Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/oYcXWTAMwslG4Lyzf1uXSaMlFCc.roa
File: oYcXWTAMwslG4Lyzf1uXSaMlFCc.roa (raw, json)
Hash identifier: Jyz0uKBK68KjCDHrt+EmpJCa1KjwzK5yTp/miAEuldw=
Subject key identifier: A1:87:17:59:30:0C:C2:C9:46:E0:BC:B3:7F:5B:97:49:A3:25:14:27
Certificate issuer: /CN=ad12daa384888b5247df712965803f0d3fa8989d
Certificate serial: 018704112D6976A72EE280F2FB89A30611DB
Authority key identifier: AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/oYcXWTAMwslG4Lyzf1uXSaMlFCc.roa
Signing time: Tue 21 Mar 2023 12:07:27 +0000
ROA not before: Tue 21 Mar 2023 12:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42263
IP address blocks: 185.182.32.0/22 maxlen: 22
185.115.48.0/22 maxlen: 22
5.253.192.0/22 maxlen: 22
185.32.80.0/22 maxlen: 22
185.116.244.0/24 maxlen: 24
185.116.244.0/22 maxlen: 22
192.70.192.0/22 maxlen: 22
185.173.240.0/22 maxlen: 22
185.145.196.0/22 maxlen: 22
2a00:c320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:11:2d:69:76:a7:2e:e2:80:f2:fb:89:a3:06:11:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad12daa384888b5247df712965803f0d3fa8989d
Validity
Not Before: Mar 21 12:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1871759300cc2c946e0bcb37f5b9749a3251427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:e1:6c:b8:11:8b:db:f2:5b:1d:5d:c0:bc:
07:f1:f3:45:2e:15:48:d6:cd:86:e5:91:18:d5:ea:
7f:14:80:70:91:5b:d4:d9:4c:22:f0:40:80:3c:39:
e6:85:88:44:13:63:5f:d3:cb:ac:51:59:30:f8:56:
ad:5a:46:c1:f6:c7:2c:02:fc:79:02:aa:3c:1a:40:
b8:57:3a:7d:12:23:e3:90:3a:4f:74:68:82:c1:2b:
03:97:5b:bc:19:7b:5a:a4:a3:b9:7c:5a:0c:8b:ad:
8a:96:56:49:74:04:a6:ae:60:ca:df:ed:a5:06:3f:
62:ac:11:d5:8c:a0:c5:d5:e8:c6:8f:56:b4:9c:fb:
30:5e:7f:dc:0f:f9:f2:75:5c:07:57:d3:f4:86:9f:
23:84:b4:7c:40:c3:70:77:1c:49:79:55:a2:fc:25:
6b:ba:be:29:cd:70:d6:8f:db:49:4d:71:59:f7:a6:
1a:86:c7:07:46:d5:75:78:73:8e:66:30:7e:ef:b5:
d3:10:02:75:10:c1:95:06:ec:27:09:e0:66:8b:69:
63:66:8a:92:7a:4f:24:e6:ba:c0:f5:40:a3:b0:63:
c6:85:dc:87:0f:56:9c:be:4d:8b:8e:2a:13:6d:5a:
f2:ed:c6:34:bf:e1:ff:a3:01:01:33:72:81:20:12:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:87:17:59:30:0C:C2:C9:46:E0:BC:B3:7F:5B:97:49:A3:25:14:27
X509v3 Authority Key Identifier:
keyid:AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/oYcXWTAMwslG4Lyzf1uXSaMlFCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.192.0/22
185.32.80.0/22
185.115.48.0/22
185.116.244.0/22
185.145.196.0/22
185.173.240.0/22
185.182.32.0/22
192.70.192.0/22
IPv6:
2a00:c320::/32
Signature Algorithm: sha256WithRSAEncryption
46:25:77:7d:a2:60:8d:74:da:49:d5:c1:80:b9:44:f1:e4:51:
da:c6:03:4d:47:8e:72:92:18:8a:c3:a2:cc:1f:9d:9b:5e:9d:
74:a0:d5:00:d7:31:a8:a5:9a:96:e5:b4:3c:5a:ad:79:c6:7e:
5d:c9:9a:f7:ce:e6:fe:c8:34:16:87:05:1d:a7:ff:ff:f9:e1:
ff:07:7b:df:71:13:fa:d0:ce:e7:40:fc:89:aa:28:8b:39:e5:
8f:01:41:76:a4:d7:53:a7:ce:6a:82:b3:20:60:d4:69:e6:79:
76:53:69:40:e4:70:b8:6f:b1:29:af:6d:53:08:14:59:7f:98:
a6:fa:f0:9e:8b:24:c3:f9:77:d3:b1:a0:ac:9b:42:8c:c9:9c:
20:33:df:b8:1b:5a:a3:44:85:88:c4:3f:08:52:05:04:f7:13:
68:93:aa:f0:fc:73:30:d3:0a:e1:5f:b4:bf:24:e1:28:96:3f:
e7:47:9f:76:e7:b9:9d:71:d8:0f:ae:52:74:91:d8:c7:15:fe:
ad:ea:18:c3:23:f3:14:a0:c3:db:25:df:ed:33:55:86:b2:85:
60:c2:6a:10:60:ec:c3:68:93:e7:2a:50:a0:61:9a:1e:44:56:
ec:60:1c:6c:7e:5f:eb:f8:c3:b6:26:00:72:75:98:95:31:a5:
20:c5:e9:72
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYcEES1pdqcu4oDy+4mjBhHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTJkYWEzODQ4ODhiNTI0N2RmNzEyOTY1ODAzZjBkM2Zh
ODk4OWQwHhcNMjMwMzIxMTIwNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTg3MTc1OTMwMGNjMmM5NDZlMGJjYjM3ZjViOTc0OWEzMjUxNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq3hbLgRi9vyWx1dwLwH8fNFLhVI
1s2G5ZEY1ep/FIBwkVvU2Uwi8ECAPDnmhYhEE2Nf08usUVkw+FatWkbB9scsAvx5
Aqo8GkC4Vzp9EiPjkDpPdGiCwSsDl1u8GXtapKO5fFoMi62KllZJdASmrmDK3+2l
Bj9irBHVjKDF1ejGj1a0nPswXn/cD/nydVwHV9P0hp8jhLR8QMNwdxxJeVWi/CVr
ur4pzXDWj9tJTXFZ96YahscHRtV1eHOOZjB+77XTEAJ1EMGVBuwnCeBmi2ljZoqS
ek8k5rrA9UCjsGPGhdyHD1acvk2LjioTbVry7cY0v+H/owEBM3KBIBKagwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFKGHF1kwDMLJRuC8s39bl0mjJRQnMB8GA1UdIwQY
MBaAFK0S2qOEiItSR99xKWWAPw0/qJidMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJMYW80U0lpMUpIMzNFcFpZQV9EVC1vbUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yYTk2NWMtMzM0Ny00NDNlLTg4Yzct
NWI0ZDUyZGMyZGUyLzEvb1ljWFdUQU13c2xHNEx5emYxdVhTYU1sRkNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yYTk2NWMtMzM0Ny00NDNlLTg4YzctNWI0ZDUyZGMyZGUy
LzEvclJMYW80U0lpMUpIMzNFcFpZQV9EVC1vbUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCBf3AAwQC
uSBQAwQCuXMwAwQCuXT0AwQCuZHEAwQCua3wAwQCubYgAwQCwEbAMA0EAgACMAcD
BQAqAMMgMA0GCSqGSIb3DQEBCwUAA4IBAQBGJXd9omCNdNpJ1cGAuUTx5FHaxgNN
R45ykhiKw6LMH52bXp10oNUA1zGopZqW5bQ8Wq15xn5dyZr3zub+yDQWhwUdp///
+eH/B3vfcRP60M7nQPyJqiiLOeWPAUF2pNdTp85qgrMgYNRp5nl2U2lA5HC4b7Ep
r21TCBRZf5im+vCeiyTD+XfTsaCsm0KMyZwgM9+4G1qjRIWIxD8IUgUE9xNok6rw
/HMw0wrhX7S/JOEolj/nR59257mdcdgPrlJ0kdjHFf6t6hjDI/MUoMPbJd/tM1WG
soVgwmoQYOzDaJPnKlCgYZoeRFbsYBxsfl/r+MO2JgBydZiVMaUgxely
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:07 2025 by rpki-client