Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa
File: 7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa (raw, json)
Hash identifier: Cug0ydNU1zlYNhdljKnKemuyYIF9W9jlVIkuddLMlTQ=
Subject key identifier: EC:BA:B9:B6:18:38:19:59:B5:82:1B:16:DA:74:E6:4D:F9:ED:97:B4
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019422FAEF8BD126B7420C5381B2A97DD70C
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50374
IP address blocks: 45.146.64.0/22 maxlen: 22
109.236.240.0/24 maxlen: 24
109.236.241.0/24 maxlen: 24
185.216.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ef:8b:d1:26:b7:42:0c:53:81:b2:a9:7d:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecbab9b618381959b5821b16da74e64df9ed97b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:25:68:c3:6f:76:00:bb:c0:a5:1e:e6:f6:
5b:33:cb:2a:cd:21:5f:19:d9:38:11:7c:95:78:3d:
68:92:15:ed:8b:fc:35:f7:f0:e6:0d:1f:d9:fe:86:
b2:b0:9f:80:9a:d2:bf:63:b0:74:ad:47:0c:17:2e:
7b:c8:2b:5b:d7:b8:97:64:ea:4d:53:72:7b:3f:75:
96:13:8f:c2:b5:e0:ee:66:09:ab:e2:e2:46:ae:88:
73:db:1e:71:7a:0b:7c:3a:63:45:10:81:f3:4c:8e:
d6:d5:60:8a:ad:69:8f:d2:7b:4c:da:94:83:8b:3c:
ba:86:7e:f6:dc:d5:4f:4f:31:1d:45:77:e3:b7:13:
69:e1:f3:f9:ce:a2:d6:1b:41:90:bd:fa:63:15:0f:
9a:12:73:7a:17:a5:57:02:f4:8c:16:9b:6a:fd:c5:
41:69:55:85:07:e6:0d:74:ec:99:4b:3f:7f:a3:3f:
80:15:fa:fb:d1:cc:03:69:dc:b6:65:b3:d0:27:bc:
65:ee:c2:da:90:2d:48:79:f0:9c:6b:e4:e4:71:47:
93:64:32:59:6e:13:b4:59:aa:94:07:32:be:b8:50:
c2:c2:d1:73:61:fc:9f:82:17:82:72:54:38:66:0c:
03:9d:e5:3a:54:27:8d:c8:5a:14:2c:0b:2a:74:1c:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:B9:B6:18:38:19:59:B5:82:1B:16:DA:74:E6:4D:F9:ED:97:B4
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.64.0/22
109.236.240.0/23
185.216.100.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:c5:ac:3b:29:aa:33:b7:28:fa:18:71:97:55:05:9c:62:80:
87:34:a1:a9:26:b1:38:37:b3:9a:8b:10:4d:b9:43:65:cb:b9:
f7:45:d5:a3:df:a4:d1:5d:97:c8:9e:4f:c2:d7:66:bd:4c:db:
a6:18:90:89:7a:10:ef:86:c7:98:28:7d:b8:96:b6:80:2c:75:
eb:9d:e7:d6:0d:2c:4d:d3:4d:ec:50:55:70:32:63:3a:fb:b5:
09:0d:52:67:47:65:40:a4:5f:7f:7b:5a:cc:8c:e0:0d:2a:6f:
96:1b:ce:96:a8:9c:49:af:8d:c4:c7:48:d4:a1:78:10:1f:60:
67:0c:24:d3:e3:28:ab:8c:2a:03:72:56:9b:0d:01:65:52:2e:
75:42:e3:7f:53:ea:5a:1c:74:09:f3:74:83:f1:b3:d9:8d:81:
3c:cb:a7:4e:a3:3e:f1:20:bb:91:6c:94:ac:0f:95:3e:53:ad:
14:74:7b:c4:f0:a9:05:86:f3:66:31:ab:31:ff:7f:32:df:f7:
5a:aa:4c:99:8f:39:1b:49:7e:17:4b:65:51:5e:3f:49:ac:46:
0b:27:55:e1:f1:1b:df:6d:b3:e2:81:aa:3f:f4:91:c8:95:c4:
73:15:d2:eb:74:a3:38:85:fb:e8:41:31:0f:3e:9d:0f:5f:74:
09:fe:ee:0d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi+u+L0Sa3QgxTgbKpfdcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4
NzU3NDgwHhcNMjUwMTAxMTc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2JhYjliNjE4MzgxOTU5YjU4MjFiMTZkYTc0ZTY0ZGY5ZWQ5N2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4glaMNvdgC7wKUe5vZbM8sqzSFf
Gdk4EXyVeD1okhXti/w19/DmDR/Z/oaysJ+AmtK/Y7B0rUcMFy57yCtb17iXZOpN
U3J7P3WWE4/CteDuZgmr4uJGrohz2x5xegt8OmNFEIHzTI7W1WCKrWmP0ntM2pSD
izy6hn723NVPTzEdRXfjtxNp4fP5zqLWG0GQvfpjFQ+aEnN6F6VXAvSMFptq/cVB
aVWFB+YNdOyZSz9/oz+AFfr70cwDady2ZbPQJ7xl7sLakC1IefCca+TkcUeTZDJZ
bhO0WaqUBzK+uFDCwtFzYfyfgheCclQ4ZgwDneU6VCeNyFoULAsqdByNoQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOy6ubYYOBlZtYIbFtp05k357Ze0MB8GA1UdIwQY
MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt
N2YyMzMzNjA0OTk3LzEvN0xxNXRoZzRHVm0xZ2hzVzJuVG1UZm50bDdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3
LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZJAAwQB
bezwAwQCudhkMA0GCSqGSIb3DQEBCwUAA4IBAQDLxaw7Kaoztyj6GHGXVQWcYoCH
NKGpJrE4N7OaixBNuUNly7n3RdWj36TRXZfInk/C12a9TNumGJCJehDvhseYKH24
lraALHXrnefWDSxN003sUFVwMmM6+7UJDVJnR2VApF9/e1rMjOANKm+WG86WqJxJ
r43Ex0jUoXgQH2BnDCTT4yirjCoDclabDQFlUi51QuN/U+paHHQJ83SD8bPZjYE8
y6dOoz7xILuRbJSsD5U+U60UdHvE8KkFhvNmMasx/38y3/daqkyZjzkbSX4XS2VR
Xj9JrEYLJ1Xh8RvfbbPigao/9JHIlcRzFdLrdKM4hfvoQTEPPp0PX3QJ/u4N
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net