Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/95tOWT20XUkoFBLGQGdVcwDGE0s.roa
File: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (raw, json)
Hash identifier: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=
Subject key identifier: F7:9B:4E:59:3D:B4:5D:49:28:14:12:C6:40:67:55:73:00:C6:13:4B
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 0194221F75021515E329D78CF0806C73B764
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/95tOWT20XUkoFBLGQGdVcwDGE0s.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198651
IP address blocks: 185.207.33.0/24 maxlen: 24
185.207.34.0/24 maxlen: 24
185.207.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:75:02:15:15:e3:29:d7:8c:f0:80:6c:73:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f79b4e593db45d49281412c64067557300c6134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:b0:76:72:a5:d5:f7:2c:09:86:7d:6a:c6:
a0:2b:90:5d:20:1e:2f:ca:b2:81:f5:0d:d5:fe:77:
75:7f:e4:4d:21:6b:f8:72:c1:45:30:74:b2:b0:6d:
27:c9:f0:2d:71:5c:83:fa:56:dc:d9:98:2c:f3:31:
d9:9f:ac:ac:dc:3f:54:1a:cb:d0:4c:6f:4f:74:2e:
8b:ce:95:11:1c:79:5f:3f:e4:9d:34:07:c7:91:60:
2f:9b:8e:30:42:52:71:e0:78:c3:2b:a2:17:e1:1d:
2a:63:cd:61:81:6c:e8:f5:28:c4:cb:00:bc:cb:f9:
52:85:ab:8f:68:e9:a1:c2:7a:85:c9:ff:8a:88:96:
ec:cd:6d:2f:86:c0:62:67:6b:31:2f:a2:1a:fa:20:
b1:31:17:cd:d1:e4:41:07:e1:51:0d:ec:f4:e0:04:
77:d6:fb:fd:6f:6e:e4:0b:17:f7:8d:a2:19:fa:f2:
70:cd:41:d5:90:73:99:0f:0e:f5:e2:02:f4:38:76:
23:fa:9a:e5:46:42:5e:5c:66:5b:f1:fa:a8:24:e6:
5d:bb:25:c9:72:d0:99:a0:f7:99:0a:63:a1:d3:f1:
bf:ea:8f:b6:b6:56:5b:c4:a8:e6:2d:24:10:7a:2a:
77:c8:31:68:53:51:50:15:ed:1d:00:05:15:87:e3:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:4E:59:3D:B4:5D:49:28:14:12:C6:40:67:55:73:00:C6:13:4B
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/95tOWT20XUkoFBLGQGdVcwDGE0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.33.0-185.207.35.255
Signature Algorithm: sha256WithRSAEncryption
27:9b:98:11:06:4c:43:69:f7:ff:dd:8c:53:ac:46:72:b1:35:
1b:75:2b:50:70:50:2c:15:f4:6b:cc:b5:7d:54:b7:0b:5a:d8:
01:10:8f:be:8d:e6:bf:ef:06:39:8b:27:9d:9e:9e:5d:68:16:
17:37:eb:08:2e:d9:33:58:49:ec:7a:27:4e:31:c7:43:c0:36:
45:7e:4e:a9:e0:79:b7:2e:95:db:e1:60:6c:9a:15:0f:5c:b5:
6f:b7:c8:b0:0d:ef:1a:9f:65:b4:5c:f2:8d:63:eb:a0:81:87:
70:2a:6c:c8:b0:22:07:7a:b7:d1:b2:42:8e:a5:73:bb:41:42:
5b:a4:39:ec:dc:02:d4:ed:59:3c:e8:45:70:69:00:05:d2:8f:
81:87:d2:b7:49:fa:43:f8:19:f9:68:66:5c:2b:5a:ac:81:08:
39:26:80:21:01:2a:ab:df:eb:7b:d0:36:70:0f:23:2e:cb:cc:
d5:ea:18:b5:d2:14:21:0e:77:20:bd:66:5b:48:7f:a0:2b:dc:
24:63:6e:a2:ac:91:a0:31:6a:7d:48:11:b2:d7:6d:41:e7:1d:
66:b9:c0:33:09:f9:ef:b3:05:2a:47:46:f6:ab:21:9a:21:c4:
ef:c3:58:45:11:61:7e:50:93:91:5f:a7:9c:4b:1d:a6:1a:0d:
2a:31:c1:f3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQiH3UCFRXjKdeM8IBsc7dkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw
MjhlY2QwHhcNMjUwMTAxMTM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzliNGU1OTNkYjQ1ZDQ5MjgxNDEyYzY0MDY3NTU3MzAwYzYxMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF+wdnKl1fcsCYZ9asagK5BdIB4v
yrKB9Q3V/nd1f+RNIWv4csFFMHSysG0nyfAtcVyD+lbc2Zgs8zHZn6ys3D9UGsvQ
TG9PdC6LzpURHHlfP+SdNAfHkWAvm44wQlJx4HjDK6IX4R0qY81hgWzo9SjEywC8
y/lShauPaOmhwnqFyf+KiJbszW0vhsBiZ2sxL6Ia+iCxMRfN0eRBB+FRDez04AR3
1vv9b27kCxf3jaIZ+vJwzUHVkHOZDw714gL0OHYj+prlRkJeXGZb8fqoJOZduyXJ
ctCZoPeZCmOh0/G/6o+2tlZbxKjmLSQQeip3yDFoU1FQFe0dAAUVh+ND1QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPebTlk9tF1JKBQSxkBnVXMAxhNLMB8GA1UdIwQY
MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt
NTJjYWQ2Njc1ZmM2LzEvOTV0T1dUMjBYVWtvRkJMR1FHZFZjd0RHRTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2
LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5zyED
BAK5zyAwDQYJKoZIhvcNAQELBQADggEBACebmBEGTENp9//djFOsRnKxNRt1K1Bw
UCwV9GvMtX1Utwta2AEQj76N5r/vBjmLJ52enl1oFhc36wgu2TNYSex6J04xx0PA
NkV+TqngebculdvhYGyaFQ9ctW+3yLAN7xqfZbRc8o1j66CBh3AqbMiwIgd6t9Gy
Qo6lc7tBQlukOezcAtTtWTzoRXBpAAXSj4GH0rdJ+kP4GfloZlwrWqyBCDkmgCEB
Kqvf63vQNnAPIy7LzNXqGLXSFCEOdyC9ZltIf6Ar3CRjbqKskaAxan1IEbLXbUHn
HWa5wDMJ+e+zBSpHRvarIZohxO/DWEURYX5Qk5Ffp5xLHaYaDSoxwfM=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:24 2025 by rpki-client