Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/I_z7vCGW6xyHTeNvbDKPhdARG-M.roa
File: I_z7vCGW6xyHTeNvbDKPhdARG-M.roa (raw, json)
Hash identifier: 8r7UrdzqYCx67NNR1NUCqQusmj+6qkdlQ4GFbuJ8L+s=
Subject key identifier: 23:FC:FB:BC:21:96:EB:1C:87:4D:E3:6F:6C:32:8F:85:D0:11:1B:E3
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 01941F8C80C8FA4C3365461FED33FAF38804
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/I_z7vCGW6xyHTeNvbDKPhdARG-M.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199236
IP address blocks: 45.128.173.0/24 maxlen: 24
91.211.240.0/24 maxlen: 24
91.211.241.0/24 maxlen: 24
91.211.242.0/24 maxlen: 24
91.211.243.0/24 maxlen: 24
185.4.120.0/24 maxlen: 24
185.4.121.0/24 maxlen: 24
185.4.122.0/24 maxlen: 24
185.4.123.0/24 maxlen: 24
194.113.24.0/24 maxlen: 24
195.54.172.0/24 maxlen: 24
195.54.173.0/24 maxlen: 24
2a02:7040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:80:c8:fa:4c:33:65:46:1f:ed:33:fa:f3:88:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23fcfbbc2196eb1c874de36f6c328f85d0111be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:19:21:c2:e9:d1:ae:0a:1b:47:28:4a:8d:
90:23:d5:13:09:77:a0:cb:bd:83:6c:e5:79:13:27:
f8:78:ac:df:2a:4e:ca:89:64:46:1d:cf:99:c2:72:
c8:a5:3e:a2:0b:99:7d:d5:0b:46:22:e1:83:50:1d:
8c:fb:d8:db:f0:16:59:2d:2f:cb:5a:6b:2d:f1:1c:
56:95:f8:c0:e3:76:72:56:49:5c:32:b9:c9:93:e0:
88:a7:59:5f:dd:78:fd:38:95:32:1b:99:f6:b9:44:
58:b6:8f:dd:8e:10:0a:c8:35:86:ab:ce:e8:7d:e2:
33:66:06:af:f9:62:d7:39:98:bc:91:5e:72:2e:08:
0a:64:ed:f4:35:0a:44:25:c6:44:2f:74:3d:03:bd:
7b:90:98:0a:33:c1:8a:6d:62:f8:23:98:0b:cf:8a:
21:cc:2e:39:89:59:68:17:3b:cf:cb:ba:be:7b:8f:
4d:18:db:bd:12:cf:0a:7e:d4:9c:e9:db:66:3a:6e:
96:97:4b:d4:e8:0d:2f:3a:20:3d:4a:7c:dd:1f:6d:
39:3c:3a:09:39:a3:72:6c:86:01:86:e9:c5:ef:e2:
ec:77:a5:50:60:08:91:dd:6f:cb:70:a4:3f:ab:50:
d1:d9:70:01:78:ae:24:23:f7:a3:99:48:ea:56:9c:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:FB:BC:21:96:EB:1C:87:4D:E3:6F:6C:32:8F:85:D0:11:1B:E3
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/I_z7vCGW6xyHTeNvbDKPhdARG-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.173.0/24
91.211.240.0/22
185.4.120.0/22
194.113.24.0/24
195.54.172.0/23
IPv6:
2a02:7040::/32
Signature Algorithm: sha256WithRSAEncryption
6c:f3:4e:83:ce:8d:0b:22:07:e7:61:88:31:47:8e:75:fb:3d:
78:8f:f1:87:eb:5f:86:a3:17:e5:23:fb:f8:2a:10:2b:86:67:
a0:13:11:0e:6a:9f:88:9c:aa:72:88:9c:82:c6:90:2d:f8:66:
1a:7f:f8:79:fb:7e:9a:59:41:4f:06:70:f6:0b:10:1c:9e:3f:
dd:51:82:52:f9:04:f7:28:ad:1e:25:04:7c:90:4e:05:7d:01:
36:19:ca:bb:80:cb:d6:08:51:ad:98:7c:e7:52:0d:d6:48:f0:
31:7f:a3:a8:6f:c6:97:fc:32:68:b8:18:54:73:3e:5c:5d:63:
e5:55:0e:d2:e0:d0:60:47:e9:5d:3f:6b:86:51:70:79:d7:54:
92:ae:ca:af:e2:38:9f:ce:c2:75:c5:db:e7:ee:b6:e9:d7:60:
3c:ef:71:a4:62:63:2d:30:6a:4d:cb:af:05:95:f3:ab:b2:23:
37:96:1c:dd:a2:a1:5a:90:8b:4a:7f:5b:ce:b4:1e:9b:f6:12:
0b:ff:d3:90:29:b0:ae:34:10:41:58:75:98:e2:33:0e:d3:c2:
72:a6:4b:9d:cd:62:75:2f:e6:c6:71:dd:1a:32:6d:c0:bb:02:
05:cc:f0:40:f9:6d:7b:20:83:70:88:05:de:c3:86:e7:60:a4:
63:9f:6b:a8
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQfjIDI+kwzZUYf7TP684gEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3
NWY0YTYwHhcNMjUwMTAxMDE0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2ZjZmJiYzIxOTZlYjFjODc0ZGUzNmY2YzMyOGY4NWQwMTExYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNMZIcLp0a4KG0coSo2QI9UTCXeg
y72DbOV5Eyf4eKzfKk7KiWRGHc+ZwnLIpT6iC5l91QtGIuGDUB2M+9jb8BZZLS/L
Wmst8RxWlfjA43ZyVklcMrnJk+CIp1lf3Xj9OJUyG5n2uURYto/djhAKyDWGq87o
feIzZgav+WLXOZi8kV5yLggKZO30NQpEJcZEL3Q9A717kJgKM8GKbWL4I5gLz4oh
zC45iVloFzvPy7q+e49NGNu9Es8KftSc6dtmOm6Wl0vU6A0vOiA9SnzdH205PDoJ
OaNybIYBhunF7+Lsd6VQYAiR3W/LcKQ/q1DR2XABeK4kI/ejmUjqVpxz6QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFCP8+7whlusch03jb2wyj4XQERvjMB8GA1UdIwQY
MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt
ZjJmNDI2ZWZlMDM5LzEvSV96N3ZDR1c2eHlIVGVOdmJES1BoZEFSRy1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5
LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALYCtAwQC
W9PwAwQCuQR4AwQAwnEYAwQBwzasMA0EAgACMAcDBQAqAnBAMA0GCSqGSIb3DQEB
CwUAA4IBAQBs806Dzo0LIgfnYYgxR451+z14j/GH61+GoxflI/v4KhArhmegExEO
ap+InKpyiJyCxpAt+GYaf/h5+36aWUFPBnD2CxAcnj/dUYJS+QT3KK0eJQR8kE4F
fQE2Gcq7gMvWCFGtmHznUg3WSPAxf6Oob8aX/DJouBhUcz5cXWPlVQ7S4NBgR+ld
P2uGUXB511SSrsqv4jifzsJ1xdvn7rbp12A873GkYmMtMGpNy68FlfOrsiM3lhzd
oqFakItKf1vOtB6b9hIL/9OQKbCuNBBBWHWY4jMO08JypkudzWJ1L+bGcd0aMm3A
uwIFzPBA+W17IINwiAXew4bnYKRjn2uo
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:23 2025 by rpki-client