Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/TAvnbGlGOHQkn1H4mmfTjMAonig.roa
File: TAvnbGlGOHQkn1H4mmfTjMAonig.roa (raw, json)
Hash identifier: 5j2f3QIcoZ3w0v7OOhYxuDlG33ihkkRcN0bfLfGC5dU=
Subject key identifier: 4C:0B:E7:6C:69:46:38:74:24:9F:51:F8:9A:67:D3:8C:C0:28:9E:28
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0194266BD9F4A7F8602EC324DECD341FB174
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/TAvnbGlGOHQkn1H4mmfTjMAonig.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49157
IP address blocks: 83.136.237.0/24 maxlen: 24
185.131.176.0/24 maxlen: 24
185.131.177.0/24 maxlen: 24
185.131.178.0/24 maxlen: 24
185.131.179.0/24 maxlen: 24
185.151.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d9:f4:a7:f8:60:2e:c3:24:de:cd:34:1f:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c0be76c69463874249f51f89a67d38cc0289e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:d5:62:83:8b:97:d2:52:9b:d3:89:e3:7a:
82:55:3d:d0:58:17:54:ba:82:f4:d8:e8:da:d0:94:
8f:8d:7b:5a:cc:bb:20:2e:c6:2f:ff:e0:ab:a9:3a:
c1:5c:d9:18:07:20:5a:9f:2b:a7:19:75:1b:e3:4f:
6f:d6:54:a4:9d:6a:d4:96:55:9b:24:03:b0:1c:fb:
fd:00:a3:01:a7:d8:95:46:39:4b:12:b0:84:d7:aa:
7c:cd:8c:f2:c5:ac:7f:b7:dc:bc:ed:71:6a:f7:7e:
b5:bb:90:1b:e0:53:08:14:0e:a7:55:43:83:41:2d:
d4:b3:4f:ca:1a:4f:d5:81:4d:b3:70:e4:7f:95:d3:
f6:52:f2:b0:75:14:61:aa:18:1d:f4:92:f1:98:df:
84:5e:5c:1f:5b:4d:b6:da:f8:5c:5b:59:38:df:f0:
17:db:92:6f:5a:b9:f6:ea:6e:89:80:fe:1e:77:93:
62:85:22:7e:db:73:cf:82:21:16:01:e5:63:10:b5:
83:04:b3:e2:a0:23:00:2b:95:66:dc:ff:d3:ec:ba:
ba:0f:68:4a:c4:bf:54:d1:fc:0a:04:a0:c7:a5:bc:
7d:50:91:dd:f8:91:cc:db:c4:40:1b:ef:57:2f:a8:
6d:55:24:bf:c8:3b:73:0b:43:fc:b6:eb:be:e0:30:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0B:E7:6C:69:46:38:74:24:9F:51:F8:9A:67:D3:8C:C0:28:9E:28
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/TAvnbGlGOHQkn1H4mmfTjMAonig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.237.0/24
185.131.176.0/22
185.151.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2e:bb:e2:01:9f:c9:46:ff:3e:4b:4d:8c:56:19:ef:c3:45:
dc:b2:2a:ef:fb:35:14:86:ca:83:3d:81:71:05:26:e5:22:28:
7f:a6:80:cb:21:b8:e7:b7:75:40:f7:63:55:bc:b0:95:51:e6:
cb:06:8c:14:8d:f3:ea:18:85:36:6c:b5:6f:7c:69:a5:2b:af:
0f:e0:b5:4c:08:38:23:55:cb:9c:b6:5c:28:77:ff:9d:14:8a:
8f:f8:79:a8:4b:ff:ae:3d:77:0d:4c:f6:6c:1e:45:2f:6f:a9:
bd:e0:a4:6e:6e:88:8c:cc:ab:61:33:c3:1f:f0:89:86:1a:73:
4e:c6:7d:29:a2:16:52:31:e2:8c:1c:6d:91:b0:43:a0:81:7b:
75:5d:77:38:77:cf:4d:39:3d:9d:b2:aa:2e:b8:0c:dd:9b:0a:
15:bd:d0:3e:43:18:e0:99:fd:c6:4a:52:c7:95:68:14:d2:4a:
e8:16:f8:63:46:8a:1a:86:5e:27:f3:01:ed:1e:0b:ee:46:77:
d4:1a:bc:8b:45:e3:09:d4:c7:e5:3e:22:a5:55:68:aa:30:49:
d1:b9:fb:f1:6f:7b:12:90:52:1e:f6:b9:85:a8:e2:34:e3:2b:
f6:b9:74:75:e3:b5:39:af:d6:b4:6d:51:0b:e9:cd:30:45:4e:
11:d2:22:e5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQma9n0p/hgLsMk3s00H7F0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw
YWI3NzAwHhcNMjUwMTAyMDk0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzBiZTc2YzY5NDYzODc0MjQ5ZjUxZjg5YTY3ZDM4Y2MwMjg5ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT/VYoOLl9JSm9OJ43qCVT3QWBdU
uoL02Oja0JSPjXtazLsgLsYv/+CrqTrBXNkYByBanyunGXUb409v1lSknWrUllWb
JAOwHPv9AKMBp9iVRjlLErCE16p8zYzyxax/t9y87XFq9361u5Ab4FMIFA6nVUOD
QS3Us0/KGk/VgU2zcOR/ldP2UvKwdRRhqhgd9JLxmN+EXlwfW0222vhcW1k43/AX
25JvWrn26m6JgP4ed5NihSJ+23PPgiEWAeVjELWDBLPioCMAK5Vm3P/T7Lq6D2hK
xL9U0fwKBKDHpbx9UJHd+JHM28RAG+9XL6htVSS/yDtzC0P8tuu+4DBW9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEwL52xpRjh0JJ9R+Jpn04zAKJ4oMB8GA1UdIwQY
MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt
MzlmNmQ2NDI1MzM4LzEvVEF2bmJHbEdPSFFrbjFING1tZlRqTUFvbmlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4
LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU4jtAwQC
uYOwAwQAuZfHMA0GCSqGSIb3DQEBCwUAA4IBAQAKLrviAZ/JRv8+S02MVhnvw0Xc
sirv+zUUhsqDPYFxBSblIih/poDLIbjnt3VA92NVvLCVUebLBowUjfPqGIU2bLVv
fGmlK68P4LVMCDgjVcuctlwod/+dFIqP+HmoS/+uPXcNTPZsHkUvb6m94KRuboiM
zKthM8Mf8ImGGnNOxn0pohZSMeKMHG2RsEOggXt1XXc4d89NOT2dsqouuAzdmwoV
vdA+Qxjgmf3GSlLHlWgU0kroFvhjRooahl4n8wHtHgvuRnfUGryLReMJ1MflPiKl
VWiqMEnRufvxb3sSkFIe9rmFqOI04yv2uXR147U5r9a0bVEL6c0wRU4R0iLl
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:35:32 2025 by rpki-client