Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rQ4Rmac7aqGmsfa0VguRKo1a33E.roa
File: rQ4Rmac7aqGmsfa0VguRKo1a33E.roa (raw, json)
Hash identifier: jNBLu0vcf/Rw7zSxLUQ+eGZ682Nd5EgXusc/4lEy/C0=
Subject key identifier: AD:0E:11:99:A7:3B:6A:A1:A6:B1:F6:B4:56:0B:91:2A:8D:5A:DF:71
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019425217D8D4B7437E67FC2946D23E4B45A
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rQ4Rmac7aqGmsfa0VguRKo1a33E.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60246
IP address blocks: 85.198.120.0/21 maxlen: 32
2a00:8740:ff00::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7d:8d:4b:74:37:e6:7f:c2:94:6d:23:e4:b4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad0e1199a73b6aa1a6b1f6b4560b912a8d5adf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:03:d5:0d:60:74:67:c4:6b:1f:0b:d5:73:
6d:78:f7:84:78:f5:54:8f:f9:ed:f9:d9:8f:60:1d:
ce:9f:39:24:55:ff:74:2b:0f:60:6f:90:c1:33:29:
cc:fc:f0:67:b0:be:f0:77:b0:2d:a6:e5:b4:89:42:
2a:7c:92:c8:47:85:8e:fe:46:67:66:54:b9:7b:8f:
16:29:25:0c:f3:c0:a2:96:06:49:72:c5:a8:35:64:
48:24:48:f0:0a:ca:c2:c2:80:db:45:5e:a0:3a:31:
25:c4:b5:0f:3e:0f:49:d9:92:01:a0:67:62:43:84:
dc:34:9a:ba:a6:34:77:47:b9:16:dd:44:0d:d3:35:
ed:1e:9b:da:a2:8f:29:44:2c:42:89:f9:ee:f5:f6:
53:4b:74:4e:9c:35:6a:fa:d9:0e:75:8a:ef:10:29:
93:82:60:1d:13:e2:7d:a9:bc:7a:17:d3:d4:df:24:
bb:98:21:39:15:d0:7f:42:6c:73:b6:98:43:39:53:
e7:9d:e0:c2:a0:ea:1a:7c:7c:fb:b3:44:c4:bf:74:
d5:98:22:9f:24:70:6d:a7:92:ec:81:c1:56:8c:4f:
21:4b:88:88:c6:2e:4b:ac:90:aa:01:d5:0a:22:ca:
7e:48:6d:c3:0e:a0:4a:67:39:e3:fd:b8:ff:44:e7:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0E:11:99:A7:3B:6A:A1:A6:B1:F6:B4:56:0B:91:2A:8D:5A:DF:71
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/rQ4Rmac7aqGmsfa0VguRKo1a33E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.120.0/21
IPv6:
2a00:8740:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
50:12:00:ab:22:2e:23:fc:0b:a5:72:d2:da:3c:a2:70:9a:1f:
05:6b:ee:07:67:af:73:8b:fa:9c:17:d0:54:6a:88:02:48:5a:
89:1d:a1:d5:d6:1a:b2:71:df:77:5b:22:b8:f5:88:e5:5b:f5:
21:59:da:14:57:49:c0:c0:61:69:a3:2a:36:e3:41:12:ca:59:
33:8a:83:8a:88:05:cd:da:03:06:97:e8:ee:1e:a8:f4:33:2a:
d2:2d:be:b9:69:83:9a:43:1d:3c:24:f6:13:bd:78:8c:a4:53:
02:25:82:a8:a4:a4:54:86:96:b1:8f:8f:70:96:d1:5b:14:ec:
fb:a5:b9:9e:ff:69:a1:85:98:a2:ef:24:e2:6e:92:4b:ee:60:
7f:fc:31:9d:1b:bc:d6:84:a5:ef:59:9b:03:b5:0b:39:a5:10:
ba:aa:29:5a:f8:54:0e:4d:fb:1c:77:f7:2d:a7:80:65:6f:0e:
b2:23:51:35:a8:14:a3:28:34:0c:06:3a:d5:c4:01:1a:95:24:
b0:0c:8e:0e:24:1a:aa:0f:2d:e4:88:20:9b:be:52:ba:6f:ac:
ff:eb:56:52:87:bb:20:6e:3f:17:ec:36:14:76:93:98:1f:1f:
bd:0a:69:72:f8:ec:73:5d:84:15:f0:e3:be:50:83:27:fe:af:
48:a3:dd:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQlIX2NS3Q35n/ClG0j5LRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjUwMTAyMDM0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDBlMTE5OWE3M2I2YWExYTZiMWY2YjQ1NjBiOTEyYThkNWFkZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEwD1Q1gdGfEax8L1XNtePeEePVU
j/nt+dmPYB3OnzkkVf90Kw9gb5DBMynM/PBnsL7wd7AtpuW0iUIqfJLIR4WO/kZn
ZlS5e48WKSUM88CilgZJcsWoNWRIJEjwCsrCwoDbRV6gOjElxLUPPg9J2ZIBoGdi
Q4TcNJq6pjR3R7kW3UQN0zXtHpvaoo8pRCxCifnu9fZTS3ROnDVq+tkOdYrvECmT
gmAdE+J9qbx6F9PU3yS7mCE5FdB/QmxztphDOVPnneDCoOoafHz7s0TEv3TVmCKf
JHBtp5LsgcFWjE8hS4iIxi5LrJCqAdUKIsp+SG3DDqBKZznj/bj/ROe4WQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK0OEZmnO2qhprH2tFYLkSqNWt9xMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvclE0Um1hYzdhcUdtc2ZhMFZndVJLbzFhMzNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDVcZ4MA8E
AgACMAkDBwAqAIdA/wAwDQYJKoZIhvcNAQELBQADggEBAFASAKsiLiP8C6Vy0to8
onCaHwVr7gdnr3OL+pwX0FRqiAJIWokdodXWGrJx33dbIrj1iOVb9SFZ2hRXScDA
YWmjKjbjQRLKWTOKg4qIBc3aAwaX6O4eqPQzKtItvrlpg5pDHTwk9hO9eIykUwIl
gqikpFSGlrGPj3CW0VsU7PuluZ7/aaGFmKLvJOJukkvuYH/8MZ0bvNaEpe9ZmwO1
CzmlELqqKVr4VA5N+xx39y2ngGVvDrIjUTWoFKMoNAwGOtXEARqVJLAMjg4kGqoP
LeSIIJu+UrpvrP/rVlKHuyBuPxfsNhR2k5gfH70KaXL47HNdhBXw475Qgyf+r0ij
3VM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:50 2025 by rpki-client