Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/L4h95g97hPav_sLi8oU5ekfgF0c.roa
File: L4h95g97hPav_sLi8oU5ekfgF0c.roa (raw, json)
Hash identifier: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=
Subject key identifier: 2F:88:7D:E6:0F:7B:84:F6:AF:FE:C2:E2:F2:85:39:7A:47:E0:17:47
Certificate issuer: /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial: 01942143B69959AF8AF2F361CF5A9E078CFD
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/L4h95g97hPav_sLi8oU5ekfgF0c.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205867
IP address blocks: 185.55.234.0/24 maxlen: 24
2a00:b404::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b6:99:59:af:8a:f2:f3:61:cf:5a:9e:07:8c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f887de60f7b84f6affec2e2f285397a47e01747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:19:e4:b5:88:6b:83:94:d1:84:69:c6:16:
15:86:dd:34:b1:0b:9e:d7:c9:06:27:4a:ce:ee:d7:
60:1b:19:4d:53:e8:e7:57:72:93:4f:ef:2b:34:d9:
46:63:69:09:f0:61:fd:d3:86:73:d7:d4:d6:73:a1:
5f:d9:90:76:84:75:b9:42:f7:b7:d9:7f:54:a0:91:
7b:17:34:44:58:b6:a9:ef:ca:0c:22:96:b3:e9:ef:
4f:15:ff:22:76:fb:7b:94:d5:f4:be:d2:83:01:85:
61:7b:e3:a5:0b:1f:85:53:a8:73:e1:f6:9b:d0:5a:
4e:55:b8:f7:47:21:06:ef:df:d2:9d:46:90:6f:f5:
39:7d:f0:e8:77:ad:3a:d4:5a:88:06:8c:f4:42:71:
5a:d3:e8:82:86:4a:3f:ed:5e:f1:c7:15:fb:ad:3b:
b3:9f:05:63:eb:79:6d:3b:11:a5:fc:8f:b1:48:2a:
50:0b:85:91:18:4d:b0:d7:c4:42:d8:bc:ba:75:70:
cb:4d:6e:59:93:c9:b4:07:c8:ba:00:f9:7f:49:f3:
33:ed:8d:24:b5:e0:00:fa:32:64:42:f4:fe:3c:f3:
b2:00:16:66:30:20:18:67:56:c3:94:00:4e:e3:d8:
a3:8e:ca:68:bd:07:e5:16:62:c7:7c:72:a4:11:0a:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:88:7D:E6:0F:7B:84:F6:AF:FE:C2:E2:F2:85:39:7A:47:E0:17:47
X509v3 Authority Key Identifier:
keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/L4h95g97hPav_sLi8oU5ekfgF0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.234.0/24
IPv6:
2a00:b404::/32
Signature Algorithm: sha256WithRSAEncryption
33:77:29:22:7b:ca:cc:0c:49:46:9c:6d:76:e7:8c:ba:92:9a:
5f:e9:3e:16:60:d9:08:9b:6b:4f:a6:0f:c7:1b:35:70:89:4e:
cc:de:60:2a:12:14:a3:5e:88:8e:9f:e5:e2:7e:17:aa:ea:c5:
3b:5e:fa:d5:de:af:21:6b:b5:f8:2c:db:1f:db:ca:1e:e9:64:
05:f5:ef:f3:11:ea:02:e7:b3:fd:73:8c:0d:c6:63:01:4e:ca:
e5:d3:55:57:40:9e:e9:69:11:53:a9:5a:da:24:55:ec:83:2d:
dd:88:aa:48:3e:59:d3:18:4b:63:3b:80:b3:6b:59:45:f3:a6:
12:ca:f6:e8:bd:b4:3c:fe:fe:9f:0e:8a:c7:2d:b5:41:34:c1:
cf:d7:7c:ab:5c:20:8e:90:45:a9:17:7a:64:24:c5:03:69:f8:
4e:f1:91:39:01:a2:83:e5:ef:9c:5a:fd:d2:4f:1c:2f:82:b5:
3b:0d:65:0c:6b:d7:89:c8:cc:b7:f6:38:2c:58:87:b7:00:5f:
a0:42:0b:4e:cb:a1:3a:04:51:c6:b8:0d:98:b9:7d:f9:cc:fc:
3a:77:84:99:21:0a:9b:d4:0f:2d:70:1f:a2:f2:f8:3a:b3:2b:
61:34:51:01:36:56:aa:8e:a1:ba:e0:4f:89:d2:a5:39:29:78:
2b:87:e2:71
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhQ7aZWa+K8vNhz1qeB4z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGQyZjY0YzMzNzQ2NWVkMzhkYTVmN2NjNDU4NGRmODdk
NGE3NDQwHhcNMjUwMTAxMDk0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjg4N2RlNjBmN2I4NGY2YWZmZWMyZTJmMjg1Mzk3YTQ3ZTAxNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA330Z5LWIa4OU0YRpxhYVht00sQue
18kGJ0rO7tdgGxlNU+jnV3KTT+8rNNlGY2kJ8GH904Zz19TWc6Ff2ZB2hHW5Qve3
2X9UoJF7FzREWLap78oMIpaz6e9PFf8idvt7lNX0vtKDAYVhe+OlCx+FU6hz4fab
0FpOVbj3RyEG79/SnUaQb/U5ffDod6061FqIBoz0QnFa0+iChko/7V7xxxX7rTuz
nwVj63ltOxGl/I+xSCpQC4WRGE2w18RC2Ly6dXDLTW5Zk8m0B8i6APl/SfMz7Y0k
teAA+jJkQvT+PPOyABZmMCAYZ1bDlABO49ijjspovQflFmLHfHKkEQpOBQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFC+IfeYPe4T2r/7C4vKFOXpH4BdHMB8GA1UdIwQY
MBaAFGaNL2TDN0Ze042l98xFhN+H1KdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm8wdlpNTTNSbDdUamFYM3pFV0UzNGZVcDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MjhiMGYtODBlOC00MjdiLTk3MWQt
MzhiYmNmYWVlNmNlLzEvTDRoOTVnOTdoUGF2X3NMaThvVTVla2ZnRjBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84MjhiMGYtODBlOC00MjdiLTk3MWQtMzhiYmNmYWVlNmNl
LzEvWm8wdlpNTTNSbDdUamFYM3pFV0UzNGZVcDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuTfqMA0E
AgACMAcDBQAqALQEMA0GCSqGSIb3DQEBCwUAA4IBAQAzdykie8rMDElGnG1254y6
kppf6T4WYNkIm2tPpg/HGzVwiU7M3mAqEhSjXoiOn+Xifheq6sU7XvrV3q8ha7X4
LNsf28oe6WQF9e/zEeoC57P9c4wNxmMBTsrl01VXQJ7paRFTqVraJFXsgy3diKpI
PlnTGEtjO4Cza1lF86YSyvbovbQ8/v6fDorHLbVBNMHP13yrXCCOkEWpF3pkJMUD
afhO8ZE5AaKD5e+cWv3STxwvgrU7DWUMa9eJyMy39jgsWIe3AF+gQgtOy6E6BFHG
uA2YuX35zPw6d4SZIQqb1A8tcB+i8vg6sythNFEBNlaqjqG64E+J0qU5KXgrh+Jx
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:47 2025 by rpki-client