Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/5R5QxNHPxmr20xOEdihdn49Gqm0.roa
File: 5R5QxNHPxmr20xOEdihdn49Gqm0.roa (raw, json)
Hash identifier: 2rt++DxlRXOs+zCMhZPZtbhcL9D247iOIf522F37NiI=
Subject key identifier: E5:1E:50:C4:D1:CF:C6:6A:F6:D3:13:84:76:28:5D:9F:8F:46:AA:6D
Certificate issuer: /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial: 019422FBDEE16732A4FE7E324C57AB73EFE0
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/5R5QxNHPxmr20xOEdihdn49Gqm0.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205645
IP address blocks: 185.210.244.0/22 maxlen: 22
193.30.8.0/22 maxlen: 22
2a0a:3b80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:de:e1:67:32:a4:fe:7e:32:4c:57:ab:73:ef:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e51e50c4d1cfc66af6d3138476285d9f8f46aa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:6c:b3:3f:a4:45:0a:af:b2:9e:a9:19:e0:
02:b7:2a:9d:19:8c:37:75:5f:7b:34:57:b8:d1:fd:
5d:04:5d:6d:b5:f4:9b:f1:db:aa:06:ce:f8:27:cd:
9e:17:55:08:7f:04:1b:3b:4f:40:55:c0:05:74:7b:
be:36:a1:cb:d3:45:b4:fb:98:a8:98:50:ba:d1:3e:
0c:88:dd:4e:ed:84:a4:0d:e1:8c:2a:40:b1:b3:cc:
62:08:71:4f:85:db:1b:a5:31:38:c7:86:fc:02:d0:
07:86:82:d0:9a:93:f0:7c:c5:fd:cf:22:5c:28:a4:
b8:ae:8d:aa:25:d9:91:bd:18:e6:d5:75:1d:b9:93:
76:12:66:c4:7f:0b:d9:60:2f:a1:c0:80:43:c9:3a:
e2:4a:76:72:70:c5:e7:ce:1f:4a:72:5a:d5:1d:b8:
a1:a9:f6:5c:32:2c:42:24:82:6e:9f:70:64:d9:cc:
81:69:50:6f:8a:6f:2e:4f:13:3c:36:44:94:e4:75:
91:71:bd:db:e4:c9:26:9e:2d:d9:71:8e:91:78:03:
d0:ab:97:7e:75:13:f8:c4:78:68:a4:e1:a5:68:f4:
78:fb:d4:7c:d1:4e:c9:27:3f:6e:24:39:d3:a1:1e:
f0:eb:0b:6f:8e:3b:1e:35:85:d2:79:54:64:f5:77:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1E:50:C4:D1:CF:C6:6A:F6:D3:13:84:76:28:5D:9F:8F:46:AA:6D
X509v3 Authority Key Identifier:
keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/5R5QxNHPxmr20xOEdihdn49Gqm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.244.0/22
193.30.8.0/22
IPv6:
2a0a:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
c7:7b:fb:8f:30:d7:7f:4b:2f:90:18:58:c9:fe:83:d0:66:6e:
70:f6:ee:5d:8a:5c:2d:d1:ce:fb:f7:06:7b:42:68:a0:ee:d6:
6f:4c:0d:e7:b5:1f:40:c9:2a:6a:17:dd:f3:66:fe:3c:74:1a:
97:19:05:76:be:de:80:e0:d5:da:a7:59:f5:4a:56:e4:7b:9a:
66:77:80:5e:80:7a:f1:7b:c1:35:bd:57:26:81:08:46:e2:d4:
bb:4f:95:19:62:52:f5:dd:29:82:8e:5b:dd:37:60:6f:41:2a:
4d:23:8c:19:3e:24:a6:8e:01:50:74:c4:7b:18:c0:2b:9a:01:
f7:77:76:20:bf:64:a4:fe:e7:87:c4:cf:34:1b:05:56:1f:ae:
ba:90:e5:0b:5b:26:b5:3e:60:2a:b2:8f:50:1c:cc:61:01:21:
40:40:0b:d9:f8:a2:51:3e:0d:54:77:07:fc:2e:76:69:50:8e:
a9:27:5c:95:ee:80:ca:00:6d:52:46:4a:85:74:0d:64:d2:68:
77:bc:db:aa:09:41:62:93:ce:dc:60:9c:df:a6:9a:7a:e5:53:
83:94:2e:86:83:5f:9a:62:18:e4:40:d7:53:93:14:a4:6a:b5:
9c:67:13:58:d9:0d:9b:b4:ff:c6:a4:fa:35:ab:87:d0:72:60:
d6:53:b1:c8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQi+97hZzKk/n4yTFerc+/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj
NGFkODQwHhcNMjUwMTAxMTc0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTFlNTBjNGQxY2ZjNjZhZjZkMzEzODQ3NjI4NWQ5ZjhmNDZhYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW9ssz+kRQqvsp6pGeACtyqdGYw3
dV97NFe40f1dBF1ttfSb8duqBs74J82eF1UIfwQbO09AVcAFdHu+NqHL00W0+5io
mFC60T4MiN1O7YSkDeGMKkCxs8xiCHFPhdsbpTE4x4b8AtAHhoLQmpPwfMX9zyJc
KKS4ro2qJdmRvRjm1XUduZN2EmbEfwvZYC+hwIBDyTriSnZycMXnzh9KclrVHbih
qfZcMixCJIJun3Bk2cyBaVBvim8uTxM8NkSU5HWRcb3b5Mkmni3ZcY6ReAPQq5d+
dRP4xHhopOGlaPR4+9R80U7JJz9uJDnToR7w6wtvjjseNYXSeVRk9Xc+MwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOUeUMTRz8Zq9tMThHYoXZ+PRqptMB8GA1UdIwQY
MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt
ZjY0N2M1MGMyMWE1LzEvNVI1UXhOSFB4bXIyMHhPRWRpaGRuNDlHcW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1
LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCudL0AwQC
wR4IMA0EAgACMAcDBQMqCjuAMA0GCSqGSIb3DQEBCwUAA4IBAQDHe/uPMNd/Sy+Q
GFjJ/oPQZm5w9u5dilwt0c779wZ7Qmig7tZvTA3ntR9AySpqF93zZv48dBqXGQV2
vt6A4NXap1n1Slbke5pmd4BegHrxe8E1vVcmgQhG4tS7T5UZYlL13SmCjlvdN2Bv
QSpNI4wZPiSmjgFQdMR7GMArmgH3d3Ygv2Sk/ueHxM80GwVWH666kOULWya1PmAq
so9QHMxhASFAQAvZ+KJRPg1Udwf8LnZpUI6pJ1yV7oDKAG1SRkqFdA1k0mh3vNuq
CUFik87cYJzfppp65VODlC6Gg1+aYhjkQNdTkxSkarWcZxNY2Q2btP/GpPo1q4fQ
cmDWU7HI
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:01 2025 by rpki-client