Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/gt9goB76oJJ9IidA_tfxI6lWDIw.roa
File: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (raw, json)
Hash identifier: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=
Subject key identifier: 82:DF:60:A0:1E:FA:A0:92:7D:22:27:40:FE:D7:F1:23:A9:56:0C:8C
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 01941FFA1A1B952BC5D1592FD0AA656B3EA7
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/gt9goB76oJJ9IidA_tfxI6lWDIw.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24892
IP address blocks: 185.107.48.0/22 maxlen: 22
185.107.48.0/24 maxlen: 24
185.107.49.0/24 maxlen: 24
185.107.50.0/24 maxlen: 24
185.107.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1a:1b:95:2b:c5:d1:59:2f:d0:aa:65:6b:3e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82df60a01efaa0927d222740fed7f123a9560c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:c6:6d:f0:3e:ce:c2:fc:88:5f:33:c4:cd:
a6:a2:d2:56:87:37:56:45:95:a6:2e:c1:08:51:3f:
a0:35:85:19:07:4f:84:b7:dd:7d:3b:16:d1:da:e8:
13:57:64:5d:48:18:6a:c9:72:9d:ad:bc:05:c1:82:
81:f1:ec:1d:68:b4:ed:b6:5e:57:f7:42:c6:50:ce:
23:f2:30:04:61:4d:27:6f:3a:0c:22:65:76:71:c1:
91:0b:6b:b4:8b:04:67:9f:fa:4c:dd:5c:93:43:7f:
fc:0c:66:5b:ce:90:7e:ca:8d:98:3d:32:1a:35:3e:
bc:49:c4:32:e9:8d:f2:05:d4:d1:62:54:8d:5b:4f:
a7:eb:9a:4e:6e:b9:5e:f0:d3:18:23:df:fb:44:15:
a7:5c:36:a5:06:14:67:a0:2d:89:73:16:d0:61:eb:
5e:9b:b1:e8:ba:6b:65:4e:21:f7:5a:c8:0c:c6:8f:
9c:e1:ae:ad:ba:c0:1b:36:78:3d:4a:10:38:dd:f5:
13:df:29:45:d1:8c:9f:8e:b2:37:fe:66:a2:39:a9:
77:fe:89:e0:1a:ec:7f:58:d7:07:38:a7:58:e2:ce:
38:ac:f8:38:3f:6a:e8:5c:be:0b:71:bf:8a:3f:de:
4e:b6:54:3d:36:a3:f9:28:51:b1:59:ff:6d:5d:e4:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DF:60:A0:1E:FA:A0:92:7D:22:27:40:FE:D7:F1:23:A9:56:0C:8C
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/gt9goB76oJJ9IidA_tfxI6lWDIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ac:47:13:7c:0f:c1:0f:e0:10:a8:73:f8:8f:39:20:1b:87:
80:c7:90:79:08:23:30:57:b8:28:35:b0:32:81:c1:8d:19:66:
a6:04:2f:5c:3a:32:54:d7:bb:cc:d7:96:ea:77:04:1c:00:08:
b6:a5:c6:f9:38:21:5f:90:03:10:8c:19:95:3c:76:c5:00:3c:
5d:69:21:00:7a:f6:23:05:52:f6:d9:69:00:61:43:e6:76:ae:
a2:55:c1:71:17:c1:5e:7e:db:11:a2:f0:bd:bd:16:92:f3:17:
fe:94:f1:83:82:31:7e:d1:3e:bd:a3:40:96:63:0e:ff:1f:3a:
a9:72:a4:cc:9f:27:22:51:73:91:13:61:7a:b5:78:41:40:29:
22:a6:3c:a4:5f:d2:70:ef:54:5e:8c:0f:3b:23:5b:c1:2f:12:
4d:ed:ef:9d:e2:0e:1a:cf:bb:9a:f0:db:8d:2c:48:f5:fd:64:
8b:fe:14:36:2a:a3:f7:64:84:bd:f2:e3:c0:5f:46:49:50:09:
d4:52:27:5a:de:d9:c2:c0:2b:fa:84:e2:d0:10:c2:ce:f2:73:
fd:f1:04:a0:98:b7:e1:aa:f7:5f:64:d6:b4:2d:95:34:df:14:
74:8a:0a:4d:fa:54:33:53:6a:ed:94:05:7e:f7:b8:a5:d7:07:
3e:0c:ed:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+hoblSvF0Vkv0Kplaz6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh
N2IzMGYwHhcNMjUwMTAxMDM0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmRmNjBhMDFlZmFhMDkyN2QyMjI3NDBmZWQ3ZjEyM2E5NTYwYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoPGbfA+zsL8iF8zxM2motJWhzdW
RZWmLsEIUT+gNYUZB0+Et919OxbR2ugTV2RdSBhqyXKdrbwFwYKB8ewdaLTttl5X
90LGUM4j8jAEYU0nbzoMImV2ccGRC2u0iwRnn/pM3VyTQ3/8DGZbzpB+yo2YPTIa
NT68ScQy6Y3yBdTRYlSNW0+n65pObrle8NMYI9/7RBWnXDalBhRnoC2JcxbQYete
m7HoumtlTiH3WsgMxo+c4a6tusAbNng9ShA43fUT3ylF0YyfjrI3/maiOal3/ong
Gux/WNcHOKdY4s44rPg4P2roXL4Lcb+KP95OtlQ9NqP5KFGxWf9tXeRjewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFILfYKAe+qCSfSInQP7X8SOpVgyMMB8GA1UdIwQY
MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt
YTBhNzJhNzMzYzAyLzEvZ3Q5Z29CNzZvSko5SWlkQV90ZnhJNmxXREl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy
LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWswMA0G
CSqGSIb3DQEBCwUAA4IBAQAKrEcTfA/BD+AQqHP4jzkgG4eAx5B5CCMwV7goNbAy
gcGNGWamBC9cOjJU17vM15bqdwQcAAi2pcb5OCFfkAMQjBmVPHbFADxdaSEAevYj
BVL22WkAYUPmdq6iVcFxF8FeftsRovC9vRaS8xf+lPGDgjF+0T69o0CWYw7/Hzqp
cqTMnyciUXORE2F6tXhBQCkipjykX9Jw71RejA87I1vBLxJN7e+d4g4az7ua8NuN
LEj1/WSL/hQ2KqP3ZIS98uPAX0ZJUAnUUida3tnCwCv6hOLQEMLO8nP98QSgmLfh
qvdfZNa0LZU03xR0igpN+lQzU2rtlAV+97il1wc+DO31
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:44 2025 by rpki-client