Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/lXUonjcSHCnymM91YbnZZiIsRN8.roa
File: lXUonjcSHCnymM91YbnZZiIsRN8.roa (raw, json)
Hash identifier: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=
Subject key identifier: 95:75:28:9E:37:12:1C:29:F2:98:CF:75:61:B9:D9:66:22:2C:44:DF
Certificate issuer: /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial: 01942521DDCA32C561E43CF118F9D352C786
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/lXUonjcSHCnymM91YbnZZiIsRN8.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202208
IP address blocks: 185.42.252.0/22 maxlen: 22
185.42.252.0/24 maxlen: 24
185.42.254.0/23 maxlen: 23
2a01:66a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:dd:ca:32:c5:61:e4:3c:f1:18:f9:d3:52:c7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9575289e37121c29f298cf7561b9d966222c44df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:7d:d2:fe:2e:45:90:a5:05:53:b1:07:3e:
98:99:c8:29:c0:73:e8:3f:65:de:8a:80:f5:74:b1:
5b:59:f6:81:22:4d:fe:f4:3e:34:5e:d9:39:d1:d4:
d3:80:b4:bb:b7:e3:12:c9:34:21:2a:98:06:01:3b:
d9:0d:45:2f:96:ef:0b:0f:7f:d2:84:5e:f4:20:f5:
cd:99:26:7e:dc:12:79:c3:01:ae:75:c5:6f:2b:35:
14:4d:57:37:fe:08:ac:32:b9:b4:59:ea:df:f7:8c:
26:b5:70:f6:6b:64:3f:3a:28:b8:8a:88:18:60:3f:
10:0a:bc:d2:40:db:ca:f3:43:2b:d9:54:65:33:51:
6a:1e:87:b8:11:5d:a4:d1:7b:d0:2b:86:24:d3:81:
fb:b0:43:7f:cd:a8:c3:ca:22:02:15:37:e4:41:4e:
44:0a:11:e5:46:c9:75:2a:43:5c:b8:80:d1:5d:e9:
60:70:9e:ed:6f:58:15:54:93:e8:e9:4d:fc:b4:2e:
ac:40:8c:99:42:14:0e:9c:e2:75:a0:f7:a6:02:b6:
70:28:b0:37:87:b8:14:7c:ea:c3:c9:ab:87:8a:b6:
d6:55:4d:e5:bb:23:5b:d7:4e:cd:be:48:e4:08:1f:
3c:49:04:e6:00:40:b4:bb:52:81:6a:89:7b:42:82:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:28:9E:37:12:1C:29:F2:98:CF:75:61:B9:D9:66:22:2C:44:DF
X509v3 Authority Key Identifier:
keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/lXUonjcSHCnymM91YbnZZiIsRN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.252.0/22
IPv6:
2a01:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
78:c7:70:e9:59:71:9c:5f:2d:11:d5:f4:75:13:e8:0d:70:33:
09:ca:77:f9:5c:d6:b1:c3:51:53:90:8c:45:d6:23:c3:0b:f2:
85:c3:b5:08:77:25:2b:bf:40:4d:92:e0:23:ee:ea:f3:d8:12:
e1:ee:10:e8:f7:20:5b:17:1d:f3:f2:d3:90:a9:9f:59:14:76:
aa:3e:76:70:fe:73:5b:e7:7b:bb:bf:19:d8:ca:63:99:b7:46:
29:99:57:84:74:d8:8b:74:c0:7a:fb:b4:be:fe:51:d1:3e:1b:
e4:75:c7:ab:84:85:b9:c3:12:c4:af:37:22:2a:22:21:4e:b7:
91:87:54:2d:98:40:3f:ca:fd:62:4e:61:6c:47:bf:8a:bc:eb:
52:61:19:e7:31:1e:49:a7:15:4b:95:d1:0e:ff:d3:2c:91:0a:
9c:65:e0:8d:80:40:11:24:9c:38:81:0a:cc:94:16:41:8f:85:
6b:96:90:a7:00:e7:39:c6:34:86:d6:08:ca:ea:42:42:a0:1d:
7a:8d:23:9f:42:b1:65:b6:78:f3:ee:eb:97:99:00:ca:b7:82:
5e:ac:a3:cb:b9:b0:08:0a:65:2f:d9:e0:f1:44:bc:9d:d1:7b:
2b:e5:76:26:94:06:b6:33:c9:4f:fc:81:1f:9f:57:55:8a:9c:
54:43:aa:3a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlId3KMsVh5DzxGPnTUseGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOTFhN2JmMmYwM2E2N2ZkZmZjYjcxNDRiZDJmODExNGRj
ZGQzYjMwHhcNMjUwMTAyMDM0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTc1Mjg5ZTM3MTIxYzI5ZjI5OGNmNzU2MWI5ZDk2NjIyMmM0NGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruB90v4uRZClBVOxBz6YmcgpwHPo
P2XeioD1dLFbWfaBIk3+9D40Xtk50dTTgLS7t+MSyTQhKpgGATvZDUUvlu8LD3/S
hF70IPXNmSZ+3BJ5wwGudcVvKzUUTVc3/gisMrm0Werf94wmtXD2a2Q/Oii4iogY
YD8QCrzSQNvK80Mr2VRlM1FqHoe4EV2k0XvQK4Yk04H7sEN/zajDyiICFTfkQU5E
ChHlRsl1KkNcuIDRXelgcJ7tb1gVVJPo6U38tC6sQIyZQhQOnOJ1oPemArZwKLA3
h7gUfOrDyauHirbWVU3luyNb107NvkjkCB88SQTmAEC0u1KBaol7QoIrqQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJV1KJ43Ehwp8pjPdWG52WYiLETfMB8GA1UdIwQY
MBaAFMGRp78vA6Z/3/y3FEvS+BFNzdOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQt
MzQ5MjhmOWExYzRmLzEvbFhVb25qY1NIQ255bU05MVliblpaaUlzUk44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQtMzQ5MjhmOWExYzRm
LzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSr8MA0E
AgACMAcDBQAqAWagMA0GCSqGSIb3DQEBCwUAA4IBAQB4x3DpWXGcXy0R1fR1E+gN
cDMJynf5XNaxw1FTkIxF1iPDC/KFw7UIdyUrv0BNkuAj7urz2BLh7hDo9yBbFx3z
8tOQqZ9ZFHaqPnZw/nNb53u7vxnYymOZt0YpmVeEdNiLdMB6+7S+/lHRPhvkdcer
hIW5wxLErzciKiIhTreRh1QtmEA/yv1iTmFsR7+KvOtSYRnnMR5JpxVLldEO/9Ms
kQqcZeCNgEARJJw4gQrMlBZBj4VrlpCnAOc5xjSG1gjK6kJCoB16jSOfQrFltnjz
7uuXmQDKt4JerKPLubAICmUv2eDxRLyd0Xsr5XYmlAa2M8lP/IEfn1dVipxUQ6o6
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:13 2025 by rpki-client