Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/a3TYqNp6p83qAEF2bxpqvnCgoH8.roa
File: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (raw, json)
Hash identifier: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=
Subject key identifier: 6B:74:D8:A8:DA:7A:A7:CD:EA:00:41:76:6F:1A:6A:BE:70:A0:A0:7F
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01951D2F6EE0F02A8C7983C18D6BD2352B37
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/a3TYqNp6p83qAEF2bxpqvnCgoH8.roa
Signing time: Wed 19 Feb 2025 07:50:02 +0000
ROA not before: Wed 19 Feb 2025 07:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 81.16.212.0/22 maxlen: 22
81.16.212.0/24 maxlen: 24
81.16.213.0/24 maxlen: 24
81.16.214.0/24 maxlen: 24
185.139.176.0/24 maxlen: 24
185.139.177.0/24 maxlen: 24
185.139.178.0/24 maxlen: 24
185.139.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:2f:6e:e0:f0:2a:8c:79:83:c1:8d:6b:d2:35:2b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Feb 19 07:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b74d8a8da7aa7cdea0041766f1a6abe70a0a07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:5f:d4:90:dc:02:c1:07:23:ec:00:b4:6c:
f1:38:f9:21:66:67:3e:db:a3:9c:11:0b:0e:a1:b3:
8b:e9:c5:6e:50:ce:39:d9:2d:4e:d0:d6:9a:6c:7b:
f0:0d:f0:26:02:dd:94:24:76:d0:48:58:6b:7c:26:
c0:45:c2:93:5a:3c:95:69:dd:a3:ef:37:41:80:b4:
b0:08:bc:da:b8:97:49:77:d0:f2:46:06:64:b7:8f:
4c:52:3d:3f:7a:35:c2:ee:62:c2:14:38:ac:dd:ae:
ab:1e:0c:f9:fa:04:cb:fa:3c:5b:68:45:7f:0f:ed:
63:83:a0:4d:5b:5f:90:70:df:d7:3b:70:5b:df:93:
56:1e:c8:17:87:cc:b9:e5:ca:49:f4:a4:2d:cf:8f:
ed:5c:44:c5:e3:aa:70:dc:5a:36:0e:0e:fc:12:cd:
c4:e3:74:ef:96:a9:9b:60:d5:93:ad:b5:08:36:87:
16:ca:78:86:90:db:da:51:00:f1:db:36:07:6c:b0:
7a:8b:2d:aa:4d:65:e9:fb:f3:d0:f9:3a:a4:e1:89:
6d:35:e5:94:df:17:bc:f5:21:27:6d:c6:f8:7e:c1:
aa:f0:36:e6:de:36:9c:a1:99:ba:f5:71:1d:3f:32:
b0:9f:2f:d9:10:14:94:86:e0:b1:83:4f:da:48:69:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:D8:A8:DA:7A:A7:CD:EA:00:41:76:6F:1A:6A:BE:70:A0:A0:7F
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/a3TYqNp6p83qAEF2bxpqvnCgoH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.212.0/22
185.139.176.0/22
Signature Algorithm: sha256WithRSAEncryption
01:21:bf:ba:85:23:a2:60:4e:59:06:21:83:f9:57:69:b5:e3:
c5:af:04:7e:29:5c:7b:4e:5c:e5:00:9e:3e:fd:8f:49:e6:58:
7d:31:33:b0:d4:1f:af:99:a9:15:28:65:4d:48:ee:5c:fd:5e:
10:9e:ad:9b:41:e4:73:d5:89:c6:a6:69:6b:09:4d:0a:07:99:
6b:26:bf:ec:ef:d3:34:a0:41:50:44:d0:2a:7f:e4:e6:9e:d5:
fa:c6:99:fb:84:8e:ac:52:ef:b8:c4:81:e6:73:7c:08:19:a6:
9a:3c:66:d1:02:ff:31:f7:a5:8e:96:87:cf:9d:74:01:d2:25:
4c:21:d5:b1:70:ae:59:aa:7b:71:8a:27:2a:0b:9e:10:a8:52:
03:02:e6:b1:09:f3:03:52:4d:58:b2:c0:a2:32:80:d3:e2:3e:
2c:4c:db:96:18:fd:8b:8b:e6:c7:79:cb:1a:99:c7:41:75:3e:
6e:70:1e:0a:6a:c0:ee:15:46:0a:f6:d0:1c:82:12:ff:cf:25:
b0:6f:b8:ed:dc:38:e7:e5:19:f3:34:ed:0f:e0:bd:b9:b2:78:
88:6e:33:cb:5e:92:57:66:cc:7b:74:68:a3:b8:de:f5:06:5b:
04:fc:f7:1e:c5:19:6f:90:4f:0f:c0:68:af:33:db:85:44:7d:
7c:20:f9:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUdL27g8CqMeYPBjWvSNSs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1
YjRiMTAwHhcNMjUwMjE5MDc1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjc0ZDhhOGRhN2FhN2NkZWEwMDQxNzY2ZjFhNmFiZTcwYTBhMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySBf1JDcAsEHI+wAtGzxOPkhZmc+
26OcEQsOobOL6cVuUM452S1O0NaabHvwDfAmAt2UJHbQSFhrfCbARcKTWjyVad2j
7zdBgLSwCLzauJdJd9DyRgZkt49MUj0/ejXC7mLCFDis3a6rHgz5+gTL+jxbaEV/
D+1jg6BNW1+QcN/XO3Bb35NWHsgXh8y55cpJ9KQtz4/tXETF46pw3Fo2Dg78Es3E
43TvlqmbYNWTrbUINocWyniGkNvaUQDx2zYHbLB6iy2qTWXp+/PQ+Tqk4YltNeWU
3xe89SEnbcb4fsGq8Dbm3jacoZm69XEdPzKwny/ZEBSUhuCxg0/aSGk9QQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGt02KjaeqfN6gBBdm8aar5woKB/MB8GA1UdIwQY
MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt
ZDYwYjNiNmNjYTZlLzEvYTNUWXFOcDZwODNxQUVGMmJ4cHF2bkNnb0g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl
LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCURDUAwQC
uYuwMA0GCSqGSIb3DQEBCwUAA4IBAQABIb+6hSOiYE5ZBiGD+VdptePFrwR+KVx7
TlzlAJ4+/Y9J5lh9MTOw1B+vmakVKGVNSO5c/V4Qnq2bQeRz1YnGpmlrCU0KB5lr
Jr/s79M0oEFQRNAqf+TmntX6xpn7hI6sUu+4xIHmc3wIGaaaPGbRAv8x96WOlofP
nXQB0iVMIdWxcK5ZqntxiicqC54QqFIDAuaxCfMDUk1YssCiMoDT4j4sTNuWGP2L
i+bHecsamcdBdT5ucB4KasDuFUYK9tAcghL/zyWwb7jt3Djn5RnzNO0P4L25sniI
bjPLXpJXZsx7dGijuN71BlsE/PcexRlvkE8PwGivM9uFRH18IPmH
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:56 2025 by rpki-client