Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa
File: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (raw, json)
Hash identifier: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=
Subject key identifier: F1:80:7F:6C:36:CC:C4:02:BF:3A:31:C8:D3:26:B7:BF:91:38:55:ED
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019422FC15BC5088EC7AFE0D6D23611A411A
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208660
IP address blocks: 185.226.252.0/22 maxlen: 22
185.226.254.0/24 maxlen: 24
185.226.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:15:bc:50:88:ec:7a:fe:0d:6d:23:61:1a:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1807f6c36ccc402bf3a31c8d326b7bf913855ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:5b:7a:60:13:c4:df:03:fc:64:5e:5c:44:
10:b0:35:9d:7e:a1:49:57:ad:64:eb:85:99:07:86:
3a:98:9b:9f:30:16:98:92:f6:b3:f9:b5:db:09:ff:
5d:fc:35:20:47:f4:f2:a7:11:38:9f:3e:b1:5f:cc:
ba:6e:af:0b:17:e7:26:25:d0:f0:f9:fc:b3:c5:cd:
dc:e6:19:09:6f:ff:8f:dd:eb:2e:3a:ac:00:42:77:
3c:2b:76:6d:8f:04:90:65:45:e8:4d:c8:0a:28:ff:
d1:35:7e:ac:b2:08:f6:37:a2:2a:13:6c:0a:c0:92:
86:02:66:37:5d:62:11:9f:47:c4:6d:32:4c:8f:9d:
d8:f6:fb:07:b9:8e:93:06:cd:5f:1c:5b:9c:29:75:
fc:0d:1a:fc:01:cb:b4:a3:7d:9a:bb:6d:6d:c5:e9:
67:d2:0c:23:10:73:b7:dc:14:82:7c:a1:3f:da:5d:
81:14:2e:63:bb:1b:c8:aa:ab:14:03:58:5d:f8:16:
b6:63:04:d8:4b:12:ca:ef:81:ec:23:8b:62:6f:f5:
48:81:df:9e:e2:b1:72:be:6d:68:7f:b9:49:9d:c6:
6b:98:c7:f7:4b:41:12:87:a1:e3:eb:44:e5:a4:1b:
c2:0c:f4:5c:ef:a8:b2:6d:b4:c6:62:0c:cd:06:9f:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:80:7F:6C:36:CC:C4:02:BF:3A:31:C8:D3:26:B7:BF:91:38:55:ED
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:5b:45:32:53:41:f6:62:0d:14:71:f6:f2:4f:1f:c2:dc:f8:
c7:e9:ed:ff:ac:b7:99:ea:e0:bd:18:55:b9:06:d7:d9:0e:82:
78:96:c4:73:6f:09:c5:7b:b0:4f:ae:b4:2d:f9:76:fb:5e:8f:
78:41:c4:e9:42:35:75:75:59:bd:d2:40:98:59:60:e1:7e:3a:
46:4d:50:53:fc:85:86:b4:0a:30:d7:13:f5:a3:fb:67:da:75:
e5:a0:14:0e:05:76:db:40:9c:82:41:83:40:ed:1b:e9:b4:d2:
51:f2:88:0e:7a:d5:75:0a:7e:11:1c:2c:49:05:c6:04:f0:f5:
44:47:25:3f:40:dc:30:37:b4:2a:38:39:cd:d3:71:93:ef:5f:
da:ca:59:67:04:ab:cd:4f:7a:50:bd:b1:c1:42:c7:22:15:42:
22:9a:2f:00:35:65:ce:c5:2e:a3:fc:52:b7:4e:13:a2:c9:ba:
6c:9d:dc:01:f8:02:33:31:71:1a:be:33:e3:38:ae:a3:c8:8c:
3e:27:af:f8:ad:b3:50:65:4b:fa:cd:8f:a2:a0:76:b1:2f:c6:
a4:56:b2:97:cf:cb:47:cf:01:d8:c5:85:d3:87:b6:8f:75:a2:
f9:ae:45:ef:13:58:63:52:46:12:5c:e9:ed:1b:aa:3d:ce:58:
33:c8:5e:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/BW8UIjsev4NbSNhGkEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy
MTkyZjIwHhcNMjUwMTAxMTc0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTgwN2Y2YzM2Y2NjNDAyYmYzYTMxYzhkMzI2YjdiZjkxMzg1NWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqslbemATxN8D/GReXEQQsDWdfqFJ
V61k64WZB4Y6mJufMBaYkvaz+bXbCf9d/DUgR/TypxE4nz6xX8y6bq8LF+cmJdDw
+fyzxc3c5hkJb/+P3esuOqwAQnc8K3ZtjwSQZUXoTcgKKP/RNX6ssgj2N6IqE2wK
wJKGAmY3XWIRn0fEbTJMj53Y9vsHuY6TBs1fHFucKXX8DRr8Acu0o32au21txeln
0gwjEHO33BSCfKE/2l2BFC5juxvIqqsUA1hd+Ba2YwTYSxLK74HsI4tib/VIgd+e
4rFyvm1of7lJncZrmMf3S0ESh6Hj60TlpBvCDPRc76iybbTGYgzNBp8mWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGAf2w2zMQCvzoxyNMmt7+ROFXtMB8GA1UdIwQY
MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt
YzMzMDE4NjMzZDMzLzEvOFlCX2JEYk14QUtfT2pISTB5YTN2NUU0VmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz
LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueL8MA0G
CSqGSIb3DQEBCwUAA4IBAQA7W0UyU0H2Yg0UcfbyTx/C3PjH6e3/rLeZ6uC9GFW5
BtfZDoJ4lsRzbwnFe7BPrrQt+Xb7Xo94QcTpQjV1dVm90kCYWWDhfjpGTVBT/IWG
tAow1xP1o/tn2nXloBQOBXbbQJyCQYNA7RvptNJR8ogOetV1Cn4RHCxJBcYE8PVE
RyU/QNwwN7QqODnN03GT71/ayllnBKvNT3pQvbHBQsciFUIimi8ANWXOxS6j/FK3
ThOiybpsndwB+AIzMXEavjPjOK6jyIw+J6/4rbNQZUv6zY+ioHaxL8akVrKXz8tH
zwHYxYXTh7aPdaL5rkXvE1hjUkYSXOntG6o9zlgzyF5j
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:52 2025 by rpki-client