Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/czVnbZc92doWqy2gBGIdv1iBjnw.roa
File: czVnbZc92doWqy2gBGIdv1iBjnw.roa (raw, json)
Hash identifier: FGIHMIe1fM4M87IQciBzvSamGa61S/MPL+xAE/AMTyI=
Subject key identifier: 73:35:67:6D:97:3D:D9:DA:16:AB:2D:A0:04:62:1D:BF:58:81:8E:7C
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 01942067F1F802D1B4435AA835E49A3D5179
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/czVnbZc92doWqy2gBGIdv1iBjnw.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 85.95.237.0/24 maxlen: 24
85.95.238.0/24 maxlen: 24
85.95.239.0/24 maxlen: 24
85.95.240.0/24 maxlen: 24
85.95.241.0/24 maxlen: 24
85.95.242.0/24 maxlen: 24
85.95.243.0/24 maxlen: 24
85.95.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f1:f8:02:d1:b4:43:5a:a8:35:e4:9a:3d:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7335676d973dd9da16ab2da004621dbf58818e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:9f:95:72:36:14:fa:ef:28:c5:1f:fa:8c:
45:72:66:af:2e:87:41:78:84:c5:dc:d0:e4:4e:f7:
c5:c2:11:3e:e4:5f:1a:dc:ed:08:a7:44:1a:81:01:
54:41:cd:13:ba:bb:fa:22:32:c6:96:3d:7a:de:30:
1c:78:c2:a9:d8:16:dc:fe:46:ab:e1:ca:a4:f8:11:
5b:c3:53:e9:40:91:a3:68:ec:dd:2a:6e:b2:d8:6e:
2f:ed:a1:0d:22:d7:35:8e:2c:d1:72:84:68:71:b2:
ce:e6:42:ba:65:50:f4:78:b9:48:bf:dc:d1:07:31:
9e:ab:77:88:6b:b2:0a:a4:de:53:97:8b:17:4b:a5:
35:e2:cf:44:1b:70:e0:20:29:8f:4e:79:75:c9:86:
c7:d6:f6:4a:ec:8d:94:60:9d:c6:59:fc:bc:e1:e3:
d6:eb:02:0c:58:6b:0e:dc:46:d1:66:74:f6:44:86:
2f:e0:53:f4:80:5c:83:65:c9:55:08:27:5b:7c:b5:
75:31:68:70:b8:22:c6:6c:db:02:c6:4a:d9:15:2b:
17:1f:2b:9f:b7:bc:57:7e:9b:0f:4d:04:15:4c:bf:
07:3a:06:83:18:3a:7e:f5:bd:c4:98:6b:47:2e:e6:
fb:12:a9:c8:84:18:12:eb:a1:2c:dc:e4:7d:6f:1f:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:67:6D:97:3D:D9:DA:16:AB:2D:A0:04:62:1D:BF:58:81:8E:7C
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/czVnbZc92doWqy2gBGIdv1iBjnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.95.237.0-85.95.244.255
Signature Algorithm: sha256WithRSAEncryption
52:03:4f:cf:84:bd:7a:4a:40:75:56:ae:64:18:72:99:2d:e5:
ef:67:32:28:cf:0e:83:ac:5a:fc:4f:fb:de:e2:97:47:f6:5e:
df:61:02:e2:30:19:b3:01:76:b4:0f:6a:b4:0e:eb:bc:32:31:
ab:f2:c5:41:c4:d7:0c:89:2f:fe:2f:b8:5a:76:91:c0:9b:97:
24:db:2d:1f:33:79:e0:ee:13:e7:0b:01:72:e5:7a:f5:f5:a9:
5b:e9:e9:1d:50:6e:05:70:52:97:b7:bb:61:81:b8:56:c9:df:
bc:4f:69:8d:46:56:6a:69:5e:2e:45:14:ee:76:83:40:6b:69:
14:b0:89:80:ef:56:e4:b9:92:2a:49:79:b2:18:2b:5e:4e:cc:
70:84:a0:5b:10:ed:ea:04:bc:7f:5c:d3:4d:d9:76:69:1b:20:
cc:db:76:d3:74:85:81:87:0e:31:c3:56:64:cf:7c:62:94:7f:
74:27:5d:6c:0f:1f:32:d2:72:fd:30:21:0c:dc:66:b1:d2:0f:
91:75:84:5d:b4:a2:af:7c:b4:6d:d9:36:14:23:e6:6b:b4:86:
f9:8b:06:c5:63:2b:7d:a2:1e:49:fb:55:4c:10:38:47:44:9f:
76:e2:be:46:6f:81:a2:5e:b6:77:9e:18:f8:ca:9a:de:04:bd:
31:28:e1:c0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQgZ/H4AtG0Q1qoNeSaPVF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj
YTk2NmMwHhcNMjUwMTAxMDU0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzM1Njc2ZDk3M2RkOWRhMTZhYjJkYTAwNDYyMWRiZjU4ODE4ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc+flXI2FPrvKMUf+oxFcmavLodB
eITF3NDkTvfFwhE+5F8a3O0Ip0QagQFUQc0Turv6IjLGlj163jAceMKp2Bbc/kar
4cqk+BFbw1PpQJGjaOzdKm6y2G4v7aENItc1jizRcoRocbLO5kK6ZVD0eLlIv9zR
BzGeq3eIa7IKpN5Tl4sXS6U14s9EG3DgICmPTnl1yYbH1vZK7I2UYJ3GWfy84ePW
6wIMWGsO3EbRZnT2RIYv4FP0gFyDZclVCCdbfLV1MWhwuCLGbNsCxkrZFSsXHyuf
t7xXfpsPTQQVTL8HOgaDGDp+9b3EmGtHLub7EqnIhBgS66Es3OR9bx8e+wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHM1Z22XPdnaFqstoARiHb9YgY58MB8GA1UdIwQY
MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt
M2ZkMzA5ODhmNjc3LzEvY3pWbmJaYzkyZG9XcXkyZ0JHSWR2MWlCam53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3
LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVX+0D
BABVX/QwDQYJKoZIhvcNAQELBQADggEBAFIDT8+EvXpKQHVWrmQYcpkt5e9nMijP
DoOsWvxP+97il0f2Xt9hAuIwGbMBdrQParQO67wyMavyxUHE1wyJL/4vuFp2kcCb
lyTbLR8zeeDuE+cLAXLlevX1qVvp6R1QbgVwUpe3u2GBuFbJ37xPaY1GVmppXi5F
FO52g0BraRSwiYDvVuS5kipJebIYK15OzHCEoFsQ7eoEvH9c003ZdmkbIMzbdtN0
hYGHDjHDVmTPfGKUf3QnXWwPHzLScv0wIQzcZrHSD5F1hF20oq98tG3ZNhQj5mu0
hvmLBsVjK32iHkn7VUwQOEdEn3bivkZvgaJetneeGPjKmt4EvTEo4cA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:54 2025 by rpki-client