Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/Rg68-pzrr6gfhWgypMVfmtoKlgk.roa
File: Rg68-pzrr6gfhWgypMVfmtoKlgk.roa (raw, json)
Hash identifier: XpZ2I1CGwPpi3ah3Tduh3EFNHBVZBFc6didgCWOzzG4=
Subject key identifier: 46:0E:BC:FA:9C:EB:AF:A8:1F:85:68:32:A4:C5:5F:9A:DA:0A:96:09
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 0194266A11AB7F0E3370FEED58939323D7F0
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/Rg68-pzrr6gfhWgypMVfmtoKlgk.roa
Signing time: Thu 02 Jan 2025 09:47:53 +0000
ROA not before: Thu 02 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48579
IP address blocks: 88.80.8.0/22 maxlen: 24
88.80.12.0/22 maxlen: 24
91.197.40.0/22 maxlen: 24
185.24.132.0/22 maxlen: 24
185.141.30.0/23 maxlen: 24
212.237.144.0/22 maxlen: 24
212.237.148.0/22 maxlen: 24
217.61.244.0/22 maxlen: 24
2a07:2180::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:11:ab:7f:0e:33:70:fe:ed:58:93:93:23:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Jan 2 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=460ebcfa9cebafa81f856832a4c55f9ada0a9609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:c3:2c:55:8d:3e:5a:b5:a3:5b:60:27:04:
06:2a:42:ac:b9:4c:d0:5e:0c:45:a1:d3:9e:3f:23:
7f:e6:7f:1c:3d:fa:25:0f:17:75:e2:d5:64:22:0b:
76:6f:6e:f8:47:ca:7d:79:28:bd:e4:83:b5:1b:c0:
59:36:b5:60:28:59:28:04:87:67:7b:f0:a9:44:bf:
a1:e5:17:79:e9:df:96:0d:f4:15:dd:c3:b1:da:1c:
0a:c2:04:8f:4e:85:66:1f:9f:f6:8b:92:2c:f5:2b:
44:53:15:73:4a:e4:c8:aa:7e:c1:2c:29:dc:58:f7:
c6:58:4a:98:ee:48:25:a7:f1:67:c4:b3:4c:67:07:
fc:51:bd:01:aa:88:4f:77:4f:bc:08:ca:f5:43:de:
4f:dc:6a:ce:54:51:58:bf:6e:5b:4b:7c:f6:32:ce:
4b:0f:a3:1d:f5:28:0b:13:aa:3a:c6:26:83:d6:5f:
3c:cc:47:70:34:cc:b2:b5:36:94:0d:68:30:f5:b4:
29:ef:b3:66:5a:ae:4c:70:a6:99:52:c7:8e:f2:68:
28:f1:28:aa:05:eb:6b:46:72:1d:54:10:c5:af:05:
5a:60:52:44:d7:50:08:78:d9:3e:84:f2:25:cb:52:
e6:9f:6c:4f:2d:d0:39:e7:37:6b:4d:cd:3d:ac:ef:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0E:BC:FA:9C:EB:AF:A8:1F:85:68:32:A4:C5:5F:9A:DA:0A:96:09
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/Rg68-pzrr6gfhWgypMVfmtoKlgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.8.0/21
91.197.40.0/22
185.24.132.0/22
185.141.30.0/23
212.237.144.0/21
217.61.244.0/22
IPv6:
2a07:2180::/32
Signature Algorithm: sha256WithRSAEncryption
00:80:1b:ab:a8:1d:b9:37:31:54:ab:e1:77:5b:92:b3:81:f7:
b6:07:b4:82:6a:4a:61:4a:ae:24:f0:0b:5f:be:7c:e6:e3:b6:
fa:63:d1:b2:63:63:91:00:f3:a1:3d:26:52:9b:5b:91:70:6e:
b2:58:18:d0:b4:b6:5b:20:6e:dd:9e:45:b0:b4:08:a6:16:92:
a2:24:f1:67:a4:07:60:86:b8:42:60:3a:de:65:ec:48:8e:ed:
95:ba:5f:9f:00:41:75:32:b6:36:70:ba:c2:70:03:20:f3:87:
9f:2d:31:c2:a3:f9:65:29:8c:b9:76:98:2f:f0:d4:8d:d6:77:
18:8a:34:e1:19:f4:63:0e:d3:d6:e9:eb:a3:68:37:37:3a:58:
e6:3a:c0:98:fd:ee:0b:ac:4c:22:10:cb:7e:17:d9:6a:55:a3:
52:cd:ab:00:eb:75:4b:56:3c:02:61:de:97:79:f0:4b:3b:32:
a2:1d:5a:b3:37:1f:27:d2:b6:6b:f0:ad:40:2a:3f:d4:11:b7:
89:ae:f9:f3:4f:56:29:75:18:4b:22:5c:ce:55:5e:95:de:d0:
60:0f:68:d3:d7:38:44:51:4a:e3:f5:18:ee:eb:eb:33:29:c2:
0f:f3:15:db:57:d9:9c:b0:6c:0e:9b:02:5e:18:7f:83:2d:41:
22:cc:72:60
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQmahGrfw4zcP7tWJOTI9fwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2I5N2ExZDIxZjYzN2I1NDkxMzBmMDg1N2E2ODFjYzdm
Njg4NGMwHhcNMjUwMTAyMDk0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjBlYmNmYTljZWJhZmE4MWY4NTY4MzJhNGM1NWY5YWRhMGE5NjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3TDLFWNPlq1o1tgJwQGKkKsuUzQ
XgxFodOePyN/5n8cPfolDxd14tVkIgt2b274R8p9eSi95IO1G8BZNrVgKFkoBIdn
e/CpRL+h5Rd56d+WDfQV3cOx2hwKwgSPToVmH5/2i5Is9StEUxVzSuTIqn7BLCnc
WPfGWEqY7kglp/FnxLNMZwf8Ub0BqohPd0+8CMr1Q95P3GrOVFFYv25bS3z2Ms5L
D6Md9SgLE6o6xiaD1l88zEdwNMyytTaUDWgw9bQp77NmWq5McKaZUseO8mgo8Siq
BetrRnIdVBDFrwVaYFJE11AIeNk+hPIly1Lmn2xPLdA55zdrTc09rO+nSQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFEYOvPqc66+oH4VoMqTFX5raCpYJMB8GA1UdIwQY
MBaAFLQ7l6HSH2N7VJEw8IV6aBzH9ohMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0Yjkt
MDQ2NGU5NDVmMWNjLzEvUmc2OC1wenJyNmdmaFdneXBNVmZtdG9LbGdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0YjktMDQ2NGU5NDVmMWNj
LzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDWFAIAwQC
W8UoAwQCuRiEAwQBuY0eAwQD1O2QAwQC2T30MA0EAgACMAcDBQAqByGAMA0GCSqG
SIb3DQEBCwUAA4IBAQAAgBurqB25NzFUq+F3W5Kzgfe2B7SCakphSq4k8Atfvnzm
47b6Y9GyY2ORAPOhPSZSm1uRcG6yWBjQtLZbIG7dnkWwtAimFpKiJPFnpAdghrhC
YDreZexIju2Vul+fAEF1MrY2cLrCcAMg84efLTHCo/llKYy5dpgv8NSN1ncYijTh
GfRjDtPW6eujaDc3OljmOsCY/e4LrEwiEMt+F9lqVaNSzasA63VLVjwCYd6XefBL
OzKiHVqzNx8n0rZr8K1AKj/UEbeJrvnzT1YpdRhLIlzOVV6V3tBgD2jT1zhEUUrj
9Rju6+szKcIP8xXbV9mcsGwOmwJeGH+DLUEizHJg
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:49 2025 by rpki-client