Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/O7Etexn6uJjBc6ZDEMN7v-Qjy4E.roa
File: O7Etexn6uJjBc6ZDEMN7v-Qjy4E.roa (raw, json)
Hash identifier: VMDsp+0P8Ga4R/iYei3sYI7P4lmQB/aHulB2ZL0MJvg=
Subject key identifier: 3B:B1:2D:7B:19:FA:B8:98:C1:73:A6:43:10:C3:7B:BF:E4:23:CB:81
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0185EB679777D65F2AD9D24258BA5B592E15
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/O7Etexn6uJjBc6ZDEMN7v-Qjy4E.roa
Signing time: Thu 26 Jan 2023 00:08:32 +0000
ROA not before: Thu 26 Jan 2023 00:08:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 84.247.4.0/22 maxlen: 22
84.247.40.0/22 maxlen: 22
86.106.152.0/22 maxlen: 22
86.104.20.0/22 maxlen: 22
94.24.24.0/22 maxlen: 22
86.104.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:67:97:77:d6:5f:2a:d9:d2:42:58:ba:5b:59:2e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 26 00:08:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bb12d7b19fab898c173a64310c37bbfe423cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:94:21:91:cd:70:47:41:30:2f:3e:ee:28:
51:ca:1d:e0:ba:d2:d6:30:85:f3:18:0a:f5:77:b4:
eb:0c:b0:12:3c:2b:90:70:f3:e7:80:e2:97:d2:eb:
2a:00:0c:c7:1e:16:67:6d:ae:55:7f:69:29:6c:27:
4c:20:1a:30:5e:c0:3c:60:3e:cb:78:f3:88:f4:b1:
04:16:55:7a:76:03:f7:b4:c2:bd:59:e8:e7:42:f4:
6a:1b:47:99:4f:8a:b9:e2:ab:67:84:b4:b1:5e:37:
ae:48:06:1c:f8:4b:9b:26:0c:f1:3d:0a:95:fa:e5:
a4:1a:96:34:44:9c:6d:c0:88:53:32:2c:15:b0:72:
8f:ff:2b:12:e5:bd:ab:3a:49:a5:37:c5:0b:02:d8:
64:e6:39:68:6d:eb:98:3c:05:d7:55:4f:76:cb:cd:
5d:78:d0:21:95:cd:80:0b:fd:cd:bd:40:b8:a3:97:
e7:dd:32:e8:87:3b:8f:a3:b7:9e:6c:c1:8b:f9:9f:
28:dd:8f:f9:e1:0d:92:52:1a:a2:84:a9:10:23:43:
b3:e6:7d:5d:ab:24:c0:24:4c:59:36:bb:f6:2f:8b:
c0:e8:67:63:aa:cc:89:d3:5b:28:c6:5a:b0:d1:27:
7d:96:73:db:69:23:29:5a:ce:07:af:72:aa:f2:d3:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:2D:7B:19:FA:B8:98:C1:73:A6:43:10:C3:7B:BF:E4:23:CB:81
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/O7Etexn6uJjBc6ZDEMN7v-Qjy4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
94.24.24.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:7f:75:bf:70:a4:5a:67:82:e8:cd:af:4d:cf:16:6e:e2:c3:
ae:9e:06:ef:46:a6:a5:23:58:9c:1e:fb:6e:7b:cf:47:68:14:
80:fd:12:95:15:b7:2b:2a:a8:57:d1:96:bd:23:35:3e:1c:9c:
f4:9b:67:0d:dc:b2:fe:cd:12:09:cd:b3:6f:ee:a8:5f:8d:cc:
63:c7:ba:7e:ba:72:c1:29:ac:d7:d4:2b:46:d5:00:b9:49:a0:
e2:52:f8:b3:83:fb:3e:46:8b:cf:1f:bf:7b:05:8e:de:b8:5b:
3f:42:83:38:ad:b4:3a:81:f9:78:d6:47:fa:91:b6:61:15:b2:
b9:00:90:77:c2:1b:20:30:9e:b3:1b:77:ce:b2:8a:b8:93:37:
82:7e:03:5f:b7:cb:f4:9a:f9:bc:d5:58:ef:4f:29:fb:ea:aa:
63:63:98:20:9c:0d:cd:5f:1c:0b:f3:05:16:db:36:e0:f2:3e:
8b:34:91:71:8b:12:69:18:8d:0e:d8:4f:8f:69:75:74:40:e2:
94:72:22:f5:1c:ae:38:12:f2:4d:eb:f1:73:3f:8b:26:d0:51:
b2:6e:80:8c:12:97:70:fe:f1:94:a9:f9:16:1b:6b:c1:76:41:
17:b2:f2:e2:5a:d3:bc:ed:ec:da:67:dc:55:0c:82:89:91:86:
80:ad:f0:2a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYXrZ5d31l8q2dJCWLpbWS4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMwMTI2MDAwODMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmIxMmQ3YjE5ZmFiODk4YzE3M2E2NDMxMGMzN2JiZmU0MjNjYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUqUIZHNcEdBMC8+7ihRyh3gutLW
MIXzGAr1d7TrDLASPCuQcPPngOKX0usqAAzHHhZnba5Vf2kpbCdMIBowXsA8YD7L
ePOI9LEEFlV6dgP3tMK9WejnQvRqG0eZT4q54qtnhLSxXjeuSAYc+EubJgzxPQqV
+uWkGpY0RJxtwIhTMiwVsHKP/ysS5b2rOkmlN8ULAthk5jlobeuYPAXXVU92y81d
eNAhlc2AC/3NvUC4o5fn3TLohzuPo7eebMGL+Z8o3Y/54Q2SUhqihKkQI0Oz5n1d
qyTAJExZNrv2L4vA6GdjqsyJ01soxlqw0Sd9lnPbaSMpWs4Hr3Kq8tN8vwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDuxLXsZ+riYwXOmQxDDe7/kI8uBMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvTzdFdGV4bjZ1SmpCYzZaREVNTjd2LVFqeTRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCVPcEAwQC
VPcoAwQCVmgUAwQCVmj4AwQCVmqYAwQCXhgYMA0GCSqGSIb3DQEBCwUAA4IBAQDJ
f3W/cKRaZ4Loza9NzxZu4sOungbvRqalI1icHvtue89HaBSA/RKVFbcrKqhX0Za9
IzU+HJz0m2cN3LL+zRIJzbNv7qhfjcxjx7p+unLBKazX1CtG1QC5SaDiUvizg/s+
RovPH797BY7euFs/QoM4rbQ6gfl41kf6kbZhFbK5AJB3whsgMJ6zG3fOsoq4kzeC
fgNft8v0mvm81VjvTyn76qpjY5ggnA3NXxwL8wUW2zbg8j6LNJFxixJpGI0O2E+P
aXV0QOKUciL1HK44EvJN6/FzP4sm0FGyboCMEpdw/vGUqfkWG2vBdkEXsvLiWtO8
7ezaZ9xVDIKJkYaArfAq
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:49:41 2025 by rpki-client