Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa
File: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (raw, json)
Hash identifier: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=
Subject key identifier: 9B:B0:BA:2B:40:E6:E4:F3:E4:B9:EA:6C:E6:96:66:1E:B2:40:1E:C4
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 0194266B9A338F4D23BDF48278F6703CE835
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47506
IP address blocks: 93.174.184.0/21 maxlen: 24
185.39.32.0/22 maxlen: 24
2a02:e60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9a:33:8f:4d:23:bd:f4:82:78:f6:70:3c:e8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb0ba2b40e6e4f3e4b9ea6ce696661eb2401ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:a3:ce:40:ef:67:c9:dc:53:da:21:46:84:
2e:7e:a5:8f:48:85:5c:3d:db:1e:0a:b3:45:dc:55:
2e:ee:6b:9b:2c:33:4d:bc:ac:d1:ae:ff:6a:a3:89:
8c:08:04:71:71:92:82:96:c8:9a:e2:5c:ad:a2:78:
98:3a:ac:95:7b:a7:8e:1f:0a:dc:38:90:5e:98:9a:
20:a4:f5:4c:9f:5b:97:8d:d7:67:7f:eb:c0:11:c6:
b0:d2:98:6f:60:27:a4:34:eb:98:45:c1:e0:dc:57:
7b:45:24:6c:04:a0:0f:0e:b4:6e:a6:d8:d8:b1:ad:
3b:e0:e3:cb:45:7c:89:7b:fd:76:86:ca:50:12:2f:
f7:11:ef:d0:92:c0:81:6c:cb:32:2c:6f:30:07:15:
3c:92:8c:ac:36:f4:f8:8e:74:26:90:49:27:9c:f1:
30:ca:ee:10:87:41:bf:59:60:cd:79:d9:96:b0:2e:
7f:91:52:b9:4a:53:2d:e0:8c:c9:04:3d:3c:7a:0a:
10:29:7c:2a:60:4e:3a:a7:79:2a:f0:8f:dc:94:d0:
e9:a0:5a:20:5b:7d:f0:d4:41:ac:22:0c:3f:70:79:
30:d4:cd:68:a1:46:9c:00:1b:a5:20:e9:aa:bf:14:
28:7a:24:88:72:4a:f0:f0:98:00:8a:7f:30:aa:4f:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:BA:2B:40:E6:E4:F3:E4:B9:EA:6C:E6:96:66:1E:B2:40:1E:C4
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.184.0/21
185.39.32.0/22
IPv6:
2a02:e60::/32
Signature Algorithm: sha256WithRSAEncryption
3f:0d:60:4c:ec:55:c9:4e:f6:c3:e3:84:ed:07:24:6e:e1:f3:
69:15:8d:3a:f4:09:15:df:32:a7:8c:b2:0a:2b:af:8b:22:b3:
f2:7d:75:ae:cc:7d:3a:59:f5:47:1d:82:94:8a:77:96:2e:06:
9e:07:d0:05:59:20:a3:73:a5:11:93:fc:bf:ba:f4:be:92:fa:
df:26:17:0a:99:61:0e:64:3c:18:c4:14:d4:e1:29:ae:57:41:
58:a1:d9:25:27:ea:91:76:b3:bf:2a:66:ae:74:4d:7c:e7:71:
2b:37:2a:bf:70:f5:b0:48:72:14:9a:5d:92:55:6a:53:f2:9a:
d7:0b:15:ec:c2:80:bb:f0:d1:71:61:1f:dc:bb:b4:48:df:aa:
b9:87:59:ec:2f:04:b2:7b:57:9f:90:2b:43:f4:b0:d4:b8:a7:
ae:3f:64:73:89:d4:26:8f:56:e7:a2:f1:37:07:00:5f:f7:66:
c3:34:46:0c:7b:5a:70:12:21:fe:da:2a:5a:fd:30:f0:75:f6:
9b:5b:a1:10:5d:62:25:20:c6:a9:7e:97:3d:23:b2:93:5a:ea:
fe:80:06:c7:e1:ff:68:4b:89:80:78:2a:90:90:eb:3f:78:87:
3a:ae:72:a8:6f:cf:a4:28:d7:e9:f9:9b:fc:66:dc:2c:38:38:
2a:af:c5:3a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQma5ozj00jvfSCePZwPOg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDI0NzUxNmU5MTAxN2UyZGJjYjU3MmNhMGYyOWExMjI4
MWFjZjAwHhcNMjUwMTAyMDk0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmIwYmEyYjQwZTZlNGYzZTRiOWVhNmNlNjk2NjYxZWIyNDAxZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7qjzkDvZ8ncU9ohRoQufqWPSIVc
PdseCrNF3FUu7mubLDNNvKzRrv9qo4mMCARxcZKClsia4lytoniYOqyVe6eOHwrc
OJBemJogpPVMn1uXjddnf+vAEcaw0phvYCekNOuYRcHg3Fd7RSRsBKAPDrRuptjY
sa074OPLRXyJe/12hspQEi/3Ee/QksCBbMsyLG8wBxU8koysNvT4jnQmkEknnPEw
yu4Qh0G/WWDNedmWsC5/kVK5SlMt4IzJBD08egoQKXwqYE46p3kq8I/clNDpoFog
W33w1EGsIgw/cHkw1M1ooUacABulIOmqvxQoeiSIckrw8JgAin8wqk+dVwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJuwuitA5uTz5LnqbOaWZh6yQB7EMB8GA1UdIwQY
MBaAFDICR1FukQF+Lby1csoPKaEigazwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTkt
ZTQzNjIwODgwY2I2LzEvbTdDNkswRG01UFBrdWVwczVwWm1IckpBSHNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTktZTQzNjIwODgwY2I2
LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXa64AwQC
uScgMA0EAgACMAcDBQAqAg5gMA0GCSqGSIb3DQEBCwUAA4IBAQA/DWBM7FXJTvbD
44TtByRu4fNpFY069AkV3zKnjLIKK6+LIrPyfXWuzH06WfVHHYKUineWLgaeB9AF
WSCjc6URk/y/uvS+kvrfJhcKmWEOZDwYxBTU4SmuV0FYodklJ+qRdrO/KmaudE18
53ErNyq/cPWwSHIUml2SVWpT8prXCxXswoC78NFxYR/cu7RI36q5h1nsLwSye1ef
kCtD9LDUuKeuP2RzidQmj1bnovE3BwBf92bDNEYMe1pwEiH+2ipa/TDwdfabW6EQ
XWIlIMapfpc9I7KTWur+gAbH4f9oS4mAeCqQkOs/eIc6rnKob8+kKNfp+Zv8Ztws
ODgqr8U6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net