Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/aA-OM8yAuMwXGcUzFuyFanRfVLU.roa
File: aA-OM8yAuMwXGcUzFuyFanRfVLU.roa (raw, json)
Hash identifier: 4g/4D9nvn3wu4mRmXXhP1nbTz+l/z5155w9G8sJH2W0=
Subject key identifier: 68:0F:8E:33:CC:80:B8:CC:17:19:C5:33:16:EC:85:6A:74:5F:54:B5
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 018571FA169473E511B942C0BCCCC6E08FF2
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/aA-OM8yAuMwXGcUzFuyFanRfVLU.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205624
IP address blocks: 212.225.227.0/24 maxlen: 24
171.33.235.0/24 maxlen: 24
91.151.101.0/24 maxlen: 24
212.225.244.0/24 maxlen: 24
89.39.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:16:94:73:e5:11:b9:42:c0:bc:cc:c6:e0:8f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=680f8e33cc80b8cc1719c53316ec856a745f54b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:69:a2:95:71:3f:06:c5:41:13:8b:53:3d:
bb:d3:50:86:5b:40:69:ff:88:ea:88:55:5f:f9:ff:
3e:d1:a9:79:83:96:fd:5c:cd:87:07:d7:83:d0:c7:
68:d7:82:5a:fd:d1:00:13:d9:c5:b1:ac:e0:04:89:
e5:0c:2f:8d:f7:93:a9:c2:37:3a:69:d1:c6:b9:1a:
78:6c:00:86:a2:8f:bd:c4:9d:e8:6f:4b:4f:92:5f:
a2:84:29:8b:99:19:45:56:36:00:08:30:12:5b:65:
d7:bd:01:86:fb:1c:be:dc:41:da:55:83:d9:2c:d2:
4d:55:0f:58:8f:df:c7:39:a6:b5:ee:5f:e1:1d:1e:
9f:72:8f:5b:16:4d:ed:37:9a:f4:df:ab:9b:4b:ab:
40:8b:be:35:9f:4a:72:3f:81:a6:13:a6:86:4d:0c:
a2:22:5e:de:17:c1:66:7b:50:1f:98:d6:3a:31:8e:
9e:0d:8e:b8:e0:3b:0a:4b:01:d3:3d:63:66:f6:d1:
df:8a:de:01:1d:e6:9a:c6:82:a0:25:47:80:20:73:
3b:5b:2d:d3:69:db:50:40:e1:01:54:60:ef:a4:09:
4a:10:78:f8:4e:ce:91:18:a4:9c:ac:a2:d2:f4:44:
17:3b:77:a1:09:fa:f8:c0:c0:85:af:de:c3:10:30:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:8E:33:CC:80:B8:CC:17:19:C5:33:16:EC:85:6A:74:5F:54:B5
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/aA-OM8yAuMwXGcUzFuyFanRfVLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.154.0/24
91.151.101.0/24
171.33.235.0/24
212.225.227.0/24
212.225.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:02:5e:a5:47:f2:bd:ad:47:83:e1:b8:42:dc:a1:27:29:70:
7d:13:ad:2c:5a:83:c0:b9:d6:03:c4:9e:78:62:20:ac:b0:69:
d6:74:f1:cc:e7:64:e4:5a:b2:61:b6:34:cd:b3:e1:9b:5f:e5:
8e:25:78:b0:46:62:ec:67:61:12:6c:6f:73:7a:83:34:6f:35:
d2:36:46:f4:ef:83:5a:5d:43:a7:6b:d3:dc:01:33:b4:54:69:
cd:47:05:2b:67:7a:a3:11:1e:02:e4:c5:d8:9f:e2:f9:f4:b8:
e9:3e:c4:e1:0a:07:c8:4a:60:4f:2f:30:db:b9:a9:23:33:b3:
5c:39:d4:5d:23:bf:26:b6:81:1f:3d:01:59:ea:d5:e3:b5:ff:
f4:db:e8:6f:07:c4:53:85:86:c3:a3:d8:af:2e:f2:cc:76:92:
f0:15:d7:42:16:67:f1:b0:de:a2:5a:f0:79:ae:f2:09:c4:40:
2e:9c:6a:ed:6a:a7:52:8a:b3:a0:08:60:a1:c3:19:ef:fa:6c:
20:d6:48:95:76:26:f5:4a:82:b3:82:66:96:24:ac:ea:9c:9a:
c4:5d:a4:e2:44:e2:c5:7e:02:10:9b:eb:b3:74:05:a5:e4:89:
94:72:79:61:81:4f:2f:db:2a:de:29:ab:5d:db:e1:e0:d8:60:
70:b6:7f:cf
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVx+haUc+URuULAvMzG4I/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4
OTJlMzEwHhcNMjMwMTAyMTAxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODBmOGUzM2NjODBiOGNjMTcxOWM1MzMxNmVjODU2YTc0NWY1NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XRpopVxPwbFQROLUz2701CGW0Bp
/4jqiFVf+f8+0al5g5b9XM2HB9eD0Mdo14Ja/dEAE9nFsazgBInlDC+N95Opwjc6
adHGuRp4bACGoo+9xJ3ob0tPkl+ihCmLmRlFVjYACDASW2XXvQGG+xy+3EHaVYPZ
LNJNVQ9Yj9/HOaa17l/hHR6fco9bFk3tN5r036ubS6tAi741n0pyP4GmE6aGTQyi
Il7eF8Fme1AfmNY6MY6eDY644DsKSwHTPWNm9tHfit4BHeaaxoKgJUeAIHM7Wy3T
adtQQOEBVGDvpAlKEHj4Ts6RGKScrKLS9EQXO3ehCfr4wMCFr97DEDDVqwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGgPjjPMgLjMFxnFMxbshWp0X1S1MB8GA1UdIwQY
MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt
MzY2YmExNzAwZmUwLzEvYUEtT004eUF1TXdYR2NVekZ1eUZhblJmVkxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw
LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWSeaAwQA
W5dlAwQAqyHrAwQA1OHjAwQA1OH0MA0GCSqGSIb3DQEBCwUAA4IBAQCwAl6lR/K9
rUeD4bhC3KEnKXB9E60sWoPAudYDxJ54YiCssGnWdPHM52TkWrJhtjTNs+GbX+WO
JXiwRmLsZ2ESbG9zeoM0bzXSNkb074NaXUOna9PcATO0VGnNRwUrZ3qjER4C5MXY
n+L59LjpPsThCgfISmBPLzDbuakjM7NcOdRdI78mtoEfPQFZ6tXjtf/02+hvB8RT
hYbDo9ivLvLMdpLwFddCFmfxsN6iWvB5rvIJxEAunGrtaqdSirOgCGChwxnv+mwg
1kiVdib1SoKzgmaWJKzqnJrEXaTiROLFfgIQm+uzdAWl5ImUcnlhgU8v2yreKatd
2+Hg2GBwtn/P
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:42:37 2025 by rpki-client