Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/P79q0XI6jMHcEUJUje7vbekXqMM.roa
File: P79q0XI6jMHcEUJUje7vbekXqMM.roa (raw, json)
Hash identifier: rfk192nc+MyT+AA9yTeZKZSIGbJXkqx89FY7vI7SgFM=
Subject key identifier: 3F:BF:6A:D1:72:3A:8C:C1:DC:11:42:54:8D:EE:EF:6D:E9:17:A8:C3
Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial: 01942444AFB8FBE658198B940E6C326BF512
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/P79q0XI6jMHcEUJUje7vbekXqMM.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38983
IP address blocks: 5.172.216.0/21 maxlen: 24
185.64.192.0/22 maxlen: 24
185.122.152.0/22 maxlen: 22
188.126.96.0/19 maxlen: 24
188.126.108.0/23 maxlen: 23
188.126.112.0/21 maxlen: 22
2a09:f400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:af:b8:fb:e6:58:19:8b:94:0e:6c:32:6b:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fbf6ad1723a8cc1dc1142548deeef6de917a8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:56:a1:d5:25:36:77:9d:33:51:35:a2:27:
33:0d:3b:f1:ca:4a:86:72:0a:ce:f5:10:ae:f1:c5:
10:68:57:11:e0:58:8a:10:d9:8f:25:29:fe:81:ef:
df:55:59:96:cd:60:05:f6:cf:ef:1a:a9:d3:d1:96:
fd:60:4d:c5:64:7f:f4:66:49:c0:0d:9a:78:20:aa:
6c:7b:da:e8:5f:34:45:3d:a8:5c:af:02:55:44:1f:
68:b9:0c:ad:8a:77:1e:97:14:09:b7:82:dc:c3:af:
5d:b9:15:86:dc:26:0b:8d:dd:fa:d3:8e:df:c5:83:
cb:10:e9:07:91:dc:42:a3:33:51:8b:d6:03:4c:01:
33:54:f0:e5:5e:68:fa:a9:75:6e:61:40:c8:84:85:
59:02:49:b3:74:78:c7:6e:75:4b:49:e4:79:e5:87:
7c:f2:4b:eb:af:4a:c7:61:22:f1:46:b4:72:12:2a:
68:15:64:3a:e7:25:52:ef:33:5c:81:79:4b:73:15:
ad:87:6f:7c:13:4a:f7:4c:24:07:42:6b:46:c1:99:
96:fd:37:76:6b:f9:30:04:5a:b1:42:7e:b2:2c:84:
6c:ae:b0:c9:09:e2:38:d0:cb:a5:f3:b8:b4:f7:4b:
f0:0c:4b:da:f0:8e:3f:56:de:23:6c:0b:7b:9c:79:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BF:6A:D1:72:3A:8C:C1:DC:11:42:54:8D:EE:EF:6D:E9:17:A8:C3
X509v3 Authority Key Identifier:
keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/P79q0XI6jMHcEUJUje7vbekXqMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.216.0/21
185.64.192.0/22
185.122.152.0/22
188.126.96.0/19
IPv6:
2a09:f400::/29
Signature Algorithm: sha256WithRSAEncryption
08:8c:78:ee:92:1f:90:04:35:9e:32:c5:f8:04:e6:a8:bc:b0:
3e:d2:77:d1:56:01:71:0b:82:53:2e:34:b9:b6:e2:ea:db:58:
f1:ac:a8:b6:5b:7e:5f:5d:71:d5:d2:15:f2:7d:a8:74:5b:46:
28:a9:99:4a:1e:41:54:18:3e:94:b7:83:f2:4f:13:bb:a3:bd:
f7:8b:12:9f:84:0c:fc:e7:c3:bc:32:f6:ff:c7:fd:c5:d7:5c:
fe:52:27:3e:e6:24:a0:cc:13:90:41:9c:64:d5:9f:1a:e7:6d:
e8:61:bb:a2:a6:61:5a:f4:7d:de:45:a5:4b:f8:bc:7e:c7:e8:
7a:a6:20:fb:90:07:46:a9:ba:74:ab:4c:c9:47:13:c5:7b:18:
38:39:a4:7e:d2:c7:65:6a:04:22:b0:ec:dc:db:bf:da:79:5e:
66:11:3c:e9:22:6c:51:71:83:28:b6:97:d7:bd:8b:b0:12:71:
8c:12:4f:54:20:36:5c:e1:25:a9:35:65:99:0c:fd:59:bf:b0:
13:26:a4:a5:c5:0a:fb:87:ce:57:d7:1a:26:5b:ab:bf:47:3b:
91:59:ea:46:01:b1:32:5b:8f:5d:01:af:de:92:23:a2:5f:a4:
20:fd:2b:60:65:34:51:8c:59:59:65:96:8f:ed:94:ec:19:b2:
6f:38:8a:4f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQkRK+4++ZYGYuUDmwya/USMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyM2FiNWJhOThiZWY1ZDBkOWJkMGNlYTAzMWExZmUxMzc3
N2E0ODYwHhcNMjUwMTAxMjM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmJmNmFkMTcyM2E4Y2MxZGMxMTQyNTQ4ZGVlZWY2ZGU5MTdhOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHZWodUlNnedM1E1oiczDTvxykqG
cgrO9RCu8cUQaFcR4FiKENmPJSn+ge/fVVmWzWAF9s/vGqnT0Zb9YE3FZH/0ZknA
DZp4IKpse9roXzRFPahcrwJVRB9ouQytincelxQJt4Lcw69duRWG3CYLjd36047f
xYPLEOkHkdxCozNRi9YDTAEzVPDlXmj6qXVuYUDIhIVZAkmzdHjHbnVLSeR55Yd8
8kvrr0rHYSLxRrRyEipoFWQ65yVS7zNcgXlLcxWth298E0r3TCQHQmtGwZmW/Td2
a/kwBFqxQn6yLIRsrrDJCeI40Mul87i090vwDEva8I4/Vt4jbAt7nHkkGQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFD+/atFyOozB3BFCVI3u723pF6jDMB8GA1UdIwQY
MBaAFDI6tbqYvvXQ2b0M6gMaH+E3d6SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQt
Zjk1MTI0OTllMDVjLzEvUDc5cTBYSTZqTUhjRVVKVWplN3ZiZWtYcU1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQtZjk1MTI0OTllMDVj
LzEvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBazYAwQC
uUDAAwQCuXqYAwQFvH5gMA0EAgACMAcDBQMqCfQAMA0GCSqGSIb3DQEBCwUAA4IB
AQAIjHjukh+QBDWeMsX4BOaovLA+0nfRVgFxC4JTLjS5tuLq21jxrKi2W35fXXHV
0hXyfah0W0YoqZlKHkFUGD6Ut4PyTxO7o733ixKfhAz858O8Mvb/x/3F11z+Uic+
5iSgzBOQQZxk1Z8a523oYbuipmFa9H3eRaVL+Lx+x+h6piD7kAdGqbp0q0zJRxPF
exg4OaR+0sdlagQisOzc27/aeV5mETzpImxRcYMotpfXvYuwEnGMEk9UIDZc4SWp
NWWZDP1Zv7ATJqSlxQr7h85X1xomW6u/RzuRWepGAbEyW49dAa/ekiOiX6Qg/Stg
ZTRRjFlZZZaP7ZTsGbJvOIpP
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:42:50 2025 by rpki-client