Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/agw3OIrKwOyL1W_VnmVopnHAQeo.roa
File: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (raw, json)
Hash identifier: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=
Subject key identifier: 6A:0C:37:38:8A:CA:C0:EC:8B:D5:6F:D5:9E:65:68:A6:71:C0:41:EA
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019427B59EC21871F4D64FFB5F10ACE3DDD9
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/agw3OIrKwOyL1W_VnmVopnHAQeo.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60893
IP address blocks: 185.24.48.0/22 maxlen: 24
185.58.148.0/22 maxlen: 24
2a00:7420::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9e:c2:18:71:f4:d6:4f:fb:5f:10:ac:e3:dd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a0c37388acac0ec8bd56fd59e6568a671c041ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:1a:3c:06:b1:f7:aa:31:ef:fa:86:39:5c:
3e:c9:c9:b0:22:04:1b:85:9c:4d:ca:17:40:5c:cf:
37:a9:26:cc:c1:24:50:89:40:34:99:1b:10:2a:29:
45:d7:c1:31:77:90:79:2f:7e:1e:68:36:25:10:48:
8e:91:e8:68:5a:d3:ab:ee:34:b0:1d:21:83:9a:64:
1f:ff:00:2e:b4:0a:1e:f9:44:98:e8:f2:5f:1a:41:
2b:53:b8:96:52:8f:e6:71:c8:48:4c:3a:bf:e6:3e:
f5:1a:ae:42:9c:4f:50:b2:93:6d:97:7f:20:d5:e1:
f7:19:72:bb:53:6f:35:da:3e:20:5b:bc:67:6a:5d:
38:67:5c:9d:c6:74:91:39:b8:74:ef:6d:db:6b:08:
82:88:df:5f:7b:a5:fc:63:b5:71:0c:c0:8b:b6:94:
23:89:f4:c6:4d:5b:ba:d4:0e:fe:8a:a2:5b:35:17:
7e:ee:21:cc:30:b1:9d:24:35:35:17:6a:8d:00:ca:
73:3e:d3:44:42:79:70:53:a4:0b:fa:68:02:9b:ac:
46:d7:38:81:de:31:3f:e3:9e:41:cc:07:60:ac:ce:
04:de:60:75:7e:da:c5:57:c4:58:00:b1:26:8b:6b:
6f:72:07:b8:f8:65:00:09:ed:c8:76:4f:77:73:ed:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:37:38:8A:CA:C0:EC:8B:D5:6F:D5:9E:65:68:A6:71:C0:41:EA
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/agw3OIrKwOyL1W_VnmVopnHAQeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.48.0/22
185.58.148.0/22
IPv6:
2a00:7420::/32
Signature Algorithm: sha256WithRSAEncryption
54:b2:06:84:9f:05:3c:23:cc:0b:7a:14:81:ef:fb:7c:3d:e8:
dd:74:eb:11:1e:f4:97:eb:2a:6a:02:02:fd:b2:1f:7a:6b:95:
15:58:8e:41:da:55:62:7f:ec:8c:63:c4:bc:b7:24:11:b3:4b:
f4:0c:43:a4:1e:85:93:40:5e:8a:06:24:d1:f2:ce:ab:61:11:
ed:d6:28:fb:85:25:4b:f3:64:6f:22:d7:51:a1:26:ac:b2:63:
25:a2:fa:c6:91:e6:54:34:0a:73:dd:52:7b:30:6a:81:e7:92:
7f:f5:fc:d3:8e:03:cb:3b:94:bb:c8:57:d0:2d:84:b4:74:20:
66:59:6b:37:0f:68:5e:a0:30:a6:15:ca:42:3a:b5:61:b5:4a:
2a:87:15:3f:31:b3:cf:3f:7b:01:32:ca:ee:8b:99:4b:1c:df:
12:40:e2:11:b4:3a:78:ea:3d:dc:51:9e:8b:8a:ec:59:e0:c5:
f8:71:92:33:d1:a7:21:61:ae:37:b6:e5:6a:1d:bd:55:cd:78:
e0:16:f3:ca:6b:23:44:39:53:77:c7:71:46:e1:af:ed:af:4f:
ad:0f:55:66:38:2d:a0:9d:63:7f:67:87:b4:55:4b:e4:6c:3d:
69:b6:65:f1:0b:f4:c8:5b:48:45:4e:77:62:f4:2d:c5:75:e4:
5f:e1:0a:58
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQntZ7CGHH01k/7XxCs493ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjUwMTAyMTU1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTBjMzczODhhY2FjMGVjOGJkNTZmZDU5ZTY1NjhhNjcxYzA0MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrkaPAax96ox7/qGOVw+ycmwIgQb
hZxNyhdAXM83qSbMwSRQiUA0mRsQKilF18Exd5B5L34eaDYlEEiOkehoWtOr7jSw
HSGDmmQf/wAutAoe+USY6PJfGkErU7iWUo/mcchITDq/5j71Gq5CnE9QspNtl38g
1eH3GXK7U2812j4gW7xnal04Z1ydxnSRObh0723bawiCiN9fe6X8Y7VxDMCLtpQj
ifTGTVu61A7+iqJbNRd+7iHMMLGdJDU1F2qNAMpzPtNEQnlwU6QL+mgCm6xG1ziB
3jE/455BzAdgrM4E3mB1ftrFV8RYALEmi2tvcge4+GUACe3Idk93c+3VhwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGoMNziKysDsi9Vv1Z5laKZxwEHqMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvYWd3M09Jckt3T3lMMVdfVm5tVm9wbkhBUWVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRgwAwQC
uTqUMA0EAgACMAcDBQAqAHQgMA0GCSqGSIb3DQEBCwUAA4IBAQBUsgaEnwU8I8wL
ehSB7/t8PejddOsRHvSX6ypqAgL9sh96a5UVWI5B2lVif+yMY8S8tyQRs0v0DEOk
HoWTQF6KBiTR8s6rYRHt1ij7hSVL82RvItdRoSassmMlovrGkeZUNApz3VJ7MGqB
55J/9fzTjgPLO5S7yFfQLYS0dCBmWWs3D2heoDCmFcpCOrVhtUoqhxU/MbPPP3sB
Msrui5lLHN8SQOIRtDp46j3cUZ6LiuxZ4MX4cZIz0achYa43tuVqHb1VzXjgFvPK
ayNEOVN3x3FG4a/tr0+tD1VmOC2gnWN/Z4e0VUvkbD1ptmXxC/TIW0hFTndi9C3F
deRf4QpY
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:15 2025 by rpki-client