Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa
File: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (raw, json)
Hash identifier: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=
Subject key identifier: A6:7F:2B:AB:CA:83:39:40:6E:67:4F:9B:DF:57:8B:88:E0:8B:C9:98
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 019420D5B01BB8567BA6F4FDAC9194EB27DC
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64427
IP address blocks: 185.181.188.0/24 maxlen: 24
212.114.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b0:1b:b8:56:7b:a6:f4:fd:ac:91:94:eb:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a67f2babca8339406e674f9bdf578b88e08bc998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:f4:6b:51:95:9b:bd:08:cf:1b:ed:aa:b8:
bc:71:23:a8:01:46:2f:9c:d2:ac:81:ba:ff:93:cb:
ca:c7:71:0c:f2:76:f6:88:99:98:85:46:fc:ed:77:
28:49:b2:c7:3d:a3:eb:57:b5:7e:55:56:81:be:62:
7b:93:f0:dc:79:0b:f5:0a:70:af:e5:fb:48:a1:58:
2f:de:37:89:9d:3b:ef:56:93:7d:0c:69:de:c2:6d:
9d:c6:19:fe:28:8f:10:10:16:78:4e:c7:da:c3:d8:
0a:c6:6c:04:bd:de:82:9f:90:fd:bd:11:5c:6a:4b:
c4:81:2e:40:fb:fc:f7:8d:ec:fd:45:a2:19:6a:82:
26:f3:3f:14:8a:67:be:a5:61:71:5a:9c:fe:dc:fe:
9f:88:b6:44:1f:24:31:6c:2c:ae:e3:0d:85:cd:30:
0e:ab:d9:30:cb:b5:5d:ee:a7:d5:d3:ad:17:7b:28:
1a:0b:8f:2a:de:a9:8a:bc:b6:b1:34:6c:1d:a7:5f:
a1:5e:81:9a:75:b2:4b:62:93:fd:25:2f:c0:5a:1a:
6e:73:95:66:69:d5:7c:69:71:45:69:fb:5e:8e:81:
c0:98:ad:41:df:1d:ba:bb:69:2c:41:35:b2:5c:9d:
5d:04:e7:bc:e1:ba:c8:94:c4:08:ca:7f:5f:4f:dc:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7F:2B:AB:CA:83:39:40:6E:67:4F:9B:DF:57:8B:88:E0:8B:C9:98
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.188.0/24
212.114.90.0/24
Signature Algorithm: sha256WithRSAEncryption
75:40:2a:ce:5c:87:b6:66:03:8c:75:1f:44:c6:49:cd:4a:80:
61:ed:d7:68:51:30:1b:18:e3:64:8b:fd:c0:be:f6:29:c7:09:
8c:f4:be:8f:55:de:bf:8b:e0:4c:e0:ae:4c:d0:6d:be:b8:4e:
61:5c:24:8c:1c:41:17:ba:c7:ca:de:f0:e0:b9:27:67:bd:3c:
25:76:6a:44:fb:7d:51:e6:4d:a9:ca:a3:ee:ae:a8:ae:9f:27:
3c:c8:de:6c:4d:16:fc:8a:53:b0:4b:c2:6e:34:34:dc:7c:aa:
5a:02:17:6e:25:98:54:ac:f8:bc:ec:4d:64:1f:04:71:20:8e:
ab:6f:b9:ba:74:a0:c5:63:c8:9d:8f:1c:4b:6d:19:64:9f:a8:
63:ec:e0:f4:e6:2c:5c:10:62:ea:32:e4:0a:6b:20:d5:54:44:
32:19:0e:df:ca:68:54:f7:62:38:ff:36:2c:f3:38:29:6d:2d:
df:fc:a4:c9:92:a6:97:e9:b1:7a:14:bc:39:aa:60:c3:c4:58:
7c:a3:61:97:54:79:e4:9f:4c:5d:06:35:2d:1c:ef:70:fc:64:
e4:30:36:4e:89:24:e9:be:a0:b9:c3:93:6d:aa:e6:0e:a1:6f:
f0:b0:47:ab:bf:21:c2:f8:10:1e:55:c9:db:5a:a5:41:b3:f4:
2b:47:4a:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1bAbuFZ7pvT9rJGU6yfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNmM0Yzk0ZmVkNGZhOGI5MDNmNmY2ZmI1MzQwNDg0YzBl
NGE0ZDMwHhcNMjUwMTAxMDc0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjdmMmJhYmNhODMzOTQwNmU2NzRmOWJkZjU3OGI4OGUwOGJjOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWT0a1GVm70Izxvtqri8cSOoAUYv
nNKsgbr/k8vKx3EM8nb2iJmYhUb87XcoSbLHPaPrV7V+VVaBvmJ7k/DceQv1CnCv
5ftIoVgv3jeJnTvvVpN9DGnewm2dxhn+KI8QEBZ4Tsfaw9gKxmwEvd6Cn5D9vRFc
akvEgS5A+/z3jez9RaIZaoIm8z8Uime+pWFxWpz+3P6fiLZEHyQxbCyu4w2FzTAO
q9kwy7Vd7qfV060XeygaC48q3qmKvLaxNGwdp1+hXoGadbJLYpP9JS/AWhpuc5Vm
adV8aXFFaftejoHAmK1B3x26u2ksQTWyXJ1dBOe84brIlMQIyn9fT9wX2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKZ/K6vKgzlAbmdPm99Xi4jgi8mYMB8GA1UdIwQY
MBaAFFNsTJT+1PqLkD9vb7U0BITA5KTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYt
YTY3Zjk1ZjJkZTVlLzEvcG44cnE4cURPVUJ1WjAtYjMxZUxpT0NMeVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYtYTY3Zjk1ZjJkZTVl
LzEvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubW8AwQA
1HJaMA0GCSqGSIb3DQEBCwUAA4IBAQB1QCrOXIe2ZgOMdR9ExknNSoBh7ddoUTAb
GONki/3AvvYpxwmM9L6PVd6/i+BM4K5M0G2+uE5hXCSMHEEXusfK3vDguSdnvTwl
dmpE+31R5k2pyqPurqiunyc8yN5sTRb8ilOwS8JuNDTcfKpaAhduJZhUrPi87E1k
HwRxII6rb7m6dKDFY8idjxxLbRlkn6hj7OD05ixcEGLqMuQKayDVVEQyGQ7fymhU
92I4/zYs8zgpbS3f/KTJkqaX6bF6FLw5qmDDxFh8o2GXVHnkn0xdBjUtHO9w/GTk
MDZOiSTpvqC5w5NtquYOoW/wsEervyHC+BAeVcnbWqVBs/QrR0pP
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:31 2025 by rpki-client