Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/5t-mWbx3WXCG3SAA6NOKEF56ZKw.roa
File: 5t-mWbx3WXCG3SAA6NOKEF56ZKw.roa (raw, json)
Hash identifier: sdrOTXXUjv1npsDAV76NLMMxB67WuEuvX1bFnKmLWlo=
Subject key identifier: E6:DF:A6:59:BC:77:59:70:86:DD:20:00:E8:D3:8A:10:5E:7A:64:AC
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 0195A330F69BB9DE965E2C0DCB99C847C944
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/5t-mWbx3WXCG3SAA6NOKEF56ZKw.roa
Signing time: Mon 17 Mar 2025 08:20:49 +0000
ROA not before: Mon 17 Mar 2025 08:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.84.116.0/24 maxlen: 24
185.84.118.0/24 maxlen: 24
185.84.119.0/24 maxlen: 24
185.132.188.0/24 maxlen: 24
185.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:30:f6:9b:b9:de:96:5e:2c:0d:cb:99:c8:47:c9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Mar 17 08:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6dfa659bc77597086dd2000e8d38a105e7a64ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:7a:d5:d1:bb:5b:7e:63:41:15:a7:c4:87:
4a:ab:28:1b:28:a0:62:de:d5:8c:9c:a1:c0:b9:f2:
22:5b:a2:b8:a2:b9:58:1d:32:a8:39:cd:d7:e5:ba:
dd:01:a5:99:a8:9a:45:82:b8:c5:bd:e0:f6:30:30:
1f:11:51:d1:26:c1:67:e1:68:bf:53:d2:70:c6:88:
08:5c:d0:f3:7f:10:0b:96:6f:32:09:bf:c4:d6:6e:
1f:10:04:07:9a:e2:70:6e:31:8a:b7:d3:66:08:6c:
1f:5b:3b:05:06:47:f5:2d:99:56:04:7f:19:3f:8f:
72:09:fc:8f:2b:35:c7:40:f8:af:af:5e:1b:4f:1f:
be:7a:a7:29:21:71:8c:cb:cc:de:f8:75:be:88:0f:
ab:f2:ec:d2:16:c7:73:bc:62:4b:45:1d:40:11:ee:
f9:b4:b5:e1:8d:bb:a0:b9:d9:cc:8e:d2:ca:b3:30:
2b:c4:81:3a:cc:90:22:df:b0:58:4f:30:9c:16:02:
72:f2:ff:bd:be:45:78:b5:49:ae:40:da:a1:49:66:
f8:96:5e:da:09:a6:fb:18:8d:b2:e5:8d:9b:1c:5f:
47:4c:bf:ca:27:d0:91:04:99:95:b7:c5:cc:ea:8c:
2b:dc:56:2b:a3:9a:71:c5:28:67:cc:f6:cf:57:5d:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:A6:59:BC:77:59:70:86:DD:20:00:E8:D3:8A:10:5E:7A:64:AC
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/5t-mWbx3WXCG3SAA6NOKEF56ZKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.116.0/24
185.84.118.0/23
185.132.188.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:dc:9d:19:c7:76:03:de:4c:a3:44:b8:6b:fe:2b:ab:43:74:
8e:5c:e7:9a:2f:02:6e:ba:09:61:e1:73:9b:8b:28:d7:db:cc:
75:0b:da:8b:d2:65:65:e6:d4:88:4e:9a:b8:48:4a:3d:07:22:
88:79:05:88:ac:b9:d3:f1:68:41:fc:4e:3e:3c:45:74:51:61:
d4:c6:e8:02:7c:c7:97:46:c3:40:38:c0:c1:ca:2f:89:57:11:
5c:58:e4:21:2c:0b:42:af:c6:6c:5d:0b:23:9b:2d:d5:40:82:
fd:11:55:25:0d:7f:96:37:a0:ee:ca:da:18:50:d6:9f:a5:aa:
8d:cc:d7:92:8f:a7:07:68:e4:de:9b:7e:6b:70:9a:16:b7:c4:
7e:65:05:30:aa:52:83:27:5b:9d:3a:e7:83:41:a9:45:aa:c7:
ed:55:f7:f6:34:67:7f:be:36:2d:ea:3c:78:12:13:f1:53:01:
59:ce:21:6a:26:b2:2d:e4:81:79:14:8e:98:27:46:ed:11:68:
a3:97:6b:e0:00:35:7c:b3:f6:b0:b7:24:a0:ab:aa:bf:43:dc:
4b:c4:a8:7b:0e:ff:f5:ee:5c:a5:30:97:e4:c0:0d:84:0a:c4:
b2:6b:f8:40:d1:ac:2b:6b:41:59:1a:a0:b0:82:d7:0f:5e:8c:
59:fd:fc:5c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZWjMPabud6WXiwNy5nIR8lEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTVlMDUzM2VmYWE1NjI0ZjUzOGI5MmVkMWE5NzNmZWZm
ODk3NTEwHhcNMjUwMzE3MDgyMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmRmYTY1OWJjNzc1OTcwODZkZDIwMDBlOGQzOGExMDVlN2E2NGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgx61dG7W35jQRWnxIdKqygbKKBi
3tWMnKHAufIiW6K4orlYHTKoOc3X5brdAaWZqJpFgrjFveD2MDAfEVHRJsFn4Wi/
U9JwxogIXNDzfxALlm8yCb/E1m4fEAQHmuJwbjGKt9NmCGwfWzsFBkf1LZlWBH8Z
P49yCfyPKzXHQPivr14bTx++eqcpIXGMy8ze+HW+iA+r8uzSFsdzvGJLRR1AEe75
tLXhjbugudnMjtLKszArxIE6zJAi37BYTzCcFgJy8v+9vkV4tUmuQNqhSWb4ll7a
Cab7GI2y5Y2bHF9HTL/KJ9CRBJmVt8XM6owr3FYro5pxxShnzPbPV10I4QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFObfplm8d1lwht0gAOjTihBeemSsMB8GA1UdIwQY
MBaAFPxV4FM++qViT1OLku0alz/v+JdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODIt
YTUyODYyYjQ0NTYzLzEvNXQtbVdieDNXWENHM1NBQTZOT0tFRjU2Wkt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODItYTUyODYyYjQ0NTYz
LzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuVR0AwQB
uVR2AwQBuYS8MA0GCSqGSIb3DQEBCwUAA4IBAQA83J0Zx3YD3kyjRLhr/iurQ3SO
XOeaLwJuuglh4XObiyjX28x1C9qL0mVl5tSITpq4SEo9ByKIeQWIrLnT8WhB/E4+
PEV0UWHUxugCfMeXRsNAOMDByi+JVxFcWOQhLAtCr8ZsXQsjmy3VQIL9EVUlDX+W
N6DuytoYUNafpaqNzNeSj6cHaOTem35rcJoWt8R+ZQUwqlKDJ1udOueDQalFqsft
Vff2NGd/vjYt6jx4EhPxUwFZziFqJrIt5IF5FI6YJ0btEWijl2vgADV8s/awtySg
q6q/Q9xLxKh7Dv/17lylMJfkwA2ECsSya/hA0awra0FZGqCwgtcPXoxZ/fxc
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:47 2025 by rpki-client