Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/AdtLsSKpD88rZG8vPkZiD9QZ3II.roa
File: AdtLsSKpD88rZG8vPkZiD9QZ3II.roa (raw, json)
Hash identifier: r/TtnbjU6TzYG7n4J08Ln2zhCxACBBJlAa/WOkQ9bLA=
Subject key identifier: 01:DB:4B:B1:22:A9:0F:CF:2B:64:6F:2F:3E:46:62:0F:D4:19:DC:82
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 019425203AAB24F0A63B5170A392FB19B2C9
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/AdtLsSKpD88rZG8vPkZiD9QZ3II.roa
Signing time: Thu 02 Jan 2025 03:47:36 +0000
ROA not before: Thu 02 Jan 2025 03:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 185.149.60.0/22 maxlen: 24
185.234.53.0/24 maxlen: 24
185.234.54.0/23 maxlen: 24
2a05:c0c0::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:3a:ab:24:f0:a6:3b:51:70:a3:92:fb:19:b2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Jan 2 03:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01db4bb122a90fcf2b646f2f3e46620fd419dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:55:e3:4a:d6:5e:f2:5f:47:19:bb:14:34:
eb:32:16:e8:5f:1f:66:e1:43:f4:44:f0:39:f4:df:
03:e6:0f:e1:7f:1e:35:5d:6c:46:00:cc:48:c3:fa:
f1:86:c7:de:f1:35:c2:a5:42:28:62:56:c6:f8:dd:
cc:8d:d7:47:40:46:9d:a2:de:d0:eb:fa:c7:fd:e5:
eb:e6:cd:e8:32:8b:65:e8:9c:6f:c7:06:e5:35:af:
4c:0c:da:0e:e9:02:19:a0:c9:87:88:f1:d0:f4:a0:
c6:0b:e6:cb:3b:05:93:eb:d5:d8:2f:20:b0:cd:63:
f8:ee:6e:c3:05:d5:b7:00:dd:13:ab:9b:14:69:fb:
1e:6a:09:fa:41:91:b5:d3:17:50:7b:4f:93:d1:68:
e9:bd:97:4a:09:d6:19:02:bb:65:7f:27:b2:37:d0:
09:a4:e7:c3:38:3b:d7:76:dd:4f:b4:22:80:71:6c:
37:22:e9:df:f9:f6:21:60:2b:33:35:4f:1f:b4:74:
71:df:c2:72:21:2d:5c:1f:13:a8:2e:e9:9f:99:6b:
01:82:0f:0b:01:bc:1e:11:53:8f:b7:5a:cb:0c:cc:
ba:59:9c:4d:9f:54:f3:bd:92:de:99:5f:ba:31:4d:
59:29:86:eb:5d:96:8a:c6:4a:8b:4d:0e:b1:4d:26:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DB:4B:B1:22:A9:0F:CF:2B:64:6F:2F:3E:46:62:0F:D4:19:DC:82
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/AdtLsSKpD88rZG8vPkZiD9QZ3II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.60.0/22
185.234.53.0-185.234.55.255
IPv6:
2a05:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:84:c3:63:d0:b7:0f:69:51:a0:f7:bc:af:ea:5b:c6:3e:a5:
8b:9a:b9:86:5f:c2:6c:90:b9:98:04:f4:63:e6:23:d4:09:7f:
28:e9:0b:61:c0:8f:e1:34:14:6a:dc:22:89:0b:c3:cf:1d:8a:
f5:31:41:49:1d:54:50:63:60:41:fc:19:66:c8:d3:89:20:c1:
f5:30:83:e2:8d:0a:42:3c:8f:8f:eb:de:e6:95:99:ff:af:03:
17:2d:fd:9c:a2:04:5b:90:2e:d1:09:11:44:51:af:80:a1:9a:
52:5f:75:7a:21:5d:df:e5:bd:da:6c:4e:96:b4:bb:14:a9:2f:
62:1f:ab:3f:20:c7:d0:9f:c4:df:d3:48:2f:dd:ac:e3:b4:42:
0e:c0:a1:c2:7a:20:49:9e:ae:69:a8:6c:63:0c:8b:46:1f:ca:
70:9a:59:0b:1c:0e:42:25:bb:87:6b:24:7a:f3:c7:f4:6b:5f:
bc:b2:c2:53:19:95:33:a3:09:f0:4b:dc:a0:d2:dd:05:82:56:
a5:d5:fd:78:b7:e4:e9:a8:f2:85:c8:89:17:b3:a9:4b:bf:e2:
60:4b:6b:c8:d4:1f:2c:7c:60:6e:38:01:ab:b2:d2:5a:36:fe:
a2:04:f0:d9:42:97:ce:84:54:1e:8e:98:f3:a3:76:05:45:ea:
84:6f:cb:d0
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQlIDqrJPCmO1Fwo5L7GbLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTgzOWVhNTliOTc1ODI0ZmQ3MDhhMGFkNzM1NTUwMDE3
Y2JmN2MwHhcNMjUwMTAyMDM0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWRiNGJiMTIyYTkwZmNmMmI2NDZmMmYzZTQ2NjIwZmQ0MTlkYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12pV40rWXvJfRxm7FDTrMhboXx9m
4UP0RPA59N8D5g/hfx41XWxGAMxIw/rxhsfe8TXCpUIoYlbG+N3MjddHQEadot7Q
6/rH/eXr5s3oMotl6JxvxwblNa9MDNoO6QIZoMmHiPHQ9KDGC+bLOwWT69XYLyCw
zWP47m7DBdW3AN0Tq5sUafseagn6QZG10xdQe0+T0WjpvZdKCdYZArtlfyeyN9AJ
pOfDODvXdt1PtCKAcWw3Iunf+fYhYCszNU8ftHRx38JyIS1cHxOoLumfmWsBgg8L
AbweEVOPt1rLDMy6WZxNn1TzvZLemV+6MU1ZKYbrXZaKxkqLTQ6xTSbRLQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFAHbS7EiqQ/PK2RvLz5GYg/UGdyCMB8GA1UdIwQY
MBaAFHfoOepZuXWCT9cIoK1zVVABfL98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUt
Yzc5YTNmYTcxZDM0LzEvQWR0THNTS3BEODhyWkc4dlBrWmlEOVFaM0lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUtYzc5YTNmYTcxZDM0
LzEvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCuZU8MAwD
BAC56jUDBAO56jAwDQQCAAIwBwMFAyoFwMAwDQYJKoZIhvcNAQELBQADggEBAGiE
w2PQtw9pUaD3vK/qW8Y+pYuauYZfwmyQuZgE9GPmI9QJfyjpC2HAj+E0FGrcIokL
w88divUxQUkdVFBjYEH8GWbI04kgwfUwg+KNCkI8j4/r3uaVmf+vAxct/ZyiBFuQ
LtEJEURRr4ChmlJfdXohXd/lvdpsTpa0uxSpL2Ifqz8gx9CfxN/TSC/drOO0Qg7A
ocJ6IEmermmobGMMi0YfynCaWQscDkIlu4drJHrzx/RrX7yywlMZlTOjCfBL3KDS
3QWCVqXV/Xi35Omo8oXIiRezqUu/4mBLa8jUHyx8YG44Aauy0lo2/qIE8NlCl86E
VB6OmPOjdgVF6oRvy9A=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:17:16 2025 by rpki-client