Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/1bVp4Rl7dfLEf764MqtnstVjY_4.roa
File: 1bVp4Rl7dfLEf764MqtnstVjY_4.roa (raw, json)
Hash identifier: c8I9DC3nX3h07blTJ4EGTj9Gi9bEckatcxL7UwEkUUk=
Subject key identifier: D5:B5:69:E1:19:7B:75:F2:C4:7F:BE:B8:32:AB:67:B2:D5:63:63:FE
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 01E008E4
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/1bVp4Rl7dfLEf764MqtnstVjY_4.roa
Signing time: Sat 01 Jan 2022 15:00:21 +0000
ROA not before: Sat 01 Jan 2022 15:00:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203144
IP address blocks: 185.28.172.0/23 maxlen: 24
185.28.174.0/23 maxlen: 24
2a00:a0a0:2::/48 maxlen: 48
2a00:a0a0::/48 maxlen: 48
2a00:a0a0:3::/48 maxlen: 48
2a00:a0a0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31459556 (0x1e008e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Jan 1 15:00:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5b569e1197b75f2c47fbeb832ab67b2d56363fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:8b:e3:ee:34:40:94:95:a2:0a:e2:25:86:
2e:fa:8f:32:02:a8:2a:cc:e4:2e:22:2e:a2:eb:e3:
96:0a:60:45:ec:f1:a5:28:bb:81:11:ac:0f:31:56:
43:0e:12:0d:91:8a:0e:df:14:d5:f6:3f:7c:a5:73:
74:1d:97:69:77:c5:a4:fc:16:c7:75:d6:48:6a:c1:
6f:69:c2:e3:83:21:84:c7:bb:a8:36:30:1a:da:b0:
e2:45:44:12:7a:de:1e:37:7e:7a:95:4a:40:03:17:
ee:dc:14:e7:66:53:a5:8b:1d:6c:07:2a:a2:b1:da:
01:60:d9:34:ab:70:2d:ab:7d:eb:f1:2c:60:94:71:
c4:53:f7:b7:c2:22:18:c0:f1:07:62:c8:c3:b9:4e:
46:36:bf:0b:f7:11:c8:b7:8f:bb:68:ec:4b:6a:6a:
fc:6f:eb:65:ce:9a:5b:1d:ec:3b:ce:1a:6b:72:7a:
5a:ce:7d:8d:01:55:ad:1b:06:e3:25:db:7c:a1:32:
a6:d7:aa:2a:e7:17:19:99:1a:3c:55:f8:17:1d:69:
af:63:16:64:9d:8e:d8:b1:b5:e6:4a:37:4e:19:27:
52:bf:fb:1b:5c:d7:79:33:cb:ad:e0:2d:fb:ce:17:
ea:61:e8:0e:03:82:2c:ce:59:c9:6a:93:e8:c6:5c:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:69:E1:19:7B:75:F2:C4:7F:BE:B8:32:AB:67:B2:D5:63:63:FE
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/1bVp4Rl7dfLEf764MqtnstVjY_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.172.0/22
IPv6:
2a00:a0a0::/46
Signature Algorithm: sha256WithRSAEncryption
27:25:5b:e3:dc:e4:ec:53:3f:21:f7:63:8d:c8:bc:9f:55:5a:
cc:9d:36:12:94:26:e3:1d:ab:a0:5f:02:46:e5:23:25:a9:29:
32:e0:a1:98:2c:2d:cd:a2:2d:1e:dd:fc:97:a4:0d:b1:1c:79:
5f:e9:b6:71:67:53:9f:98:c4:f1:f3:12:23:19:0c:e9:d6:7f:
4e:d0:22:a2:c4:63:57:9c:8d:96:6d:92:4f:cd:4e:99:d0:f8:
ca:6c:f0:d3:ad:42:95:47:78:2f:6f:92:9e:82:a5:0d:7d:1d:
8d:e7:bf:6b:f1:18:1e:e9:0a:af:5d:6b:a5:eb:c6:15:df:04:
e8:ea:46:5b:f7:09:5a:bd:54:6f:2c:3b:3f:5f:9d:a8:a3:d4:
3b:90:7a:8e:44:df:0b:41:b3:ce:e6:45:eb:d7:e9:6c:af:2b:
0e:cc:e1:ae:c6:91:fd:6b:14:13:e6:4e:97:a8:d9:5c:6f:82:
64:a1:b3:03:6c:54:95:36:b3:74:6e:77:db:28:94:94:4e:5b:
1d:85:33:58:70:cb:18:b4:ed:a5:2e:ed:35:0c:1e:e0:da:40:
cf:e2:ad:83:f7:33:d1:56:97:3b:41:45:dd:b4:6c:0f:e0:43:
b0:47:ce:c0:88:0d:52:cd:f7:81:67:ab:57:fe:cf:34:38:a5:
11:10:2e:6c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEAeAI5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTdiNjA4ZmNjZjMyMzBlNDQ1Yzk4M2Y5ZTM2YjUwZTExZjcyY2YyMB4XDTIyMDEw
MTE1MDAyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDViNTY5ZTExOTdi
NzVmMmM0N2ZiZWI4MzJhYjY3YjJkNTYzNjNmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ5Ri+PuNECUlaIK4iWGLvqPMgKoKszkLiIuouvjlgpgRezx
pSi7gRGsDzFWQw4SDZGKDt8U1fY/fKVzdB2XaXfFpPwWx3XWSGrBb2nC44MhhMe7
qDYwGtqw4kVEEnreHjd+epVKQAMX7twU52ZTpYsdbAcqorHaAWDZNKtwLat96/Es
YJRxxFP3t8IiGMDxB2LIw7lORja/C/cRyLePu2jsS2pq/G/rZc6aWx3sO84aa3J6
Ws59jQFVrRsG4yXbfKEypteqKucXGZkaPFX4Fx1pr2MWZJ2O2LG15ko3ThknUr/7
G1zXeTPLreAt+84X6mHoDgOCLM5ZyWqT6MZcXy8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTVtWnhGXt18sR/vrgyq2ey1WNj/jAfBgNVHSMEGDAWgBSle2CPzPMjDkRc
mD+eNrUOEfcs8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYdGdqOHp6SXc1RVhKZ19uamExRGhIM0xQSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvNjIxNjI5LWVkM2QtNDlhZi1iZjM5LTg1YTM3Y2YxYjJlYS8x
LzFiVnA0Umw3ZGZMRWY3NjRNcXRuc3RWallfNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
NjIxNjI5LWVkM2QtNDlhZi1iZjM5LTg1YTM3Y2YxYjJlYS8xL3BYdGdqOHp6SXc1
RVhKZ19uamExRGhIM0xQSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEArkcrDAPBAIAAjAJAwcCKgCgoAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAnJVvj3OTsUz8h92ONyLyfVVrMnTYSlCbjHaug
XwJG5SMlqSky4KGYLC3Noi0e3fyXpA2xHHlf6bZxZ1OfmMTx8xIjGQzp1n9O0CKi
xGNXnI2WbZJPzU6Z0PjKbPDTrUKVR3gvb5KegqUNfR2N579r8Rge6QqvXWul68YV
3wTo6kZb9wlavVRvLDs/X52oo9Q7kHqORN8LQbPO5kXr1+lsrysOzOGuxpH9axQT
5k6XqNlcb4JkobMDbFSVNrN0bnfbKJSUTlsdhTNYcMsYtO2lLu01DB7g2kDP4q2D
9zPRVpc7QUXdtGwP4EOwR87AiA1SzfeBZ6tX/s80OKUREC5s
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:22:42 2025 by rpki-client