Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/S0ExvKUebjAfAn9XXO-fAUtm6m0.roa
File: S0ExvKUebjAfAn9XXO-fAUtm6m0.roa (raw, json)
Hash identifier: h4JN1Ez0DzGVJfcJVfCfA3DqTmjcjqqUEK6qSpWwL4U=
Subject key identifier: 4B:41:31:BC:A5:1E:6E:30:1F:02:7F:57:5C:EF:9F:01:4B:66:EA:6D
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 0193AC39B1F095BBB78CB1B43571E19240D3
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/S0ExvKUebjAfAn9XXO-fAUtm6m0.roa
Signing time: Mon 09 Dec 2024 16:21:22 +0000
ROA not before: Mon 09 Dec 2024 16:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.188.192.0/22 maxlen: 22
195.211.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:39:b1:f0:95:bb:b7:8c:b1:b4:35:71:e1:92:40:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Dec 9 16:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b4131bca51e6e301f027f575cef9f014b66ea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d2:08:ec:c0:20:2d:1c:27:8d:22:bc:61:55:
68:02:5f:fe:bc:52:51:ec:6a:84:4e:4d:8f:27:93:
17:61:ab:60:ae:02:a6:72:b5:3a:6e:61:f7:32:aa:
c6:cc:9f:de:71:a9:f0:0a:35:83:af:9f:41:ef:05:
2d:4c:3a:ca:19:71:38:2f:f4:43:3a:79:17:f9:c7:
7a:c9:e5:11:36:e6:25:60:60:fa:a3:ac:f9:6b:2a:
4b:ef:7e:be:07:c2:61:5c:77:31:df:84:17:22:0e:
25:29:5e:54:55:b9:86:09:f1:65:50:b0:15:df:46:
e9:d4:40:09:1d:93:13:e2:c8:10:b8:f4:8f:6f:54:
25:e4:e4:0d:b1:b9:5f:61:b1:69:63:8e:3a:fb:88:
5d:fe:3e:72:c8:4a:37:ce:cb:23:39:00:02:d7:10:
e0:e6:25:52:ee:b9:ba:1a:31:24:e7:ac:ec:80:8e:
65:1b:d1:d3:8c:99:d6:f1:9b:81:1d:41:2e:c1:4e:
5a:81:5c:69:17:56:99:df:47:5e:18:5c:e8:5f:a9:
69:c1:e1:f1:bd:56:ee:36:02:c4:26:17:4d:8b:00:
71:f5:bc:f4:f8:b3:9c:41:b4:0d:bd:b6:1d:fd:bf:
40:31:0e:59:d0:fa:d6:42:06:cd:43:fb:e4:49:36:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:31:BC:A5:1E:6E:30:1F:02:7F:57:5C:EF:9F:01:4B:66:EA:6D
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/S0ExvKUebjAfAn9XXO-fAUtm6m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.192.0/22
195.211.116.0/22
Signature Algorithm: sha256WithRSAEncryption
43:68:90:08:55:24:41:5e:19:6d:67:df:1c:e1:8a:d4:fe:75:
c5:6d:f2:da:df:dd:6d:9f:79:2d:f2:3c:77:b5:ea:d2:e8:57:
2c:44:35:00:f5:23:29:37:83:c5:c0:96:11:d0:e8:f3:77:46:
f5:e9:92:04:fd:72:ed:13:71:c2:4c:01:d8:bc:fd:89:a9:83:
86:9f:5b:4a:42:71:56:4a:15:e5:a3:8c:f6:44:66:0e:a3:7a:
3d:fa:66:3d:85:17:3e:fd:e6:8f:78:32:24:3b:16:10:f3:6a:
e4:1a:3a:b7:42:1b:d8:b9:3f:25:b8:50:a8:4f:fd:59:42:d5:
88:e9:5d:5b:76:0b:53:de:c7:f8:bd:3f:6a:63:e8:36:02:71:
11:50:cd:3e:52:65:65:0f:a5:a5:e1:43:b1:b5:ca:78:16:12:
92:eb:8b:2b:26:51:ae:90:c2:ad:df:d6:3b:dd:2a:4f:9b:09:
eb:92:da:99:d8:ea:09:16:f8:e6:17:61:dc:b4:67:35:47:54:
9f:ab:b9:16:d5:29:a0:c6:49:0e:8a:af:26:0c:82:ae:85:b5:
40:a4:fc:e6:0c:cb:85:35:b3:93:d7:5e:73:95:6a:1e:9d:30:
40:96:f7:29:29:f9:1e:e2:8e:82:7d:ae:0f:83:07:12:fc:25:
46:b1:52:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOsObHwlbu3jLG0NXHhkkDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx
OTZhYTEwHhcNMjQxMjA5MTYyMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjQxMzFiY2E1MWU2ZTMwMWYwMjdmNTc1Y2VmOWYwMTRiNjZlYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dII7MAgLRwnjSK8YVVoAl/+vFJR
7GqETk2PJ5MXYatgrgKmcrU6bmH3MqrGzJ/ecanwCjWDr59B7wUtTDrKGXE4L/RD
OnkX+cd6yeURNuYlYGD6o6z5aypL736+B8JhXHcx34QXIg4lKV5UVbmGCfFlULAV
30bp1EAJHZMT4sgQuPSPb1Ql5OQNsblfYbFpY446+4hd/j5yyEo3zssjOQAC1xDg
5iVS7rm6GjEk56zsgI5lG9HTjJnW8ZuBHUEuwU5agVxpF1aZ30deGFzoX6lpweHx
vVbuNgLEJhdNiwBx9bz0+LOcQbQNvbYd/b9AMQ5Z0PrWQgbNQ/vkSTbHrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEtBMbylHm4wHwJ/V1zvnwFLZuptMB8GA1UdIwQY
MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt
ZGQ4NjI3NzRhMDkyLzEvUzBFeHZLVWViakFmQW45WFhPLWZBVXRtNm0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky
LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCubzAAwQC
w9N0MA0GCSqGSIb3DQEBCwUAA4IBAQBDaJAIVSRBXhltZ98c4YrU/nXFbfLa391t
n3kt8jx3terS6FcsRDUA9SMpN4PFwJYR0Ojzd0b16ZIE/XLtE3HCTAHYvP2JqYOG
n1tKQnFWShXlo4z2RGYOo3o9+mY9hRc+/eaPeDIkOxYQ82rkGjq3QhvYuT8luFCo
T/1ZQtWI6V1bdgtT3sf4vT9qY+g2AnERUM0+UmVlD6Wl4UOxtcp4FhKS64srJlGu
kMKt39Y73SpPmwnrktqZ2OoJFvjmF2HctGc1R1Sfq7kW1SmgxkkOiq8mDIKuhbVA
pPzmDMuFNbOT115zlWoenTBAlvcpKfke4o6Cfa4PgwcS/CVGsVK4
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:08 2025 by rpki-client