Hash identifier: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=
Subject key identifier: 05:F7:F8:AC:2F:56:7A:13:81:A2:62:69:A5:3F:9E:85:B0:F1:65:6E
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 01941FFAA0A94A642AF330CF141C808B371F
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Bff4rC9WehOBomJppT-ehbDxZW4.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199046
IP address blocks: 45.130.96.0/22 maxlen: 24
45.158.156.0/22 maxlen: 24
152.89.40.0/22 maxlen: 24
176.106.40.0/21 maxlen: 24
185.5.220.0/22 maxlen: 24
192.145.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a0:a9:4a:64:2a:f3:30:cf:14:1c:80:8b:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05f7f8ac2f567a1381a26269a53f9e85b0f1656e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:b1:b4:23:cb:f4:70:1e:18:71:29:79:5b:
69:54:de:a6:67:e3:9d:af:a1:83:fe:96:85:09:92:
b2:56:b1:c4:7c:d7:b1:d5:62:21:6a:26:0e:f1:be:
fc:79:75:15:a7:78:0a:f5:74:ae:72:17:4e:c8:ae:
9f:30:b5:bf:92:ad:0c:bc:d3:a9:39:ba:56:0d:9a:
1f:06:53:2c:c1:7c:c9:f5:a5:18:a7:6b:5c:71:1f:
fb:c3:9c:25:cf:21:60:dd:27:aa:9a:78:bf:df:d1:
2a:62:07:68:95:2d:f1:f6:5e:1b:cd:2e:51:f7:b6:
40:50:3d:dc:4b:58:e5:1a:e2:f5:33:8d:63:5e:16:
98:58:a9:bd:f0:30:26:c5:60:2a:bc:98:f6:4a:b9:
f6:ba:0e:12:a1:36:16:f9:6a:c1:ca:fc:fa:dd:df:
51:e5:71:2b:35:41:00:67:e8:b6:88:ff:ec:0b:de:
c4:73:e2:d1:6b:dc:2b:a3:a2:a7:6d:e7:2a:f5:1f:
65:4d:80:c2:ee:5c:a1:65:32:66:f5:16:a3:5b:5d:
f1:ef:36:4b:c7:15:87:c5:24:b4:50:10:c9:c1:a7:
ec:36:56:98:66:61:a3:36:7d:e1:ed:81:ff:f5:25:
14:fd:6c:db:a4:1d:da:0a:b6:e2:7c:7a:4c:57:c8:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F7:F8:AC:2F:56:7A:13:81:A2:62:69:A5:3F:9E:85:B0:F1:65:6E
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/Bff4rC9WehOBomJppT-ehbDxZW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.96.0/22
45.158.156.0/22
152.89.40.0/22
176.106.40.0/21
185.5.220.0/22
192.145.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:73:be:b3:06:01:68:46:d9:79:2d:ac:b8:b3:f2:23:b5:e1:
99:d5:2a:83:a1:16:78:61:ca:8c:69:15:a1:3a:5b:42:b0:cc:
5a:07:df:ad:63:9d:38:af:b9:c5:7d:83:0e:1a:2c:75:16:a4:
c1:b6:25:83:c3:f8:d6:dd:4b:e8:0b:59:cd:b7:50:21:bf:96:
a4:f2:49:81:7a:3d:8a:8c:42:59:09:a3:48:ae:31:17:33:1d:
81:82:14:ce:01:0a:20:d2:29:c2:ae:45:5e:bb:63:28:41:85:
f5:da:46:4a:6a:33:b0:0d:bb:21:b0:44:2b:d2:2f:0d:13:51:
9b:27:0b:e5:eb:73:f8:24:78:3b:2f:e0:32:3b:89:f8:75:78:
22:ed:e2:16:a7:36:15:ea:a1:ee:fc:a5:e1:a2:55:b8:67:af:
cf:3a:87:30:50:a8:57:0f:61:72:5c:f9:d9:f8:de:6f:3b:66:
e2:f8:58:79:12:30:79:4c:86:cc:0f:35:27:f2:76:d8:df:f5:
ae:b4:d2:58:00:4b:fb:81:4f:12:70:96:09:6f:2f:7e:33:58:
49:20:11:b8:b8:04:b5:b0:4e:7f:f2:71:f2:7f:b6:77:0f:b0:
94:d9:49:b7:4a:87:59:63:d2:5a:c2:bb:f2:11:00:ee:9c:e6:
ef:a0:d2:df
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQf+qCpSmQq8zDPFByAizcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTZjN2U2NjBiMWM3NGUzYjAzMThiMTQzMzhjM2YwMGRk
N2JjNzIwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWY3ZjhhYzJmNTY3YTEzODFhMjYyNjlhNTNmOWU4NWIwZjE2NTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RGxtCPL9HAeGHEpeVtpVN6mZ+Od
r6GD/paFCZKyVrHEfNex1WIhaiYO8b78eXUVp3gK9XSuchdOyK6fMLW/kq0MvNOp
ObpWDZofBlMswXzJ9aUYp2tccR/7w5wlzyFg3Seqmni/39EqYgdolS3x9l4bzS5R
97ZAUD3cS1jlGuL1M41jXhaYWKm98DAmxWAqvJj2Srn2ug4SoTYW+WrByvz63d9R
5XErNUEAZ+i2iP/sC97Ec+LRa9wro6Knbecq9R9lTYDC7lyhZTJm9RajW13x7zZL
xxWHxSS0UBDJwafsNlaYZmGjNn3h7YH/9SUU/WzbpB3aCrbifHpMV8iI/wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFAX3+KwvVnoTgaJiaaU/noWw8WVuMB8GA1UdIwQY
MBaAFPpWx+ZgscdOOwMYsUM4w/AN17xyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sYkg1bUN4eDA0N0F4aXhRempEOEEzWHZISS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlm
LThiZjRmZTRjNzczMi8xL0JmZjRyQzlXZWhPQm9tSnBwVC1laGJEeFpXNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlmLThiZjRmZTRjNzcz
Mi8xLzEtbGJINW1DeHgwNDdBeGl4UXpqRDhBM1h2SEkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAItgmAD
BAItnpwDBAKYWSgDBAOwaigDBAK5BdwDBALAkXgwDQYJKoZIhvcNAQELBQADggEB
ACxzvrMGAWhG2XktrLiz8iO14ZnVKoOhFnhhyoxpFaE6W0KwzFoH361jnTivucV9
gw4aLHUWpMG2JYPD+NbdS+gLWc23UCG/lqTySYF6PYqMQlkJo0iuMRczHYGCFM4B
CiDSKcKuRV67YyhBhfXaRkpqM7ANuyGwRCvSLw0TUZsnC+Xrc/gkeDsv4DI7ifh1
eCLt4hanNhXqoe78peGiVbhnr886hzBQqFcPYXJc+dn43m87ZuL4WHkSMHlMhswP
NSfydtjf9a600lgAS/uBTxJwlglvL34zWEkgEbi4BLWwTn/ycfJ/tncPsJTZSbdK
h1lj0lrCu/IRAO6c5u+g0t8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net