Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b82143-f54a-4486-8a4b-c61625ee3fd6/1/NOr55O_SLx3O_QzM_RzqHMRV0gc.roa
File: NOr55O_SLx3O_QzM_RzqHMRV0gc.roa (raw, json)
Hash identifier: YNsfEpBxVY7ZyIbTbJVy+4dvjcl6SDMJR2iasaLFN6w=
Subject key identifier: 34:EA:F9:E4:EF:D2:2F:1D:CE:FD:0C:CC:FD:1C:EA:1C:C4:55:D2:07
Certificate issuer: /CN=1c6d1e763c261c8125b36c700ab69279fa92a02b
Certificate serial: 019155621F283B4893DDEE908EF089298669
Authority key identifier: 1C:6D:1E:76:3C:26:1C:81:25:B3:6C:70:0A:B6:92:79:FA:92:A0:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG0edjwmHIEls2xwCraSefqSoCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b82143-f54a-4486-8a4b-c61625ee3fd6/1/NOr55O_SLx3O_QzM_RzqHMRV0gc.roa
Signing time: Thu 15 Aug 2024 09:32:59 +0000
ROA not before: Thu 15 Aug 2024 09:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2686
IP address blocks: 194.242.64.0/19 maxlen: 19
195.33.0.0/19 maxlen: 19
195.33.32.0/23 maxlen: 23
195.33.34.0/23 maxlen: 23
195.33.48.0/20 maxlen: 20
195.33.64.0/19 maxlen: 19
195.33.96.0/19 maxlen: 19
195.33.128.0/19 maxlen: 19
195.33.156.0/24 maxlen: 24
195.33.160.0/19 maxlen: 19
212.1.160.0/19 maxlen: 19
2001:1be0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:62:1f:28:3b:48:93:dd:ee:90:8e:f0:89:29:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6d1e763c261c8125b36c700ab69279fa92a02b
Validity
Not Before: Aug 15 09:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34eaf9e4efd22f1dcefd0cccfd1cea1cc455d207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:23:15:5c:15:94:ff:bf:36:ac:e6:a5:9e:
fa:81:15:17:3b:51:f0:d0:52:36:3d:0c:53:d6:6c:
d9:02:74:35:51:81:88:94:d6:67:12:26:a9:78:41:
b3:45:18:4f:bd:6e:e6:d6:38:82:3c:97:76:ac:d1:
69:06:c8:b5:3a:72:7b:d6:96:9a:d3:16:a1:82:67:
2d:69:1f:99:90:84:39:b6:75:d4:02:e2:9a:5e:91:
15:f4:71:2c:dd:a9:2f:25:b5:37:d9:f9:42:a7:91:
76:ab:89:50:f8:5c:59:f0:94:18:4b:8f:40:7b:bc:
b3:36:47:4f:f1:0d:7d:a3:bc:b3:ed:03:25:15:4a:
0c:fe:10:d2:f6:ca:40:93:1a:c5:bf:31:f8:fe:a8:
ba:a8:44:d2:58:e6:7f:ba:dc:2e:71:9a:41:34:42:
d7:c1:ac:06:07:c8:95:b8:f6:45:62:29:bc:a0:cf:
ca:0c:b1:ee:6e:7c:41:18:27:2c:81:97:0f:01:0d:
12:8f:68:a4:81:7c:39:2e:39:c0:f3:b7:d3:6a:17:
a4:2d:c2:3b:60:66:f4:3a:34:f2:92:b0:25:f3:b2:
10:6a:3f:6b:08:bf:12:ef:c3:ab:dc:87:7c:70:93:
61:dc:11:f7:b9:1d:2c:38:f6:87:2a:e4:33:ec:49:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EA:F9:E4:EF:D2:2F:1D:CE:FD:0C:CC:FD:1C:EA:1C:C4:55:D2:07
X509v3 Authority Key Identifier:
keyid:1C:6D:1E:76:3C:26:1C:81:25:B3:6C:70:0A:B6:92:79:FA:92:A0:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG0edjwmHIEls2xwCraSefqSoCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b82143-f54a-4486-8a4b-c61625ee3fd6/1/NOr55O_SLx3O_QzM_RzqHMRV0gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b82143-f54a-4486-8a4b-c61625ee3fd6/1/HG0edjwmHIEls2xwCraSefqSoCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.64.0/19
195.33.0.0-195.33.35.255
195.33.48.0-195.33.191.255
212.1.160.0/19
IPv6:
2001:1be0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:8e:ff:57:01:5c:cb:99:a5:34:28:76:f6:28:21:b1:89:f9:
fb:ae:ee:58:9d:bc:e4:7f:76:cc:ee:71:07:9d:c8:5e:4c:58:
a5:23:ab:dc:0f:1e:a4:2b:1e:f8:bd:f2:20:04:18:21:e5:76:
cf:b8:0a:a1:cd:5d:69:52:18:67:00:59:f7:de:4b:2e:ca:a3:
33:2a:24:e9:56:93:26:ff:51:14:bb:2d:2e:c7:d1:a0:9e:b8:
8e:8d:bb:d2:9c:86:6c:10:c4:a5:40:43:bb:31:b9:50:32:be:
34:1e:d1:cf:d6:aa:b2:bf:a7:9a:32:9d:32:2a:b0:b8:60:1c:
21:6b:73:a0:65:2e:5f:d0:33:ba:68:61:cf:51:86:b1:7a:b4:
98:44:af:34:31:a1:95:27:9a:60:74:d0:07:24:bb:25:38:e8:
66:b3:96:15:e2:66:cb:0c:13:5e:d6:e4:a3:5a:d2:74:a8:2f:
3d:cc:eb:1f:57:51:bb:17:75:b6:8c:df:dc:ee:aa:8b:46:35:
97:38:1a:d1:e7:22:d7:4f:a1:47:17:68:ff:1d:c7:b9:c8:50:
c7:10:7a:1f:74:01:94:f6:f8:22:5a:06:22:db:11:0a:96:d7:
ca:8e:2d:75:68:21:ee:38:15:5b:2a:77:92:2c:53:9a:0e:6b:
7b:81:49:4e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZFVYh8oO0iT3e6QjvCJKYZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmQxZTc2M2MyNjFjODEyNWIzNmM3MDBhYjY5Mjc5ZmE5
MmEwMmIwHhcNMjQwODE1MDkzMjU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGVhZjllNGVmZDIyZjFkY2VmZDBjY2NmZDFjZWExY2M0NTVkMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFgjFVwVlP+/NqzmpZ76gRUXO1Hw
0FI2PQxT1mzZAnQ1UYGIlNZnEiapeEGzRRhPvW7m1jiCPJd2rNFpBsi1OnJ71paa
0xahgmctaR+ZkIQ5tnXUAuKaXpEV9HEs3akvJbU32flCp5F2q4lQ+FxZ8JQYS49A
e7yzNkdP8Q19o7yz7QMlFUoM/hDS9spAkxrFvzH4/qi6qETSWOZ/utwucZpBNELX
wawGB8iVuPZFYim8oM/KDLHubnxBGCcsgZcPAQ0Sj2ikgXw5LjnA87fTahekLcI7
YGb0OjTykrAl87IQaj9rCL8S78Or3Id8cJNh3BH3uR0sOPaHKuQz7Elf5wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFDTq+eTv0i8dzv0MzP0c6hzEVdIHMB8GA1UdIwQY
MBaAFBxtHnY8JhyBJbNscAq2knn6kqArMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEcwZWRqd21ISUVsczJ4d0NyYVNlZnFTb0NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iODIxNDMtZjU0YS00NDg2LThhNGIt
YzYxNjI1ZWUzZmQ2LzEvTk9yNTVPX1NMeDNPX1F6TV9SenFITVJWMGdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iODIxNDMtZjU0YS00NDg2LThhNGItYzYxNjI1ZWUzZmQ2
LzEvSEcwZWRqd21ISUVsczJ4d0NyYVNlZnFTb0NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAtBAIAATAnAwQFwvJAMAsD
AwDDIQMEAsMhIDAMAwQEwyEwAwQGwyGAAwQF1AGgMA0EAgACMAcDBQAgARvgMA0G
CSqGSIb3DQEBCwUAA4IBAQCnjv9XAVzLmaU0KHb2KCGxifn7ru5Ynbzkf3bM7nEH
ncheTFilI6vcDx6kKx74vfIgBBgh5XbPuAqhzV1pUhhnAFn33ksuyqMzKiTpVpMm
/1EUuy0ux9GgnriOjbvSnIZsEMSlQEO7MblQMr40HtHP1qqyv6eaMp0yKrC4YBwh
a3OgZS5f0DO6aGHPUYaxerSYRK80MaGVJ5pgdNAHJLslOOhms5YV4mbLDBNe1uSj
WtJ0qC89zOsfV1G7F3W2jN/c7qqLRjWXOBrR5yLXT6FHF2j/Hce5yFDHEHofdAGU
9vgiWgYi2xEKltfKji11aCHuOBVbKneSLFOaDmt7gUlO
-----END CERTIFICATE-----
Generated at Tue Jun 17 20:15:28 2025 by rpki-client