Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/D9a5tzSXaB3YCXB51ESBfxmocyM.roa
File: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (raw, json)
Hash identifier: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=
Subject key identifier: 0F:D6:B9:B7:34:97:68:1D:D8:09:70:79:D4:44:81:7F:19:A8:73:23
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 0194236A2EE2F1EC9AE016A35F9D5448E256
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/D9a5tzSXaB3YCXB51ESBfxmocyM.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43076
IP address blocks: 185.8.44.0/24 maxlen: 24
185.8.45.0/24 maxlen: 24
185.8.46.0/24 maxlen: 24
185.8.47.0/24 maxlen: 24
217.171.80.0/24 maxlen: 24
217.171.81.0/24 maxlen: 24
217.171.82.0/24 maxlen: 24
217.171.83.0/24 maxlen: 24
217.171.84.0/24 maxlen: 24
217.171.85.0/24 maxlen: 24
217.171.86.0/24 maxlen: 24
217.171.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2e:e2:f1:ec:9a:e0:16:a3:5f:9d:54:48:e2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fd6b9b73497681dd8097079d444817f19a87323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e5:20:27:a4:46:6e:5b:23:67:47:fa:2b:31:
0f:18:ce:05:31:c1:09:2d:01:aa:52:c8:da:23:9d:
40:e3:e0:22:73:9e:a3:a0:66:ee:52:00:e1:5b:b2:
d9:86:1c:1b:06:74:ea:69:ce:d7:6e:4f:98:38:16:
e8:f2:29:7a:4c:cf:d6:c3:85:99:b2:f9:40:4a:39:
19:17:b0:cb:3f:e4:ac:35:19:1f:2e:4e:7e:dc:17:
69:a6:80:c4:7d:d3:4a:6c:df:1c:52:5b:60:7a:de:
7d:7b:99:2b:bc:6d:11:52:43:0d:0c:30:ed:28:72:
e1:65:7f:15:c2:ea:3a:70:52:5c:5b:58:ab:69:79:
eb:f4:ac:d7:56:5e:34:d6:10:07:db:ff:2f:02:90:
28:3a:54:5f:7e:e0:eb:cd:3f:3c:e3:fc:2b:2a:74:
c3:0d:2d:5b:dd:72:f7:49:af:1a:8e:bf:eb:59:7d:
89:ff:be:e3:b5:cb:7a:cf:d9:3b:e8:5e:20:a6:82:
40:30:c7:9d:5e:eb:72:9a:67:b5:e4:3f:72:a9:9b:
59:a0:44:7f:98:11:50:4b:1c:d7:5a:7b:72:90:8d:
7a:2f:21:86:25:36:fa:04:02:e7:e2:3b:19:38:6d:
ca:f7:b1:2b:47:7e:1b:e8:eb:00:1b:58:92:ad:4e:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:B9:B7:34:97:68:1D:D8:09:70:79:D4:44:81:7F:19:A8:73:23
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/D9a5tzSXaB3YCXB51ESBfxmocyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.44.0/22
217.171.80.0/21
Signature Algorithm: sha256WithRSAEncryption
40:ba:d9:d2:8e:b2:cb:5d:e2:80:42:4c:c5:2a:73:8c:0f:07:
0b:43:33:bf:14:c2:28:e6:1f:eb:f7:1a:28:68:75:08:73:e1:
02:24:83:ef:99:b3:42:d4:2b:21:7c:36:d0:b1:b1:ad:db:fe:
4e:42:7e:d2:fc:3e:39:41:42:f2:39:fe:21:e4:ed:87:5e:ab:
27:81:92:27:e4:c0:c5:e1:eb:07:99:09:fa:b3:c9:8c:4b:3e:
92:35:02:60:42:7a:0a:82:9f:2a:19:cb:de:6a:68:44:6e:24:
cc:59:a7:2a:16:9c:2f:eb:28:ad:bb:2b:3c:41:1d:71:53:80:
6f:77:b3:00:89:11:21:f5:a1:e3:61:f0:6c:2b:2b:ea:08:5e:
52:bc:69:d5:38:68:93:47:f9:5b:9a:9c:2f:48:59:e6:d9:e3:
df:f0:a5:6a:2e:d5:5a:b7:ad:56:78:fb:c4:4b:17:75:df:e6:
11:67:6d:f5:d8:be:0c:12:01:69:9c:f9:18:66:bf:38:d8:de:
b0:43:0b:c6:79:5e:32:1e:5f:41:bc:98:73:63:2c:c6:0d:38:
2a:cb:d9:99:16:88:fa:11:43:df:5b:1f:9e:ba:11:0c:1d:10:
5d:2a:40:f9:1d:da:fb:2d:08:fc:d4:31:ff:78:ad:9a:6d:da:
8d:8b:d1:bb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjai7i8eya4BajX51USOJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx
YWM3OWUwHhcNMjUwMTAxMTk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmQ2YjliNzM0OTc2ODFkZDgwOTcwNzlkNDQ0ODE3ZjE5YTg3MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOUgJ6RGblsjZ0f6KzEPGM4FMcEJ
LQGqUsjaI51A4+Aic56joGbuUgDhW7LZhhwbBnTqac7Xbk+YOBbo8il6TM/Ww4WZ
svlASjkZF7DLP+SsNRkfLk5+3BdppoDEfdNKbN8cUltget59e5krvG0RUkMNDDDt
KHLhZX8Vwuo6cFJcW1iraXnr9KzXVl401hAH2/8vApAoOlRffuDrzT884/wrKnTD
DS1b3XL3Sa8ajr/rWX2J/77jtct6z9k76F4gpoJAMMedXutymme15D9yqZtZoER/
mBFQSxzXWntykI16LyGGJTb6BALn4jsZOG3K97ErR34b6OsAG1iSrU5N0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA/Wubc0l2gd2AlwedREgX8ZqHMjMB8GA1UdIwQY
MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt
ZDY0Njc2N2M1ZjEzLzEvRDlhNXR6U1hhQjNZQ1hCNTFFU0JmeG1vY3lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz
LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQgsAwQD
2atQMA0GCSqGSIb3DQEBCwUAA4IBAQBAutnSjrLLXeKAQkzFKnOMDwcLQzO/FMIo
5h/r9xooaHUIc+ECJIPvmbNC1CshfDbQsbGt2/5OQn7S/D45QULyOf4h5O2HXqsn
gZIn5MDF4esHmQn6s8mMSz6SNQJgQnoKgp8qGcveamhEbiTMWacqFpwv6yituys8
QR1xU4Bvd7MAiREh9aHjYfBsKyvqCF5SvGnVOGiTR/lbmpwvSFnm2ePf8KVqLtVa
t61WePvESxd13+YRZ2312L4MEgFpnPkYZr842N6wQwvGeV4yHl9BvJhzYyzGDTgq
y9mZFoj6EUPfWx+euhEMHRBdKkD5Hdr7LQj81DH/eK2abdqNi9G7
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:29:59 2025 by rpki-client