Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EfZYngufZTb5j3kcuJILMp2CcyQ.roa
File: EfZYngufZTb5j3kcuJILMp2CcyQ.roa (raw, json)
Hash identifier: ATA+L23jD+ljZODg1quelBk9jr2PbpsQiero0A89WZM=
Subject key identifier: 11:F6:58:9E:0B:9F:65:36:F9:8F:79:1C:B8:92:0B:32:9D:82:73:24
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747BCD413365C80F99BD510D8E82917
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EfZYngufZTb5j3kcuJILMp2CcyQ.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30738
IP address blocks: 188.130.182.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bc:d4:13:36:5c:80:f9:9b:d5:10:d8:e8:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11f6589e0b9f6536f98f791cb8920b329d827324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:ca:5d:a0:e7:62:ec:dd:73:8e:0b:b2:b9:
e7:fb:fb:92:8b:de:7d:01:dc:a4:79:38:7c:38:66:
64:39:b8:79:48:c1:f3:a6:60:4f:c8:61:0f:7b:cd:
ff:f9:8d:b8:b2:11:c6:60:82:66:f9:8e:09:cf:c7:
2f:09:58:b2:16:c0:7f:56:5d:0d:e6:e6:5c:fd:18:
e1:84:05:5a:22:8b:c9:c2:b4:fd:fe:60:db:d0:ef:
e6:ec:3c:17:ad:16:ad:40:e6:1b:df:b5:8b:ce:b3:
ff:e6:8a:bf:84:fa:d1:e8:ad:7d:da:17:94:ee:ab:
31:02:5b:b2:0f:f2:df:0e:52:a7:aa:ba:4f:6a:f0:
03:4d:85:16:78:5c:73:d3:a3:eb:bb:43:9a:fb:9a:
b2:64:53:24:4b:9d:ee:d2:d5:1e:e3:f6:2a:f4:03:
5d:11:01:66:d6:d4:c4:38:a3:17:42:91:7b:a7:a7:
fb:12:bf:5d:a6:b7:9e:67:f6:e8:be:31:49:90:f2:
24:08:31:e6:0a:fe:ba:23:b9:e8:8d:69:be:f6:90:
8b:41:31:37:c8:bb:63:ea:e5:6b:ff:2f:e2:3d:89:
61:ae:34:56:0c:18:d6:2c:78:6e:ca:5b:48:ad:c3:
ad:93:92:7b:72:05:e8:93:db:fc:4c:5d:37:41:46:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F6:58:9E:0B:9F:65:36:F9:8F:79:1C:B8:92:0B:32:9D:82:73:24
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EfZYngufZTb5j3kcuJILMp2CcyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
a3:b0:1f:3c:83:ad:b5:f2:49:4d:ee:3d:7a:e6:a9:e0:a2:7f:
f9:aa:41:fd:5d:37:19:4d:b6:a2:9f:0e:c8:c1:92:72:86:39:
fc:ca:a1:1a:00:88:f6:b3:e0:6e:5f:66:f1:c9:30:cd:a0:f6:
f5:fb:b9:49:8e:b5:bb:6b:f4:81:c7:36:5d:3c:05:eb:55:36:
19:2e:73:4e:14:83:d1:55:58:d5:23:86:97:35:c1:bf:0d:33:
ff:89:71:e2:22:35:6c:d8:19:c3:61:bc:a8:ff:8d:00:12:6d:
be:ba:17:b5:50:f3:61:95:25:74:b5:a3:0a:6f:33:ce:e3:51:
a7:fc:aa:8c:a2:21:f6:64:fc:86:9d:2d:68:53:a1:d1:0d:f5:
7b:d9:52:46:54:12:12:88:75:b7:81:f4:ef:82:bd:78:1f:4a:
d4:5e:e1:68:ab:76:03:3d:6a:1c:be:9f:f7:3b:c9:fa:a5:3a:
b5:5b:03:e2:ff:f7:25:0c:68:fa:35:20:30:34:79:5d:c7:dc:
a5:cf:3d:77:7b:e4:1d:de:98:34:a3:58:5a:28:0e:c4:97:f6:
12:a9:0d:3f:cb:42:b8:8e:01:cc:08:87:6e:58:e0:22:f9:c2:
1b:f4:a0:57:e2:b6:b3:9d:d1:60:0f:08:1a:f3:32:d8:c5:85:
09:c8:7d:90
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQnR7zUEzZcgPmb1RDY6CkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwMTAyMTM1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWY2NTg5ZTBiOWY2NTM2Zjk4Zjc5MWNiODkyMGIzMjlkODI3MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdjKXaDnYuzdc44Lsrnn+/uSi959
AdykeTh8OGZkObh5SMHzpmBPyGEPe83/+Y24shHGYIJm+Y4Jz8cvCViyFsB/Vl0N
5uZc/RjhhAVaIovJwrT9/mDb0O/m7DwXrRatQOYb37WLzrP/5oq/hPrR6K192heU
7qsxAluyD/LfDlKnqrpPavADTYUWeFxz06Pru0Oa+5qyZFMkS53u0tUe4/Yq9ANd
EQFm1tTEOKMXQpF7p6f7Er9dpreeZ/bovjFJkPIkCDHmCv66I7nojWm+9pCLQTE3
yLtj6uVr/y/iPYlhrjRWDBjWLHhuyltIrcOtk5J7cgXok9v8TF03QUYu0QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBH2WJ4Ln2U2+Y95HLiSCzKdgnMkMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvRWZaWW5ndWZaVGI1ajNrY3VKSUxNcDJDY3lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAvIK2AwQC
w9M0MA0EAgACMAcDBQAgARRoMA0GCSqGSIb3DQEBCwUAA4IBAQCjsB88g6218klN
7j165qngon/5qkH9XTcZTbainw7IwZJyhjn8yqEaAIj2s+BuX2bxyTDNoPb1+7lJ
jrW7a/SBxzZdPAXrVTYZLnNOFIPRVVjVI4aXNcG/DTP/iXHiIjVs2BnDYbyo/40A
Em2+uhe1UPNhlSV0taMKbzPO41Gn/KqMoiH2ZPyGnS1oU6HRDfV72VJGVBISiHW3
gfTvgr14H0rUXuFoq3YDPWocvp/3O8n6pTq1WwPi//clDGj6NSAwNHldx9ylzz13
e+Qd3pg0o1haKA7El/YSqQ0/y0K4jgHMCIduWOAi+cIb9KBX4razndFgDwga8zLY
xYUJyH2Q
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:37:52 2025 by rpki-client