Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/EIMWqXBOS0YCHKVRRjjvdLG7Mjo.roa
File: EIMWqXBOS0YCHKVRRjjvdLG7Mjo.roa (raw, json)
Hash identifier: grg4wV6dKJ9784mHtleK2jfAwBnzglDRGA4/VkrHN+I=
Subject key identifier: 10:83:16:A9:70:4E:4B:46:02:1C:A5:51:46:38:EF:74:B1:BB:32:3A
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 019424B3DB1AC47E892D8433B0B23ED61A30
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/EIMWqXBOS0YCHKVRRjjvdLG7Mjo.roa
Signing time: Thu 02 Jan 2025 01:49:14 +0000
ROA not before: Thu 02 Jan 2025 01:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209898
IP address blocks: 91.194.139.0/24 maxlen: 24
147.78.194.0/23 maxlen: 24
148.222.248.0/22 maxlen: 24
185.203.114.0/23 maxlen: 23
2a09:2940::/29 maxlen: 48
2a0a:e5c0::/29 maxlen: 48
2a0a:e5c0:1::/48 maxlen: 48
2a0a:e5c0:2::/48 maxlen: 48
2a0a:e5c1:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:db:1a:c4:7e:89:2d:84:33:b0:b2:3e:d6:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=108316a9704e4b46021ca5514638ef74b1bb323a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:d4:35:cf:97:62:7f:8d:7b:6b:1b:73:f1:
43:4f:15:c0:5e:e6:6d:a1:e9:90:21:7c:be:6a:50:
12:3b:cd:0d:0f:34:8c:62:3b:c0:ae:35:d2:18:39:
af:2e:d9:be:22:44:61:ab:9f:12:50:73:1f:f4:40:
18:5a:d3:ca:72:e6:9d:63:ed:67:25:ff:e5:4d:8e:
57:a5:19:15:8a:96:e5:7e:f0:a9:e4:a7:5f:aa:db:
36:ba:95:39:54:7a:47:46:da:0b:3d:5b:60:25:a2:
40:3e:c9:ab:5d:99:cd:66:3f:9c:8a:e4:28:46:5e:
70:96:41:aa:77:00:d1:f4:94:b7:8e:81:bf:e5:43:
55:c0:1a:a1:e9:13:b4:c0:11:34:37:e4:f8:36:63:
5d:33:f1:df:65:1e:f4:2a:7d:3e:dd:89:88:e4:39:
af:99:9d:bd:e7:32:78:d0:35:76:0b:44:ad:5a:4e:
a9:ac:bc:84:46:d3:90:fa:07:1d:de:c6:33:a7:af:
64:5c:04:9b:51:73:eb:d8:47:5f:48:b9:54:fb:ce:
46:ad:91:aa:4d:83:b8:b8:0d:82:01:fa:39:a1:b1:
bd:3a:12:ef:a5:87:5d:41:02:6d:77:52:bc:47:81:
db:a8:23:5e:a9:80:07:b8:bc:c5:72:08:91:7b:b3:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:16:A9:70:4E:4B:46:02:1C:A5:51:46:38:EF:74:B1:BB:32:3A
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/EIMWqXBOS0YCHKVRRjjvdLG7Mjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.139.0/24
147.78.194.0/23
148.222.248.0/22
185.203.114.0/23
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
39:a7:f4:82:a5:a6:54:22:e4:19:c5:79:ab:d1:0f:a1:6a:e0:
3e:c4:05:ee:76:6c:db:0e:c1:59:68:1c:b7:f2:46:28:04:fb:
c5:a0:b7:20:2b:a6:ee:be:c4:0e:06:82:4d:0a:b9:a5:93:62:
ae:5d:0a:da:81:64:5c:2c:f5:6b:e0:f0:df:14:8a:53:16:ee:
49:13:05:ad:76:19:2e:c6:be:ab:7b:33:1b:6e:2e:89:bb:e1:
7a:17:34:f3:d5:67:ff:02:f4:f2:d4:07:90:71:2d:da:80:a4:
00:f3:26:97:8c:eb:13:97:3a:4d:1b:88:4d:ba:bc:c3:ff:75:
aa:24:46:8f:b2:72:67:40:02:8b:8e:fc:1d:60:16:3d:8e:7d:
8c:c4:45:25:16:23:82:3f:e6:be:88:a6:01:31:c7:07:1c:73:
04:fb:b7:da:fb:e6:cc:dd:c7:c8:7c:07:77:09:95:1b:f3:7f:
4c:de:94:52:03:c9:0a:8a:81:85:9f:6e:d5:d8:67:8e:af:cd:
2d:4e:46:6b:2f:80:b1:fc:04:6b:4d:3c:8c:a1:6e:7d:19:7e:
e6:32:8a:6d:28:98:b9:3c:6a:89:45:fd:9b:90:e0:64:35:31:
f7:96:f3:ce:95:83:f5:e7:32:b5:6d:5e:f3:f3:1a:e5:eb:c4:
b5:c5:fc:8a
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQks9saxH6JLYQzsLI+1howMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy
MzQxMjAwHhcNMjUwMTAyMDE0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDgzMTZhOTcwNGU0YjQ2MDIxY2E1NTE0NjM4ZWY3NGIxYmIzMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+nUNc+XYn+Ne2sbc/FDTxXAXuZt
oemQIXy+alASO80NDzSMYjvArjXSGDmvLtm+IkRhq58SUHMf9EAYWtPKcuadY+1n
Jf/lTY5XpRkVipblfvCp5Kdfqts2upU5VHpHRtoLPVtgJaJAPsmrXZnNZj+ciuQo
Rl5wlkGqdwDR9JS3joG/5UNVwBqh6RO0wBE0N+T4NmNdM/HfZR70Kn0+3YmI5Dmv
mZ295zJ40DV2C0StWk6prLyERtOQ+gcd3sYzp69kXASbUXPr2EdfSLlU+85GrZGq
TYO4uA2CAfo5obG9OhLvpYddQQJtd1K8R4HbqCNeqYAHuLzFcgiRe7NzRwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFBCDFqlwTktGAhylUUY473SxuzI6MB8GA1UdIwQY
MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt
YmZmYjc1N2MzMTM0LzEvRUlNV3FYQk9TMFlDSEtWUlJqanZkTEc3TWpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0
LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQAW8KLAwQB
k07CAwQClN74AwQBuctyMBQEAgACMA4DBQMqCSlAAwUDKgrlwDANBgkqhkiG9w0B
AQsFAAOCAQEAOaf0gqWmVCLkGcV5q9EPoWrgPsQF7nZs2w7BWWgct/JGKAT7xaC3
ICum7r7EDgaCTQq5pZNirl0K2oFkXCz1a+Dw3xSKUxbuSRMFrXYZLsa+q3szG24u
ibvhehc089Vn/wL08tQHkHEt2oCkAPMml4zrE5c6TRuITbq8w/91qiRGj7JyZ0AC
i478HWAWPY59jMRFJRYjgj/mvoimATHHBxxzBPu32vvmzN3HyHwHdwmVG/N/TN6U
UgPJCoqBhZ9u1dhnjq/NLU5Gay+AsfwEa008jKFufRl+5jKKbSiYuTxqiUX9m5Dg
ZDUx95bzzpWD9ecytW1e8/Ma5evEtcX8ig==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:05 2025 by rpki-client on console.sobornost.net