Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/db5zCybt_34-4-i-989NlftPaAE.roa
File: db5zCybt_34-4-i-989NlftPaAE.roa (raw, json)
Hash identifier: t4OVx3KTrCCGv9kMRVOWKBYVAK6vdDRT4hnb6yO9KXg=
Subject key identifier: 75:BE:73:0B:26:ED:FF:7E:3E:E3:E8:BE:F7:CF:4D:95:FB:4F:68:01
Certificate issuer: /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial: 0194258F7316CA4804C5A4CBBE9B5F011703
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/db5zCybt_34-4-i-989NlftPaAE.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62354
IP address blocks: 185.37.16.0/22 maxlen: 22
195.200.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:73:16:ca:48:04:c5:a4:cb:be:9b:5f:01:17:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75be730b26edff7e3ee3e8bef7cf4d95fb4f6801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:02:f3:63:84:5a:87:ad:b5:64:88:03:f8:
bb:50:ee:18:93:b0:30:47:a1:d2:29:ce:8d:68:79:
c4:df:20:0a:de:1b:3c:14:3b:73:32:b6:93:91:b7:
1e:14:06:57:11:d3:b9:a7:b9:59:cb:8b:40:50:37:
45:f7:cc:57:d7:d1:ed:f8:52:ae:6f:7d:30:39:fa:
3a:c0:97:1d:81:b3:d8:16:82:c2:97:1e:8a:dd:7d:
cc:72:e2:76:b1:bf:0a:78:b6:ef:3b:12:42:e8:43:
38:4f:02:a0:4c:4b:7f:6f:77:9d:d7:f0:ab:b4:c6:
a2:47:47:e8:7d:16:c9:a9:f4:68:c5:62:5f:bd:99:
d8:5e:90:97:d5:a2:b8:d8:9c:18:c1:72:00:c6:6d:
88:72:b0:f5:ce:8b:46:8e:75:97:68:84:b6:c6:b4:
5f:dc:ef:78:d2:05:7e:08:c6:96:a2:e3:e8:98:9c:
ab:94:07:6d:a1:5b:bf:72:32:15:50:07:45:22:04:
6d:a2:33:a9:e5:70:70:d8:ba:08:fa:12:f9:54:0c:
8c:2a:74:e8:de:65:35:16:59:c9:26:34:22:7d:a5:
89:97:7c:c6:1a:73:0c:78:f8:09:b5:2b:9b:35:b4:
34:85:4c:06:83:71:4d:88:34:7f:63:d1:df:d4:dc:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BE:73:0B:26:ED:FF:7E:3E:E3:E8:BE:F7:CF:4D:95:FB:4F:68:01
X509v3 Authority Key Identifier:
keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/db5zCybt_34-4-i-989NlftPaAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.16.0/22
195.200.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0e:f8:81:d1:ad:45:0e:65:aa:fc:e9:49:ea:b2:14:75:a8:
fd:7c:f9:fb:d1:a5:ea:f6:94:d2:78:e2:4f:55:97:fd:d1:ab:
69:e5:1b:c4:77:5e:86:ec:75:a8:5d:2f:33:0f:c5:3e:2d:5e:
d0:29:01:6c:6d:ca:cf:49:a5:2e:04:74:75:1d:94:87:bc:ee:
6f:ef:b6:2e:a3:30:63:04:aa:cb:07:8b:56:60:e1:00:8f:05:
c6:81:6f:32:62:a6:0c:8e:fe:ea:c4:bf:4c:fc:39:7b:cb:52:
54:f9:7b:4d:2e:91:02:df:f8:dc:0b:be:e1:54:bd:7e:b2:12:
ce:b3:52:c1:f1:85:e9:fb:a2:10:09:63:eb:92:27:23:fc:7a:
0b:3e:3b:53:c5:c9:74:7f:67:04:5b:cc:a6:5e:2d:69:75:b4:
26:09:43:4c:4e:f5:d2:ea:b0:50:7d:d1:30:d5:13:e4:12:d4:
62:b0:f7:95:c2:9a:f5:16:f0:02:9e:f7:87:ec:c4:98:cd:37:
4c:c5:5d:1f:d9:86:82:3b:83:17:14:cc:d5:c0:6d:97:3b:b4:
de:eb:91:06:4b:a1:d5:48:af:41:70:28:4f:0c:af:f7:8d:1e:
05:54:9b:d7:35:03:62:3f:fa:5b:19:7e:06:78:b5:d2:57:27:
fc:c4:18:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj3MWykgExaTLvptfARcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOGYxMzNkMTA5NWNkMzEyMDVjN2EzNDYyMjQ4Y2M5OTQx
MjAzYWMwHhcNMjUwMTAyMDU0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWJlNzMwYjI2ZWRmZjdlM2VlM2U4YmVmN2NmNGQ5NWZiNGY2ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT4C82OEWoettWSIA/i7UO4Yk7Aw
R6HSKc6NaHnE3yAK3hs8FDtzMraTkbceFAZXEdO5p7lZy4tAUDdF98xX19Ht+FKu
b30wOfo6wJcdgbPYFoLClx6K3X3McuJ2sb8KeLbvOxJC6EM4TwKgTEt/b3ed1/Cr
tMaiR0fofRbJqfRoxWJfvZnYXpCX1aK42JwYwXIAxm2IcrD1zotGjnWXaIS2xrRf
3O940gV+CMaWouPomJyrlAdtoVu/cjIVUAdFIgRtojOp5XBw2LoI+hL5VAyMKnTo
3mU1FlnJJjQifaWJl3zGGnMMePgJtSubNbQ0hUwGg3FNiDR/Y9Hf1NyhpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHW+cwsm7f9+PuPovvfPTZX7T2gBMB8GA1UdIwQY
MBaAFL2PEz0Qlc0xIFx6NGIkjMmUEgOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlk4VFBSQ1Z6VEVnWEhvMFlpU015WlFTQTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zYjdjNDMtNDI0MS00NGQ0LTg1MzQt
NDA5ZDBmOWM4YTA0LzEvZGI1ekN5YnRfMzQtNC1pLTk4OU5sZnRQYUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zYjdjNDMtNDI0MS00NGQ0LTg1MzQtNDA5ZDBmOWM4YTA0
LzEvdlk4VFBSQ1Z6VEVnWEhvMFlpU015WlFTQTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSUQAwQA
w8hQMA0GCSqGSIb3DQEBCwUAA4IBAQCPDviB0a1FDmWq/OlJ6rIUdaj9fPn70aXq
9pTSeOJPVZf90atp5RvEd16G7HWoXS8zD8U+LV7QKQFsbcrPSaUuBHR1HZSHvO5v
77YuozBjBKrLB4tWYOEAjwXGgW8yYqYMjv7qxL9M/Dl7y1JU+XtNLpEC3/jcC77h
VL1+shLOs1LB8YXp+6IQCWPrkicj/HoLPjtTxcl0f2cEW8ymXi1pdbQmCUNMTvXS
6rBQfdEw1RPkEtRisPeVwpr1FvACnveH7MSYzTdMxV0f2YaCO4MXFMzVwG2XO7Te
65EGS6HVSK9BcChPDK/3jR4FVJvXNQNiP/pbGX4GeLXSVyf8xBiT
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:49 2025 by rpki-client