Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/k0aPsDjrM4eGmCoLljqCn9DTho0.roa
File: k0aPsDjrM4eGmCoLljqCn9DTho0.roa (raw, json)
Hash identifier: 3AZXnY+l09dHuH2teF7rkck6bgv3XRF6Uy/RbPeZXSM=
Subject key identifier: 93:46:8F:B0:38:EB:33:87:86:98:2A:0B:96:3A:82:9F:D0:D3:86:8D
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59CC7C6DA3BF7C95D62537B431E95
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/k0aPsDjrM4eGmCoLljqCn9DTho0.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 81.255.178.0/24 maxlen: 24
90.115.208.0/24 maxlen: 24
90.115.209.0/24 maxlen: 24
194.2.56.0/24 maxlen: 24
194.2.57.0/24 maxlen: 24
194.2.86.0/24 maxlen: 24
194.3.4.0/24 maxlen: 24
194.250.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9c:c7:c6:da:3b:f7:c9:5d:62:53:7b:43:1e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93468fb038eb338786982a0b963a829fd0d3868d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:e0:ba:5a:a4:42:9e:19:c7:16:8f:94:3d:
76:0e:6d:de:e2:73:3e:02:9f:a5:ca:cd:0e:ab:36:
d3:7c:af:9b:c3:db:0b:61:d0:16:24:92:a5:ca:09:
70:e0:24:5e:e2:0d:07:62:d9:b8:0a:20:90:bc:78:
9b:cd:44:be:23:65:60:79:9f:24:f0:c1:28:bf:61:
8b:26:fc:a0:ea:de:84:40:9f:ab:dc:48:8c:ae:d7:
28:d5:59:70:55:17:19:d6:92:7f:4b:9f:f9:d8:df:
57:80:ce:66:f5:27:ff:b1:2b:3d:e6:17:59:f0:1f:
dd:ee:79:24:ea:ea:c0:83:a1:35:54:c5:43:74:de:
df:48:da:44:d0:b0:81:2a:80:49:9e:3f:f1:5a:e7:
e3:65:a2:b5:96:e0:5f:c1:6d:16:35:18:02:53:6e:
a1:59:73:b8:d0:f3:c1:3a:ec:9c:cb:3c:20:e6:92:
59:65:5f:bc:4e:c2:da:b0:13:c1:d6:ac:ca:39:22:
e9:c3:f1:3c:cb:11:9d:fa:3a:92:51:9e:25:24:3f:
73:cf:4c:b5:5d:ec:01:b2:f5:34:c8:6f:44:4b:f7:
62:54:6f:a7:b4:e2:e6:0a:5e:91:7a:11:9e:91:50:
ea:21:37:d9:fa:29:13:23:76:29:54:70:36:12:83:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:46:8F:B0:38:EB:33:87:86:98:2A:0B:96:3A:82:9F:D0:D3:86:8D
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/k0aPsDjrM4eGmCoLljqCn9DTho0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.255.178.0/24
90.115.208.0/23
194.2.56.0/23
194.2.86.0/24
194.3.4.0/24
194.250.98.0/24
Signature Algorithm: sha256WithRSAEncryption
24:91:e7:b3:88:14:53:4f:16:0d:09:a0:da:7c:d9:11:3a:23:
f8:00:df:36:c0:85:2f:0e:53:31:4c:fb:67:6c:e6:98:9d:f2:
13:ff:53:89:f7:ee:78:4a:3f:de:2e:6f:c7:ca:15:1d:15:2f:
81:24:f4:de:44:2c:5e:02:a9:e0:a2:7a:e7:6d:7f:44:59:5a:
5d:8b:ad:63:72:21:57:04:0d:e0:4c:9d:96:d1:bd:d2:3a:2d:
36:61:e0:c3:4e:ce:f9:fa:3d:16:ba:11:4d:35:de:94:c2:82:
c6:ff:13:95:8c:50:3a:d9:73:0b:5b:b5:43:9f:9b:f8:a7:1f:
84:bb:bf:78:6e:cc:fb:8c:f6:01:87:aa:1b:c0:70:14:2f:74:
de:99:e0:f6:8e:6c:bd:93:41:c9:6a:0a:47:74:fa:ea:11:95:
15:3e:80:c8:e4:a5:cc:ec:6c:69:2b:bc:a7:81:c8:f7:51:14:
a6:5f:64:2c:ac:cf:65:56:88:eb:a4:d3:14:b6:fa:3a:27:6c:
b7:e6:b4:95:bd:e1:2d:59:73:c3:d8:78:da:31:2b:bd:d6:ae:
21:95:b3:62:b8:fe:d0:c9:2f:50:62:87:b7:0e:96:e6:a0:99:
ab:31:db:85:5a:68:c6:8e:f5:38:f3:f9:46:2d:b2:1c:b4:99:
66:f6:59:94
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQg1ZzHxto798ldYlN7Qx6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzQ2OGZiMDM4ZWIzMzg3ODY5ODJhMGI5NjNhODI5ZmQwZDM4NjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqszgulqkQp4ZxxaPlD12Dm3e4nM+
Ap+lys0OqzbTfK+bw9sLYdAWJJKlyglw4CRe4g0HYtm4CiCQvHibzUS+I2VgeZ8k
8MEov2GLJvyg6t6EQJ+r3EiMrtco1VlwVRcZ1pJ/S5/52N9XgM5m9Sf/sSs95hdZ
8B/d7nkk6urAg6E1VMVDdN7fSNpE0LCBKoBJnj/xWufjZaK1luBfwW0WNRgCU26h
WXO40PPBOuycyzwg5pJZZV+8TsLasBPB1qzKOSLpw/E8yxGd+jqSUZ4lJD9zz0y1
XewBsvU0yG9ES/diVG+ntOLmCl6RehGekVDqITfZ+ikTI3YpVHA2EoN9HwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJNGj7A46zOHhpgqC5Y6gp/Q04aNMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvazBhUHNEanJNNGVHbUNvTGxqcUNuOURUaG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUf+yAwQB
WnPQAwQBwgI4AwQAwgJWAwQAwgMEAwQAwvpiMA0GCSqGSIb3DQEBCwUAA4IBAQAk
keeziBRTTxYNCaDafNkROiP4AN82wIUvDlMxTPtnbOaYnfIT/1OJ9+54Sj/eLm/H
yhUdFS+BJPTeRCxeAqngonrnbX9EWVpdi61jciFXBA3gTJ2W0b3SOi02YeDDTs75
+j0WuhFNNd6UwoLG/xOVjFA62XMLW7VDn5v4px+Eu794bsz7jPYBh6obwHAUL3Te
meD2jmy9k0HJagpHdPrqEZUVPoDI5KXM7GxpK7yngcj3URSmX2QsrM9lVojrpNMU
tvo6J2y35rSVveEtWXPD2HjaMSu91q4hlbNiuP7QyS9QYoe3DpbmoJmrMduFWmjG
jvU48/lGLbIctJlm9lmU
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:20:57 2025 by rpki-client