Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/e0TEu5beAVWeSmXxkW6X6x2gBHA.roa
File: e0TEu5beAVWeSmXxkW6X6x2gBHA.roa (raw, json)
Hash identifier: bCc+ujeebjVb3R0AjVp+lBJExzxOGb5apQpq8yxW908=
Subject key identifier: 7B:44:C4:BB:96:DE:01:55:9E:4A:65:F1:91:6E:97:EB:1D:A0:04:70
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01942444CD4D11DBDCDD2BFB741F877A40AC
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/e0TEu5beAVWeSmXxkW6X6x2gBHA.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5607
IP address blocks: 91.103.34.0/24 maxlen: 24
94.116.0.0/16 maxlen: 16
94.117.0.0/16 maxlen: 16
94.118.0.0/16 maxlen: 16
94.119.4.0/22 maxlen: 22
94.119.8.0/21 maxlen: 21
94.119.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cd:4d:11:db:dc:dd:2b:fb:74:1f:87:7a:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b44c4bb96de01559e4a65f1916e97eb1da00470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:e8:b5:83:04:80:56:d0:5f:71:75:7d:19:
86:8d:83:42:9d:a4:4b:a4:6b:b8:5a:36:3f:ab:a7:
cf:26:94:6d:34:4f:cd:9c:38:38:44:47:39:9d:e8:
e6:29:f1:db:8a:28:38:c8:92:24:24:d5:1b:31:22:
5a:c8:10:4e:84:9a:e6:d5:62:42:c1:02:8a:bc:5c:
03:df:45:45:92:2a:dc:83:e5:a3:01:88:10:fe:94:
b7:13:0b:dc:3e:d3:06:ef:94:4f:79:35:da:77:6f:
76:09:bc:25:c4:00:f8:57:59:86:5a:23:31:3a:3d:
de:4a:2d:d5:c6:e6:e7:e7:1b:49:fa:ce:37:9d:fc:
fd:13:1d:48:15:0d:32:03:6b:38:76:b8:b0:fb:de:
7e:dc:3a:f7:dd:43:22:27:bd:93:73:c2:31:9d:f3:
64:06:63:c4:73:ee:48:db:12:35:80:61:33:ba:61:
af:15:bb:31:6f:e1:1a:9c:e2:b1:0d:09:54:b6:06:
5f:27:2b:b1:f6:c9:89:67:9d:83:96:1e:29:92:f4:
e4:03:ba:47:18:e3:c5:c3:11:eb:ad:17:4b:bc:61:
b8:8d:2d:4f:07:a0:99:14:f1:1d:16:f6:df:42:d4:
82:5a:d1:bf:f0:df:ca:78:67:c9:07:b5:ba:ac:a7:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:44:C4:BB:96:DE:01:55:9E:4A:65:F1:91:6E:97:EB:1D:A0:04:70
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/e0TEu5beAVWeSmXxkW6X6x2gBHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.34.0/24
94.116.0.0-94.118.255.255
94.119.4.0-94.119.23.255
Signature Algorithm: sha256WithRSAEncryption
1d:41:36:03:75:13:a9:94:50:b1:c5:3e:f9:3c:a7:07:16:0d:
26:9c:fd:69:ef:aa:a6:ab:c2:80:ec:7c:a3:5a:3d:5c:e1:e0:
47:56:a4:ad:56:87:ca:01:66:38:a9:41:12:79:9d:46:13:16:
8c:8a:2e:3f:40:27:e6:5b:0c:7e:a2:9c:cc:5c:a5:6a:52:9e:
55:68:84:55:a0:56:da:dd:72:f0:49:77:c6:be:88:fc:13:5b:
15:02:76:6f:ef:6d:2c:f2:07:1b:22:fd:ed:ba:ac:78:b8:8c:
c9:c2:eb:d0:8d:02:c6:cd:94:fc:25:49:9d:22:a7:e9:c8:b5:
3a:28:99:b7:76:64:ed:a0:ca:40:3e:60:5b:bd:02:96:77:db:
ca:ae:eb:11:8a:1c:ef:bb:3d:46:1a:eb:b9:e3:32:61:35:16:
28:a3:92:63:ab:aa:6f:99:d6:12:40:be:3b:ea:93:22:25:4a:
2a:34:a8:c9:d4:b6:49:b1:4f:79:bd:ed:9f:ee:6f:41:51:1f:
47:e2:1b:0d:9d:df:53:43:17:6e:ad:c4:f0:23:4e:0d:ab:9b:
1b:fd:5a:92:17:8e:d8:a5:db:ac:ba:32:02:c7:c6:f4:5d:3c:
6e:b9:e2:b9:fe:7d:71:65:95:48:99:88:a8:4d:db:5d:b7:0f:
93:d1:2b:ae
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQkRM1NEdvc3Sv7dB+HekCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj
YjQ0MzAwHhcNMjUwMTAxMjM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjQ0YzRiYjk2ZGUwMTU1OWU0YTY1ZjE5MTZlOTdlYjFkYTAwNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RHotYMEgFbQX3F1fRmGjYNCnaRL
pGu4WjY/q6fPJpRtNE/NnDg4REc5nejmKfHbiig4yJIkJNUbMSJayBBOhJrm1WJC
wQKKvFwD30VFkircg+WjAYgQ/pS3EwvcPtMG75RPeTXad292CbwlxAD4V1mGWiMx
Oj3eSi3Vxubn5xtJ+s43nfz9Ex1IFQ0yA2s4driw+95+3Dr33UMiJ72Tc8IxnfNk
BmPEc+5I2xI1gGEzumGvFbsxb+EanOKxDQlUtgZfJyux9smJZ52Dlh4pkvTkA7pH
GOPFwxHrrRdLvGG4jS1PB6CZFPEdFvbfQtSCWtG/8N/KeGfJB7W6rKfmlQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHtExLuW3gFVnkpl8ZFul+sdoARwMB8GA1UdIwQY
MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt
MzA2MDQ1ZWZjZDY4LzEvZTBURXU1YmVBVldlU21YeGtXNlg2eDJnQkhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4
LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAW2ciMAoD
AwJedAMDAF52MAwDBAJedwQDBANedxAwDQYJKoZIhvcNAQELBQADggEBAB1BNgN1
E6mUULHFPvk8pwcWDSac/WnvqqarwoDsfKNaPVzh4EdWpK1Wh8oBZjipQRJ5nUYT
FoyKLj9AJ+ZbDH6inMxcpWpSnlVohFWgVtrdcvBJd8a+iPwTWxUCdm/vbSzyBxsi
/e26rHi4jMnC69CNAsbNlPwlSZ0ip+nItToombd2ZO2gykA+YFu9ApZ328qu6xGK
HO+7PUYa67njMmE1FiijkmOrqm+Z1hJAvjvqkyIlSio0qMnUtkmxT3m97Z/ub0FR
H0fiGw2d31NDF26txPAjTg2rmxv9WpIXjtil26y6MgLHxvRdPG654rn+fXFllUiZ
iKhN2123D5PRK64=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net