Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa
File: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (raw, json)
Hash identifier: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=
Subject key identifier: BF:F0:A8:C1:C1:39:0A:4D:E8:26:FB:AA:CB:75:FC:02:C3:02:AE:90
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 019424452E13975C45EBF19AE313220C4DE9
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 185.173.20.0/22 maxlen: 22
185.173.20.0/24 maxlen: 24
185.173.21.0/24 maxlen: 24
185.173.22.0/24 maxlen: 24
2a0b:3100::/40 maxlen: 48
2a0b:3100:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2e:13:97:5c:45:eb:f1:9a:e3:13:22:0c:4d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bff0a8c1c1390a4de826fbaacb75fc02c302ae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:16:88:51:85:67:e9:73:2f:3d:0e:bb:99:
6d:de:05:d6:54:3f:88:39:49:c8:2d:62:53:6d:41:
e4:3b:3b:07:53:da:a5:f4:b4:18:3e:2d:b0:d7:61:
e5:bf:fc:26:09:93:2a:a5:48:8a:2a:46:d9:e6:57:
cc:c2:ca:70:c2:e1:43:ab:7d:4b:e7:82:e3:46:6f:
8f:f6:50:a3:33:7c:ff:70:1f:9e:19:49:70:1e:b0:
72:29:0a:be:76:71:00:ff:72:2e:88:22:39:81:12:
f5:70:3c:5f:36:2f:b5:36:79:87:b4:a3:55:54:5d:
4e:53:69:34:eb:33:7e:c0:d8:f8:42:24:d9:14:cc:
0b:51:b0:c5:1a:fe:80:28:ff:76:83:e0:6b:bc:88:
a9:f3:49:6b:84:e9:85:1b:e4:00:45:21:cb:12:89:
ab:39:00:a1:b4:f0:8d:95:bf:f8:ca:47:c5:bb:6d:
3d:c8:d9:33:be:82:f9:00:ba:7f:c9:a4:1e:fc:73:
ce:a2:44:f6:f3:f9:80:27:d9:2e:d2:f2:29:13:5b:
bf:41:25:9b:21:2e:a3:4a:4a:11:4c:7b:f9:f0:7d:
15:36:33:96:76:f1:b8:b3:da:eb:4a:48:7c:79:c1:
23:94:d1:6a:ad:a4:7a:02:d3:64:ba:6a:ea:3a:1a:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:A8:C1:C1:39:0A:4D:E8:26:FB:AA:CB:75:FC:02:C3:02:AE:90
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.20.0/22
IPv6:
2a0b:3100::/39
Signature Algorithm: sha256WithRSAEncryption
a4:f0:f5:f1:e7:bb:6b:99:15:4b:0b:d1:a0:e8:d4:dd:15:20:
cf:b2:91:86:df:71:3e:e4:8c:89:c8:3c:09:3e:d4:0f:07:ec:
90:eb:ce:d8:82:d2:b3:13:a5:49:59:c0:bf:bc:c0:93:1a:13:
a0:c2:fc:96:43:bb:9f:be:df:b0:19:75:a1:4f:b2:46:ac:e2:
42:6c:86:b1:a3:7c:c3:43:b5:16:24:cb:7c:66:ef:c4:e0:17:
fd:c3:52:5b:0b:4e:9c:cd:7b:7c:25:4d:1a:6f:36:6a:b3:1d:
1d:dc:e4:1a:ac:6c:81:60:84:5d:55:a1:f9:af:3e:14:cd:78:
9c:4b:fb:ac:0d:17:8c:7e:b9:a7:f1:70:6a:c9:c6:ac:01:78:
93:70:66:de:ce:89:ea:53:31:fc:2e:14:fe:b8:7e:b6:13:02:
83:b7:74:47:88:c3:e5:a2:63:1f:eb:0d:92:bb:26:49:8c:e0:
28:c8:30:f0:b6:50:33:75:ff:9a:88:5c:e2:cc:2e:39:3b:5c:
f3:1b:93:05:cc:4b:ea:9e:b7:54:39:68:43:e9:ed:3c:1d:ef:
b9:52:8d:21:94:bc:53:c6:6d:1c:8d:70:04:42:5d:99:dc:59:
c3:5e:67:a0:89:60:bc:4a:57:ba:f4:52:23:5c:6e:ff:4a:96:
d0:d9:94:c4
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQkRS4Tl1xF6/Ga4xMiDE3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODdmNmI5MTE5ZmE5ZGNkM2UxMmU3ZTZiZmI3MDZkZmY5
Nzg4MjUwHhcNMjUwMTAxMjM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmYwYThjMWMxMzkwYTRkZTgyNmZiYWFjYjc1ZmMwMmMzMDJhZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVIWiFGFZ+lzLz0Ou5lt3gXWVD+I
OUnILWJTbUHkOzsHU9ql9LQYPi2w12Hlv/wmCZMqpUiKKkbZ5lfMwspwwuFDq31L
54LjRm+P9lCjM3z/cB+eGUlwHrByKQq+dnEA/3IuiCI5gRL1cDxfNi+1NnmHtKNV
VF1OU2k06zN+wNj4QiTZFMwLUbDFGv6AKP92g+BrvIip80lrhOmFG+QARSHLEomr
OQChtPCNlb/4ykfFu209yNkzvoL5ALp/yaQe/HPOokT28/mAJ9ku0vIpE1u/QSWb
IS6jSkoRTHv58H0VNjOWdvG4s9rrSkh8ecEjlNFqraR6AtNkumrqOhp0PQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFL/wqMHBOQpN6Cb7qst1/ALDAq6QMB8GA1UdIwQY
MBaAFHuH9rkRn6nc0+Eufmv7cG3/l4glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYt
ZDc4NTE0ZTllODEyLzEvdl9Db3djRTVDazNvSnZ1cXkzWDhBc01DcnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYtZDc4NTE0ZTllODEy
LzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCua0UMA4E
AgACMAgDBgEqCzEAADANBgkqhkiG9w0BAQsFAAOCAQEApPD18ee7a5kVSwvRoOjU
3RUgz7KRht9xPuSMicg8CT7UDwfskOvO2ILSsxOlSVnAv7zAkxoToML8lkO7n77f
sBl1oU+yRqziQmyGsaN8w0O1FiTLfGbvxOAX/cNSWwtOnM17fCVNGm82arMdHdzk
GqxsgWCEXVWh+a8+FM14nEv7rA0XjH65p/FwasnGrAF4k3Bm3s6J6lMx/C4U/rh+
thMCg7d0R4jD5aJjH+sNkrsmSYzgKMgw8LZQM3X/mohc4swuOTtc8xuTBcxL6p63
VDloQ+ntPB3vuVKNIZS8U8ZtHI1wBEJdmdxZw15noIlgvEpXuvRSI1xu/0qW0NmU
xA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:35 2025 by rpki-client