Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa
File: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (raw, json)
Hash identifier: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=
Subject key identifier: 3F:E0:F1:D2:28:5F:2B:1E:14:05:E3:65:4A:B9:D6:4C:CC:B2:7E:F6
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 0195BAA4FF44E89A15226CEB6D6591BA3654
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa
Signing time: Fri 21 Mar 2025 21:38:50 +0000
ROA not before: Fri 21 Mar 2025 21:38:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52195
IP address blocks: 46.149.208.0/20 maxlen: 23
185.12.20.0/22 maxlen: 23
185.237.162.0/23 maxlen: 23
2a02:ea80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ba:a4:ff:44:e8:9a:15:22:6c:eb:6d:65:91:ba:36:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Mar 21 21:38:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fe0f1d2285f2b1e1405e3654ab9d64cccb27ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:76:6e:23:b1:c3:84:23:96:f1:17:dd:aa:
8f:63:82:70:95:d9:23:19:f4:03:8c:03:f4:c1:d9:
13:d2:dd:34:a5:4b:7c:8e:f2:02:e1:5a:f5:51:f2:
38:06:eb:7a:18:0b:4a:99:c0:8f:a7:97:d6:7e:5e:
3b:bd:9d:a2:20:a6:1c:c7:c7:95:e7:6a:b6:dc:ab:
69:fb:e3:f2:84:d4:9a:dd:5a:d0:ff:0a:65:90:1e:
07:4e:9d:e9:43:1e:fb:4e:6b:40:05:1b:e9:52:78:
d0:92:e0:0f:d7:05:cb:e2:85:5c:56:09:30:28:09:
72:b8:2c:a6:a7:93:c3:30:36:7a:c0:16:67:a1:91:
20:7c:fd:79:49:bf:96:90:30:42:fb:f2:80:a5:10:
fc:b0:1b:2f:1b:e0:88:2d:cc:20:db:50:4a:13:c1:
a1:12:9d:ce:4f:a9:f9:99:94:c0:bd:04:5e:60:e8:
aa:17:bd:c5:00:18:30:bb:ad:83:42:36:c0:a2:6a:
7f:ba:89:df:81:93:51:32:38:26:7d:e0:80:c5:52:
4a:44:25:28:39:cf:2e:b5:9c:94:10:e5:64:57:e6:
b0:33:19:ed:04:10:f4:a1:41:59:d0:e5:7a:70:44:
0a:e9:49:bb:be:21:c1:24:95:ba:66:3e:29:e4:c3:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E0:F1:D2:28:5F:2B:1E:14:05:E3:65:4A:B9:D6:4C:CC:B2:7E:F6
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.208.0/20
185.12.20.0/22
185.237.162.0/23
IPv6:
2a02:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
98:71:7f:c5:76:20:81:bc:56:76:b0:6f:d9:18:f2:95:79:81:
f8:82:6d:c0:80:c0:66:77:06:b0:3b:e1:9f:40:da:73:54:01:
0b:39:1f:5f:e9:01:20:7e:c6:18:97:d7:36:cd:e4:1e:15:de:
99:0f:98:f2:96:ae:7b:05:e0:b2:01:fb:2c:55:53:fd:33:dd:
cd:cc:fc:86:bd:dc:c3:92:1e:1c:88:68:e1:a9:03:79:82:69:
ac:0b:de:5e:2f:25:84:7b:4d:7a:8f:52:61:2d:e7:b7:4c:36:
1a:0b:99:15:5b:21:c4:03:e6:c9:8e:e0:3a:09:9f:a8:bb:43:
99:41:5f:50:40:00:6e:e1:a5:2a:0f:c8:4e:6f:fb:b5:cf:4a:
f7:81:31:cf:e9:e9:95:b5:c7:87:ef:63:67:cf:9d:0b:20:51:
2b:b3:0a:13:0c:3e:dc:d3:6c:04:3d:ff:77:35:4a:b4:0b:55:
b5:a8:d9:40:e4:8d:f9:da:29:75:67:8c:1a:ea:ab:ef:09:03:
9c:29:2d:48:72:ad:a8:eb:c0:e5:0a:3d:4d:37:ae:db:40:20:
59:ea:d1:83:59:b1:c0:65:e1:f1:14:19:19:d4:02:36:c9:f4:
de:3f:f6:44:03:7e:a4:70:33:ab:0c:31:72:f5:e7:3c:12:0d:
9c:4a:67:6b
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZW6pP9E6JoVImzrbWWRujZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODRlYTU0OWY4ODIxMTA1OGIzNGJmY2FiMDY0MGMzMDMw
MzkzYzMwHhcNMjUwMzIxMjEzODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmUwZjFkMjI4NWYyYjFlMTQwNWUzNjU0YWI5ZDY0Y2NjYjI3ZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE52biOxw4QjlvEX3aqPY4Jwldkj
GfQDjAP0wdkT0t00pUt8jvIC4Vr1UfI4But6GAtKmcCPp5fWfl47vZ2iIKYcx8eV
52q23Ktp++PyhNSa3VrQ/wplkB4HTp3pQx77TmtABRvpUnjQkuAP1wXL4oVcVgkw
KAlyuCymp5PDMDZ6wBZnoZEgfP15Sb+WkDBC+/KApRD8sBsvG+CILcwg21BKE8Gh
Ep3OT6n5mZTAvQReYOiqF73FABgwu62DQjbAomp/uonfgZNRMjgmfeCAxVJKRCUo
Oc8utZyUEOVkV+awMxntBBD0oUFZ0OV6cEQK6Um7viHBJJW6Zj4p5MPhpQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFD/g8dIoXyseFAXjZUq51kzMsn72MB8GA1UdIwQY
MBaAFAuE6lSfiCEQWLNL/KsGQMMDA5PDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yZmMxNjctYjM1Ny00Mzk0LWI0ZTgt
YzgyNWJlMjgxM2JjLzEvUC1EeDBpaGZLeDRVQmVObFNybldUTXl5ZnZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yZmMxNjctYjM1Ny00Mzk0LWI0ZTgtYzgyNWJlMjgxM2Jj
LzEvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQELpXQAwQC
uQwUAwQBue2iMA0EAgACMAcDBQAqAuqAMA0GCSqGSIb3DQEBCwUAA4IBAQCYcX/F
diCBvFZ2sG/ZGPKVeYH4gm3AgMBmdwawO+GfQNpzVAELOR9f6QEgfsYYl9c2zeQe
Fd6ZD5jylq57BeCyAfssVVP9M93NzPyGvdzDkh4ciGjhqQN5gmmsC95eLyWEe016
j1JhLee3TDYaC5kVWyHEA+bJjuA6CZ+ou0OZQV9QQABu4aUqD8hOb/u1z0r3gTHP
6emVtceH72Nnz50LIFErswoTDD7c02wEPf93NUq0C1W1qNlA5I352il1Z4wa6qvv
CQOcKS1Icq2o68DlCj1NN67bQCBZ6tGDWbHAZeHxFBkZ1AI2yfTeP/ZEA36kcDOr
DDFy9ec8Eg2cSmdr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net