Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/OsS2avf_SCsvTL1pRqTL_5n-su8.roa
File: OsS2avf_SCsvTL1pRqTL_5n-su8.roa (raw, json)
Hash identifier: q2VY8Sbvggao2o4h3H+VtLne6bMzXujw9hwcUuBVuOM=
Subject key identifier: 3A:C4:B6:6A:F7:FF:48:2B:2F:4C:BD:69:46:A4:CB:FF:99:FE:B2:EF
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 019426D9A50417FAF1A9512177CE0D4E66B0
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/OsS2avf_SCsvTL1pRqTL_5n-su8.roa
Signing time: Thu 02 Jan 2025 11:49:45 +0000
ROA not before: Thu 02 Jan 2025 11:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44407
IP address blocks: 185.111.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a5:04:17:fa:f1:a9:51:21:77:ce:0d:4e:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ac4b66af7ff482b2f4cbd6946a4cbff99feb2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:ee:83:62:8b:74:af:21:1f:05:a4:2a:a9:
c1:bd:3e:eb:58:bf:ac:6f:e9:b4:bd:cc:2f:1a:a7:
f3:c8:e8:4a:37:db:b1:09:bc:de:22:b6:25:d0:ee:
6f:56:16:83:14:71:76:a5:31:b4:69:c2:83:31:84:
20:4c:2e:a4:ed:b2:ab:f0:e5:0e:fd:3b:80:45:bc:
d0:df:c9:9e:54:d3:15:dc:6b:9f:53:cd:5b:c4:87:
ec:02:1e:d4:a8:45:0f:ea:4f:83:f1:2c:83:3a:7b:
70:a4:dd:ba:95:f3:9f:48:a2:e4:25:f4:45:66:0b:
d7:07:d2:c3:19:70:07:d8:d9:39:6e:8b:65:75:6b:
fb:c6:f8:99:24:73:b8:3c:99:92:46:98:40:a9:d8:
07:17:78:25:8b:9a:43:72:68:fe:a3:9d:bd:86:45:
89:9f:83:6e:19:86:90:74:38:88:1f:2a:35:55:eb:
78:27:3a:c8:09:ee:72:9c:89:3f:da:72:6e:c2:52:
b8:4b:7c:d6:6a:d4:2c:2b:25:99:b0:3a:3d:1a:7d:
01:7c:5f:4c:68:99:e0:27:34:95:9a:92:f4:6c:70:
92:76:15:d3:ad:0a:39:82:05:7e:b5:8a:fb:ac:73:
ad:30:11:5b:ec:83:28:d0:3b:33:25:60:3c:89:46:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:B6:6A:F7:FF:48:2B:2F:4C:BD:69:46:A4:CB:FF:99:FE:B2:EF
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/OsS2avf_SCsvTL1pRqTL_5n-su8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.16.0/22
Signature Algorithm: sha256WithRSAEncryption
24:ff:03:24:46:af:96:09:99:c0:98:55:44:05:db:25:68:89:
6d:fd:5e:a9:ee:83:39:6d:9c:ea:8a:2d:0c:7d:07:92:56:af:
50:d6:01:0f:70:a4:22:af:be:4f:5c:95:65:79:0a:22:a2:75:
ec:f1:8e:3a:53:99:7e:ec:12:a8:4b:9c:d4:96:4d:fc:e8:0c:
fb:6c:99:86:37:dd:52:10:7e:8b:73:5f:6d:fd:76:37:c1:e8:
f6:0a:fa:56:35:6b:36:6e:26:2e:7a:e9:6a:9d:d4:7e:54:ec:
64:18:f8:67:2e:8f:46:9e:f9:d7:5d:16:d8:dd:46:c5:56:f4:
1f:82:a4:04:e6:76:4e:10:a5:19:8c:9c:ad:49:cd:ed:0a:fd:
bd:76:ab:93:e5:ea:5b:6f:6c:b4:a4:ef:eb:3a:34:b9:56:0b:
0d:c0:cc:c1:ae:9d:a3:ef:72:98:15:78:b9:10:e3:61:2a:ac:
32:16:c6:f3:68:6a:8e:68:70:d3:0e:f6:a9:fc:d0:90:9a:58:
be:cd:b6:1d:ca:63:d6:93:1f:1c:bf:c7:f5:5c:7d:a6:27:06:
98:9f:96:66:a4:03:0c:22:21:7c:10:5d:e5:79:38:d3:26:a8:
23:df:b5:5b:06:ad:ed:b0:89:63:19:8d:60:28:ab:1a:cc:ab:
8d:4b:98:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2aUEF/rxqVEhd84NTmawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDE0MGFkMzk0MTRjNGVhYjAyYWM1NTQyMmI0NDE2M2Vk
MzRiMGYwHhcNMjUwMTAyMTE0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWM0YjY2YWY3ZmY0ODJiMmY0Y2JkNjk0NmE0Y2JmZjk5ZmViMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqurug2KLdK8hHwWkKqnBvT7rWL+s
b+m0vcwvGqfzyOhKN9uxCbzeIrYl0O5vVhaDFHF2pTG0acKDMYQgTC6k7bKr8OUO
/TuARbzQ38meVNMV3GufU81bxIfsAh7UqEUP6k+D8SyDOntwpN26lfOfSKLkJfRF
ZgvXB9LDGXAH2Nk5botldWv7xviZJHO4PJmSRphAqdgHF3gli5pDcmj+o529hkWJ
n4NuGYaQdDiIHyo1Vet4JzrICe5ynIk/2nJuwlK4S3zWatQsKyWZsDo9Gn0BfF9M
aJngJzSVmpL0bHCSdhXTrQo5ggV+tYr7rHOtMBFb7IMo0DszJWA8iUbf1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDrEtmr3/0grL0y9aUaky/+Z/rLvMB8GA1UdIwQY
MBaAFCsBQK05QUxOqwKsVUIrRBY+00sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUt
MmU3NTIyOGY5MjYxLzEvT3NTMmF2Zl9TQ3N2VEwxcFJxVExfNW4tc3U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUtMmU3NTIyOGY5MjYx
LzEvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW8QMA0G
CSqGSIb3DQEBCwUAA4IBAQAk/wMkRq+WCZnAmFVEBdslaIlt/V6p7oM5bZzqii0M
fQeSVq9Q1gEPcKQir75PXJVleQoionXs8Y46U5l+7BKoS5zUlk386Az7bJmGN91S
EH6Lc19t/XY3wej2CvpWNWs2biYueulqndR+VOxkGPhnLo9GnvnXXRbY3UbFVvQf
gqQE5nZOEKUZjJytSc3tCv29dquT5epbb2y0pO/rOjS5VgsNwMzBrp2j73KYFXi5
EONhKqwyFsbzaGqOaHDTDvap/NCQmli+zbYdymPWkx8cv8f1XH2mJwaYn5ZmpAMM
IiF8EF3leTjTJqgj37VbBq3tsIljGY1gKKsazKuNS5gH
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:09 2025 by rpki-client