Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/9r-5450_LPv0lfniAyvcdIDulFk.roa
File: 9r-5450_LPv0lfniAyvcdIDulFk.roa (raw, json)
Hash identifier: LaIAZzj5ZiWUPAQG4O86Dd32CwFPo3guOQtPSTPgugU=
Subject key identifier: F6:BF:B9:E3:9D:3F:2C:FB:F4:95:F9:E2:03:2B:DC:74:80:EE:94:59
Certificate issuer: /CN=2f6c0999157eca3302f125c63bec3b821af8aa03
Certificate serial: 018572D5B67EC9F2A6EF57B68EDA05882B8E
Authority key identifier: 2F:6C:09:99:15:7E:CA:33:02:F1:25:C6:3B:EC:3B:82:1A:F8:AA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2wJmRV-yjMC8SXGO-w7ghr4qgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/9r-5450_LPv0lfniAyvcdIDulFk.roa
Signing time: Mon 02 Jan 2023 14:14:46 +0000
ROA not before: Mon 02 Jan 2023 14:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212041
IP address blocks: 194.61.81.0/24 maxlen: 24
195.28.20.0/24 maxlen: 24
185.245.246.0/23 maxlen: 23
185.247.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:b6:7e:c9:f2:a6:ef:57:b6:8e:da:05:88:2b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6c0999157eca3302f125c63bec3b821af8aa03
Validity
Not Before: Jan 2 14:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6bfb9e39d3f2cfbf495f9e2032bdc7480ee9459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3b:bd:83:17:97:fb:eb:56:5b:20:0c:fb:6b:
84:d6:50:c1:b0:ee:86:14:18:ad:0f:d0:29:33:ea:
b9:66:b3:41:53:94:1f:ac:d9:50:a2:52:58:14:aa:
22:a4:e5:fe:a3:69:5c:54:f3:59:b1:28:58:4f:33:
0e:58:50:15:c0:31:17:a3:6f:45:95:99:47:5a:98:
74:6e:16:00:b8:78:b9:2a:3e:5d:25:0a:4d:86:68:
c4:6b:eb:05:84:01:8e:70:51:a1:af:b0:a8:7b:da:
25:f3:49:6a:99:43:7f:db:c8:34:2a:3f:5f:8a:f8:
2f:d6:87:38:8b:c4:28:33:8c:54:22:a0:71:d7:92:
61:e1:86:21:cf:02:a6:dc:63:90:9c:cd:d1:4c:e5:
b4:da:4f:95:ae:ee:2b:79:c3:d1:e0:60:c6:95:ab:
8e:e8:34:ff:a7:2b:e4:59:46:e5:85:9f:ce:4e:49:
c9:02:f7:6b:cf:a8:4b:99:5f:21:ee:81:09:07:6a:
7f:ec:f3:bd:49:3f:01:8c:43:64:1e:53:fe:59:21:
aa:b0:01:11:7d:e5:c5:1c:8c:4d:a2:14:83:32:6a:
8e:23:28:47:1f:fd:ed:14:ff:84:04:0f:44:95:36:
57:07:c5:88:e2:57:0f:29:24:d5:0f:a7:55:10:16:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BF:B9:E3:9D:3F:2C:FB:F4:95:F9:E2:03:2B:DC:74:80:EE:94:59
X509v3 Authority Key Identifier:
keyid:2F:6C:09:99:15:7E:CA:33:02:F1:25:C6:3B:EC:3B:82:1A:F8:AA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2wJmRV-yjMC8SXGO-w7ghr4qgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/9r-5450_LPv0lfniAyvcdIDulFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/L2wJmRV-yjMC8SXGO-w7ghr4qgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.246.0/23
185.247.60.0/24
194.61.81.0/24
195.28.20.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ea:62:14:a8:43:c4:53:4b:48:0a:29:6b:c1:19:1c:de:5c:
80:65:89:75:c2:f5:15:95:17:1c:15:60:f4:52:c2:59:d6:5d:
09:31:02:f3:04:60:66:f9:11:de:6d:f5:fc:62:5b:c9:35:44:
34:6d:61:8b:c5:be:93:10:5c:3f:3d:99:da:68:74:40:da:1f:
74:b4:d7:8c:79:b4:d8:e8:64:7f:2d:82:40:4a:e9:07:8b:79:
af:56:58:1f:fb:55:c2:df:65:b4:74:61:6b:99:4c:48:b6:89:
0e:ae:69:95:01:51:43:09:0d:9b:0e:a1:0b:01:1d:2c:cd:f0:
6d:88:b8:42:65:34:e8:06:ca:bb:ea:1f:58:fb:43:55:c3:c2:
bf:01:bf:ad:1b:c0:da:68:ea:9c:bc:25:77:eb:49:8c:b3:a5:
2f:7c:90:04:9c:12:c0:80:ce:15:08:05:49:71:63:47:b5:3b:
85:a1:3d:69:e1:14:a4:cb:0b:1e:d2:91:d7:65:a5:16:5c:a8:
c9:82:91:ec:4f:77:1e:55:ac:0b:4c:de:cd:29:08:7f:9c:a4:
92:c7:92:e8:28:6c:0f:64:c6:8b:32:96:a4:7c:10:f5:83:19:
de:eb:e2:3e:b3:4c:e9:ef:04:a0:c8:82:62:4c:25:bc:5f:1f:
54:42:9c:bb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVy1bZ+yfKm71e2jtoFiCuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmMwOTk5MTU3ZWNhMzMwMmYxMjVjNjNiZWMzYjgyMWFm
OGFhMDMwHhcNMjMwMTAyMTQxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmJmYjllMzlkM2YyY2ZiZjQ5NWY5ZTIwMzJiZGM3NDgwZWU5NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgju9gxeX++tWWyAM+2uE1lDBsO6G
FBitD9ApM+q5ZrNBU5QfrNlQolJYFKoipOX+o2lcVPNZsShYTzMOWFAVwDEXo29F
lZlHWph0bhYAuHi5Kj5dJQpNhmjEa+sFhAGOcFGhr7Coe9ol80lqmUN/28g0Kj9f
ivgv1oc4i8QoM4xUIqBx15Jh4YYhzwKm3GOQnM3RTOW02k+Vru4recPR4GDGlauO
6DT/pyvkWUblhZ/OTknJAvdrz6hLmV8h7oEJB2p/7PO9ST8BjENkHlP+WSGqsAER
feXFHIxNohSDMmqOIyhHH/3tFP+EBA9ElTZXB8WI4lcPKSTVD6dVEBYVAwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPa/ueOdPyz79JX54gMr3HSA7pRZMB8GA1UdIwQY
MBaAFC9sCZkVfsozAvElxjvsO4Ia+KoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJ3Sm1SVi15ak1DOFNYR08tdzdnaHI0cWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84OTA5N2EtMWQ3OC00Nzg3LWJmNGUt
ODNmYTBiMzUxMzRjLzEvOXItNTQ1MF9MUHYwbGZuaUF5dmNkSUR1bEZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84OTA5N2EtMWQ3OC00Nzg3LWJmNGUtODNmYTBiMzUxMzRj
LzEvTDJ3Sm1SVi15ak1DOFNYR08tdzdnaHI0cWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBufX2AwQA
ufc8AwQAwj1RAwQAwxwUMA0GCSqGSIb3DQEBCwUAA4IBAQAn6mIUqEPEU0tICilr
wRkc3lyAZYl1wvUVlRccFWD0UsJZ1l0JMQLzBGBm+RHebfX8YlvJNUQ0bWGLxb6T
EFw/PZnaaHRA2h90tNeMebTY6GR/LYJASukHi3mvVlgf+1XC32W0dGFrmUxItokO
rmmVAVFDCQ2bDqELAR0szfBtiLhCZTToBsq76h9Y+0NVw8K/Ab+tG8DaaOqcvCV3
60mMs6UvfJAEnBLAgM4VCAVJcWNHtTuFoT1p4RSkywse0pHXZaUWXKjJgpHsT3ce
VawLTN7NKQh/nKSSx5LoKGwPZMaLMpakfBD1gxne6+I+s0zp7wSgyIJiTCW8Xx9U
Qpy7
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:45 2025 by rpki-client