Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/1OFEt9CxIQYLXjaOV9XZU0q4quo.roa
File: 1OFEt9CxIQYLXjaOV9XZU0q4quo.roa (raw, json)
Hash identifier: exhvybXP/uCJMXmwEnzMtTh5lP9LKuF+UJ+G5e8ZtpY=
Subject key identifier: D4:E1:44:B7:D0:B1:21:06:0B:5E:36:8E:57:D5:D9:53:4A:B8:AA:EA
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 018963ADAC12211F1455CFA8F45CA05E19D7
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/1OFEt9CxIQYLXjaOV9XZU0q4quo.roa
Signing time: Mon 17 Jul 2023 11:47:53 +0000
ROA not before: Mon 17 Jul 2023 11:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 185.135.220.0/24 maxlen: 24
185.135.223.0/24 maxlen: 24
185.135.222.0/24 maxlen: 24
185.135.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:ad:ac:12:21:1f:14:55:cf:a8:f4:5c:a0:5e:19:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jul 17 11:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4e144b7d0b121060b5e368e57d5d9534ab8aaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:b0:d1:f9:eb:c2:9d:6a:93:d6:69:0e:6c:
54:77:38:69:a3:91:1c:54:6a:8d:23:c5:9a:75:bc:
22:f2:09:4a:d6:fa:a6:56:06:16:d8:08:d9:20:4e:
41:e9:72:9e:46:07:5d:2a:91:d8:47:f5:b9:cc:72:
73:d7:9c:b8:93:74:0b:af:c4:4f:76:0a:96:ca:bb:
e0:d8:1d:99:49:1c:ae:bc:7b:af:c7:d3:6a:25:0a:
7c:a9:35:a9:c8:5d:f2:bf:eb:16:09:0e:a2:30:f1:
3e:c5:4d:f8:d4:ca:93:e9:e7:f2:2f:44:bc:8c:1b:
82:41:f2:f4:b7:3e:6e:f7:02:35:9e:4a:8e:3a:cc:
c7:db:f9:de:f3:e5:02:d1:3b:11:8a:3b:a8:43:1a:
2c:02:8e:4b:84:13:5d:1a:70:a4:f7:d9:93:8f:75:
4b:7f:5d:69:54:7b:42:9f:9e:8b:e6:87:ba:d7:0f:
f6:3d:e5:9e:c9:bd:96:44:b3:00:93:96:21:18:98:
2d:87:bc:ad:4c:66:4e:5a:8e:5c:85:19:a5:30:3a:
09:6e:fd:3f:e3:c8:ab:2d:16:74:99:2c:4c:17:70:
8f:15:58:75:75:43:0a:8d:70:e7:0f:31:6e:bd:d4:
dd:f9:96:9f:e3:69:95:68:ab:dd:20:d0:6d:dc:70:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:44:B7:D0:B1:21:06:0B:5E:36:8E:57:D5:D9:53:4A:B8:AA:EA
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/1OFEt9CxIQYLXjaOV9XZU0q4quo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9d:f1:2f:c8:37:b0:b0:79:ef:a0:47:cd:76:d6:32:41:13:
39:2a:f9:d3:3f:07:34:dd:f0:c5:9f:52:c0:b0:5e:36:bb:a6:
ea:cc:1f:cf:13:0d:f5:d3:65:f2:19:33:35:83:c9:29:a6:8f:
af:bb:f9:fd:c6:a4:d1:bf:85:be:1c:ec:04:ec:30:78:2c:a5:
c9:00:49:4e:9c:1f:96:45:1d:0a:5e:ed:77:81:da:f3:21:16:
23:80:f2:0a:b8:68:cf:9d:91:35:c5:1b:84:4a:d2:14:b7:99:
7b:8d:c0:af:c8:b0:54:fe:d5:15:fe:9b:75:9c:37:8e:62:99:
f9:cb:90:f3:21:a8:b8:10:a9:18:49:a2:df:3e:f0:f1:49:30:
86:1f:dd:14:b0:d7:d4:fa:bc:ee:a3:39:9b:f9:99:f8:fc:92:
a4:46:ce:9d:94:d8:17:f4:87:4b:e8:ab:b4:f4:49:a5:34:40:
1d:88:4e:9e:fd:53:1e:e6:f6:10:02:aa:c7:77:4a:c0:a8:77:
de:e3:3b:6b:cf:c2:30:63:4c:60:7e:84:5d:98:7e:d7:a5:0d:
9e:b9:f1:e2:4a:67:0d:e8:63:e6:e4:9a:70:ff:49:a3:1e:25:
15:6e:7c:95:44:13:43:33:9e:cb:98:87:85:30:c6:d9:1f:07:
1b:cc:c8:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYljrawSIR8UVc+o9FygXhnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh
MmE1ZWQwHhcNMjMwNzE3MTE0NzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGUxNDRiN2QwYjEyMTA2MGI1ZTM2OGU1N2Q1ZDk1MzRhYjhhYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTaw0fnrwp1qk9ZpDmxUdzhpo5Ec
VGqNI8Wadbwi8glK1vqmVgYW2AjZIE5B6XKeRgddKpHYR/W5zHJz15y4k3QLr8RP
dgqWyrvg2B2ZSRyuvHuvx9NqJQp8qTWpyF3yv+sWCQ6iMPE+xU341MqT6efyL0S8
jBuCQfL0tz5u9wI1nkqOOszH2/ne8+UC0TsRijuoQxosAo5LhBNdGnCk99mTj3VL
f11pVHtCn56L5oe61w/2PeWeyb2WRLMAk5YhGJgth7ytTGZOWo5chRmlMDoJbv0/
48irLRZ0mSxMF3CPFVh1dUMKjXDnDzFuvdTd+Zaf42mVaKvdINBt3HCwQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNThRLfQsSEGC142jlfV2VNKuKrqMB8GA1UdIwQY
MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt
ZWU3YmEwZTlmN2NhLzEvMU9GRXQ5Q3hJUVlMWGphT1Y5WFpVMHE0cXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh
LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYfcMA0G
CSqGSIb3DQEBCwUAA4IBAQA8nfEvyDewsHnvoEfNdtYyQRM5KvnTPwc03fDFn1LA
sF42u6bqzB/PEw3102XyGTM1g8kppo+vu/n9xqTRv4W+HOwE7DB4LKXJAElOnB+W
RR0KXu13gdrzIRYjgPIKuGjPnZE1xRuEStIUt5l7jcCvyLBU/tUV/pt1nDeOYpn5
y5DzIai4EKkYSaLfPvDxSTCGH90UsNfU+rzuozmb+Zn4/JKkRs6dlNgX9IdL6Ku0
9EmlNEAdiE6e/VMe5vYQAqrHd0rAqHfe4ztrz8IwY0xgfoRdmH7XpQ2eufHiSmcN
6GPm5Jpw/0mjHiUVbnyVRBNDM57LmIeFMMbZHwcbzMiC
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:38 2025 by rpki-client