Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/BlxVN2nySjuRFcG8LwCKwBypJPg.roa
File: BlxVN2nySjuRFcG8LwCKwBypJPg.roa (raw, json)
Hash identifier: sOjlIUfSe611hFnqoPqxZzo6197G5DyyzY2FNctRB8Y=
Subject key identifier: 06:5C:55:37:69:F2:4A:3B:91:15:C1:BC:2F:00:8A:C0:1C:A9:24:F8
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 0194221FE6BD89021A1976D41E489DFE7B6E
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/BlxVN2nySjuRFcG8LwCKwBypJPg.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.22.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e6:bd:89:02:1a:19:76:d4:1e:48:9d:fe:7b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=065c553769f24a3b9115c1bc2f008ac01ca924f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:c1:d6:b8:79:16:fb:d4:53:6a:ea:64:c6:
87:da:5b:4f:30:60:c2:8f:1b:9c:bd:34:d1:72:e5:
b0:88:98:2e:67:81:c5:37:c1:32:32:a3:b7:30:12:
0b:28:54:be:9b:b7:c3:7a:d4:34:cc:a6:24:66:d3:
40:ac:db:67:65:3c:54:1d:d8:fa:41:a4:34:5e:56:
78:3c:d4:49:a3:24:e6:c1:c3:87:7b:b6:c3:12:cc:
48:a3:16:b0:a6:10:f9:e8:cb:d9:58:1b:30:f2:da:
2d:ee:b1:40:bc:05:47:32:34:e7:03:14:e0:77:a8:
9d:e8:94:b1:ce:4b:82:62:5a:7d:16:fa:e1:69:b1:
b4:0e:f9:5d:0e:05:c5:5d:62:1f:81:dd:b6:d0:89:
f5:4e:49:c8:b5:0b:b5:49:6d:46:42:63:39:50:e2:
ca:e9:34:a4:7f:4d:02:a7:64:5e:b7:43:1e:de:04:
42:94:72:28:84:b8:9e:b4:a5:61:4c:23:5f:24:e0:
35:65:d5:9e:12:1a:5c:20:ce:51:52:80:de:eb:8b:
cf:b2:ce:a2:cf:92:8f:22:20:c1:f7:21:85:04:1a:
a9:5f:49:9d:8c:58:9e:23:66:92:0e:7f:d7:5c:3c:
0a:a7:84:c4:12:3b:21:56:1e:79:57:11:33:51:7c:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5C:55:37:69:F2:4A:3B:91:15:C1:BC:2F:00:8A:C0:1C:A9:24:F8
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/BlxVN2nySjuRFcG8LwCKwBypJPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.171.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d1:9b:c2:da:52:e4:c1:8e:8c:0f:55:69:53:49:d9:ed:88:
c2:37:aa:ac:09:76:12:a6:72:c5:a5:cb:01:0c:95:8e:41:d2:
4d:ab:51:03:a9:61:f7:c6:fa:08:13:23:b8:f4:76:90:e2:5a:
80:65:6a:db:cc:e4:88:b6:99:05:22:c3:1b:1d:a9:5c:1b:5a:
f5:10:ee:57:52:5b:54:c2:2a:a2:cb:7e:83:2c:96:d8:2b:34:
7c:ac:20:0d:8c:cf:ef:24:5b:80:34:3c:4a:b4:0f:3c:2a:df:
b0:0a:a2:74:8d:fa:d2:8b:f1:70:d7:3f:57:fd:d6:c7:68:71:
1c:60:49:94:81:8a:10:3c:60:01:3b:39:2a:56:f5:e9:c4:f4:
8f:2e:c0:f5:08:9f:db:15:b5:aa:7b:98:6c:e2:56:79:0b:36:
f2:7a:cb:5c:17:8c:e1:ca:1f:fd:40:d2:82:be:6b:0c:16:d0:
1e:18:13:99:fa:85:92:58:93:bd:ac:5f:44:0d:38:cf:2e:59:
6a:46:db:c1:fd:64:3e:5b:5c:21:2a:3f:6f:87:c0:95:a3:b6:
6d:4f:39:bb:b1:52:43:0c:9d:fd:ae:17:1b:76:e1:fd:8c:9f:
b7:27:48:4d:00:01:9e:6c:2c:e6:7e:9f:ac:26:0f:bd:40:f9:
75:d4:fe:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH+a9iQIaGXbUHkid/ntuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy
NzFkMTMwHhcNMjUwMTAxMTM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjVjNTUzNzY5ZjI0YTNiOTExNWMxYmMyZjAwOGFjMDFjYTkyNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qbB1rh5FvvUU2rqZMaH2ltPMGDC
jxucvTTRcuWwiJguZ4HFN8EyMqO3MBILKFS+m7fDetQ0zKYkZtNArNtnZTxUHdj6
QaQ0XlZ4PNRJoyTmwcOHe7bDEsxIoxawphD56MvZWBsw8tot7rFAvAVHMjTnAxTg
d6id6JSxzkuCYlp9FvrhabG0DvldDgXFXWIfgd220In1TknItQu1SW1GQmM5UOLK
6TSkf00Cp2Ret0Me3gRClHIohLietKVhTCNfJOA1ZdWeEhpcIM5RUoDe64vPss6i
z5KPIiDB9yGFBBqpX0mdjFieI2aSDn/XXDwKp4TEEjshVh55VxEzUXxr9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAZcVTdp8ko7kRXBvC8AisAcqST4MB8GA1UdIwQY
MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt
ZGVjNDgwN2NkN2U2LzEvQmx4Vk4ybnlTanVSRmNHOEx3Q0t3QnlwSlBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2
LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRarMA0G
CSqGSIb3DQEBCwUAA4IBAQCA0ZvC2lLkwY6MD1VpU0nZ7YjCN6qsCXYSpnLFpcsB
DJWOQdJNq1EDqWH3xvoIEyO49HaQ4lqAZWrbzOSItpkFIsMbHalcG1r1EO5XUltU
wiqiy36DLJbYKzR8rCANjM/vJFuANDxKtA88Kt+wCqJ0jfrSi/Fw1z9X/dbHaHEc
YEmUgYoQPGABOzkqVvXpxPSPLsD1CJ/bFbWqe5hs4lZ5CzbyestcF4zhyh/9QNKC
vmsMFtAeGBOZ+oWSWJO9rF9EDTjPLllqRtvB/WQ+W1whKj9vh8CVo7ZtTzm7sVJD
DJ39rhcbduH9jJ+3J0hNAAGebCzmfp+sJg+9QPl11P4Q
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:54:05 2025 by rpki-client