Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/anvibFvTHPUMRi8hnoajH9pfZFk.roa
File: anvibFvTHPUMRi8hnoajH9pfZFk.roa (raw, json)
Hash identifier: +AQtjFUwlE3WU/X5mUqKuY0p9cD+NWVmxvLXTrEAFQ8=
Subject key identifier: 6A:7B:E2:6C:5B:D3:1C:F5:0C:46:2F:21:9E:86:A3:1F:DA:5F:64:59
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0194F4C59170A5A99485C5ADECE7037D247C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/anvibFvTHPUMRi8hnoajH9pfZFk.roa
Signing time: Tue 11 Feb 2025 11:29:35 +0000
ROA not before: Tue 11 Feb 2025 11:29:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59532
IP address blocks: 81.181.251.0/24 maxlen: 24
85.121.207.0/24 maxlen: 24
85.122.80.0/24 maxlen: 24
217.156.121.0/24 maxlen: 24
217.156.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:c5:91:70:a5:a9:94:85:c5:ad:ec:e7:03:7d:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 11 11:29:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a7be26c5bd31cf50c462f219e86a31fda5f6459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:2a:63:ff:4b:5d:d7:82:2a:1a:23:d7:cb:
cd:c9:21:a1:41:db:d3:8b:59:3a:21:0c:00:64:64:
4f:75:5f:84:c8:94:3d:c9:6b:77:8d:c3:f8:bb:c8:
44:2e:53:26:79:1a:46:a9:be:82:8e:76:98:2f:8b:
d3:63:0a:18:04:0d:b9:2b:dd:68:27:f4:f3:35:15:
d8:4f:74:e7:1b:70:99:7b:7f:74:ff:50:89:60:36:
41:67:20:50:5f:75:cd:fb:04:8b:8d:c7:bb:2c:89:
c3:07:44:85:71:0b:93:0b:f8:e9:67:d8:3b:fa:be:
26:47:12:a0:9e:40:2f:39:80:45:d5:86:c6:b6:8b:
31:15:34:02:d5:4c:d3:24:bb:e5:b7:6d:2a:45:72:
7b:e1:e4:84:54:c2:33:92:21:62:4d:ae:4e:09:4d:
4e:b0:06:01:66:a2:24:1a:2d:f3:de:d9:b9:c4:7a:
a8:87:f2:fd:0d:df:5e:39:a6:09:71:f4:3d:86:3a:
19:33:0f:56:45:a7:7e:58:9c:49:94:bd:ae:e7:80:
c2:af:b1:35:66:9c:43:55:55:76:3b:a4:f6:d4:d4:
c3:60:4a:c6:d9:0b:05:5c:5e:87:ce:fb:40:f4:7d:
ab:f9:be:d1:04:21:6b:64:70:1f:e7:95:18:a9:d8:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7B:E2:6C:5B:D3:1C:F5:0C:46:2F:21:9E:86:A3:1F:DA:5F:64:59
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/anvibFvTHPUMRi8hnoajH9pfZFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.251.0/24
85.121.207.0/24
85.122.80.0/24
217.156.121.0/24
217.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:85:15:a0:3d:61:dc:c1:f2:4b:1e:97:85:74:a5:7f:91:46:
8f:96:ff:43:47:fd:70:dd:55:c2:6d:db:8e:36:af:4f:e3:b6:
97:f1:ed:7f:a1:f9:e5:6c:09:38:74:13:57:9d:f4:1f:eb:cb:
ac:3b:21:91:51:88:b3:14:28:cc:c6:25:b5:96:dc:76:2d:1b:
e7:38:87:61:4a:4f:60:07:17:47:76:b6:18:9b:5b:83:4f:9a:
15:b1:63:fe:a4:bd:2b:d4:35:4e:e7:67:01:f9:74:52:0a:10:
0e:93:00:98:fd:9b:e1:37:1a:9a:52:c9:0e:87:5a:7c:90:3d:
25:4b:47:02:6d:6d:7d:03:7c:cb:51:09:73:e9:86:fd:c7:9d:
7d:80:09:9b:20:7c:eb:a5:9e:75:60:43:86:5e:7f:05:cf:a9:
dc:59:b6:ee:30:08:46:ba:a4:2d:3c:46:d8:53:d6:32:ce:3c:
26:14:28:aa:ff:1c:4d:e2:06:65:da:e6:74:aa:7b:24:cc:9e:
2a:14:9f:02:f0:c5:89:6c:5d:73:93:43:4b:2d:d0:0d:db:2b:
9b:81:ea:70:64:e1:99:f5:9d:48:20:9e:fb:66:69:76:51:ef:
5c:3c:05:56:8c:ca:65:3b:a5:65:33:36:97:c0:27:82:ba:b2:
34:f9:a9:45
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZT0xZFwpamUhcWt7OcDfSR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMjExMTEyOTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTdiZTI2YzViZDMxY2Y1MGM0NjJmMjE5ZTg2YTMxZmRhNWY2NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL8qY/9LXdeCKhoj18vNySGhQdvT
i1k6IQwAZGRPdV+EyJQ9yWt3jcP4u8hELlMmeRpGqb6CjnaYL4vTYwoYBA25K91o
J/TzNRXYT3TnG3CZe390/1CJYDZBZyBQX3XN+wSLjce7LInDB0SFcQuTC/jpZ9g7
+r4mRxKgnkAvOYBF1YbGtosxFTQC1UzTJLvlt20qRXJ74eSEVMIzkiFiTa5OCU1O
sAYBZqIkGi3z3tm5xHqoh/L9Dd9eOaYJcfQ9hjoZMw9WRad+WJxJlL2u54DCr7E1
ZpxDVVV2O6T21NTDYErG2QsFXF6HzvtA9H2r+b7RBCFrZHAf55UYqdj87wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGp74mxb0xz1DEYvIZ6Gox/aX2RZMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvYW52aWJGdlRIUFVNUmk4aG5vYWpIOXBmWkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUbX7AwQA
VXnPAwQAVXpQAwQA2Zx5AwQA2Zx+MA0GCSqGSIb3DQEBCwUAA4IBAQBrhRWgPWHc
wfJLHpeFdKV/kUaPlv9DR/1w3VXCbduONq9P47aX8e1/ofnlbAk4dBNXnfQf68us
OyGRUYizFCjMxiW1ltx2LRvnOIdhSk9gBxdHdrYYm1uDT5oVsWP+pL0r1DVO52cB
+XRSChAOkwCY/ZvhNxqaUskOh1p8kD0lS0cCbW19A3zLUQlz6Yb9x519gAmbIHzr
pZ51YEOGXn8Fz6ncWbbuMAhGuqQtPEbYU9YyzjwmFCiq/xxN4gZl2uZ0qnskzJ4q
FJ8C8MWJbF1zk0NLLdAN2yubgepwZOGZ9Z1IIJ77Zml2Ue9cPAVWjMplO6VlMzaX
wCeCurI0+alF
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:32 2025 by rpki-client