Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/27ql0pmKcM7odOuyt-r9IUbz8H0.roa
File: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (raw, json)
Hash identifier: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=
Subject key identifier: DB:BA:A5:D2:99:8A:70:CE:E8:74:EB:B2:B7:EA:FD:21:46:F3:F0:7D
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 019426D9882EA522442EA3A3A536F37E7241
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/27ql0pmKcM7odOuyt-r9IUbz8H0.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205157
IP address blocks: 185.70.162.0/24 maxlen: 24
185.228.168.0/24 maxlen: 24
185.228.169.0/24 maxlen: 24
185.228.170.0/24 maxlen: 24
185.228.171.0/24 maxlen: 24
2a0d:2a00:1::/48 maxlen: 48
2a0d:2a00:2::/48 maxlen: 48
2a0d:2a00:c0::/48 maxlen: 48
2a0d:2a00:ab1::/48 maxlen: 48
2a0d:2a00:ab2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:88:2e:a5:22:44:2e:a3:a3:a5:36:f3:7e:72:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbbaa5d2998a70cee874ebb2b7eafd2146f3f07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:31:25:a8:a1:16:3a:be:7e:62:10:af:e6:
0c:93:80:2d:f9:7e:e0:40:4a:c8:65:ca:6d:90:61:
25:e0:35:4b:f8:1b:ca:b5:35:9d:1e:c0:e2:7f:ed:
40:9e:8d:ae:24:9f:5e:42:0c:19:10:69:f2:82:5c:
fc:99:cc:90:2b:07:99:40:8e:c9:79:1d:d0:c2:48:
6b:5f:c1:3e:dc:4c:cf:3c:93:4d:10:74:4d:1b:69:
2e:0c:42:98:95:57:be:83:4d:e7:00:4a:ff:23:37:
22:ca:08:3f:70:c2:2d:c1:88:49:2f:26:84:ba:e2:
da:67:ea:76:0f:d4:9f:61:b4:c6:cd:64:1e:7e:f0:
38:5c:d2:24:d2:89:ee:a8:94:ed:e9:e6:30:2c:03:
18:fc:3e:e6:fc:ec:57:fc:be:02:af:ae:6d:fe:83:
99:ae:0e:fe:11:0b:69:ee:df:b5:c4:14:7f:56:5a:
07:9d:d7:cb:84:5f:8b:58:8d:09:5b:c8:c3:95:fe:
85:2a:b7:38:db:f5:0d:5a:59:ac:65:dc:b7:02:da:
f1:d1:f6:0a:35:45:2b:36:3d:d1:08:19:0c:5d:8d:
83:9f:b2:ea:14:d0:b5:ca:17:97:95:15:fa:0d:32:
a2:dd:d5:b3:1c:5e:87:5a:91:17:a5:b9:70:d7:8c:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:A5:D2:99:8A:70:CE:E8:74:EB:B2:B7:EA:FD:21:46:F3:F0:7D
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/27ql0pmKcM7odOuyt-r9IUbz8H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.162.0/24
185.228.168.0/22
IPv6:
2a0d:2a00:1::-2a0d:2a00:2:ffff:ffff:ffff:ffff:ffff
2a0d:2a00:c0::/48
2a0d:2a00:ab1::-2a0d:2a00:ab2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ae:f6:05:cf:af:c6:a2:47:69:af:38:5d:a8:3e:a4:32:63:01:
08:40:9d:50:c1:1e:23:5c:e8:a6:3f:52:47:13:bc:79:eb:e0:
7d:93:80:4c:41:6e:cc:7f:f7:14:c9:f8:39:3d:66:7b:a8:23:
d4:16:ab:e6:5f:7a:40:31:c3:d2:52:20:69:9c:cd:80:28:56:
cd:43:c1:cc:e2:e9:8a:b6:2b:2f:e3:a1:4e:63:6c:3c:9f:6c:
e8:1d:b4:3e:9e:e0:81:ce:f3:f4:ba:09:cc:9c:34:0d:c0:a1:
d2:d5:f6:76:53:8f:25:a3:ea:b9:9a:18:f5:ff:3d:9d:39:11:
47:6a:9b:d5:28:6c:d5:d8:b8:66:15:75:d3:27:11:11:d4:d6:
2b:a7:df:7b:20:d6:5c:3a:0b:af:dd:ee:89:80:e4:b4:a7:a3:
97:0d:5a:15:25:6b:12:eb:ac:1b:29:7a:24:7d:c6:06:e1:67:
05:56:53:a6:e1:82:91:5a:fc:de:9e:31:d0:3b:5e:0f:0d:08:
44:d5:62:cc:38:9b:15:05:c8:c4:29:37:00:07:e3:e1:6d:14:
13:47:5d:a7:03:0b:21:b8:8f:1f:71:c4:7a:32:e4:9c:64:18:
52:92:e3:ff:25:05:7a:8e:b5:27:fd:b5:63:58:ea:30:ea:9d:
e5:ac:62:80
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZQm2YgupSJELqOjpTbzfnJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjVmMDgwMzFlMzVhZjk1NDVkM2FkM2QxMzhjYWQxMDM5
NmUyY2EwHhcNMjUwMTAyMTE0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmJhYTVkMjk5OGE3MGNlZTg3NGViYjJiN2VhZmQyMTQ2ZjNmMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc8xJaihFjq+fmIQr+YMk4At+X7g
QErIZcptkGEl4DVL+BvKtTWdHsDif+1Ano2uJJ9eQgwZEGnyglz8mcyQKweZQI7J
eR3QwkhrX8E+3EzPPJNNEHRNG2kuDEKYlVe+g03nAEr/Izciygg/cMItwYhJLyaE
uuLaZ+p2D9SfYbTGzWQefvA4XNIk0onuqJTt6eYwLAMY/D7m/OxX/L4Cr65t/oOZ
rg7+EQtp7t+1xBR/VloHndfLhF+LWI0JW8jDlf6FKrc42/UNWlmsZdy3Atrx0fYK
NUUrNj3RCBkMXY2Dn7LqFNC1yheXlRX6DTKi3dWzHF6HWpEXpblw14we/wIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFNu6pdKZinDO6HTrsrfq/SFG8/B9MB8GA1UdIwQY
MBaAFPz18IAx41r5VF0609E4ytEDluLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUt
YmNiZmIxODk4ZWJhLzEvMjdxbDBwbUtjTTdvZE91eXQtcjlJVWJ6OEgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUtYmNiZmIxODk4ZWJh
LzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTASBAIAATAMAwQAuUaiAwQC
ueSoMDcEAgACMDEwEgMHACoNKgAAAQMHACoNKgAAAgMHACoNKgAAwDASAwcAKg0q
AAqxAwcAKg0qAAqyMA0GCSqGSIb3DQEBCwUAA4IBAQCu9gXPr8aiR2mvOF2oPqQy
YwEIQJ1QwR4jXOimP1JHE7x56+B9k4BMQW7Mf/cUyfg5PWZ7qCPUFqvmX3pAMcPS
UiBpnM2AKFbNQ8HM4umKtisv46FOY2w8n2zoHbQ+nuCBzvP0ugnMnDQNwKHS1fZ2
U48lo+q5mhj1/z2dORFHapvVKGzV2LhmFXXTJxER1NYrp997INZcOguv3e6JgOS0
p6OXDVoVJWsS66wbKXokfcYG4WcFVlOm4YKRWvzenjHQO14PDQhE1WLMOJsVBcjE
KTcAB+PhbRQTR12nAwshuI8fccR6MuScZBhSkuP/JQV6jrUn/bVjWOow6p3lrGKA
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:11 2025 by rpki-client