Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8rqG868bxinU9rR8Rp2pSf_K4ps.roa
File: 8rqG868bxinU9rR8Rp2pSf_K4ps.roa (raw, json)
Hash identifier: V9V+c1j2la9ZnPBL40zfZX+lYwX1zDfrRunx69HIjCE=
Subject key identifier: F2:BA:86:F3:AF:1B:C6:29:D4:F6:B4:7C:46:9D:A9:49:FF:CA:E2:9B
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D94DDE5D01C77E734E5F1A6C1563E9
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8rqG868bxinU9rR8Rp2pSf_K4ps.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56534
IP address blocks: 45.135.215.0/24 maxlen: 24
89.223.80.0/21 maxlen: 21
92.255.60.0/24 maxlen: 24
92.255.88.0/21 maxlen: 32
92.255.96.0/21 maxlen: 21
93.174.72.0/21 maxlen: 21
185.47.52.0/22 maxlen: 22
185.47.54.0/24 maxlen: 24
2a04:ac00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4d:de:5d:01:c7:7e:73:4e:5f:1a:6c:15:63:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2ba86f3af1bc629d4f6b47c469da949ffcae29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:4a:33:59:9d:40:32:6e:d0:a0:ea:dc:f0:
11:41:73:34:a2:aa:5c:71:f7:f5:36:ff:b8:3f:f8:
77:65:db:54:a3:17:18:48:8c:97:04:a5:6a:b2:7b:
0a:2a:36:a6:b8:13:56:18:68:d5:49:35:ba:fe:6a:
b9:a6:8e:40:04:ce:f2:88:bf:ab:9b:f3:62:73:98:
75:af:c2:02:e0:32:9b:e6:0f:e2:bd:11:3a:31:f2:
84:e9:99:f4:42:12:67:98:1b:27:1b:ad:41:ca:a9:
6d:e1:18:81:3f:2f:05:a4:29:c0:01:ef:f7:14:5a:
a5:cd:2d:a1:07:b4:e7:96:bc:be:36:0a:45:b2:ca:
76:53:66:fa:4d:fa:d8:90:c8:df:b8:13:2c:4f:bf:
df:af:1c:c1:9b:5f:1a:11:a4:0c:12:1c:73:2f:8b:
ae:de:d3:3d:6a:db:6e:4a:43:2e:c9:2d:52:c4:de:
1b:53:a4:8d:e5:4a:9b:47:9a:db:9c:f5:b1:96:eb:
83:bd:8c:ea:36:b3:7c:13:9f:6e:15:22:75:99:92:
70:b2:79:83:b7:6a:cd:11:2c:a0:c0:ed:68:13:6c:
c1:70:97:0e:25:ba:2d:da:15:99:d0:f6:fb:c3:f9:
a3:85:05:01:dd:f5:51:a3:6b:d4:b1:23:06:05:ee:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:86:F3:AF:1B:C6:29:D4:F6:B4:7C:46:9D:A9:49:FF:CA:E2:9B
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/8rqG868bxinU9rR8Rp2pSf_K4ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.215.0/24
89.223.80.0/21
92.255.60.0/24
92.255.88.0-92.255.103.255
93.174.72.0/21
185.47.52.0/22
IPv6:
2a04:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
96:14:46:50:13:f6:a9:1a:82:f8:bf:f8:4e:b4:57:26:d9:bb:
ad:b2:0e:4b:51:4f:e3:9a:84:87:0e:35:42:52:51:99:48:8d:
ab:2f:d7:4a:08:55:9a:36:0b:65:71:bf:91:9a:22:d6:37:e7:
b7:0e:a9:59:69:a6:67:ab:2c:42:77:b1:b0:b4:2e:53:e3:55:
de:31:6f:c5:66:fb:60:06:6f:a7:c7:5b:19:c3:40:7f:c5:49:
81:d5:be:21:45:02:e9:00:b1:78:1b:73:59:73:66:5a:6d:c3:
7e:ff:0f:70:a2:4b:74:6a:99:d2:ea:3c:e2:ea:dd:3f:69:0a:
94:ef:4b:fb:dd:be:5d:ee:0b:5a:6d:d9:cc:bd:54:e2:9c:c1:
2e:20:99:e7:08:cd:c0:0e:59:87:84:d5:0d:98:ee:07:d5:0e:
cd:0e:bc:38:c0:41:9b:bc:54:f7:92:73:da:25:70:e8:07:ad:
54:10:d8:fd:36:0a:34:b4:ec:38:74:77:f5:27:f2:11:64:c4:
83:7f:b2:b9:6c:36:c6:c5:c4:84:1c:b1:2c:36:a7:7f:b5:75:
3b:ab:7b:19:3e:51:4d:3b:8a:5c:84:d4:6e:89:30:85:09:da:
95:9d:35:ff:22:9c:b7:3e:d1:48:fe:f3:89:3b:87:b0:78:c5:
7f:53:34:f2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZQm2U3eXQHHfnNOXxpsFWPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz
NmM0ZmYwHhcNMjUwMTAyMTE0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmJhODZmM2FmMWJjNjI5ZDRmNmI0N2M0NjlkYTk0OWZmY2FlMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/1KM1mdQDJu0KDq3PARQXM0oqpc
cff1Nv+4P/h3ZdtUoxcYSIyXBKVqsnsKKjamuBNWGGjVSTW6/mq5po5ABM7yiL+r
m/Nic5h1r8IC4DKb5g/ivRE6MfKE6Zn0QhJnmBsnG61Byqlt4RiBPy8FpCnAAe/3
FFqlzS2hB7Tnlry+NgpFssp2U2b6TfrYkMjfuBMsT7/frxzBm18aEaQMEhxzL4uu
3tM9attuSkMuyS1SxN4bU6SN5UqbR5rbnPWxluuDvYzqNrN8E59uFSJ1mZJwsnmD
t2rNESygwO1oE2zBcJcOJbot2hWZ0Pb7w/mjhQUB3fVRo2vUsSMGBe7JlwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFPK6hvOvG8Yp1Pa0fEadqUn/yuKbMB8GA1UdIwQY
MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvOHJxRzg2OGJ4aW5VOXJSOFJwMnBTZl9LNHBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQALYfXAwQD
Wd9QAwQAXP88MAwDBANc/1gDBANc/2ADBANdrkgDBAK5LzQwDQQCAAIwBwMFAyoE
rAAwDQYJKoZIhvcNAQELBQADggEBAJYURlAT9qkagvi/+E60VybZu62yDktRT+Oa
hIcONUJSUZlIjasv10oIVZo2C2Vxv5GaItY357cOqVlppmerLEJ3sbC0LlPjVd4x
b8Vm+2AGb6fHWxnDQH/FSYHVviFFAukAsXgbc1lzZlptw37/D3CiS3RqmdLqPOLq
3T9pCpTvS/vdvl3uC1pt2cy9VOKcwS4gmecIzcAOWYeE1Q2Y7gfVDs0OvDjAQZu8
VPeSc9olcOgHrVQQ2P02CjS07Dh0d/Un8hFkxIN/srlsNsbFxIQcsSw2p3+1dTur
exk+UU07ilyE1G6JMIUJ2pWdNf8inLc+0Uj+84k7h7B4xX9TNPI=
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:17:41 2025 by rpki-client