Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/Ft80rPp3YDIdC3k8qh49uT9d45k.roa
File: Ft80rPp3YDIdC3k8qh49uT9d45k.roa (raw, json)
Hash identifier: HU43RE8drpobNm+ZkIEGMjKto7OGAAhUtcJKdaqknJo=
Subject key identifier: 16:DF:34:AC:FA:77:60:32:1D:0B:79:3C:AA:1E:3D:B9:3F:5D:E3:99
Certificate issuer: /CN=ad12daa384888b5247df712965803f0d3fa8989d
Certificate serial: 02DB08A7
Authority key identifier: AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/Ft80rPp3YDIdC3k8qh49uT9d45k.roa
Signing time: Sat 01 Jan 2022 11:04:00 +0000
ROA not before: Sat 01 Jan 2022 11:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42263
IP address blocks: 185.182.32.0/22 maxlen: 22
185.115.48.0/22 maxlen: 22
185.32.80.0/22 maxlen: 22
185.116.244.0/24 maxlen: 24
185.116.244.0/22 maxlen: 22
192.70.192.0/22 maxlen: 22
185.173.240.0/22 maxlen: 22
185.145.196.0/22 maxlen: 22
2a00:c320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47909031 (0x2db08a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad12daa384888b5247df712965803f0d3fa8989d
Validity
Not Before: Jan 1 11:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16df34acfa7760321d0b793caa1e3db93f5de399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:7a:8a:ce:58:9d:8d:65:5b:c8:a0:44:2a:
ad:01:db:43:ad:08:98:82:c8:7a:f8:d2:4a:f9:ef:
38:1a:dc:b8:4b:05:44:9c:78:f0:8f:fb:dd:f2:67:
76:94:8f:39:40:8c:93:bb:0d:05:6f:81:e4:4a:de:
33:cc:34:9c:f0:7c:a1:8f:82:e7:02:07:75:dd:e4:
8a:17:b1:59:06:bf:ff:4a:38:3d:e6:84:2b:01:a2:
92:81:93:11:79:fd:b1:f9:aa:66:39:72:0d:ef:e8:
05:11:81:6d:bd:23:a9:43:da:30:23:fb:7b:7d:d1:
81:13:b7:46:48:89:5b:08:26:fe:5e:43:38:c3:1c:
d7:11:80:f2:df:33:94:ce:03:00:e9:0e:b1:ff:de:
ed:b6:9a:5e:70:72:25:fb:29:6c:dc:6d:3c:dd:09:
f1:c9:bc:6e:bc:15:92:50:d1:71:48:f5:fd:da:e5:
0b:3b:13:9b:64:7c:f5:cb:1a:8a:e7:52:d0:ea:99:
a5:60:61:fe:5f:3c:66:f5:f2:1a:16:66:ba:c8:41:
c6:1d:68:3e:ac:ee:ef:73:26:4c:c5:4f:c8:ce:d7:
1a:87:a9:bb:fb:58:38:6d:79:15:97:8f:c3:7e:49:
42:f3:cf:e6:bd:45:57:d6:1c:c1:e1:06:a2:b9:94:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DF:34:AC:FA:77:60:32:1D:0B:79:3C:AA:1E:3D:B9:3F:5D:E3:99
X509v3 Authority Key Identifier:
keyid:AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/Ft80rPp3YDIdC3k8qh49uT9d45k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.80.0/22
185.115.48.0/22
185.116.244.0/22
185.145.196.0/22
185.173.240.0/22
185.182.32.0/22
192.70.192.0/22
IPv6:
2a00:c320::/32
Signature Algorithm: sha256WithRSAEncryption
58:f5:53:f1:c9:64:c8:c7:9a:93:2d:9d:16:ed:e6:ee:10:3d:
bb:7d:ed:5c:a1:b3:8a:f4:d4:c7:6c:76:ff:de:f7:f7:06:c0:
cb:fc:8b:f8:9c:11:cd:4a:a2:d6:42:b1:63:60:d7:f8:57:6a:
8a:d9:ea:a6:4f:5a:3c:8b:a2:01:58:59:17:0e:d6:b2:1c:06:
39:aa:fd:b3:bc:de:d6:df:b4:f5:ff:78:49:ab:13:df:73:11:
f8:08:ff:98:f4:1c:07:cc:82:3c:93:7c:c9:3f:a9:ff:4a:65:
c4:d7:10:30:52:37:49:75:84:4e:4b:79:6d:c1:35:57:1e:61:
94:17:0a:4c:e5:2b:95:b0:02:fc:88:29:00:71:64:90:2b:6a:
bc:b2:63:fb:50:34:aa:a6:8b:91:c4:95:4a:81:9e:4e:35:4e:
7e:ea:b4:a4:f8:ed:9e:ab:3f:4d:1d:cb:d7:fe:0a:0a:3c:8f:
10:8e:97:b9:81:32:53:8a:38:91:8b:6a:49:01:56:34:b1:1d:
68:70:78:12:45:4e:7c:23:c9:f6:d9:09:eb:ee:12:7e:1a:d2:
5f:c6:5e:98:95:b0:4d:0b:39:e0:8b:fd:c9:1e:35:c6:ee:c7:
1e:6b:23:67:3e:b2:a6:b9:5c:91:6a:cb:32:cb:b4:a1:c2:7b:
d1:a5:37:6f
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIEAtsIpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZDEyZGFhMzg0ODg4YjUyNDdkZjcxMjk2NTgwM2YwZDNmYTg5ODlkMB4XDTIyMDEw
MTExMDQwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZkZjM0YWNmYTc3
NjAzMjFkMGI3OTNjYWExZTNkYjkzZjVkZTM5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALj9eorOWJ2NZVvIoEQqrQHbQ60ImILIevjSSvnvOBrcuEsF
RJx48I/73fJndpSPOUCMk7sNBW+B5EreM8w0nPB8oY+C5wIHdd3kihexWQa//0o4
PeaEKwGikoGTEXn9sfmqZjlyDe/oBRGBbb0jqUPaMCP7e33RgRO3RkiJWwgm/l5D
OMMc1xGA8t8zlM4DAOkOsf/e7baaXnByJfspbNxtPN0J8cm8brwVklDRcUj1/drl
CzsTm2R89csaiudS0OqZpWBh/l88ZvXyGhZmushBxh1oPqzu73MmTMVPyM7XGoep
u/tYOG15FZePw35JQvPP5r1FV9YcweEGormUEZUCAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBQW3zSs+ndgMh0LeTyqHj25P13jmTAfBgNVHSMEGDAWgBStEtqjhIiLUkff
cSllgD8NP6iYnTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JSTGFvNFNJaTFKSDMzRXBaWUFfRFQtb21KMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvMmE5NjVjLTMzNDctNDQzZS04OGM3LTViNGQ1MmRjMmRlMi8x
L0Z0ODByUHAzWURJZEMzazhxaDQ5dVQ5ZDQ1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
MmE5NjVjLTMzNDctNDQzZS04OGM3LTViNGQ1MmRjMmRlMi8xL3JSTGFvNFNJaTFK
SDMzRXBaWUFfRFQtb21KMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwMAQCAAEwKgMEArkgUAMEArlzMAMEArl09AMEArmR
xAMEArmt8AMEArm2IAMEAsBGwDANBAIAAjAHAwUAKgDDIDANBgkqhkiG9w0BAQsF
AAOCAQEAWPVT8clkyMeaky2dFu3m7hA9u33tXKGzivTUx2x2/9739wbAy/yL+JwR
zUqi1kKxY2DX+Fdqitnqpk9aPIuiAVhZFw7WshwGOar9s7ze1t+09f94SasT33MR
+Aj/mPQcB8yCPJN8yT+p/0plxNcQMFI3SXWETkt5bcE1Vx5hlBcKTOUrlbAC/Igp
AHFkkCtqvLJj+1A0qqaLkcSVSoGeTjVOfuq0pPjtnqs/TR3L1/4KCjyPEI6XuYEy
U4o4kYtqSQFWNLEdaHB4EkVOfCPJ9tkJ6+4SfhrSX8ZemJWwTQs54Iv9yR41xu7H
HmsjZz6yprlckWrLMsu0ocJ70aU3bw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:37 2025 by rpki-client