Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/IaCV8W0fd_P-Lwmr_3CbyrK3eKs.roa
File: IaCV8W0fd_P-Lwmr_3CbyrK3eKs.roa (raw, json)
Hash identifier: QHL5c3N/ZkuG8VpB4FTn3t55fP9y+6htHdy+83Qpswg=
Subject key identifier: 21:A0:95:F1:6D:1F:77:F3:FE:2F:09:AB:FF:70:9B:CA:B2:B7:78:AB
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01936D7341533C8FD709ED3CFBF428D26511
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/IaCV8W0fd_P-Lwmr_3CbyrK3eKs.roa
Signing time: Wed 27 Nov 2024 11:48:10 +0000
ROA not before: Wed 27 Nov 2024 11:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
185.254.52.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.210.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:73:41:53:3c:8f:d7:09:ed:3c:fb:f4:28:d2:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 27 11:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21a095f16d1f77f3fe2f09abff709bcab2b778ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:5f:c4:5e:c9:05:1c:ff:eb:ec:c5:06:ca:
c3:ae:3a:6d:27:5a:59:1f:6a:1f:27:f1:80:5c:c5:
cf:8c:bf:ea:3a:dc:b1:29:60:9d:a9:31:07:b7:09:
75:b4:5c:75:b8:c5:39:22:bd:ef:47:33:ef:0e:b2:
52:4b:64:ae:59:90:35:94:e8:93:58:2e:86:c7:d7:
af:5c:ad:4d:29:d4:8f:a2:7e:f4:0e:06:27:57:4b:
1d:e4:6a:00:3c:95:13:52:a7:a9:1c:47:2f:79:dc:
51:a5:c2:42:3c:9e:82:0f:18:db:bc:d3:c4:d4:5c:
36:58:da:dc:86:fa:29:dc:45:f5:1b:ed:f5:28:e7:
30:a4:d6:70:a0:dc:b3:b0:a5:0a:c9:88:6b:14:08:
97:75:24:40:87:6d:3b:43:a9:22:84:4b:3e:49:df:
a3:71:9b:00:d3:b9:2c:18:14:fd:4e:e9:ba:9e:73:
4e:31:48:d5:5f:29:16:bd:7b:80:1d:24:ef:6f:c9:
9f:78:7a:ea:f9:c1:10:6c:ae:20:c0:1a:a4:62:db:
cd:7a:19:41:b0:af:45:99:e7:69:e3:ac:7b:fa:21:
d5:75:2a:6e:bc:46:53:f5:a8:d0:5e:1c:5d:a3:75:
68:b9:6e:94:e6:d0:cf:1c:9b:f7:19:d8:1b:46:6b:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:95:F1:6D:1F:77:F3:FE:2F:09:AB:FF:70:9B:CA:B2:B7:78:AB
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/IaCV8W0fd_P-Lwmr_3CbyrK3eKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.72.0-85.235.74.255
93.190.8.0/24
93.190.10.0/23
185.254.52.0/24
193.17.4.0/22
193.111.76.0/22
217.18.208.0/24
217.18.210.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:00:54:ee:81:9b:db:b6:ff:09:e8:7c:de:11:a6:bf:71:f2:
7e:b6:12:63:df:73:85:77:e3:c0:fa:12:be:07:f4:4a:ad:50:
ac:fe:da:80:49:3c:a6:80:c2:39:98:ec:7a:3b:ba:fb:e5:ee:
9b:08:0f:e3:f5:68:f5:dd:00:75:12:73:56:60:22:81:ae:9e:
11:f4:7b:54:ca:f3:3e:99:8e:af:c0:1b:c3:d9:5e:08:75:dd:
82:fe:c4:0a:47:ee:4b:fc:05:ac:58:e0:ef:39:cb:88:86:27:
10:48:a8:d8:d8:e4:da:05:26:20:65:24:b7:61:d8:f7:50:2c:
ee:32:94:b3:7c:ea:1e:d4:1b:fe:2d:85:b8:ed:04:c4:8b:a0:
b6:0d:99:cb:24:8f:45:2c:de:e8:03:cb:cc:98:58:9a:ba:e3:
66:f8:80:ef:28:e7:fb:c5:79:bd:bd:63:0f:5e:46:14:f3:ac:
50:8c:24:d6:69:94:61:36:02:87:4e:53:ec:54:82:8e:b1:60:
ba:85:36:79:21:fe:19:c3:9a:4f:25:c7:de:45:c7:59:d6:7a:
4c:df:9d:74:01:ae:15:89:a6:59:9c:db:14:26:52:de:b8:b1:
5a:13:1b:50:69:be:3d:1c:e0:fe:aa:32:19:80:93:6d:04:2b:
5d:4a:d1:d8
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZNtc0FTPI/XCe08+/Qo0mURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjQxMTI3MTE0ODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWEwOTVmMTZkMWY3N2YzZmUyZjA5YWJmZjcwOWJjYWIyYjc3OGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGpfxF7JBRz/6+zFBsrDrjptJ1pZ
H2ofJ/GAXMXPjL/qOtyxKWCdqTEHtwl1tFx1uMU5Ir3vRzPvDrJSS2SuWZA1lOiT
WC6Gx9evXK1NKdSPon70DgYnV0sd5GoAPJUTUqepHEcvedxRpcJCPJ6CDxjbvNPE
1Fw2WNrchvop3EX1G+31KOcwpNZwoNyzsKUKyYhrFAiXdSRAh207Q6kihEs+Sd+j
cZsA07ksGBT9Tum6nnNOMUjVXykWvXuAHSTvb8mfeHrq+cEQbK4gwBqkYtvNehlB
sK9Fmedp46x7+iHVdSpuvEZT9ajQXhxdo3VouW6U5tDPHJv3GdgbRmuTtQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFCGglfFtH3fz/i8Jq/9wm8qyt3irMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvSWFDVjhXMGZkX1AtTHdtcl8zQ2J5ckszZUtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBANV60gD
BABV60oDBABdvggDBAFdvgoDBAC5/jQDBALBEQQDBALBb0wDBADZEtADBAHZEtIw
DQYJKoZIhvcNAQELBQADggEBAK4AVO6Bm9u2/wnofN4Rpr9x8n62EmPfc4V348D6
Er4H9EqtUKz+2oBJPKaAwjmY7Ho7uvvl7psID+P1aPXdAHUSc1ZgIoGunhH0e1TK
8z6Zjq/AG8PZXgh13YL+xApH7kv8BaxY4O85y4iGJxBIqNjY5NoFJiBlJLdh2PdQ
LO4ylLN86h7UG/4thbjtBMSLoLYNmcskj0Us3ugDy8yYWJq642b4gO8o5/vFeb29
Yw9eRhTzrFCMJNZplGE2AodOU+xUgo6xYLqFNnkh/hnDmk8lx95Fx1nWekzfnXQB
rhWJplmc2xQmUt64sVoTG1Bpvj0c4P6qMhmAk20EK11K0dg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:31:41 2025 by rpki-client