Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/C8GJTtN7fk4YCqjJY8mOHTrefmE.roa
File: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (raw, json)
Hash identifier: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=
Subject key identifier: 0B:C1:89:4E:D3:7B:7E:4E:18:0A:A8:C9:63:C9:8E:1D:3A:DE:7E:61
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 0194236A4DEC9E940678D3829EAFD4D82B2B
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/C8GJTtN7fk4YCqjJY8mOHTrefmE.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.49.132.0/22 maxlen: 22
185.49.132.0/23 maxlen: 23
185.49.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4d:ec:9e:94:06:78:d3:82:9e:af:d4:d8:2b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bc1894ed37b7e4e180aa8c963c98e1d3ade7e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:0c:76:12:8c:97:54:d1:b4:32:b8:34:32:
f1:02:2a:50:3b:c9:4f:27:b0:0a:36:58:72:1f:8d:
0d:4c:e4:f8:2a:f3:ec:9b:63:f1:9c:b2:a0:16:49:
36:ae:27:20:22:ba:ad:73:66:b0:a2:7a:8e:54:6d:
0d:ee:e9:2b:1a:b4:b4:90:e3:bf:61:eb:a7:30:be:
84:48:66:82:dc:89:12:4f:cb:ad:34:11:e7:b2:06:
52:41:ad:14:70:7e:99:ee:23:c1:1a:6a:00:88:ea:
e1:77:65:22:bc:0d:a4:fd:d9:24:77:70:b1:5b:a3:
0c:be:fa:82:02:85:d3:10:d0:0e:c3:f6:f1:e5:6b:
c0:dd:37:d7:1d:1c:a8:cb:e5:d7:34:0e:10:e6:de:
eb:26:a9:d3:3b:78:95:a2:db:c8:29:2c:54:c9:e1:
e0:99:ce:2c:d6:a6:c7:9a:f5:67:44:fa:21:66:b6:
35:16:e2:33:7f:b5:df:b0:28:af:8a:a3:25:3a:02:
a7:2c:0c:c2:f3:ff:ae:7f:e3:56:d0:e4:8c:46:c5:
68:ac:40:fe:28:68:17:16:1a:0f:27:16:2e:8c:4d:
b3:9d:2b:75:b7:d5:fc:9f:19:66:38:c1:8f:eb:93:
61:9d:df:9b:51:1d:e2:e1:08:45:7f:ec:25:29:30:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:89:4E:D3:7B:7E:4E:18:0A:A8:C9:63:C9:8E:1D:3A:DE:7E:61
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/C8GJTtN7fk4YCqjJY8mOHTrefmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:bf:1f:09:88:bc:22:54:79:1d:ad:58:af:55:b6:f9:c3:b9:
de:a0:28:b8:6e:bd:0c:6a:dd:ec:09:20:75:68:d6:cd:d9:85:
d8:3a:4f:e2:3f:04:f6:a3:99:8b:56:c4:de:cb:fc:6e:d2:62:
bd:b4:85:99:8e:d0:ca:94:66:af:a1:c7:51:2d:c1:cb:b5:d2:
90:8a:aa:92:ff:81:3c:3d:e9:2b:0e:e7:d2:b6:9b:29:62:cb:
e1:c7:74:f1:95:f4:b1:c7:1e:20:b6:0a:2e:ef:87:33:b8:4b:
2a:6f:b0:91:43:9f:9f:46:68:a1:10:4e:37:49:33:96:8a:bc:
f2:03:9f:33:7c:5d:d2:37:1c:ce:88:ff:59:c4:c4:82:44:59:
05:15:7b:7f:4c:f1:55:8d:77:a5:75:8b:51:b1:16:83:31:cf:
8e:44:69:64:38:3a:dc:14:44:41:5a:c8:e9:f6:a5:07:8b:da:
d2:20:16:c0:76:61:9e:b1:62:b7:e0:93:15:1b:b7:25:16:78:
27:42:b2:a7:58:7e:c4:cd:95:92:38:d4:5e:1f:89:9e:27:9c:
2a:47:02:3b:0b:0d:c6:b7:91:ea:11:ef:7c:eb:c1:f5:76:59:
a3:29:b6:7c:32:31:61:b2:bf:0b:2b:b7:61:2b:1f:1e:1e:61:
b0:02:23:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjak3snpQGeNOCnq/U2CsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM1NjAzZTUyZTgzMTUzNzcxNmQ0NThiMzYwMTkyZjk5
YTM2ODkwHhcNMjUwMTAxMTk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmMxODk0ZWQzN2I3ZTRlMTgwYWE4Yzk2M2M5OGUxZDNhZGU3ZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUsMdhKMl1TRtDK4NDLxAipQO8lP
J7AKNlhyH40NTOT4KvPsm2PxnLKgFkk2ricgIrqtc2awonqOVG0N7ukrGrS0kOO/
YeunML6ESGaC3IkST8utNBHnsgZSQa0UcH6Z7iPBGmoAiOrhd2UivA2k/dkkd3Cx
W6MMvvqCAoXTENAOw/bx5WvA3TfXHRyoy+XXNA4Q5t7rJqnTO3iVotvIKSxUyeHg
mc4s1qbHmvVnRPohZrY1FuIzf7XfsCiviqMlOgKnLAzC8/+uf+NW0OSMRsVorED+
KGgXFhoPJxYujE2znSt1t9X8nxlmOMGP65Nhnd+bUR3i4QhFf+wlKTBq5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvBiU7Te35OGAqoyWPJjh063n5hMB8GA1UdIwQY
MBaAFK+TVgPlLoMVN3FtRYs2AZL5mjaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYt
MGEwZDA1ZWQwYzZiLzEvQzhHSlR0TjdmazRZQ3FqSlk4bU9IVHJlZm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYtMGEwZDA1ZWQwYzZi
LzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTGEMA0G
CSqGSIb3DQEBCwUAA4IBAQB8vx8JiLwiVHkdrVivVbb5w7neoCi4br0Mat3sCSB1
aNbN2YXYOk/iPwT2o5mLVsTey/xu0mK9tIWZjtDKlGavocdRLcHLtdKQiqqS/4E8
PekrDufStpspYsvhx3TxlfSxxx4gtgou74czuEsqb7CRQ5+fRmihEE43STOWirzy
A58zfF3SNxzOiP9ZxMSCRFkFFXt/TPFVjXeldYtRsRaDMc+ORGlkODrcFERBWsjp
9qUHi9rSIBbAdmGesWK34JMVG7clFngnQrKnWH7EzZWSONReH4meJ5wqRwI7Cw3G
t5HqEe9868H1dlmjKbZ8MjFhsr8LK7dhKx8eHmGwAiPK
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:00 2025 by rpki-client