Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hBiwlhhFE44QPsrcqkKUVksncA4.roa
File: hBiwlhhFE44QPsrcqkKUVksncA4.roa (raw, json)
Hash identifier: FZdbsMJbgwt6b8G6npHC7QxSGH9CGwXi3IsmuLcEigQ=
Subject key identifier: 84:18:B0:96:18:45:13:8E:10:3E:CA:DC:AA:42:94:56:4B:27:70:0E
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D61662313A9D1EE58DD645986F4C39
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hBiwlhhFE44QPsrcqkKUVksncA4.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41494
IP address blocks: 185.1.36.0/24 maxlen: 24
185.86.67.0/24 maxlen: 24
195.95.178.0/24 maxlen: 24
2a05:b680:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:16:62:31:3a:9d:1e:e5:8d:d6:45:98:6f:4c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8418b0961845138e103ecadcaa4294564b27700e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:3c:be:1b:08:e3:e9:ed:f3:92:4a:e4:c1:
27:58:29:95:0a:18:60:54:21:45:4f:22:b2:9e:8f:
b1:0e:46:1d:eb:6b:94:15:e6:a0:bb:74:4a:24:5d:
00:24:ea:61:92:a8:a5:f6:fd:45:d4:3c:23:75:9b:
fd:a6:b9:c8:44:3a:a5:fb:27:2d:f4:6b:a1:6b:aa:
3c:8f:d8:b4:1d:32:09:09:64:55:9c:65:50:86:26:
b5:9b:72:15:a1:f4:e2:d7:a2:64:21:d3:0f:de:2a:
b2:70:5a:86:64:cb:27:01:b7:5e:72:ec:64:ee:bc:
f6:af:a1:1b:ed:b5:bf:cd:cc:32:d0:12:da:f2:68:
9f:07:fa:ce:c5:39:bc:62:7c:d8:6f:d4:48:b1:77:
2d:fb:4b:a7:c2:35:49:52:ed:05:b5:77:e3:ce:f1:
8a:92:8d:a0:f3:73:c0:fb:de:7f:30:66:45:4e:08:
c1:da:b9:60:53:90:ec:06:d2:f3:09:22:af:4a:46:
80:32:ca:c8:ae:dd:67:08:db:53:d2:ac:c0:02:c8:
04:97:f7:d0:9a:77:34:b9:4c:4e:cf:9d:7e:a2:b6:
e0:88:10:fd:97:03:c3:9b:a5:ca:28:26:e4:5f:30:
30:cc:69:f5:4b:e2:a8:fd:7a:bd:f5:52:f3:af:3d:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:B0:96:18:45:13:8E:10:3E:CA:DC:AA:42:94:56:4B:27:70:0E
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hBiwlhhFE44QPsrcqkKUVksncA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.36.0/24
185.86.67.0/24
195.95.178.0/24
IPv6:
2a05:b680:11::/48
Signature Algorithm: sha256WithRSAEncryption
ba:b8:bb:10:7f:c1:4a:03:7c:48:f0:a9:de:08:28:23:8a:65:
51:f2:c0:d5:3f:2e:09:06:cf:b0:e7:2b:a6:18:d5:a4:6a:c2:
3d:09:01:fa:dd:41:a3:4a:0a:75:73:84:1a:d2:21:b2:65:d5:
07:72:c3:b5:92:b1:58:f9:fe:c0:89:b7:2b:97:2c:db:bb:b8:
6b:26:82:98:e7:fa:8a:6a:54:3f:4b:d7:9d:d1:bf:65:1e:18:
cb:bd:20:57:79:39:40:f6:10:ff:04:14:3f:92:c7:ca:05:2a:
38:fa:2a:00:a9:a6:57:a8:3d:d6:7e:9d:34:10:93:2d:1f:ce:
d9:5f:d7:77:2b:cf:be:2c:17:9a:0b:b1:85:ea:b8:4b:cb:d3:
1f:2d:22:d3:c8:e4:cb:87:4e:74:14:ac:49:fd:06:23:48:a1:
dd:f6:68:13:b7:59:cb:1e:46:c7:57:ec:a1:06:3d:52:f4:8a:
07:ef:4b:fa:a2:27:c2:0a:72:1c:95:42:76:57:1f:64:c1:d7:
66:cc:c5:67:91:9a:2e:44:1c:9d:b5:8e:a5:de:06:6b:02:63:
9a:f3:33:3c:ef:cb:ad:7a:de:ec:e8:10:da:f9:46:77:c6:7b:
b1:59:65:60:bc:45:e2:3b:17:54:52:76:ef:8e:a7:8e:6a:bf:
ca:17:bf:f5
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQg1hZiMTqdHuWN1kWYb0w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUwMTAxMDc0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDE4YjA5NjE4NDUxMzhlMTAzZWNhZGNhYTQyOTQ1NjRiMjc3MDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8A8vhsI4+nt85JK5MEnWCmVChhg
VCFFTyKyno+xDkYd62uUFeagu3RKJF0AJOphkqil9v1F1DwjdZv9prnIRDql+yct
9Guha6o8j9i0HTIJCWRVnGVQhia1m3IVofTi16JkIdMP3iqycFqGZMsnAbdecuxk
7rz2r6Eb7bW/zcwy0BLa8mifB/rOxTm8YnzYb9RIsXct+0unwjVJUu0FtXfjzvGK
ko2g83PA+95/MGZFTgjB2rlgU5DsBtLzCSKvSkaAMsrIrt1nCNtT0qzAAsgEl/fQ
mnc0uUxOz51+orbgiBD9lwPDm6XKKCbkXzAwzGn1S+Ko/Xq99VLzrz0miQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFIQYsJYYRROOED7K3KpClFZLJ3AOMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvaEJpd2xoaEZFNDRRUHNyY3FrS1VWa3NuY0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAuQEkAwQA
uVZDAwQAw1+yMA8EAgACMAkDBwAqBbaAABEwDQYJKoZIhvcNAQELBQADggEBALq4
uxB/wUoDfEjwqd4IKCOKZVHywNU/LgkGz7DnK6YY1aRqwj0JAfrdQaNKCnVzhBrS
IbJl1Qdyw7WSsVj5/sCJtyuXLNu7uGsmgpjn+opqVD9L153Rv2UeGMu9IFd5OUD2
EP8EFD+Sx8oFKjj6KgCppleoPdZ+nTQQky0fztlf13crz74sF5oLsYXquEvL0x8t
ItPI5MuHTnQUrEn9BiNIod32aBO3WcseRsdX7KEGPVL0igfvS/qiJ8IKchyVQnZX
H2TB12bMxWeRmi5EHJ21jqXeBmsCY5rzMzzvy6163uzoENr5RnfGe7FZZWC8ReI7
F1RSdu+Op45qv8oXv/U=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:53 2025 by rpki-client