Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/akr2zEciBp0bAf10VTnQBF8A5hE.roa
File: akr2zEciBp0bAf10VTnQBF8A5hE.roa (raw, json)
Hash identifier: SJfaT9rqeoFgX5bxM6d8wxAKVaMpQ7a7c0aJKadx3yo=
Subject key identifier: 6A:4A:F6:CC:47:22:06:9D:1B:01:FD:74:55:39:D0:04:5F:00:E6:11
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 01955AF1F1C4B1E12A60F9D01A62534DE99F
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/akr2zEciBp0bAf10VTnQBF8A5hE.roa
Signing time: Mon 03 Mar 2025 07:39:20 +0000
ROA not before: Mon 03 Mar 2025 07:39:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197075
IP address blocks: 5.183.111.0/24 maxlen: 24
185.25.233.0/24 maxlen: 24
185.198.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:f1:f1:c4:b1:e1:2a:60:f9:d0:1a:62:53:4d:e9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Mar 3 07:39:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4af6cc4722069d1b01fd745539d0045f00e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:91:8c:41:91:ca:d8:61:69:0a:2b:41:8f:
83:94:8e:66:fe:cb:62:8d:c0:29:64:58:88:62:83:
f9:b3:08:7e:b1:af:d7:87:ee:7e:db:35:a5:5d:86:
11:c0:f1:79:80:db:89:68:c5:47:e4:92:f7:ad:71:
60:32:ea:c1:8f:25:b8:b6:9f:0a:d5:cf:4b:e7:88:
3a:45:e5:98:16:28:31:bb:98:d9:65:91:d0:37:0a:
ba:04:6f:b9:4b:37:80:1b:23:64:bc:ea:64:3d:32:
ba:0d:67:01:cf:f0:24:fa:72:83:e3:24:be:4c:db:
d5:06:ce:02:59:a2:0f:94:d2:fa:35:54:f5:fa:b5:
37:fa:70:80:0b:5c:4a:6e:c6:01:94:57:4a:f2:55:
b5:19:c2:5c:51:c3:7e:86:8d:b1:3e:2f:1f:03:15:
79:67:c7:aa:44:08:a9:bc:02:4b:3f:61:f2:00:ed:
e1:ac:78:ef:88:8d:21:60:3a:e0:89:40:6f:ab:c0:
20:34:e3:ce:81:9a:60:24:ea:39:ec:dd:f7:32:5b:
e4:69:c1:f8:22:9b:8d:ec:17:4d:13:d5:33:76:4f:
cb:4d:5e:bb:11:eb:b1:6e:cc:cf:e4:76:56:ad:16:
ed:2c:05:01:cb:c8:7d:bc:46:94:4b:0b:78:63:fc:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:F6:CC:47:22:06:9D:1B:01:FD:74:55:39:D0:04:5F:00:E6:11
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/akr2zEciBp0bAf10VTnQBF8A5hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.111.0/24
185.25.233.0/24
185.198.210.0/23
Signature Algorithm: sha256WithRSAEncryption
36:d6:dd:64:6d:1a:1b:f1:10:e6:f6:d7:43:7b:15:8a:d7:73:
11:42:f1:6a:01:b5:48:ab:9a:b9:db:b5:87:41:e5:d8:83:02:
bf:ed:d3:7f:e4:18:b6:9f:2d:e4:d9:9e:7e:0f:9e:7b:d0:3c:
09:45:de:c4:3b:03:c5:e5:cd:46:c3:da:7b:9c:6b:6e:d6:96:
6b:2c:af:8c:f0:bf:af:be:6b:a4:e8:0f:cc:08:49:27:46:52:
fc:6b:2d:1a:2d:8e:2a:48:65:99:7c:eb:70:18:1c:a8:dd:49:
d9:ea:d3:0a:a8:a7:08:ae:03:e4:90:b5:52:a1:c1:24:0a:a1:
66:77:7b:c1:c3:80:91:a1:d2:e4:f2:cc:12:5c:df:71:e9:a6:
6f:82:15:d0:0b:35:3d:ad:3a:97:b6:8f:ad:4d:ce:d5:b7:97:
3f:8f:04:4c:c9:a3:13:8d:82:46:83:41:66:c7:5b:54:b8:af:
db:b8:8a:ca:d7:ad:13:0f:73:b4:03:4f:ea:b9:4a:15:8f:52:
e6:a7:69:9d:d4:0b:ef:9e:11:07:99:1a:5a:92:27:a3:cb:09:
96:54:fd:fb:68:45:d5:31:b6:07:0f:f6:72:d7:00:8a:b2:c2:
e8:26:db:c5:ce:84:da:e7:d3:fd:18:da:81:68:10:a1:03:b9:
56:82:15:b3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVa8fHEseEqYPnQGmJTTemfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl
YTM0ZWMwHhcNMjUwMzAzMDczOTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTRhZjZjYzQ3MjIwNjlkMWIwMWZkNzQ1NTM5ZDAwNDVmMDBlNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRSRjEGRythhaQorQY+DlI5m/sti
jcApZFiIYoP5swh+sa/Xh+5+2zWlXYYRwPF5gNuJaMVH5JL3rXFgMurBjyW4tp8K
1c9L54g6ReWYFigxu5jZZZHQNwq6BG+5SzeAGyNkvOpkPTK6DWcBz/Ak+nKD4yS+
TNvVBs4CWaIPlNL6NVT1+rU3+nCAC1xKbsYBlFdK8lW1GcJcUcN+ho2xPi8fAxV5
Z8eqRAipvAJLP2HyAO3hrHjviI0hYDrgiUBvq8AgNOPOgZpgJOo57N33MlvkacH4
IpuN7BdNE9Uzdk/LTV67EeuxbszP5HZWrRbtLAUBy8h9vEaUSwt4Y/zojQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGpK9sxHIgadGwH9dFU50ARfAOYRMB8GA1UdIwQY
MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt
MWIxM2JkNDU2NmE1LzEvYWtyMnpFY2lCcDBiQWYxMFZUblFCRjhBNWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1
LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbdvAwQA
uRnpAwQBucbSMA0GCSqGSIb3DQEBCwUAA4IBAQA21t1kbRob8RDm9tdDexWK13MR
QvFqAbVIq5q527WHQeXYgwK/7dN/5Bi2ny3k2Z5+D5570DwJRd7EOwPF5c1Gw9p7
nGtu1pZrLK+M8L+vvmuk6A/MCEknRlL8ay0aLY4qSGWZfOtwGByo3UnZ6tMKqKcI
rgPkkLVSocEkCqFmd3vBw4CRodLk8swSXN9x6aZvghXQCzU9rTqXto+tTc7Vt5c/
jwRMyaMTjYJGg0Fmx1tUuK/buIrK160TD3O0A0/quUoVj1Lmp2md1AvvnhEHmRpa
kiejywmWVP37aEXVMbYHD/Zy1wCKssLoJtvFzoTa59P9GNqBaBChA7lWghWz
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:25 2025 by rpki-client