Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa
File: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (raw, json)
Hash identifier: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=
Subject key identifier: 0E:1E:8A:C9:CF:F4:61:1A:54:91:06:9C:88:B2:8D:4C:5A:63:DB:26
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 01942444BE4E3F58386263526BD7F54C56B0
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21276
IP address blocks: 93.187.111.0/24 maxlen: 32
185.110.92.0/24 maxlen: 32
185.110.95.0/24 maxlen: 32
2a14:5400::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:be:4e:3f:58:38:62:63:52:6b:d7:f5:4c:56:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e1e8ac9cff4611a5491069c88b28d4c5a63db26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:3f:fb:9c:3c:fe:e4:b8:85:a7:3a:eb:85:
51:b6:08:10:f6:c9:48:b8:17:bf:d2:4e:93:ae:3f:
e5:63:f8:6f:a8:f9:2b:85:a6:4d:40:e2:77:51:fb:
07:31:1a:8d:f4:95:f9:8f:99:be:e4:61:ec:3b:8c:
27:12:1d:1c:5e:76:4e:80:b4:7d:e3:9e:21:33:fe:
a2:c1:57:71:c4:19:fa:15:6d:3b:d9:a1:7a:cc:27:
99:0c:e5:cf:da:fa:16:c1:a4:09:0b:ba:d1:ae:0a:
3b:f2:21:08:36:87:62:92:ba:26:3c:29:9a:2e:ac:
8e:45:63:8e:04:c6:fe:51:bd:0f:98:a6:50:76:0a:
48:0e:fa:08:a7:48:ac:9f:8a:39:e5:ce:3b:88:23:
aa:2f:8f:4a:4e:61:89:2d:8d:a5:65:5d:58:d4:0e:
3a:53:66:1f:9c:d9:88:0a:43:9d:fa:38:5f:87:77:
38:35:95:43:b4:ea:df:93:b4:ae:e4:7a:eb:fa:f3:
8c:a6:51:39:11:8f:f4:79:4b:d5:e0:76:f0:30:97:
24:64:05:f8:90:33:6a:4e:c7:b0:90:f8:28:e1:88:
ec:8e:0b:a7:e9:65:cd:f1:c0:d4:c3:69:74:bb:67:
dc:6f:8b:82:92:3c:09:dc:e3:ae:13:4f:dc:cb:12:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:8A:C9:CF:F4:61:1A:54:91:06:9C:88:B2:8D:4C:5A:63:DB:26
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.111.0/24
185.110.92.0/24
185.110.95.0/24
IPv6:
2a14:5400::/32
Signature Algorithm: sha256WithRSAEncryption
10:25:6c:de:80:ad:d0:1b:dd:85:58:09:a8:a7:5f:89:d8:84:
34:67:2e:07:58:76:30:6d:9c:31:f0:1c:d6:ad:cd:ed:49:ab:
56:0f:65:09:ce:2f:cf:41:11:4b:2d:dd:9e:8b:e5:4a:ff:73:
9a:8e:e3:b9:e9:57:84:d9:44:c0:02:52:a5:0b:ad:13:6d:78:
91:cb:ac:4b:71:28:75:a7:91:81:8c:10:27:fd:98:90:cb:e4:
d2:54:a9:83:95:15:70:9a:0a:bb:e3:ec:c7:75:72:90:d0:d7:
5d:e5:f9:f7:80:d6:15:0b:43:aa:f8:29:e1:24:e5:d2:8d:a0:
db:9d:5f:63:fa:54:6f:22:9e:0a:0b:c8:f5:6f:45:f1:6f:5f:
73:50:1f:62:f3:83:92:87:74:4b:40:d8:ae:c4:c2:61:01:3d:
e4:f6:2c:f5:18:0d:bf:9b:a8:92:72:14:fc:0c:0d:0b:b5:8f:
18:04:30:d2:ed:1d:b9:f6:e9:dc:1d:52:6a:8a:70:69:f2:34:
2c:89:cb:c2:7e:c0:af:ac:0b:88:61:0f:08:69:91:a6:c5:bf:
9f:ec:b4:a9:a9:8a:8b:40:79:71:8f:40:d0:bb:42:19:24:8b:
a1:dd:62:f8:d4:45:7c:6f:be:8e:0f:85:72:65:29:d2:c1:cc:
72:6e:05:06
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQkRL5OP1g4YmNSa9f1TFawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi
NDFhNGUwHhcNMjUwMTAxMjM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTFlOGFjOWNmZjQ2MTFhNTQ5MTA2OWM4OGIyOGQ0YzVhNjNkYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFU/+5w8/uS4hac664VRtggQ9slI
uBe/0k6Trj/lY/hvqPkrhaZNQOJ3UfsHMRqN9JX5j5m+5GHsO4wnEh0cXnZOgLR9
454hM/6iwVdxxBn6FW072aF6zCeZDOXP2voWwaQJC7rRrgo78iEINodikromPCma
LqyORWOOBMb+Ub0PmKZQdgpIDvoIp0isn4o55c47iCOqL49KTmGJLY2lZV1Y1A46
U2YfnNmICkOd+jhfh3c4NZVDtOrfk7Su5Hrr+vOMplE5EY/0eUvV4HbwMJckZAX4
kDNqTsewkPgo4Yjsjgun6WXN8cDUw2l0u2fcb4uCkjwJ3OOuE0/cyxIvzwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFA4eisnP9GEaVJEGnIiyjUxaY9smMB8GA1UdIwQY
MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt
NDRmZGU5NmI4YWVjLzEvRGg2S3ljXzBZUnBVa1FhY2lMS05URnBqMnlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj
LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAXbtvAwQA
uW5cAwQAuW5fMA0EAgACMAcDBQAqFFQAMA0GCSqGSIb3DQEBCwUAA4IBAQAQJWze
gK3QG92FWAmop1+J2IQ0Zy4HWHYwbZwx8BzWrc3tSatWD2UJzi/PQRFLLd2ei+VK
/3OajuO56VeE2UTAAlKlC60TbXiRy6xLcSh1p5GBjBAn/ZiQy+TSVKmDlRVwmgq7
4+zHdXKQ0Ndd5fn3gNYVC0Oq+CnhJOXSjaDbnV9j+lRvIp4KC8j1b0Xxb19zUB9i
84OSh3RLQNiuxMJhAT3k9iz1GA2/m6iSchT8DA0LtY8YBDDS7R259uncHVJqinBp
8jQsicvCfsCvrAuIYQ8IaZGmxb+f7LSpqYqLQHlxj0DQu0IZJIuh3WL41EV8b76O
D4VyZSnSwcxybgUG
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:14 2025 by rpki-client