Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/1-G5CHegTogIfJOzVSZ12ruOsd1A.roa
File: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (raw, json)
Hash identifier: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=
Subject key identifier: F8:6E:42:1D:E8:13:A2:02:1F:24:EC:D5:49:9D:76:AE:E3:AC:77:50
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 0194258F0165B00ACD76C8660DA1AFA5FEE8
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/1-G5CHegTogIfJOzVSZ12ruOsd1A.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201715
IP address blocks: 185.32.108.0/22 maxlen: 22
185.32.108.0/24 maxlen: 24
185.32.109.0/24 maxlen: 24
185.32.110.0/24 maxlen: 24
185.32.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:01:65:b0:0a:cd:76:c8:66:0d:a1:af:a5:fe:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f86e421de813a2021f24ecd5499d76aee3ac7750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a6:0a:99:68:55:82:9e:ad:80:e2:04:64:e3:
05:7c:1f:6b:b4:96:33:45:80:f0:9a:0c:f3:09:6f:
da:5c:0c:63:fc:ae:1e:f3:6e:e7:ff:80:e7:7a:21:
f1:6d:91:96:c4:17:d2:72:a4:36:ef:30:42:17:1a:
9d:a7:df:32:d4:3c:dd:d4:b2:79:03:dd:f8:7b:a2:
85:92:02:d2:bd:df:37:40:68:47:99:d9:d9:e4:c9:
fe:e6:49:dd:dc:db:7f:8e:18:f1:00:8d:e0:a6:e9:
c8:a5:39:21:ca:80:30:cf:3d:b6:30:b3:87:6d:d6:
5f:89:46:77:2f:a9:58:4e:64:b0:dd:bf:e9:ee:49:
85:48:1c:a8:d3:ef:55:a7:47:51:61:01:90:f5:96:
43:bd:b9:2d:df:71:47:2c:f8:05:69:e4:90:1d:d5:
c8:0a:76:f6:c6:a2:5b:a5:98:b6:53:0d:5b:53:64:
c5:03:70:63:92:45:81:12:15:d9:68:fa:98:fa:fd:
0b:75:2a:04:30:fd:41:5e:af:f6:75:b9:7e:09:7b:
49:c8:4d:c2:77:40:7d:4b:a2:c4:3e:b9:75:1e:10:
59:40:19:82:93:79:d5:10:f5:0f:7a:5b:dc:77:68:
03:80:2e:50:69:7c:01:c0:5e:6b:e7:12:1e:a1:45:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:42:1D:E8:13:A2:02:1F:24:EC:D5:49:9D:76:AE:E3:AC:77:50
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/1-G5CHegTogIfJOzVSZ12ruOsd1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.108.0/22
Signature Algorithm: sha256WithRSAEncryption
96:bd:7d:53:ad:20:6a:be:d2:84:67:fd:1b:ca:b1:06:e6:c6:
e5:bf:c6:f3:80:50:54:b6:5e:db:61:50:0e:d6:8e:9a:47:ae:
65:4f:de:f3:34:c2:0c:7d:da:a9:31:ca:2a:8c:98:49:5c:32:
bd:6c:b8:a4:64:f4:f3:11:d6:1a:eb:c9:f3:c0:73:a3:3b:15:
ec:02:e4:02:f9:c8:94:0e:9c:47:16:32:e9:30:d0:47:c3:8f:
26:28:24:42:eb:e8:02:33:8d:cb:c5:7a:42:78:fb:a9:f2:53:
31:37:51:f7:46:c9:47:5a:62:7e:ea:27:e3:69:cf:14:f1:f0:
18:37:ea:dd:15:81:47:23:fb:f9:00:f8:3c:fe:d1:e5:8f:e4:
5d:a6:96:d5:b2:91:7f:e4:38:4c:73:a3:bd:23:fd:99:7e:d8:
52:65:c6:ad:79:4d:00:28:a4:16:48:76:99:a9:d1:a4:64:5f:
60:3b:bc:93:55:56:49:d1:06:44:18:39:dc:90:c3:f5:14:eb:
90:28:aa:11:9e:3e:6f:34:dd:e3:72:ae:2b:f9:0f:ea:a0:b8:
9b:19:54:76:2e:8a:af:be:13:42:ba:92:eb:56:2f:79:77:53:
6d:6d:e0:6c:21:60:89:36:17:48:3c:e6:a5:08:78:20:5a:48:
d2:f0:9c:96
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQljwFlsArNdshmDaGvpf7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTJkYThlODkxNjkwZTcxZTliODU5NTA5N2RhN2M2MDY0
ZGE2MDIwHhcNMjUwMTAyMDU0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODZlNDIxZGU4MTNhMjAyMWYyNGVjZDU0OTlkNzZhZWUzYWM3NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qYKmWhVgp6tgOIEZOMFfB9rtJYz
RYDwmgzzCW/aXAxj/K4e827n/4DneiHxbZGWxBfScqQ27zBCFxqdp98y1Dzd1LJ5
A934e6KFkgLSvd83QGhHmdnZ5Mn+5knd3Nt/jhjxAI3gpunIpTkhyoAwzz22MLOH
bdZfiUZ3L6lYTmSw3b/p7kmFSByo0+9Vp0dRYQGQ9ZZDvbkt33FHLPgFaeSQHdXI
Cnb2xqJbpZi2Uw1bU2TFA3BjkkWBEhXZaPqY+v0LdSoEMP1BXq/2dbl+CXtJyE3C
d0B9S6LEPrl1HhBZQBmCk3nVEPUPelvcd2gDgC5QaXwBwF5r5xIeoUWsNQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhuQh3oE6ICHyTs1Umddq7jrHdQMB8GA1UdIwQY
MBaAFNDi2o6JFpDnHpuFlQl9p8YGTaYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjkt
ZWMyZmJhZmU0ZDkxLzEvMS1HNUNIZWdUb2dJZkpPelZTWjEycnVPc2QxQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzAvZjA2ZTJjLTk3YjctNDYyOC04YjY5LWVjMmZiYWZlNGQ5
MS8xLzBPTGFqb2tXa09jZW00V1ZDWDJueGdaTnBnSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkgbDAN
BgkqhkiG9w0BAQsFAAOCAQEAlr19U60gar7ShGf9G8qxBubG5b/G84BQVLZe22FQ
DtaOmkeuZU/e8zTCDH3aqTHKKoyYSVwyvWy4pGT08xHWGuvJ88BzozsV7ALkAvnI
lA6cRxYy6TDQR8OPJigkQuvoAjONy8V6Qnj7qfJTMTdR90bJR1pifuon42nPFPHw
GDfq3RWBRyP7+QD4PP7R5Y/kXaaW1bKRf+Q4THOjvSP9mX7YUmXGrXlNACikFkh2
manRpGRfYDu8k1VWSdEGRBg53JDD9RTrkCiqEZ4+bzTd43KuK/kP6qC4mxlUdi6K
r74TQrqS61YveXdTbW3gbCFgiTYXSDzmpQh4IFpI0vCclg==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:40 2025 by rpki-client