Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/5r4roNSh8TWW8XLP5gLpTUYEtC8.roa
File: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (raw, json)
Hash identifier: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=
Subject key identifier: E6:BE:2B:A0:D4:A1:F1:35:96:F1:72:CF:E6:02:E9:4D:46:04:B4:2F
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019428283F38BA6A60DB112BC2E4832106B1
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/5r4roNSh8TWW8XLP5gLpTUYEtC8.roa
Signing time: Thu 02 Jan 2025 17:55:13 +0000
ROA not before: Thu 02 Jan 2025 17:55:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49100
IP address blocks: 185.110.236.0/24 maxlen: 24
185.110.237.0/24 maxlen: 24
185.110.238.0/24 maxlen: 24
185.110.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:3f:38:ba:6a:60:db:11:2b:c2:e4:83:21:06:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jan 2 17:55:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6be2ba0d4a1f13596f172cfe602e94d4604b42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:37:1d:7a:10:4c:4f:b4:13:cf:79:2d:09:
1b:98:40:0a:31:bd:72:46:c6:37:04:6e:90:db:da:
83:cd:49:59:f8:f2:ed:ae:f7:5e:bf:eb:2d:41:af:
8e:1d:3e:0b:16:29:f6:51:6e:7c:ca:da:fb:55:d6:
fa:38:d2:b3:0f:33:4a:02:36:3b:a6:13:e6:4c:63:
6f:d9:db:fc:86:5d:7f:e3:69:0a:87:06:5d:be:ac:
e7:f5:5a:07:40:e1:3a:f0:1b:a8:26:7c:33:12:02:
9c:f9:ea:e6:1f:13:cd:4e:b0:f5:65:8e:dc:31:bb:
64:eb:26:5e:9c:31:6b:1a:89:a1:8e:08:b3:d6:ff:
84:d8:75:20:a8:42:60:e8:e6:ab:35:93:b4:01:61:
36:ed:1e:f7:44:e3:fe:1b:bc:b1:c9:6a:fe:2e:56:
eb:cb:03:39:81:b7:4c:23:ac:59:d0:59:a3:f4:00:
c4:1e:69:5e:ec:19:0a:e3:8a:5b:dd:43:ad:a8:15:
92:96:13:cc:a0:54:94:1d:91:bd:2a:47:f5:37:79:
45:de:8e:a2:e2:aa:c7:2e:c7:3c:e0:a4:48:6f:f5:
0b:9d:dc:89:d8:14:69:45:d8:d1:1f:ea:12:78:b9:
cd:ea:7c:68:fa:58:9f:3b:7f:1f:10:61:96:3a:fa:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BE:2B:A0:D4:A1:F1:35:96:F1:72:CF:E6:02:E9:4D:46:04:B4:2F
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/5r4roNSh8TWW8XLP5gLpTUYEtC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.236.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:0e:d0:f9:ca:00:4e:7f:8e:dc:54:4a:cc:7e:85:ce:d8:c9:
da:e8:d8:cc:61:97:53:d1:0f:14:9c:15:10:4e:c6:16:9c:dc:
27:54:3a:9f:a7:89:91:47:67:1b:07:10:e6:4a:96:31:fc:95:
ca:48:13:35:b8:d9:fb:57:2b:18:fd:0a:a3:ed:3b:69:7a:40:
2d:f9:77:c9:fc:24:3c:31:35:8a:9a:b6:b1:aa:12:f3:8b:12:
0a:3e:5d:30:09:1c:4c:e8:67:00:30:26:79:21:01:fa:47:ce:
da:2b:e4:93:9b:32:a0:b1:9f:15:88:52:8e:9e:eb:61:0d:80:
54:ec:58:44:70:ef:ba:39:ca:43:43:7f:d7:8b:30:05:af:3a:
3d:6d:1e:e1:a8:a6:47:8d:81:63:1b:5b:9a:92:58:60:52:4a:
2a:5d:69:5c:12:e8:9e:91:9e:f1:38:9b:34:67:e6:e1:60:09:
ef:a0:c8:81:8d:f1:6f:9a:c3:1b:fb:9a:5a:7d:90:26:72:ca:
40:57:90:a8:2e:75:3f:31:62:22:9b:d1:c4:91:b1:5a:64:74:
5a:a3:e6:e1:7f:8a:7a:86:6f:b3:bb:b1:d5:d9:a1:2e:b0:54:
e0:d5:21:8d:c3:cf:6c:e9:53:04:87:87:c9:20:e1:50:3d:83:
53:13:ad:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKD84umpg2xErwuSDIQaxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1
NDE5OTUwHhcNMjUwMTAyMTc1NTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmJlMmJhMGQ0YTFmMTM1OTZmMTcyY2ZlNjAyZTk0ZDQ2MDRiNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrk3HXoQTE+0E895LQkbmEAKMb1y
RsY3BG6Q29qDzUlZ+PLtrvdev+stQa+OHT4LFin2UW58ytr7Vdb6ONKzDzNKAjY7
phPmTGNv2dv8hl1/42kKhwZdvqzn9VoHQOE68BuoJnwzEgKc+ermHxPNTrD1ZY7c
Mbtk6yZenDFrGomhjgiz1v+E2HUgqEJg6OarNZO0AWE27R73ROP+G7yxyWr+Llbr
ywM5gbdMI6xZ0Fmj9ADEHmle7BkK44pb3UOtqBWSlhPMoFSUHZG9Kkf1N3lF3o6i
4qrHLsc84KRIb/ULndyJ2BRpRdjRH+oSeLnN6nxo+lifO38fEGGWOvoJQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOa+K6DUofE1lvFyz+YC6U1GBLQvMB8GA1UdIwQY
MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt
YzMyMGU1MGEzYzc5LzEvNXI0cm9OU2g4VFdXOFhMUDVnTHBUVVlFdEM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2QtYzMyMGU1MGEzYzc5
LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW7sMA0G
CSqGSIb3DQEBCwUAA4IBAQDADtD5ygBOf47cVErMfoXO2Mna6NjMYZdT0Q8UnBUQ
TsYWnNwnVDqfp4mRR2cbBxDmSpYx/JXKSBM1uNn7VysY/Qqj7TtpekAt+XfJ/CQ8
MTWKmraxqhLzixIKPl0wCRxM6GcAMCZ5IQH6R87aK+STmzKgsZ8ViFKOnuthDYBU
7FhEcO+6OcpDQ3/XizAFrzo9bR7hqKZHjYFjG1uaklhgUkoqXWlcEuiekZ7xOJs0
Z+bhYAnvoMiBjfFvmsMb+5pafZAmcspAV5CoLnU/MWIim9HEkbFaZHRao+bhf4p6
hm+zu7HV2aEusFTg1SGNw89s6VMEh4fJIOFQPYNTE60H
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:18:31 2025 by rpki-client