Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cbHbwJmIogC6tnK-Vvps1TrEKFY.roa
File: cbHbwJmIogC6tnK-Vvps1TrEKFY.roa (raw, json)
Hash identifier: 7bgS71lEpX9738OE+Zkglbw2D6SDEgsmUJoaGhmN0Ew=
Subject key identifier: 71:B1:DB:C0:99:88:A2:00:BA:B6:72:BE:56:FA:6C:D5:3A:C4:28:56
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B5702E0AB1BFF6BEE8EE882A964E8F
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cbHbwJmIogC6tnK-Vvps1TrEKFY.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 79.141.32.0/20 maxlen: 20
82.98.192.0/21 maxlen: 21
82.98.232.0/21 maxlen: 21
82.98.240.0/20 maxlen: 20
94.31.0.0/18 maxlen: 18
193.28.62.0/23 maxlen: 23
193.28.104.0/23 maxlen: 23
193.160.88.0/22 maxlen: 22
213.152.224.0/19 maxlen: 19
213.161.64.0/19 maxlen: 19
2a00:16f8::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:70:2e:0a:b1:bf:f6:be:e8:ee:88:2a:96:4e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71b1dbc09988a200bab672be56fa6cd53ac42856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:57:30:74:15:84:60:50:2a:53:3d:2d:4b:
9e:38:20:db:73:b0:09:be:66:3c:c6:4c:b1:ce:33:
12:5d:bf:bd:86:28:4d:a4:34:03:ae:f1:df:70:1b:
18:0c:92:72:04:47:cb:62:df:53:3e:68:5b:f7:36:
86:63:0e:e8:04:29:25:5e:f2:58:a3:ec:1d:03:27:
78:19:42:73:6c:c2:64:76:97:01:c5:a3:af:6e:04:
11:78:a2:01:e4:97:20:1e:9a:d8:78:c4:f1:c3:23:
3b:e2:18:70:04:b9:29:a1:9d:33:d8:d3:db:6f:af:
f2:7d:e7:83:3a:24:73:d5:23:3c:3d:49:96:b6:52:
24:45:e4:94:74:dc:70:64:d1:d5:2c:fa:dd:f2:5a:
f6:4d:93:a8:24:10:30:ee:42:6a:6c:1c:56:47:ee:
a5:33:9b:d3:a6:54:0d:aa:05:b2:2c:1b:26:87:a3:
86:00:b1:15:6c:37:92:de:d3:8c:32:15:9e:05:f9:
80:f6:06:18:f3:58:70:16:2c:5f:dd:bf:12:45:0c:
43:38:47:9f:09:14:e6:a8:1c:39:81:16:01:ed:67:
db:ee:ef:85:20:db:91:4f:e5:c2:08:67:af:35:ff:
0b:bd:6e:75:17:59:1a:d5:74:db:15:5d:2b:cc:5b:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:DB:C0:99:88:A2:00:BA:B6:72:BE:56:FA:6C:D5:3A:C4:28:56
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cbHbwJmIogC6tnK-Vvps1TrEKFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.32.0/20
82.98.192.0/21
82.98.232.0-82.98.255.255
94.31.0.0/18
193.28.62.0/23
193.28.104.0/23
193.160.88.0/22
213.152.224.0/19
213.161.64.0/19
IPv6:
2a00:16f8::/29
Signature Algorithm: sha256WithRSAEncryption
c6:a5:0e:25:0a:37:d9:ab:8b:57:75:68:43:b7:ba:8d:b7:e1:
c1:51:80:b3:9a:96:e2:f2:44:ba:d6:33:dd:48:d6:59:f2:98:
a1:50:1d:48:71:f3:ae:3d:fa:66:b4:df:a8:e5:a7:ac:09:f2:
a7:cd:d4:60:a4:14:dd:3d:18:81:43:38:13:0b:72:b4:8a:76:
59:e8:29:97:44:18:53:41:5d:e9:96:68:11:92:b8:7e:5d:fa:
fa:96:e7:85:c1:33:f4:8b:77:db:de:2d:96:3e:3b:95:88:97:
96:a7:69:a6:36:37:e1:d2:dc:fa:c9:20:37:b6:bf:42:d3:cf:
1c:b3:49:85:5c:13:b3:1c:a3:7c:a5:63:2c:ac:9d:df:f5:84:
ac:55:45:db:a0:4f:3f:06:7c:51:e7:88:d1:31:ca:c7:ec:91:
74:27:57:76:31:94:b3:5b:0a:bd:ee:ea:fe:ef:a1:46:72:eb:
99:5a:f1:ea:8a:0a:78:fe:35:41:aa:1a:2b:63:36:45:6f:80:
0b:e4:58:f3:d1:45:27:95:98:0c:86:fd:35:e9:eb:2f:f8:c1:
41:06:32:08:4a:e1:da:72:b8:16:fb:98:c9:03:6e:f6:05:ce:
60:eb:b7:a2:c4:81:47:6d:c1:c2:40:78:47:67:61:e1:73:e3:
2d:b0:3a:66
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZQntXAuCrG/9r7o7ogqlk6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjUwMTAyMTU0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWIxZGJjMDk5ODhhMjAwYmFiNjcyYmU1NmZhNmNkNTNhYzQyODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyBXMHQVhGBQKlM9LUueOCDbc7AJ
vmY8xkyxzjMSXb+9hihNpDQDrvHfcBsYDJJyBEfLYt9TPmhb9zaGYw7oBCklXvJY
o+wdAyd4GUJzbMJkdpcBxaOvbgQReKIB5JcgHprYeMTxwyM74hhwBLkpoZ0z2NPb
b6/yfeeDOiRz1SM8PUmWtlIkReSUdNxwZNHVLPrd8lr2TZOoJBAw7kJqbBxWR+6l
M5vTplQNqgWyLBsmh6OGALEVbDeS3tOMMhWeBfmA9gYY81hwFixf3b8SRQxDOEef
CRTmqBw5gRYB7Wfb7u+FINuRT+XCCGevNf8LvW51F1ka1XTbFV0rzFtL8wIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFHGx28CZiKIAurZyvlb6bNU6xChWMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvY2JIYndKbUlvZ0M2dG5LLVZ2cHMxVHJFS0ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBDBAIAATA9AwQET40gAwQD
UmLAMAsDBANSYugDAwBSYgMEBl4fAAMEAcEcPgMEAcEcaAMEAsGgWAMEBdWY4AME
BdWhQDANBAIAAjAHAwUDKgAW+DANBgkqhkiG9w0BAQsFAAOCAQEAxqUOJQo32auL
V3VoQ7e6jbfhwVGAs5qW4vJEutYz3UjWWfKYoVAdSHHzrj36ZrTfqOWnrAnyp83U
YKQU3T0YgUM4EwtytIp2Wegpl0QYU0Fd6ZZoEZK4fl36+pbnhcEz9It3294tlj47
lYiXlqdppjY34dLc+skgN7a/QtPPHLNJhVwTsxyjfKVjLKyd3/WErFVF26BPPwZ8
UeeI0THKx+yRdCdXdjGUs1sKve7q/u+hRnLrmVrx6ooKeP41QaoaK2M2RW+AC+RY
89FFJ5WYDIb9NenrL/jBQQYyCErh2nK4FvuYyQNu9gXOYOu3osSBR23BwkB4R2dh
4XPjLbA6Zg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:08 2025 by rpki-client