Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Li67xBQVNIJqIjqRYhyjYQvndPA.roa
File: Li67xBQVNIJqIjqRYhyjYQvndPA.roa (raw, json)
Hash identifier: JcKG5pnm68aCSwnqoyT1x6b29hPiSD73RiMzNJV/7Nk=
Subject key identifier: 2E:2E:BB:C4:14:15:34:82:6A:22:3A:91:62:1C:A3:61:0B:E7:74:F0
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194BCC4DFF989A313A087DA46322BC373D8
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Li67xBQVNIJqIjqRYhyjYQvndPA.roa
Signing time: Fri 31 Jan 2025 14:30:06 +0000
ROA not before: Fri 31 Jan 2025 14:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 185.86.6.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:c4:df:f9:89:a3:13:a0:87:da:46:32:2b:c3:73:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 31 14:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e2ebbc4141534826a223a91621ca3610be774f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5e:a0:73:2d:5a:15:76:b2:af:b1:1d:86:34:
ca:f9:a0:d7:aa:f6:8e:3e:72:98:8c:68:1d:6c:85:
c6:38:77:d2:9e:eb:06:45:cc:91:d1:78:a2:5a:cf:
d1:a6:c5:0a:b4:c9:28:2f:33:75:39:a0:09:1e:e4:
e7:37:8a:ba:d8:0a:57:a2:9b:74:4c:d9:1e:69:03:
8b:ac:10:db:3b:c8:5c:09:68:e5:73:b6:e6:2e:9b:
84:af:8b:09:ce:dc:7c:a4:25:99:49:07:e2:9d:50:
72:7a:0b:7b:68:26:a5:25:ca:fe:fd:a5:ea:be:0a:
dd:5c:43:6c:ff:e7:b7:de:7b:0f:0a:27:7b:64:b1:
ef:66:d3:c8:02:c5:bf:b1:3a:d9:8e:16:77:6d:2c:
68:62:30:7f:45:57:82:11:72:ff:f9:2d:6a:22:40:
9b:38:08:c6:6e:c6:8f:d0:15:27:69:01:6c:ec:a3:
e6:91:65:d3:41:d1:41:d5:02:29:6d:a8:a7:20:83:
7c:64:68:37:d9:55:ea:23:ca:92:41:a7:a8:ee:fc:
2b:c5:11:7f:0c:b8:a2:e3:54:fb:c1:ce:f8:ad:91:
e8:82:59:7b:84:51:bc:3e:92:f6:5c:17:56:2e:57:
59:72:8b:e0:18:42:f0:52:a7:5b:78:d7:05:34:82:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:BB:C4:14:15:34:82:6A:22:3A:91:62:1C:A3:61:0B:E7:74:F0
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Li67xBQVNIJqIjqRYhyjYQvndPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.6.0/24
185.254.28.0/23
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
85:80:cc:48:2a:d4:df:cf:47:59:da:50:11:7f:b0:3c:6e:b3:
6d:5e:f9:a5:25:09:ca:bb:18:d0:b7:ca:b8:04:ca:60:91:97:
0d:68:59:8a:7d:fc:1a:d9:a1:95:e1:ea:f1:dd:61:d6:3f:f0:
18:94:50:af:42:b0:27:89:af:91:f4:5f:13:47:e0:58:27:9c:
40:02:c1:0f:31:98:3b:b5:31:4d:15:bb:9a:3d:d2:b3:f2:ba:
e4:1f:aa:30:c7:aa:60:12:0e:02:d9:bb:e4:e6:a5:5e:3d:7f:
5c:c2:82:dc:8c:38:68:71:54:38:98:16:0a:1b:57:81:4a:70:
c1:3b:b2:1d:db:76:6b:74:bf:80:40:c9:17:3d:01:23:81:39:
2b:d0:59:cb:af:c3:95:22:a6:97:d6:f7:65:d7:6a:b8:cd:45:
64:6b:4e:ac:01:5e:88:61:7a:75:e5:31:84:9d:f6:15:95:75:
e4:cc:68:7f:3c:76:e4:34:59:f3:67:5d:e9:92:3f:8e:32:5f:
6e:f2:30:20:0b:6c:df:b2:b6:56:0e:d5:d8:fc:bd:fa:6e:fb:
75:88:63:65:be:24:cc:7a:80:36:ac:34:4d:3e:da:38:29:f2:
cb:dc:e6:8c:21:6c:6e:97:b3:48:65:3f:3a:e5:68:36:a5:48:
eb:c0:c2:22
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZS8xN/5iaMToIfaRjIrw3PYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMTMxMTQzMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTJlYmJjNDE0MTUzNDgyNmEyMjNhOTE2MjFjYTM2MTBiZTc3NGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V6gcy1aFXayr7EdhjTK+aDXqvaO
PnKYjGgdbIXGOHfSnusGRcyR0XiiWs/RpsUKtMkoLzN1OaAJHuTnN4q62ApXopt0
TNkeaQOLrBDbO8hcCWjlc7bmLpuEr4sJztx8pCWZSQfinVByegt7aCalJcr+/aXq
vgrdXENs/+e33nsPCid7ZLHvZtPIAsW/sTrZjhZ3bSxoYjB/RVeCEXL/+S1qIkCb
OAjGbsaP0BUnaQFs7KPmkWXTQdFB1QIpbainIIN8ZGg32VXqI8qSQaeo7vwrxRF/
DLii41T7wc74rZHogll7hFG8PpL2XBdWLldZcovgGELwUqdbeNcFNIIx2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC4uu8QUFTSCaiI6kWIco2EL53TwMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvTGk2N3hCUVZOSUpxSWpxUlloeWpZUXZuZFBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuVYGAwQB
uf4cAwQAwSOYMA0GCSqGSIb3DQEBCwUAA4IBAQCFgMxIKtTfz0dZ2lARf7A8brNt
XvmlJQnKuxjQt8q4BMpgkZcNaFmKffwa2aGV4erx3WHWP/AYlFCvQrAnia+R9F8T
R+BYJ5xAAsEPMZg7tTFNFbuaPdKz8rrkH6owx6pgEg4C2bvk5qVePX9cwoLcjDho
cVQ4mBYKG1eBSnDBO7Id23ZrdL+AQMkXPQEjgTkr0FnLr8OVIqaX1vdl12q4zUVk
a06sAV6IYXp15TGEnfYVlXXkzGh/PHbkNFnzZ13pkj+OMl9u8jAgC2zfsrZWDtXY
/L36bvt1iGNlviTMeoA2rDRNPto4KfLL3OaMIWxul7NIZT865Wg2pUjrwMIi
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:08:27 2025 by rpki-client