Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/4smvePH69FAYNSdSIOq-IbOCEOY.roa
File: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (raw, json)
Hash identifier: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=
Subject key identifier: E2:C9:AF:78:F1:FA:F4:50:18:35:27:52:20:EA:BE:21:B3:82:10:E6
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 01942747ACE965633E8D7D202DA84EF7EAF5
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/4smvePH69FAYNSdSIOq-IbOCEOY.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48817
IP address blocks: 185.139.248.0/22 maxlen: 22
193.22.15.0/24 maxlen: 24
2a10:db40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ac:e9:65:63:3e:8d:7d:20:2d:a8:4e:f7:ea:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2c9af78f1faf4501835275220eabe21b38210e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:81:76:a8:80:ea:1f:3b:2d:b4:76:a2:7c:
2b:0c:4e:7c:e2:21:72:fe:d5:58:a7:4f:0c:3f:40:
04:a5:91:fd:fb:ca:59:16:2b:b2:71:6d:a8:f1:07:
bc:fb:3c:f3:7a:24:fe:d2:48:40:c9:c1:43:ad:7c:
de:07:69:ef:47:8c:2e:14:12:78:5f:1a:a8:42:d5:
16:24:fd:26:8a:4c:12:5b:6b:1e:1e:bc:cc:42:66:
db:e1:6a:92:77:e0:12:e4:af:a1:53:13:0d:ba:6f:
b6:2d:07:e7:eb:d2:4b:0b:04:e2:a1:9f:d3:67:75:
52:2d:83:96:5e:e5:85:d1:67:e6:04:e5:1f:84:ab:
1b:da:f2:0e:7c:96:4b:0d:ef:f3:07:3c:f0:57:4a:
ac:41:c5:a0:08:ec:45:01:14:55:fb:af:91:4c:8b:
05:a2:59:d1:75:61:e5:88:0a:b3:9b:de:ff:1d:c0:
55:70:b2:98:48:6b:00:d3:bd:c7:bc:df:d6:34:f3:
0a:2e:2b:5c:55:23:83:63:0d:13:49:b0:85:47:b3:
b7:9d:72:6b:6b:97:bd:24:af:0e:54:e2:d8:3c:2f:
6a:36:07:af:a4:78:d4:9f:0c:e7:1d:60:fc:5a:de:
5f:11:4e:76:7a:bc:c6:db:e2:59:79:42:09:da:11:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:AF:78:F1:FA:F4:50:18:35:27:52:20:EA:BE:21:B3:82:10:E6
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/4smvePH69FAYNSdSIOq-IbOCEOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.248.0/22
193.22.15.0/24
IPv6:
2a10:db40::/29
Signature Algorithm: sha256WithRSAEncryption
95:4a:70:cb:6c:88:e7:be:ac:b9:9f:27:b7:8f:5e:b2:e7:87:
07:5f:0e:06:be:fa:24:e6:0f:0f:ed:60:4d:15:f5:bf:f5:ad:
e9:c6:85:9d:f6:ea:f8:37:6e:40:20:94:07:b4:0d:42:43:fc:
74:1f:31:31:31:8b:d0:60:89:e2:7d:fe:02:a1:74:7b:64:d6:
23:61:a2:51:c7:5a:1c:2a:a5:4c:b8:22:9e:9e:47:46:57:49:
aa:19:c2:7c:fb:1b:0d:24:62:92:2b:1d:84:69:f7:96:cf:89:
83:58:1a:11:e5:32:24:b2:1b:19:50:d8:fd:4f:74:9e:c5:b3:
6e:e8:1f:a3:7a:9e:3c:71:d4:73:4a:63:89:f4:66:0d:3d:4a:
00:99:34:7c:df:49:e5:b6:31:16:7a:95:43:31:f4:1c:2c:5f:
45:65:23:08:0f:f6:c7:12:89:67:ad:71:15:60:91:5a:cf:66:
1a:0a:c9:d9:98:cc:47:a2:91:e0:45:bb:83:20:7a:6c:f5:25:
e9:4a:a8:cb:e3:a6:14:dc:fe:ef:3b:2f:bc:64:27:f5:ac:c1:
21:c7:25:e8:ce:c6:27:a9:cd:b1:d5:81:9f:d2:6f:c4:86:cb:
89:31:c3:c6:f4:67:23:0d:33:ea:4e:47:1c:90:b9:10:ab:f0:
91:9e:8f:b6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQnR6zpZWM+jX0gLahO9+r1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODA1YzVmZTM0NTAyODdkY2RlNmFkZTBkOWM5NTU4YmE2
MTVlMzIwHhcNMjUwMTAyMTM0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmM5YWY3OGYxZmFmNDUwMTgzNTI3NTIyMGVhYmUyMWIzODIxMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwOBdqiA6h87LbR2onwrDE584iFy
/tVYp08MP0AEpZH9+8pZFiuycW2o8Qe8+zzzeiT+0khAycFDrXzeB2nvR4wuFBJ4
XxqoQtUWJP0mikwSW2seHrzMQmbb4WqSd+AS5K+hUxMNum+2LQfn69JLCwTioZ/T
Z3VSLYOWXuWF0WfmBOUfhKsb2vIOfJZLDe/zBzzwV0qsQcWgCOxFARRV+6+RTIsF
olnRdWHliAqzm97/HcBVcLKYSGsA073HvN/WNPMKLitcVSODYw0TSbCFR7O3nXJr
a5e9JK8OVOLYPC9qNgevpHjUnwznHWD8Wt5fEU52erzG2+JZeUIJ2hEuhwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOLJr3jx+vRQGDUnUiDqviGzghDmMB8GA1UdIwQY
MBaAFOWAXF/jRQKH3N5q3g2clVi6YV4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTIt
NTk1MzA3ZjQ3MTEwLzEvNHNtdmVQSDY5RkFZTlNkU0lPcS1JYk9DRU9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTItNTk1MzA3ZjQ3MTEw
LzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYv4AwQA
wRYPMA0EAgACMAcDBQMqENtAMA0GCSqGSIb3DQEBCwUAA4IBAQCVSnDLbIjnvqy5
nye3j16y54cHXw4Gvvok5g8P7WBNFfW/9a3pxoWd9ur4N25AIJQHtA1CQ/x0HzEx
MYvQYIniff4CoXR7ZNYjYaJRx1ocKqVMuCKenkdGV0mqGcJ8+xsNJGKSKx2EafeW
z4mDWBoR5TIkshsZUNj9T3SexbNu6B+jep48cdRzSmOJ9GYNPUoAmTR830nltjEW
epVDMfQcLF9FZSMID/bHEolnrXEVYJFaz2YaCsnZmMxHopHgRbuDIHps9SXpSqjL
46YU3P7vOy+8ZCf1rMEhxyXozsYnqc2x1YGf0m/EhsuJMcPG9GcjDTPqTkcckLkQ
q/CRno+2
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:58:38 2025 by rpki-client