Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/OTxCQduV-uqIoeFa9Cq4lhI0Plg.roa
File: OTxCQduV-uqIoeFa9Cq4lhI0Plg.roa (raw, json)
Hash identifier: SntazOe0GcprBZUsg09GtT5xfUWIyPvf8ofxR/XlEEQ=
Subject key identifier: 39:3C:42:41:DB:95:FA:EA:88:A1:E1:5A:F4:2A:B8:96:12:34:3E:58
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0195C68AF45570A6EFC62CB10BEE6891F9D2
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/OTxCQduV-uqIoeFa9Cq4lhI0Plg.roa
Signing time: Mon 24 Mar 2025 05:05:49 +0000
ROA not before: Mon 24 Mar 2025 05:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 94.154.177.0/24 maxlen: 24
185.52.136.0/24 maxlen: 24
193.160.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:8a:f4:55:70:a6:ef:c6:2c:b1:0b:ee:68:91:f9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Mar 24 05:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=393c4241db95faea88a1e15af42ab89612343e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:ad:b0:38:36:f1:2f:95:8e:ed:7e:64:93:
4d:ba:b0:01:df:44:06:04:bc:6b:8d:69:52:b5:4b:
35:7f:cc:29:01:81:3a:c9:2e:b4:41:ba:79:43:6b:
f9:ff:1c:c8:69:7a:eb:0c:c5:26:5a:85:09:ea:a3:
4f:40:c6:ff:5b:32:98:a2:ff:74:ca:e2:df:3a:cd:
3a:85:65:62:e1:9c:16:76:02:84:37:60:45:76:df:
74:53:f6:07:09:5b:9e:f2:02:54:3a:b0:38:89:43:
17:09:5d:10:d3:be:0c:9b:a7:c8:42:d8:f2:69:ec:
15:29:3f:89:6b:b5:ce:2e:00:97:5c:9c:1f:6d:6a:
21:c9:13:75:a1:e1:be:0c:38:df:e7:9e:e0:b6:e4:
04:c4:9b:11:f7:5e:3c:ba:96:e3:44:f8:bc:e3:bc:
23:1d:4a:c0:c3:7f:45:eb:7b:78:26:0b:2a:05:bb:
77:a8:6b:35:3d:53:ab:c6:25:c3:d1:1b:92:48:7a:
1d:ed:0c:b7:e7:ed:81:49:85:c6:a4:7c:b1:8e:ac:
8f:18:08:fd:fd:c0:ad:6f:9c:5a:66:19:86:09:b5:
c7:87:e8:94:6a:60:b7:47:31:3c:23:f0:99:15:c1:
be:79:84:c6:c6:10:b2:af:30:47:1f:9c:9c:38:98:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:42:41:DB:95:FA:EA:88:A1:E1:5A:F4:2A:B8:96:12:34:3E:58
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/OTxCQduV-uqIoeFa9Cq4lhI0Plg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.177.0/24
185.52.136.0/24
193.160.80.0/22
Signature Algorithm: sha256WithRSAEncryption
59:83:c6:07:a6:d1:3f:f7:8c:3d:72:02:7c:50:7d:13:5c:f9:
0e:56:27:49:b3:64:6f:2b:fd:17:ae:57:00:32:48:4c:14:53:
5e:b0:72:67:1d:d8:fc:e9:5b:96:8b:5f:56:42:7b:40:1c:12:
62:11:eb:b9:2f:b8:c2:c1:ab:52:9a:f4:50:d0:ad:31:d8:29:
b3:40:5b:ca:69:e0:84:b1:bb:e6:00:76:f3:d7:e4:ee:92:32:
73:90:f9:f0:14:a3:3e:c4:d2:c4:19:7e:14:80:30:a7:e3:f4:
df:2f:ad:ab:18:cc:b6:b0:2b:25:82:b1:4a:f5:59:d9:e9:3f:
56:88:88:d1:17:de:29:a3:db:58:2b:ee:a6:10:3f:a6:31:4d:
f1:72:d2:71:74:0a:bd:cd:0c:2d:a0:c4:94:53:f4:34:9b:95:
35:28:9e:4a:81:69:7d:77:c6:83:92:2f:65:23:3a:fa:49:80:
79:5a:04:25:85:90:35:12:7b:5e:86:2a:c2:52:24:7a:15:6a:
ec:44:c7:17:07:86:bf:cb:9f:96:54:40:9f:f3:e5:b3:6e:4c:
51:57:1b:82:e6:0d:46:04:26:e8:7e:1a:c9:c6:a3:e5:89:30:
3c:94:5d:a9:8e:50:87:dc:e7:53:ef:a7:cc:9e:60:2e:27:75:
aa:27:b3:a8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZXGivRVcKbvxiyxC+5okfnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwMzI0MDUwNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTNjNDI0MWRiOTVmYWVhODhhMWUxNWFmNDJhYjg5NjEyMzQzZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQCtsDg28S+Vju1+ZJNNurAB30QG
BLxrjWlStUs1f8wpAYE6yS60Qbp5Q2v5/xzIaXrrDMUmWoUJ6qNPQMb/WzKYov90
yuLfOs06hWVi4ZwWdgKEN2BFdt90U/YHCVue8gJUOrA4iUMXCV0Q074Mm6fIQtjy
aewVKT+Ja7XOLgCXXJwfbWohyRN1oeG+DDjf557gtuQExJsR9148upbjRPi847wj
HUrAw39F63t4JgsqBbt3qGs1PVOrxiXD0RuSSHod7Qy35+2BSYXGpHyxjqyPGAj9
/cCtb5xaZhmGCbXHh+iUamC3RzE8I/CZFcG+eYTGxhCyrzBHH5ycOJiLiwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDk8QkHblfrqiKHhWvQquJYSND5YMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvT1R4Q1FkdVYtdXFJb2VGYTlDcTRsaEkwUGxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXpqxAwQA
uTSIAwQCwaBQMA0GCSqGSIb3DQEBCwUAA4IBAQBZg8YHptE/94w9cgJ8UH0TXPkO
VidJs2RvK/0XrlcAMkhMFFNesHJnHdj86VuWi19WQntAHBJiEeu5L7jCwatSmvRQ
0K0x2CmzQFvKaeCEsbvmAHbz1+TukjJzkPnwFKM+xNLEGX4UgDCn4/TfL62rGMy2
sCslgrFK9VnZ6T9WiIjRF94po9tYK+6mED+mMU3xctJxdAq9zQwtoMSUU/Q0m5U1
KJ5KgWl9d8aDki9lIzr6SYB5WgQlhZA1EntehirCUiR6FWrsRMcXB4a/y5+WVECf
8+WzbkxRVxuC5g1GBCbofhrJxqPliTA8lF2pjlCH3OdT76fMnmAuJ3WqJ7Oo
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:40 2025 by rpki-client