Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/rjR8lGZevB88cWBoZrBIto3MeHA.roa
File: rjR8lGZevB88cWBoZrBIto3MeHA.roa (raw, json)
Hash identifier: rMHaEQRl7caXSgxty5dwGL/wlOcGLl25XAlQeBFASec=
Subject key identifier: AE:34:7C:94:66:5E:BC:1F:3C:71:60:68:66:B0:48:B6:8D:CC:78:70
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 0194AF7E70A5603DE35A2B82EEA942D7A21B
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/rjR8lGZevB88cWBoZrBIto3MeHA.roa
Signing time: Wed 29 Jan 2025 00:38:06 +0000
ROA not before: Wed 29 Jan 2025 00:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 185.205.24.0/22 maxlen: 24
185.205.24.0/24 maxlen: 24
185.205.25.0/24 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:af:7e:70:a5:60:3d:e3:5a:2b:82:ee:a9:42:d7:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: Jan 29 00:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae347c94665ebc1f3c71606866b048b68dcc7870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:1d:68:87:8b:20:d3:39:c2:a3:02:a8:2b:
47:1e:fa:3b:53:32:aa:5f:b1:a4:4d:3e:c2:c7:a5:
b8:b0:f8:af:5d:8d:e4:9e:ea:26:f8:55:e8:37:43:
f4:54:d3:f9:52:c6:ae:4d:34:63:e9:a4:84:61:53:
61:75:f0:af:fa:a0:95:0b:67:cf:4c:71:10:3e:56:
36:f0:93:13:4a:f5:f5:69:f1:5b:ea:bf:a3:4a:c5:
b0:26:3a:ad:30:3d:b3:e3:a2:ee:d3:86:9e:b6:57:
5d:c6:b6:22:ea:16:72:e7:46:1b:2a:f8:8e:c2:8b:
af:51:6f:8e:1b:b5:1e:d1:27:ae:ba:b3:48:73:06:
21:c5:4c:90:0a:d5:70:e1:af:91:d8:90:49:1f:9f:
43:03:e7:49:77:60:10:11:2f:b1:74:0a:e8:e1:88:
91:e8:12:4b:01:1b:8e:9b:10:dd:25:d9:2f:6e:5b:
77:9e:4e:bf:ec:47:e6:69:7c:db:30:f4:81:cd:9d:
16:77:e2:2e:08:eb:1f:b3:c9:a7:c6:13:93:e2:d8:
57:66:86:09:40:37:7f:7a:62:1a:d8:77:01:f2:e1:
12:e9:f5:08:42:cd:2d:56:91:18:60:5e:7a:5e:43:
1c:86:0d:cb:f2:6d:df:8a:b2:cc:c6:04:e8:a6:5b:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:34:7C:94:66:5E:BC:1F:3C:71:60:68:66:B0:48:B6:8D:CC:78:70
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/rjR8lGZevB88cWBoZrBIto3MeHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
193.105.119.0/24
195.85.224.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e6:78:0f:3d:e1:a2:d4:6b:a2:7a:a6:41:12:db:94:dd:0d:
eb:ec:54:a7:8e:8b:51:6a:bb:b9:36:9b:f6:28:b4:a6:9b:0f:
83:6e:5c:ff:31:5b:90:05:26:53:e7:70:ea:75:ce:22:56:65:
c7:77:00:78:ca:d0:71:5e:6e:e6:43:1b:9b:b3:f3:06:8b:cd:
4b:3e:49:90:54:df:4e:92:d9:ad:eb:07:5e:da:71:18:66:5c:
82:35:66:09:a9:ae:02:86:b6:64:a6:3f:71:19:bb:20:e4:25:
3a:e9:2d:05:4c:8a:3b:94:bc:f4:4e:89:a9:40:a7:fc:1c:0a:
7e:e9:22:b1:4e:8d:b4:f0:25:e0:ce:7e:04:86:b2:d4:cd:1d:
6b:15:a6:26:25:7d:1b:00:12:65:00:67:7c:cf:20:8b:aa:a5:
cc:70:1d:5f:b1:8e:ca:c8:8f:f9:98:a6:dd:37:ee:e0:1f:11:
8f:66:a3:0b:37:4c:6c:dd:7d:71:f9:8d:60:59:b1:90:2a:99:
5e:63:65:92:5d:e2:8d:c3:1f:1a:fc:47:04:5f:26:ad:16:7f:
02:55:5c:79:77:6e:4e:ac:fa:9a:7b:3d:a9:88:c3:9e:54:de:
23:19:b8:d9:17:cc:06:d0:89:71:64:20:45:7d:7a:ca:c5:1a:
d1:78:3c:7f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZSvfnClYD3jWiuC7qlC16IbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5
NDIyMGUwHhcNMjUwMTI5MDAzODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTM0N2M5NDY2NWViYzFmM2M3MTYwNjg2NmIwNDhiNjhkY2M3ODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM8daIeLINM5wqMCqCtHHvo7UzKq
X7GkTT7Cx6W4sPivXY3knuom+FXoN0P0VNP5UsauTTRj6aSEYVNhdfCv+qCVC2fP
THEQPlY28JMTSvX1afFb6r+jSsWwJjqtMD2z46Lu04aetlddxrYi6hZy50YbKviO
wouvUW+OG7Ue0SeuurNIcwYhxUyQCtVw4a+R2JBJH59DA+dJd2AQES+xdAro4YiR
6BJLARuOmxDdJdkvblt3nk6/7EfmaXzbMPSBzZ0Wd+IuCOsfs8mnxhOT4thXZoYJ
QDd/emIa2HcB8uES6fUIQs0tVpEYYF56XkMchg3L8m3firLMxgToplsr9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK40fJRmXrwfPHFgaGawSLaNzHhwMB8GA1UdIwQY
MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt
NDE4YWY5MGFjYjhhLzEvcmpSOGxHWmV2Qjg4Y1dCb1pyQkl0bzNNZUhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh
LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuc0YAwQA
wWl3AwQAw1XgMA0GCSqGSIb3DQEBCwUAA4IBAQA35ngPPeGi1GuieqZBEtuU3Q3r
7FSnjotRaru5Npv2KLSmmw+Dblz/MVuQBSZT53Dqdc4iVmXHdwB4ytBxXm7mQxub
s/MGi81LPkmQVN9Oktmt6wde2nEYZlyCNWYJqa4ChrZkpj9xGbsg5CU66S0FTIo7
lLz0TompQKf8HAp+6SKxTo208CXgzn4EhrLUzR1rFaYmJX0bABJlAGd8zyCLqqXM
cB1fsY7KyI/5mKbdN+7gHxGPZqMLN0xs3X1x+Y1gWbGQKpleY2WSXeKNwx8a/EcE
XyatFn8CVVx5d25OrPqaez2piMOeVN4jGbjZF8wG0IlxZCBFfXrKxRrReDx/
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:19:13 2025 by rpki-client