Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/OBn58ZJwEh4MhAnhsFAWGGJLifI.roa
File: OBn58ZJwEh4MhAnhsFAWGGJLifI.roa (raw, json)
Hash identifier: 168HaFL19xy+6TCd3GYc8l6QrgMbWSIwNLv5YeyfQ/w=
Subject key identifier: 38:19:F9:F1:92:70:12:1E:0C:84:09:E1:B0:50:16:18:62:4B:89:F2
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 01941F8C8DABB72FB8D083CCE8C1507FC53B
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/OBn58ZJwEh4MhAnhsFAWGGJLifI.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20545
IP address blocks: 109.205.40.0/21 maxlen: 24
185.212.252.0/22 maxlen: 22
217.147.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8d:ab:b7:2f:b8:d0:83:cc:e8:c1:50:7f:c5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3819f9f19270121e0c8409e1b0501618624b89f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:5f:81:b7:4f:38:fa:5d:a3:fa:e2:af:95:
f4:83:5e:55:a7:70:07:e1:1d:26:5c:c2:dc:b8:24:
65:8e:cd:e8:d8:d8:6a:05:8e:28:e8:bc:f5:91:38:
00:97:22:12:2a:bd:40:97:b6:4e:51:8f:7d:54:5d:
ef:87:0a:47:99:e6:e0:ea:8b:2b:b4:48:d3:41:da:
8a:47:ce:3b:3a:2c:74:b8:af:3b:0d:11:32:71:1a:
de:e8:a2:2e:59:7a:d0:a2:82:bd:a4:f0:be:6e:9c:
82:ed:01:16:ea:5c:36:61:a0:5d:f7:47:f3:18:d2:
f9:76:6c:9a:28:0f:98:87:53:93:f7:75:ea:fb:1a:
e3:fb:a1:02:b2:4a:f2:e7:38:b6:45:54:e9:e7:d5:
47:40:73:22:b8:bf:84:08:a7:f3:df:b3:73:61:5a:
e9:23:b5:fd:07:29:e4:dd:f8:a8:10:b0:a5:bb:f2:
3c:ef:5a:e3:47:12:17:88:81:90:41:f9:01:10:1d:
40:ba:89:fc:85:6f:94:03:6d:0a:fc:b8:53:a8:8d:
b8:32:1e:4c:10:fc:e1:40:02:a5:81:13:ff:62:95:
ba:f7:54:e5:7b:04:f0:52:22:aa:58:79:2c:12:76:
54:0b:37:5f:33:af:49:43:34:47:38:09:51:e6:5a:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:19:F9:F1:92:70:12:1E:0C:84:09:E1:B0:50:16:18:62:4B:89:F2
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/OBn58ZJwEh4MhAnhsFAWGGJLifI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.40.0/21
185.212.252.0/22
217.147.224.0/20
Signature Algorithm: sha256WithRSAEncryption
63:8c:f7:f9:fc:21:3d:c6:ab:c1:65:f1:e6:78:c7:67:3e:2d:
67:01:47:b9:cc:0b:5c:02:12:94:1e:c3:06:3e:22:39:60:22:
d7:ad:21:b5:72:f8:8a:84:2b:64:55:1f:22:32:c0:2b:86:8f:
67:97:05:ba:b4:40:ee:e9:6a:70:d8:19:78:45:79:71:02:60:
16:de:35:96:7f:16:ec:77:80:d5:53:ba:a4:f3:96:6a:6a:4c:
51:0a:58:97:bf:16:13:c3:de:bb:5b:4a:ad:08:4e:20:cd:86:
84:30:bb:3b:1f:b3:b5:52:18:40:4c:1b:ce:48:2b:62:03:eb:
af:46:21:1c:d1:87:ca:e6:2e:27:4b:d7:75:64:5a:66:8e:07:
8a:ea:d2:66:11:4b:15:ec:8f:b9:c2:22:05:5d:a5:b0:2d:01:
58:23:91:ec:de:f4:0c:96:d6:0c:64:c4:ab:c0:b0:92:47:f3:
5a:5b:d0:f3:a5:37:c2:18:b1:b6:f6:27:70:89:03:54:3e:09:
8b:c5:89:95:14:be:2b:51:3d:d3:3f:4f:71:a4:a4:d9:d9:94:
c6:07:f3:50:b0:16:da:63:04:bd:fc:22:2f:2a:45:0b:4e:36:
77:bf:f6:38:97:0a:e2:d9:cf:55:03:0f:de:6c:eb:44:d4:18:
1b:fd:4d:52
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQfjI2rty+40IPM6MFQf8U7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWE0MTIxMjdiNTE0ZjY0NTVlYzhhODZlMjlkMzhlYjBh
YmI1YWMwHhcNMjUwMTAxMDE0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODE5ZjlmMTkyNzAxMjFlMGM4NDA5ZTFiMDUwMTYxODYyNGI4OWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GtfgbdPOPpdo/rir5X0g15Vp3AH
4R0mXMLcuCRljs3o2NhqBY4o6Lz1kTgAlyISKr1Al7ZOUY99VF3vhwpHmebg6osr
tEjTQdqKR847Oix0uK87DREycRre6KIuWXrQooK9pPC+bpyC7QEW6lw2YaBd90fz
GNL5dmyaKA+Yh1OT93Xq+xrj+6ECskry5zi2RVTp59VHQHMiuL+ECKfz37NzYVrp
I7X9Bynk3fioELClu/I871rjRxIXiIGQQfkBEB1Auon8hW+UA20K/LhTqI24Mh5M
EPzhQAKlgRP/YpW691TlewTwUiKqWHksEnZUCzdfM69JQzRHOAlR5lqHIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDgZ+fGScBIeDIQJ4bBQFhhiS4nyMB8GA1UdIwQY
MBaAFEFaQSEntRT2RV7IqG4p046wq7WsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZwQklTZTFGUFpGWHNpb2JpblRqckNydGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iOGM3YmEtOTJmYS00YjczLWE5MjQt
M2QzM2U1NDE0ZDliLzEvT0JuNThaSndFaDRNaEFuaHNGQVdHR0pMaWZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iOGM3YmEtOTJmYS00YjczLWE5MjQtM2QzM2U1NDE0ZDli
LzEvUVZwQklTZTFGUFpGWHNpb2JpblRqckNydGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDbc0oAwQC
udT8AwQE2ZPgMA0GCSqGSIb3DQEBCwUAA4IBAQBjjPf5/CE9xqvBZfHmeMdnPi1n
AUe5zAtcAhKUHsMGPiI5YCLXrSG1cviKhCtkVR8iMsArho9nlwW6tEDu6Wpw2Bl4
RXlxAmAW3jWWfxbsd4DVU7qk85ZqakxRCliXvxYTw967W0qtCE4gzYaEMLs7H7O1
UhhATBvOSCtiA+uvRiEc0YfK5i4nS9d1ZFpmjgeK6tJmEUsV7I+5wiIFXaWwLQFY
I5Hs3vQMltYMZMSrwLCSR/NaW9DzpTfCGLG29idwiQNUPgmLxYmVFL4rUT3TP09x
pKTZ2ZTGB/NQsBbaYwS9/CIvKkULTjZ3v/Y4lwri2c9VAw/ebOtE1Bgb/U1S
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:55:27 2025 by rpki-client