Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/P2uM8pvYwxouE_v72OXChbMn-cc.roa
File: P2uM8pvYwxouE_v72OXChbMn-cc.roa (raw, json)
Hash identifier: APLT1e3g2kwRK+F6WiV5ou0lIkaC87dcbvHWxtyxXvM=
Subject key identifier: 3F:6B:8C:F2:9B:D8:C3:1A:2E:13:FB:FB:D8:E5:C2:85:B3:27:F9:C7
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01879E2F6F6E967C9D83C8C041A020169365
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/P2uM8pvYwxouE_v72OXChbMn-cc.roa
Signing time: Thu 20 Apr 2023 10:22:01 +0000
ROA not before: Thu 20 Apr 2023 10:22:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.225.236.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
92.114.5.0/24 maxlen: 24
45.132.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:2f:6f:6e:96:7c:9d:83:c8:c0:41:a0:20:16:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 20 10:22:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f6b8cf29bd8c31a2e13fbfbd8e5c285b327f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:53:27:a2:89:26:23:4c:67:29:35:34:4e:
4c:f4:80:5a:01:88:02:82:e6:27:f1:55:70:ef:4a:
a1:1f:5a:28:b1:ac:61:4f:d4:9a:38:52:85:17:91:
9e:70:38:30:da:58:0f:af:02:e5:f5:1e:49:71:f8:
bc:0d:1c:dc:69:7a:00:bc:99:3d:45:10:6c:42:cf:
2c:ba:b4:94:1d:5c:f7:f5:63:06:f2:1c:ce:59:52:
cf:a3:97:8b:17:12:df:25:47:74:33:2d:19:11:14:
4d:e8:07:7b:d0:5d:4c:a5:93:27:fd:5a:f6:11:7e:
2f:03:82:bc:ae:77:02:13:37:29:4b:5d:2c:45:9b:
d0:19:cc:e3:b9:22:49:b8:e9:a1:3d:d9:d2:b5:1e:
b8:ff:c1:a6:aa:68:29:20:a7:b1:50:ad:70:4d:af:
f7:b6:b6:30:3c:73:c2:7b:a6:da:ac:87:2c:68:03:
c3:17:0b:d2:44:ce:78:98:c9:0d:74:f4:1c:b1:aa:
1f:d1:6c:85:44:1c:2b:31:5b:a7:7b:90:f9:38:4a:
08:7b:5a:f8:30:05:cf:88:8f:31:c5:88:0d:fa:e4:
ff:0d:55:32:f9:74:fb:d0:d6:91:52:38:61:a7:46:
83:e0:56:ff:44:ff:44:2c:b6:a4:3a:16:b9:38:77:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:8C:F2:9B:D8:C3:1A:2E:13:FB:FB:D8:E5:C2:85:B3:27:F9:C7
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/P2uM8pvYwxouE_v72OXChbMn-cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/23
45.146.104.0/24
92.114.5.0/24
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ef:9e:2f:74:b5:03:cf:cd:ce:ba:70:03:b8:69:70:21:58:
78:dd:cb:36:f6:f9:26:2e:d3:78:9d:ee:07:83:fa:f4:b7:ed:
02:77:24:ea:0d:8d:d4:1b:17:e5:ee:6f:2c:b9:35:55:11:88:
13:80:a0:14:50:03:1a:47:16:bd:d0:3f:29:6d:3b:cd:19:4d:
c1:b5:b8:de:ac:9a:df:19:01:01:27:7d:e5:c5:1b:37:bb:6f:
90:d3:b6:c6:e8:8c:36:57:25:9e:95:c2:43:9a:93:e9:61:6b:
46:c4:2d:dc:10:9b:bb:d2:d9:04:15:14:f9:92:49:f9:7d:e2:
1b:22:98:ac:03:76:cb:32:ee:91:db:49:d0:86:89:a8:9c:f7:
1a:72:b7:fc:5f:55:e1:ce:10:8a:7b:8a:d6:49:af:5c:7f:99:
25:a6:80:0e:c5:bb:a0:83:16:49:53:47:73:a6:dd:b8:f9:a7:
f2:50:9c:3a:bc:81:e5:59:1b:0d:41:d9:57:30:87:3c:92:a7:
fb:78:65:68:c9:5b:44:e1:e1:01:4d:7e:a3:73:2a:6b:fd:12:
b2:3e:db:d3:b5:0d:c8:9d:ce:3c:94:a1:bb:62:74:53:9e:ea:
71:77:8b:f4:2d:33:82:b6:61:7f:50:8b:f7:a3:6a:c6:db:12:
18:4c:18:e1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYeeL29ulnydg8jAQaAgFpNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwNDIwMTAyMjAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjZiOGNmMjliZDhjMzFhMmUxM2ZiZmJkOGU1YzI4NWIzMjdmOWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs69TJ6KJJiNMZyk1NE5M9IBaAYgC
guYn8VVw70qhH1oosaxhT9SaOFKFF5GecDgw2lgPrwLl9R5Jcfi8DRzcaXoAvJk9
RRBsQs8surSUHVz39WMG8hzOWVLPo5eLFxLfJUd0My0ZERRN6Ad70F1MpZMn/Vr2
EX4vA4K8rncCEzcpS10sRZvQGczjuSJJuOmhPdnStR64/8GmqmgpIKexUK1wTa/3
trYwPHPCe6barIcsaAPDFwvSRM54mMkNdPQcsaof0WyFRBwrMVune5D5OEoIe1r4
MAXPiI8xxYgN+uT/DVUy+XT70NaRUjhhp0aD4Fb/RP9ELLakOha5OHcq8wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFD9rjPKb2MMaLhP7+9jlwoWzJ/nHMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvUDJ1TThwdll3eG91RV92NzJPWENoYk1uLWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYRiAwQA
LZJoAwQAXHIFAwQA1eHsMA0GCSqGSIb3DQEBCwUAA4IBAQB1754vdLUDz83OunAD
uGlwIVh43cs29vkmLtN4ne4Hg/r0t+0CdyTqDY3UGxfl7m8suTVVEYgTgKAUUAMa
Rxa90D8pbTvNGU3BtbjerJrfGQEBJ33lxRs3u2+Q07bG6Iw2VyWelcJDmpPpYWtG
xC3cEJu70tkEFRT5kkn5feIbIpisA3bLMu6R20nQhomonPcacrf8X1XhzhCKe4rW
Sa9cf5klpoAOxbuggxZJU0dzpt24+afyUJw6vIHlWRsNQdlXMIc8kqf7eGVoyVtE
4eEBTX6jcypr/RKyPtvTtQ3Inc48lKG7YnRTnupxd4v0LTOCtmF/UIv3o2rG2xIY
TBjh
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:09:50 2025 by rpki-client