Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/twDm8PVn_MZbjZoBzWIKFAhuQcQ.roa
File: twDm8PVn_MZbjZoBzWIKFAhuQcQ.roa (raw, json)
Hash identifier: hcvmLVRQ6iqrcYsupud2CgZHANpT+m2VlHgWwkgOyvs=
Subject key identifier: B7:00:E6:F0:F5:67:FC:C6:5B:8D:9A:01:CD:62:0A:14:08:6E:41:C4
Certificate issuer: /CN=6a9a54dfdb2aadd1f1efa90be1f02d8b214c6a3e
Certificate serial: 36BE7EC7
Authority key identifier: 6A:9A:54:DF:DB:2A:AD:D1:F1:EF:A9:0B:E1:F0:2D:8B:21:4C:6A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/appU39sqrdHx76kL4fAtiyFMaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/twDm8PVn_MZbjZoBzWIKFAhuQcQ.roa
Signing time: Sat 01 Jan 2022 16:01:31 +0000
ROA not before: Sat 01 Jan 2022 16:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29062
IP address blocks: 185.16.230.0/23 maxlen: 23
185.16.228.0/23 maxlen: 23
185.16.228.0/22 maxlen: 22
31.223.225.0/24 maxlen: 24
31.223.224.0/21 maxlen: 24
31.223.224.0/23 maxlen: 23
31.223.224.0/24 maxlen: 24
31.223.226.0/24 maxlen: 24
31.223.228.0/24 maxlen: 24
31.223.227.0/24 maxlen: 24
31.223.230.0/24 maxlen: 24
31.223.229.0/24 maxlen: 24
31.223.231.0/24 maxlen: 24
195.177.72.0/22 maxlen: 24
195.177.72.0/23 maxlen: 24
195.177.74.0/23 maxlen: 23
195.177.75.0/24 maxlen: 24
2a00:6180:8000::/33 maxlen: 33
2a00:6180::/33 maxlen: 33
2a00:6180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918453959 (0x36be7ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9a54dfdb2aadd1f1efa90be1f02d8b214c6a3e
Validity
Not Before: Jan 1 16:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b700e6f0f567fcc65b8d9a01cd620a14086e41c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:f1:ba:f8:f6:ff:e0:38:70:19:05:d7:7c:
b5:7d:6b:90:98:b0:19:67:20:22:35:c1:ff:51:44:
32:18:95:5d:01:7c:74:89:cc:db:e1:46:43:09:ab:
5a:13:9f:9e:d2:91:23:20:e0:65:ec:9d:7d:8c:af:
9c:d4:08:6b:ef:bf:78:2c:50:79:fe:70:be:0b:4c:
b2:0d:7c:45:73:fe:fb:5c:a3:2b:46:36:37:57:7d:
9c:e4:cc:b4:41:e9:c2:b0:7f:91:25:de:97:92:8a:
b3:db:ba:42:57:e7:54:1c:0a:99:b4:7b:f8:00:fc:
bd:0b:83:23:cb:37:d3:3d:88:7d:67:32:0a:e4:e5:
43:ae:dd:0d:30:fe:6f:8f:c0:7c:cb:2e:c9:84:42:
3e:15:90:d5:ee:e2:11:36:1f:9d:c6:4d:77:c8:f7:
af:12:1b:a8:e8:32:b9:29:c4:d2:82:56:1b:5e:c7:
34:54:e6:f2:18:c2:58:74:91:40:db:04:27:27:c5:
05:e5:3e:e3:67:5a:6a:3d:6a:c9:a0:be:d9:da:04:
b3:af:85:61:35:a5:d0:ba:ee:8c:0d:0f:82:dc:62:
5b:9b:e8:30:01:63:12:c1:93:2f:74:f3:be:13:45:
79:b0:95:cb:eb:6f:0d:08:0b:41:27:57:d9:47:03:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:00:E6:F0:F5:67:FC:C6:5B:8D:9A:01:CD:62:0A:14:08:6E:41:C4
X509v3 Authority Key Identifier:
keyid:6A:9A:54:DF:DB:2A:AD:D1:F1:EF:A9:0B:E1:F0:2D:8B:21:4C:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/appU39sqrdHx76kL4fAtiyFMaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/twDm8PVn_MZbjZoBzWIKFAhuQcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/appU39sqrdHx76kL4fAtiyFMaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.224.0/21
185.16.228.0/22
195.177.72.0/22
IPv6:
2a00:6180::/32
Signature Algorithm: sha256WithRSAEncryption
32:61:59:66:48:04:2f:3d:30:9e:69:43:0f:e9:cf:6d:be:c0:
47:5a:c7:67:f3:22:3b:41:d7:24:8b:3b:3e:b2:7a:2d:96:25:
03:fb:01:22:02:ad:26:ca:49:58:bd:4b:d9:f8:6f:89:df:79:
9a:a0:8d:15:7f:45:d3:ea:7f:13:29:44:9f:ea:52:f9:83:1b:
a9:67:90:ca:f4:7e:6d:1e:a3:31:56:e7:74:ec:50:9a:35:d5:
01:c8:95:54:ed:5c:8d:f5:f0:5e:0e:b5:80:3c:e2:3a:34:da:
db:a0:7b:d2:7d:54:7c:50:ab:0b:ae:2b:95:e5:88:e9:b6:37:
48:88:ff:b6:ff:47:0c:21:7c:bd:b2:80:f8:fa:93:c7:16:4a:
90:31:85:87:b9:19:d1:e8:a7:a5:41:b1:d8:4e:9b:40:3c:18:
4e:65:bb:0d:dd:ee:c4:48:88:cd:e9:7d:71:fc:77:4a:c7:b7:
63:24:b1:01:83:13:a2:29:38:4c:ee:49:e8:1a:a2:ff:6f:d2:
c1:68:0e:cb:0f:39:28:ab:1e:9f:e8:f1:b6:a3:e4:be:de:27:
f9:79:2a:f4:79:fe:bb:8c:f6:3f:18:56:af:51:45:ae:eb:ea:
c8:5e:86:ab:a3:07:48:69:86:c2:2f:8e:03:e8:c5:18:1d:a0:
dc:3a:7e:9f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIENr5+xzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YTlhNTRkZmRiMmFhZGQxZjFlZmE5MGJlMWYwMmQ4YjIxNGM2YTNlMB4XDTIyMDEw
MTE2MDEzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjcwMGU2ZjBmNTY3
ZmNjNjViOGQ5YTAxY2Q2MjBhMTQwODZlNDFjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2g8br49v/gOHAZBdd8tX1rkJiwGWcgIjXB/1FEMhiVXQF8
dInM2+FGQwmrWhOfntKRIyDgZeydfYyvnNQIa++/eCxQef5wvgtMsg18RXP++1yj
K0Y2N1d9nOTMtEHpwrB/kSXel5KKs9u6QlfnVBwKmbR7+AD8vQuDI8s30z2IfWcy
CuTlQ67dDTD+b4/AfMsuyYRCPhWQ1e7iETYfncZNd8j3rxIbqOgyuSnE0oJWG17H
NFTm8hjCWHSRQNsEJyfFBeU+42daaj1qyaC+2doEs6+FYTWl0LrujA0PgtxiW5vo
MAFjEsGTL3TzvhNFebCVy+tvDQgLQSdX2UcDs/8CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBS3AObw9Wf8xluNmgHNYgoUCG5BxDAfBgNVHSMEGDAWgBRqmlTf2yqt0fHv
qQvh8C2LIUxqPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FwcFUzOXNxcmRIeDc2a0w0ZkF0aXlGTWFqNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMTU2MGYxLWJjYzItNDExYS04NTY1LWVjNGE4YWY1YTk4ZS8x
L3R3RG04UFZuX01aYmpab0J6V0lLRkFodVFjUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MTU2MGYxLWJjYzItNDExYS04NTY1LWVjNGE4YWY1YTk4ZS8xL2FwcFUzOXNxcmRI
eDc2a0w0ZkF0aXlGTWFqNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAx/f4AMEArkQ5AMEAsOxSDANBAIA
AjAHAwUAKgBhgDANBgkqhkiG9w0BAQsFAAOCAQEAMmFZZkgELz0wnmlDD+nPbb7A
R1rHZ/MiO0HXJIs7PrJ6LZYlA/sBIgKtJspJWL1L2fhvid95mqCNFX9F0+p/EylE
n+pS+YMbqWeQyvR+bR6jMVbndOxQmjXVAciVVO1cjfXwXg61gDziOjTa26B70n1U
fFCrC64rleWI6bY3SIj/tv9HDCF8vbKA+PqTxxZKkDGFh7kZ0einpUGx2E6bQDwY
TmW7Dd3uxEiIzel9cfx3Sse3YySxAYMToik4TO5J6Bqi/2/SwWgOyw85KKsen+jx
tqPkvt4n+Xkq9Hn+u4z2PxhWr1FFruvqyF6Gq6MHSGmGwi+OA+jFGB2g3Dp+nw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:37 2025 by rpki-client