Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/1-Fv9agaFkyKNnm7sR5O7GJhWTP8.roa
File: 1-Fv9agaFkyKNnm7sR5O7GJhWTP8.roa (raw, json)
Hash identifier: C0eh9ZAirKoFteBsrHOpRlZej3LpaqL3sclurkeasbY=
Subject key identifier: F8:5B:FD:6A:06:85:93:22:8D:9E:6E:EC:47:93:BB:18:98:56:4C:FF
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 0AA4D717
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/1-Fv9agaFkyKNnm7sR5O7GJhWTP8.roa
Signing time: Wed 15 Jun 2022 15:30:44 +0000
ROA not before: Wed 15 Jun 2022 15:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31531
IP address blocks: 194.31.169.0/24 maxlen: 24
194.31.170.0/24 maxlen: 24
185.248.128.0/23 maxlen: 24
194.31.168.0/24 maxlen: 24
2a0d:e580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178575127 (0xaa4d717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Jun 15 15:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f85bfd6a068593228d9e6eec4793bb1898564cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:19:f1:e9:e4:de:ac:74:06:56:8b:47:60:
1c:c6:f3:9b:c7:1d:c6:ac:47:d1:28:b9:b9:fc:c5:
6b:28:a8:83:83:a4:7a:17:96:f3:f4:59:a0:cf:3a:
ef:73:de:8e:40:cf:12:bf:27:00:e3:d9:69:c3:91:
8c:18:b1:8d:a6:0e:c0:f2:c8:4e:91:6e:10:37:c3:
7c:28:48:25:d6:10:96:2e:6f:b3:2c:18:d5:f6:ce:
e3:5b:e8:35:74:d2:be:0c:5c:d4:d6:31:87:5c:10:
d3:eb:9e:d7:65:2a:f2:33:45:d3:58:26:b3:e8:ae:
38:5a:c4:c1:13:c9:d2:f5:ed:6a:50:09:66:51:ef:
0a:b9:8b:34:4c:21:a6:ca:38:5d:65:0f:4c:c6:77:
a9:cd:d9:4f:e5:fa:77:46:a0:19:35:df:95:20:bd:
d4:86:e5:69:a7:a8:bd:87:71:0f:b2:80:b1:63:d9:
7a:e2:a8:c9:1a:5d:f8:3f:78:03:ef:30:af:a7:4b:
91:fb:c3:b5:4a:c7:84:c1:b0:a2:7d:10:3e:df:e1:
4f:4d:94:8f:7d:38:16:c0:06:44:31:54:5f:4b:53:
c4:99:f5:63:93:f4:78:a7:6d:7a:9a:3d:6d:2d:89:
64:ad:41:15:e8:a2:c5:69:30:ce:98:73:55:59:a8:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5B:FD:6A:06:85:93:22:8D:9E:6E:EC:47:93:BB:18:98:56:4C:FF
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/1-Fv9agaFkyKNnm7sR5O7GJhWTP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.128.0/23
194.31.168.0-194.31.170.255
IPv6:
2a0d:e580::/29
Signature Algorithm: sha256WithRSAEncryption
2e:0b:ff:f5:91:da:6e:0a:0a:66:a5:1c:e1:d3:89:05:86:a9:
af:ec:bd:56:b4:81:2c:ca:9d:77:43:89:c4:39:20:15:ad:e8:
b6:46:ed:c3:7c:47:d7:fd:9b:00:5f:c7:0d:13:dc:17:41:37:
c6:48:e9:8d:35:54:10:55:e2:7b:f6:82:1a:c0:f4:14:29:48:
ff:51:be:d0:b8:cf:bc:cb:a9:d5:1c:c9:ea:16:a3:47:3e:88:
07:b6:4c:af:e2:1c:03:17:39:56:72:5b:43:b2:4b:46:33:58:
f9:96:d7:0b:fa:32:74:c1:e4:92:48:f1:7f:f4:35:6b:b4:a5:
51:9a:36:69:4a:0e:59:3a:b1:33:19:9e:b6:33:2e:42:cb:81:
6e:29:51:c8:01:c3:87:a0:6a:32:68:6d:37:ad:a6:5c:84:05:
30:48:73:fb:f3:61:ed:de:ff:e9:b7:ab:b2:8e:d5:29:0f:45:
d2:81:33:b6:c1:52:80:5c:a7:ab:e2:cd:b8:4f:94:f8:31:f0:
53:79:1f:9b:9e:31:ce:4f:fb:11:5a:ec:3c:a0:11:ac:71:16:
92:0d:2b:f9:13:1a:c5:6f:00:c9:01:e5:28:50:59:f0:3f:16:
13:1e:f5:26:c7:fc:97:21:1c:b5:7b:81:fb:11:03:e2:7d:46:
4c:2c:42:f8
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIECqTXFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NjBkNmNhOTVlMjc3MGY1NTM0MGQ5MDllYzdjOTdlZWNhM2ZlMjBlMB4XDTIyMDYx
NTE1MzA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg1YmZkNmEwNjg1
OTMyMjhkOWU2ZWVjNDc5M2JiMTg5ODU2NGNmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKs5GfHp5N6sdAZWi0dgHMbzm8cdxqxH0Si5ufzFayiog4Ok
eheW8/RZoM8673PejkDPEr8nAOPZacORjBixjaYOwPLITpFuEDfDfChIJdYQli5v
sywY1fbO41voNXTSvgxc1NYxh1wQ0+ue12Uq8jNF01gms+iuOFrEwRPJ0vXtalAJ
ZlHvCrmLNEwhpso4XWUPTMZ3qc3ZT+X6d0agGTXflSC91IblaaeovYdxD7KAsWPZ
euKoyRpd+D94A+8wr6dLkfvDtUrHhMGwon0QPt/hT02Uj304FsAGRDFUX0tTxJn1
Y5P0eKdtepo9bS2JZK1BFeiixWkwzphzVVmoo9ECAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBT4W/1qBoWTIo2ebuxHk7sYmFZM/zAfBgNVHSMEGDAWgBS2DWypXidw9VNA
2QnsfJfuyj/iDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RnMXNxVjRuY1BWVFFOa0o3SHlYN3NvXzRnNC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTMvMDMzZThiLWJkZTEtNGY5MC1iYWY1LTIzODQ3YTQwZDllNC8x
LzEtRnY5YWdhRmt5S05ubTdzUjVPN0dKaFdUUDgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Ez
LzAzM2U4Yi1iZGUxLTRmOTAtYmFmNS0yMzg0N2E0MGQ5ZTQvMS90ZzFzcVY0bmNQ
VlRRTmtKN0h5WDdzb180ZzQuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
PAYIKwYBBQUHAQcBAf8ELTArMBoEAgABMBQDBAG5+IAwDAMEA8IfqAMEAMIfqjAN
BAIAAjAHAwUDKg3lgDANBgkqhkiG9w0BAQsFAAOCAQEALgv/9ZHabgoKZqUc4dOJ
BYapr+y9VrSBLMqdd0OJxDkgFa3otkbtw3xH1/2bAF/HDRPcF0E3xkjpjTVUEFXi
e/aCGsD0FClI/1G+0LjPvMup1RzJ6hajRz6IB7ZMr+IcAxc5VnJbQ7JLRjNY+ZbX
C/oydMHkkkjxf/Q1a7SlUZo2aUoOWTqxMxmetjMuQsuBbilRyAHDh6BqMmhtN62m
XIQFMEhz+/Nh7d7/6berso7VKQ9F0oEztsFSgFynq+LNuE+U+DHwU3kfm54xzk/7
EVrsPKARrHEWkg0r+RMaxW8AyQHlKFBZ8D8WEx71Jsf8lyEctXuB+xED4n1GTCxC
+A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:29 2025 by rpki-client