Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa
File: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (raw, json)
Hash identifier: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=
Subject key identifier: FA:C9:34:E1:22:4A:68:9E:A0:D5:8F:64:84:4A:6C:2C:56:AC:DC:A9
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 019420D66537C95915CD02B7836339867748
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.97.224.0/24 maxlen: 24
185.97.225.0/24 maxlen: 24
185.97.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:65:37:c9:59:15:cd:02:b7:83:63:39:86:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fac934e1224a689ea0d58f64844a6c2c56acdca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:d0:50:72:c8:71:96:9b:e3:f3:16:e5:4d:
0a:91:cd:e5:c0:83:d3:eb:89:4d:26:18:cd:40:66:
bb:50:49:83:28:03:f3:cf:60:2f:ad:80:b8:be:c4:
ee:37:0c:fa:fa:10:6c:86:78:d0:43:47:2f:c1:e9:
c4:93:05:d8:03:68:2a:b8:c3:6c:8b:41:c3:6e:3e:
45:c8:fd:34:03:8c:c9:87:5e:d9:d4:c4:fe:45:c6:
cb:6d:89:f8:2d:d8:23:cc:02:7d:ac:a5:24:1a:46:
40:93:24:18:96:f2:f4:42:23:60:79:b2:5d:bd:93:
ac:11:a5:a7:d4:c7:9e:c3:03:78:70:03:cc:c7:b7:
bf:b4:04:39:d9:04:c9:11:93:10:e3:fd:6c:0b:26:
ae:d6:d1:54:8b:73:03:db:b1:53:95:0a:6b:e4:fe:
9d:d5:40:0f:fa:96:6d:cf:4c:f4:9e:7d:98:9c:e2:
90:60:6c:dc:93:d4:cb:af:44:0f:b5:da:f9:ad:59:
c7:34:97:7d:e7:e2:59:5a:ba:07:ae:8a:b5:6c:eb:
2b:a3:75:c7:c8:72:9e:fa:27:e2:89:58:e8:b7:82:
1b:4d:c8:80:20:0d:1e:dd:19:a8:54:6f:8a:f5:0c:
98:62:dc:56:27:34:41:3c:63:e5:e8:b6:24:2a:40:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:34:E1:22:4A:68:9E:A0:D5:8F:64:84:4A:6C:2C:56:AC:DC:A9
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.224.0-185.97.226.255
Signature Algorithm: sha256WithRSAEncryption
77:92:94:0a:71:96:2b:b3:df:5a:a0:90:2f:33:f9:42:63:17:
d5:d7:da:78:c8:95:8d:e7:65:34:09:a5:3a:cd:ae:20:a9:2c:
d6:54:5b:56:de:9f:4c:22:bb:ca:1b:34:2c:04:10:11:47:ee:
52:32:e3:3b:b5:18:e9:80:d6:31:45:fc:65:2a:2d:ef:7c:a0:
51:ab:c2:a5:8c:40:f1:5f:bb:27:12:fb:0a:38:6e:9b:a7:44:
ad:c4:c6:9f:23:96:a8:a0:9f:19:81:be:f5:4c:5f:68:52:73:
02:8a:7c:7b:d0:a2:5b:05:97:67:26:c4:f9:88:c0:ae:60:8e:
06:12:90:7e:09:8a:81:43:52:ba:ef:81:ca:90:7b:df:7d:53:
50:9e:1c:90:c6:36:07:31:42:b5:c8:48:f2:13:8c:1f:16:58:
41:e3:42:4e:9d:52:4b:1e:b3:0e:42:7d:3f:4f:39:77:df:15:
d7:d5:28:f9:66:86:f2:c5:17:0a:97:ad:41:db:dd:c1:6a:1e:
d6:ef:c1:10:fb:01:20:a1:da:2b:d9:d5:8a:fe:83:e9:a8:2e:
69:64:af:6b:71:d7:7b:f8:4a:9a:be:a0:d2:0b:f5:9e:aa:f9:
43:3e:de:54:c5:b8:f7:6a:68:2c:82:3e:04:26:16:e4:50:1c:
6e:08:d4:0c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAZQg1mU3yVkVzQK3g2M5hndIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj
OGJjZDUwHhcNMjUwMTAxMDc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWM5MzRlMTIyNGE2ODllYTBkNThmNjQ4NDRhNmMyYzU2YWNkY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufjQUHLIcZab4/MW5U0Kkc3lwIPT
64lNJhjNQGa7UEmDKAPzz2AvrYC4vsTuNwz6+hBshnjQQ0cvwenEkwXYA2gquMNs
i0HDbj5FyP00A4zJh17Z1MT+RcbLbYn4LdgjzAJ9rKUkGkZAkyQYlvL0QiNgebJd
vZOsEaWn1MeewwN4cAPMx7e/tAQ52QTJEZMQ4/1sCyau1tFUi3MD27FTlQpr5P6d
1UAP+pZtz0z0nn2YnOKQYGzck9TLr0QPtdr5rVnHNJd95+JZWroHroq1bOsro3XH
yHKe+ifiiVjot4IbTciAIA0e3RmoVG+K9QyYYtxWJzRBPGPl6LYkKkC3mQIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFPrJNOEiSmieoNWPZIRKbCxWrNypMB8GA1UdIwQY
MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt
NGJlZjQzZDNmYjE3LzEvMS1zazA0U0pLYUo2ZzFZOWtoRXBzTEZhczNLay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTIvMDEwMTYxLWI4NDAtNDQ5Ny1hZmJlLTRiZWY0M2QzZmIx
Ny8xL0RaTUMxVWJnYU1MOWRuZloxU0FLM1RiSXZOVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQFuWHg
AwQAuWHiMA0GCSqGSIb3DQEBCwUAA4IBAQB3kpQKcZYrs99aoJAvM/lCYxfV19p4
yJWN52U0CaU6za4gqSzWVFtW3p9MIrvKGzQsBBARR+5SMuM7tRjpgNYxRfxlKi3v
fKBRq8KljEDxX7snEvsKOG6bp0StxMafI5aooJ8Zgb71TF9oUnMCinx70KJbBZdn
JsT5iMCuYI4GEpB+CYqBQ1K674HKkHvffVNQnhyQxjYHMUK1yEjyE4wfFlhB40JO
nVJLHrMOQn0/Tzl33xXX1Sj5ZobyxRcKl61B293Bah7W78EQ+wEgodor2dWK/oPp
qC5pZK9rcdd7+EqavqDSC/WeqvlDPt5Uxbj3amgsgj4EJhbkUBxuCNQM
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:26 2025 by rpki-client