Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/_cdA-O3BpTpSNWV6iyctBZcncpY.roa
File: _cdA-O3BpTpSNWV6iyctBZcncpY.roa (raw, json)
Hash identifier: Fl95aPXmiQCgxIEsP9+7cVkmheRReXsnewvnCCMFHHw=
Subject key identifier: FD:C7:40:F8:ED:C1:A5:3A:52:35:65:7A:8B:27:2D:05:97:27:72:96
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 444C04EE
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/_cdA-O3BpTpSNWV6iyctBZcncpY.roa
Signing time: Sat 01 Jan 2022 16:02:47 +0000
ROA not before: Sat 01 Jan 2022 16:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47886
IP address blocks: 159.255.216.0/21 maxlen: 21
185.170.92.0/22 maxlen: 22
94.103.16.0/20 maxlen: 20
5.175.80.0/21 maxlen: 21
2a03:6980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145832686 (0x444c04ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 1 16:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdc740f8edc1a53a5235657a8b272d0597277296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:e2:2f:f8:3a:55:6f:7f:88:67:2d:97:9b:
d5:be:90:88:ad:1f:8a:99:8b:86:97:c3:af:0d:2f:
1a:8e:ed:8d:d9:e9:f8:5e:2b:e9:9b:5d:27:5c:49:
dd:58:bf:0e:c1:97:fa:89:14:56:a6:2c:d0:d6:03:
de:26:17:8c:4c:b0:ae:ea:4a:7c:f3:74:95:18:a1:
78:23:e8:d2:3f:f7:80:0b:a7:44:11:b8:cd:44:7f:
ce:a0:f1:93:ec:04:28:39:6b:98:d9:0e:0d:8a:04:
17:9b:78:d6:24:3a:66:e5:e7:8c:99:27:f1:66:d9:
2e:25:90:2d:da:29:44:83:e2:62:42:62:88:31:98:
6f:f7:32:e0:6a:29:a0:3d:78:23:43:fc:7d:99:ef:
3b:2a:7d:5c:75:7a:a9:9b:a0:30:a7:50:63:f4:16:
4b:51:02:7f:21:10:51:d7:5b:de:0c:c9:8c:fe:95:
91:1d:cb:4f:d9:43:19:f9:e8:0f:ac:01:ed:81:c2:
25:07:74:1f:21:7d:6f:04:b6:e2:7d:65:f6:7b:5d:
f8:b3:53:95:b4:f1:06:c0:26:17:e2:55:44:a3:5d:
0e:2f:7c:b9:34:fc:32:7c:46:7e:09:99:22:26:e7:
bf:f2:6a:fa:8f:b6:1c:49:12:b1:73:55:6c:00:bd:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C7:40:F8:ED:C1:A5:3A:52:35:65:7A:8B:27:2D:05:97:27:72:96
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/_cdA-O3BpTpSNWV6iyctBZcncpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.80.0/21
94.103.16.0/20
159.255.216.0/21
185.170.92.0/22
IPv6:
2a03:6980::/32
Signature Algorithm: sha256WithRSAEncryption
a9:7d:14:14:de:31:15:14:b9:03:fe:06:d4:16:5c:40:23:c5:
2b:be:26:84:de:01:54:75:12:50:e3:71:17:a7:76:2e:e7:0a:
a4:33:d1:de:8a:18:d3:b9:00:f8:00:93:bd:42:91:d8:d2:84:
eb:69:38:61:72:35:4a:ba:34:eb:e3:5d:e9:b9:72:8e:94:de:
90:7d:ff:4d:94:70:fa:6b:ed:46:1a:1c:36:a0:d5:42:88:7a:
2f:2a:4a:1f:ee:e8:8e:48:e0:f7:ed:8e:a7:ef:00:74:53:85:
89:b2:45:6c:85:9c:24:39:66:be:02:12:81:ac:bb:ec:96:ef:
f3:3c:36:25:fd:57:b5:57:b7:ca:28:03:c3:dc:3c:6b:6b:ae:
5d:9b:be:d9:b5:d1:9e:5c:7b:d5:fc:02:01:c0:71:20:82:58:
9e:b3:77:70:53:02:37:e6:34:51:89:bf:f1:71:ba:db:ae:f0:
ef:9b:09:1b:ea:92:38:2e:0c:ee:9c:d5:b2:bd:aa:1e:eb:90:
67:0b:a6:e8:ff:bb:09:76:31:9a:a3:91:34:0b:70:0e:b5:99:
63:0e:a3:0f:2d:40:61:c0:1e:89:db:58:52:a0:a8:d6:8e:97:
e5:d4:df:6e:ae:9f:2f:9a:98:60:96:96:25:f7:26:b0:c3:cc:
be:77:d2:9b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEREwE7jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MzBmZTk3MWIzZTM2YjE2YTkyYmU4NWY1OTk4NWJlNDU5NjhiODY0MB4XDTIyMDEw
MTE2MDI0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmRjNzQwZjhlZGMx
YTUzYTUyMzU2NTdhOGIyNzJkMDU5NzI3NzI5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJB24i/4OlVvf4hnLZeb1b6QiK0fipmLhpfDrw0vGo7tjdnp
+F4r6ZtdJ1xJ3Vi/DsGX+okUVqYs0NYD3iYXjEywrupKfPN0lRiheCPo0j/3gAun
RBG4zUR/zqDxk+wEKDlrmNkODYoEF5t41iQ6ZuXnjJkn8WbZLiWQLdopRIPiYkJi
iDGYb/cy4GopoD14I0P8fZnvOyp9XHV6qZugMKdQY/QWS1ECfyEQUddb3gzJjP6V
kR3LT9lDGfnoD6wB7YHCJQd0HyF9bwS24n1l9ntd+LNTlbTxBsAmF+JVRKNdDi98
uTT8MnxGfgmZIibnv/Jq+o+2HEkSsXNVbAC9C78CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBT9x0D47cGlOlI1ZXqLJy0FlydyljAfBgNVHSMEGDAWgBQzD+lxs+NrFqkr
6F9ZmFvkWWi4ZDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L013X3BjYlBqYXhhcEstaGZXWmhiNUZsb3VHUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvYTM4NjkzLWNmYTAtNDNlOC1hNTFiLTExZTllOWYwMTM0My8x
L19jZEEtTzNCcFRwU05XVjZpeWN0QlpjbmNwWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
YTM4NjkzLWNmYTAtNDNlOC1hNTFiLTExZTllOWYwMTM0My8xL013X3BjYlBqYXhh
cEstaGZXWmhiNUZsb3VHUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAwWvUAMEBF5nEAMEA5//2AMEArmq
XDANBAIAAjAHAwUAKgNpgDANBgkqhkiG9w0BAQsFAAOCAQEAqX0UFN4xFRS5A/4G
1BZcQCPFK74mhN4BVHUSUONxF6d2LucKpDPR3ooY07kA+ACTvUKR2NKE62k4YXI1
Sro06+Nd6blyjpTekH3/TZRw+mvtRhocNqDVQoh6LypKH+7ojkjg9+2Op+8AdFOF
ibJFbIWcJDlmvgISgay77Jbv8zw2Jf1XtVe3yigDw9w8a2uuXZu+2bXRnlx71fwC
AcBxIIJYnrN3cFMCN+Y0UYm/8XG6267w75sJG+qSOC4M7pzVsr2qHuuQZwum6P+7
CXYxmqORNAtwDrWZYw6jDy1AYcAeidtYUqCo1o6X5dTfbq6fL5qYYJaWJfcmsMPM
vnfSmw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:48 2025 by rpki-client