Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa
File: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (raw, json)
Hash identifier: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=
Subject key identifier: 4A:98:A3:CB:DB:34:76:5E:59:8F:7F:46:76:13:1A:FE:44:B8:6E:94
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 01942067E88E7CE7F64B52B1CA162D0F7059
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24853
IP address blocks: 185.139.80.0/22 maxlen: 22
193.111.162.0/24 maxlen: 24
2a07:1400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e8:8e:7c:e7:f6:4b:52:b1:ca:16:2d:0f:70:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a98a3cbdb34765e598f7f4676131afe44b86e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:87:bb:a9:32:ff:f8:a1:d7:bd:82:1d:89:
65:62:35:02:13:2d:69:30:23:e9:fc:e8:1f:fd:dc:
17:c3:b0:07:2f:13:b2:7d:2c:f8:b2:02:a2:98:44:
91:31:1c:c9:4c:d1:c6:28:a8:95:e3:0b:04:37:d1:
32:f4:f4:1b:ba:4b:a6:34:31:86:18:36:a7:ff:fc:
d4:fe:fd:ff:f3:f0:74:28:5e:83:7c:ae:0f:83:7a:
42:08:db:ce:fe:fc:02:24:9f:73:85:df:5d:12:62:
6f:c6:3b:11:4c:a1:98:08:7f:8d:9f:74:52:a3:59:
72:81:93:dc:af:e6:0f:cc:16:29:fa:ed:61:0b:d9:
38:b7:19:2c:f4:b9:6a:77:ac:60:96:b1:d3:88:43:
14:73:7e:37:ab:40:b5:58:e8:03:69:1d:fe:89:b5:
cd:8c:94:0a:cf:df:b4:59:a6:56:ac:33:a1:9f:66:
6e:cc:41:cf:84:11:9c:85:59:0d:44:5a:06:0a:35:
95:d5:c8:82:91:25:b2:00:f0:f4:d9:54:ec:4e:15:
4a:33:82:b1:89:3d:0d:b0:9c:05:31:f2:e9:bf:e4:
18:05:bd:08:05:c5:55:4b:ec:a3:15:d5:4e:7d:4c:
7b:f7:a5:7f:4e:b5:89:15:a8:47:91:e9:aa:af:e1:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:98:A3:CB:DB:34:76:5E:59:8F:7F:46:76:13:1A:FE:44:B8:6E:94
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.80.0/22
193.111.162.0/24
IPv6:
2a07:1400::/29
Signature Algorithm: sha256WithRSAEncryption
29:14:6e:88:62:68:ee:d1:b6:9c:02:c0:93:7a:28:2d:7a:78:
73:ba:a8:af:30:40:4c:16:91:bf:4a:d3:22:96:5e:6d:05:80:
20:ed:a5:0c:ac:c0:2d:86:ed:14:af:86:c9:f3:0a:91:1e:c4:
cf:6c:a0:fa:8c:0c:2b:0b:db:bb:0f:79:7e:21:51:10:84:1b:
a7:ef:36:42:f7:2d:b9:79:ff:ee:61:37:20:5b:c1:ce:71:c9:
c2:b8:70:a6:3d:c0:3e:6c:42:93:3d:55:8b:9e:3b:43:f4:68:
44:25:67:06:c4:32:b0:bc:42:67:58:9b:9f:24:0c:a7:b9:9e:
79:ce:39:5a:b0:6c:93:3d:0a:0f:25:d2:45:24:66:8b:13:ed:
06:29:27:75:90:86:4a:50:9d:3a:a0:81:2a:60:0f:12:a0:c4:
0d:51:7c:35:5f:78:25:b8:e0:83:6b:fb:cf:ab:8b:0e:27:b9:
b3:3e:2b:00:dc:77:a3:5c:bc:bb:d9:66:e3:6f:f1:7e:b2:1e:
20:67:99:0c:a0:34:e3:be:cc:9a:c7:b3:35:5a:8b:12:08:52:
0d:36:16:bf:ad:ea:5e:54:0e:c3:58:85:21:e0:78:74:58:3e:
9e:52:3f:2e:19:bc:d4:a1:9e:b8:b1:1a:52:df:f6:c6:7b:b0:
f7:7d:a6:e7
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQgZ+iOfOf2S1KxyhYtD3BZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz
NTc3MzEwHhcNMjUwMTAxMDU0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTk4YTNjYmRiMzQ3NjVlNTk4ZjdmNDY3NjEzMWFmZTQ0Yjg2ZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOuHu6ky//ih172CHYllYjUCEy1p
MCPp/Ogf/dwXw7AHLxOyfSz4sgKimESRMRzJTNHGKKiV4wsEN9Ey9PQbukumNDGG
GDan//zU/v3/8/B0KF6DfK4Pg3pCCNvO/vwCJJ9zhd9dEmJvxjsRTKGYCH+Nn3RS
o1lygZPcr+YPzBYp+u1hC9k4txks9Llqd6xglrHTiEMUc343q0C1WOgDaR3+ibXN
jJQKz9+0WaZWrDOhn2ZuzEHPhBGchVkNRFoGCjWV1ciCkSWyAPD02VTsThVKM4Kx
iT0NsJwFMfLpv+QYBb0IBcVVS+yjFdVOfUx796V/TrWJFahHkemqr+E42QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEqYo8vbNHZeWY9/RnYTGv5EuG6UMB8GA1UdIwQY
MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt
MjM0OGJhNmZiNGMzLzEvU3Bpank5czBkbDVaajM5R2RoTWFfa1M0YnBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz
LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYtQAwQA
wW+iMA0EAgACMAcDBQMqBxQAMA0GCSqGSIb3DQEBCwUAA4IBAQApFG6IYmju0bac
AsCTeigtenhzuqivMEBMFpG/StMill5tBYAg7aUMrMAthu0Ur4bJ8wqRHsTPbKD6
jAwrC9u7D3l+IVEQhBun7zZC9y25ef/uYTcgW8HOccnCuHCmPcA+bEKTPVWLnjtD
9GhEJWcGxDKwvEJnWJufJAynuZ55zjlasGyTPQoPJdJFJGaLE+0GKSd1kIZKUJ06
oIEqYA8SoMQNUXw1X3gluOCDa/vPq4sOJ7mzPisA3HejXLy72Wbjb/F+sh4gZ5kM
oDTjvsyax7M1WosSCFINNha/repeVA7DWIUh4Hh0WD6eUj8uGbzUoZ64sRpS3/bG
e7D3fabn
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:10 2025 by rpki-client