Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/SH4rDP4bziCb5bkV8rhoTxfuNjk.roa
File: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (raw, json)
Hash identifier: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=
Subject key identifier: 48:7E:2B:0C:FE:1B:CE:20:9B:E5:B9:15:F2:B8:68:4F:17:EE:36:39
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 01942067F67A3E0DBAE5B47FBD26B85B4F1C
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/SH4rDP4bziCb5bkV8rhoTxfuNjk.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203474
IP address blocks: 185.114.196.0/22 maxlen: 22
185.114.196.0/24 maxlen: 24
2a03:3780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f6:7a:3e:0d:ba:e5:b4:7f:bd:26:b8:5b:4f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=487e2b0cfe1bce209be5b915f2b8684f17ee3639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:ed:5a:74:d6:81:b9:6f:3d:d3:dd:2b:1c:
98:98:5e:95:5d:71:3f:5e:12:ce:8c:00:37:48:67:
41:46:1e:db:6c:f4:40:8b:2b:64:65:ba:43:ba:97:
b8:a2:a6:fc:d5:e4:fa:4b:52:c4:ac:7c:03:dd:de:
7f:e3:6e:e9:a8:50:70:19:b3:fa:43:0f:4a:f6:d6:
9f:2c:ca:d8:72:4e:61:4b:4a:02:c7:a4:6f:3e:5d:
64:5e:c7:9e:f3:42:ea:45:a0:34:4e:39:1d:23:7e:
79:19:82:56:54:7c:e2:51:96:4b:93:98:85:8b:eb:
4e:84:59:9b:ee:44:7e:da:31:8c:81:c8:ec:e8:9b:
b0:31:5c:6c:c6:43:31:2d:bd:e8:1f:7c:c3:70:0d:
99:52:4d:aa:1b:75:1d:23:cc:04:27:1d:e4:53:76:
fa:15:b0:5c:51:1f:f4:eb:74:bb:82:c6:73:77:a2:
49:db:4c:c5:20:6f:05:fb:78:b7:cf:d4:05:47:a4:
d3:5d:44:b3:49:b3:9f:b4:66:09:e5:0f:47:8f:ca:
9d:ba:4a:d5:03:58:72:5a:68:27:bf:fb:06:e4:88:
d3:c0:1e:31:37:da:50:30:92:50:fa:35:a3:9f:2e:
10:e5:d3:00:0f:50:63:cc:61:97:71:cd:98:57:25:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7E:2B:0C:FE:1B:CE:20:9B:E5:B9:15:F2:B8:68:4F:17:EE:36:39
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/SH4rDP4bziCb5bkV8rhoTxfuNjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.196.0/22
IPv6:
2a03:3780::/48
Signature Algorithm: sha256WithRSAEncryption
73:9c:e0:25:3e:2e:ca:99:07:31:4b:d4:18:7b:b7:5e:11:15:
48:54:5d:63:fe:76:be:9f:2b:86:35:62:ee:13:29:8a:e1:1a:
c3:fe:25:4f:62:28:be:09:65:f3:c0:d2:38:e1:b4:93:6f:d7:
6f:2a:70:c7:07:26:6b:1e:37:1d:e9:13:55:3b:0a:3f:ed:80:
ba:18:65:66:86:ae:80:28:a4:e9:07:a3:e2:95:ab:89:0d:c4:
90:b8:5a:2c:74:a0:39:be:c7:a8:21:c9:af:07:7f:e1:a1:c3:
2e:7f:ce:99:f0:5e:d2:5a:fc:21:dc:03:0d:be:29:84:49:83:
81:11:d5:c6:87:8e:4e:ec:e0:95:f2:2c:57:2d:b8:b2:d0:71:
12:cc:41:8a:a9:81:5f:c6:d5:5c:93:8b:3a:0b:4f:ab:8a:68:
91:d0:06:ee:fd:28:da:6a:46:2e:66:ef:2c:a2:65:29:27:68:
60:dd:93:7e:ac:ec:b5:b7:29:67:1a:8e:6d:59:f0:df:17:19:
3b:61:5c:a8:5e:f7:e5:3a:2f:ec:6d:8f:8c:75:9b:dc:8c:1e:
55:bf:18:16:95:f7:42:19:7a:30:49:a8:e4:f0:ff:f9:fd:dc:
c8:ee:a8:d2:44:b0:02:99:78:9a:61:eb:65:22:c4:d0:02:02:
98:49:d5:c8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQgZ/Z6Pg265bR/vSa4W08cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5
MGExYWQwHhcNMjUwMTAxMDU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODdlMmIwY2ZlMWJjZTIwOWJlNWI5MTVmMmI4Njg0ZjE3ZWUzNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOXtWnTWgblvPdPdKxyYmF6VXXE/
XhLOjAA3SGdBRh7bbPRAiytkZbpDupe4oqb81eT6S1LErHwD3d5/427pqFBwGbP6
Qw9K9tafLMrYck5hS0oCx6RvPl1kXsee80LqRaA0TjkdI355GYJWVHziUZZLk5iF
i+tOhFmb7kR+2jGMgcjs6JuwMVxsxkMxLb3oH3zDcA2ZUk2qG3UdI8wEJx3kU3b6
FbBcUR/063S7gsZzd6JJ20zFIG8F+3i3z9QFR6TTXUSzSbOftGYJ5Q9Hj8qdukrV
A1hyWmgnv/sG5IjTwB4xN9pQMJJQ+jWjny4Q5dMAD1BjzGGXcc2YVyXCqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEh+Kwz+G84gm+W5FfK4aE8X7jY5MB8GA1UdIwQY
MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt
Yjc0MDg5ZDhlNTllLzEvU0g0ckRQNGJ6aUNiNWJrVjhyaG9UeGZ1TmprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll
LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuXLEMA8E
AgACMAkDBwAqAzeAAAAwDQYJKoZIhvcNAQELBQADggEBAHOc4CU+LsqZBzFL1Bh7
t14RFUhUXWP+dr6fK4Y1Yu4TKYrhGsP+JU9iKL4JZfPA0jjhtJNv128qcMcHJmse
Nx3pE1U7Cj/tgLoYZWaGroAopOkHo+KVq4kNxJC4Wix0oDm+x6ghya8Hf+Ghwy5/
zpnwXtJa/CHcAw2+KYRJg4ER1caHjk7s4JXyLFctuLLQcRLMQYqpgV/G1VyTizoL
T6uKaJHQBu79KNpqRi5m7yyiZSknaGDdk36s7LW3KWcajm1Z8N8XGTthXKhe9+U6
L+xtj4x1m9yMHlW/GBaV90IZejBJqOTw//n93MjuqNJEsAKZeJph62UixNACAphJ
1cg=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:08 2025 by rpki-client