Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/syr1WAsKdpbK3B-2acqa83QBouY.roa
File: syr1WAsKdpbK3B-2acqa83QBouY.roa (raw, json)
Hash identifier: 7AhmNgpdXoA3dOcpljZ7vHI4I+47jOSplCREprRNiXg=
Subject key identifier: B3:2A:F5:58:0B:0A:76:96:CA:DC:1F:B6:69:CA:9A:F3:74:01:A2:E6
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019420D5C593DC435A91BFA04BAFB83A6326
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/syr1WAsKdpbK3B-2acqa83QBouY.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 88.214.59.0/24 maxlen: 24
185.249.196.0/24 maxlen: 24
194.156.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c5:93:dc:43:5a:91:bf:a0:4b:af:b8:3a:63:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b32af5580b0a7696cadc1fb669ca9af37401a2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:91:6e:b5:0d:56:f4:47:8c:66:03:7d:4e:dc:
0f:f3:fe:14:51:94:ea:80:b3:4e:e6:a0:4f:14:b8:
f1:41:ad:30:9e:41:37:b5:06:53:8a:70:6e:df:3e:
a2:3e:e3:b0:65:e8:96:c9:f4:30:6d:85:78:c9:7c:
22:3f:51:9f:1b:09:07:b2:02:86:2d:bc:bb:87:c1:
3c:8e:9d:2f:fd:92:f6:47:a0:49:df:96:49:da:f9:
92:ea:a5:0d:c9:ea:52:ac:90:94:4c:4c:30:48:11:
1b:d0:f3:68:70:63:90:74:36:56:6f:96:1a:28:02:
8c:c0:48:9e:60:38:1b:87:2e:87:a1:ad:21:46:cf:
d9:db:9b:0b:b2:fe:c9:f9:26:92:93:ca:90:7c:a8:
f4:de:f2:e7:28:ce:d4:f6:62:ae:5c:65:42:28:71:
b5:4f:3e:5c:07:e0:df:3d:65:2e:e2:81:67:5d:78:
41:68:c2:84:62:0d:d7:bb:37:01:5b:26:a2:c2:84:
5c:a9:df:4c:2e:32:3c:b6:9b:6a:41:11:9f:e9:2e:
0d:a5:a1:5b:eb:22:a9:dd:e2:76:6f:e7:a1:7e:46:
76:d1:9a:f7:dd:79:88:41:9b:ab:b8:a4:6d:37:f7:
aa:5a:db:5b:16:7b:82:34:af:3e:9e:d1:4c:a6:09:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:F5:58:0B:0A:76:96:CA:DC:1F:B6:69:CA:9A:F3:74:01:A2:E6
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/syr1WAsKdpbK3B-2acqa83QBouY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.59.0/24
185.249.196.0/24
194.156.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:79:4a:b8:86:ea:6f:2d:af:b6:ba:55:c7:c2:f5:59:74:9c:
0b:e3:4b:b1:38:8c:85:46:c9:62:b3:47:52:e3:e3:1b:98:ae:
9b:37:db:f3:f3:17:2f:b3:78:18:03:13:08:a0:1a:bc:50:c2:
c1:53:92:a2:b2:ae:e5:56:9c:92:eb:cb:c0:8b:c5:44:5f:92:
f0:41:09:08:db:aa:99:eb:55:09:e0:67:c8:93:83:0e:59:ae:
c9:c6:38:f8:a0:94:a7:cc:d2:de:52:84:00:59:b8:03:81:c0:
84:60:6c:33:4f:f7:e5:04:17:7d:0e:b9:ea:fa:de:c7:c5:06:
15:4c:1d:a6:ef:67:c2:f4:9e:76:e4:f3:f1:7e:f7:64:de:c2:
61:f7:00:36:9a:f6:a9:84:84:65:89:75:45:4c:fa:0c:c8:3d:
49:6c:3f:67:75:7d:b0:e9:c9:2d:ca:5a:1d:60:95:5f:1f:7b:
96:2e:70:b7:47:bf:02:01:4f:8f:3f:d9:ce:48:b0:f5:e8:af:
f7:22:13:94:69:7f:94:e8:0a:89:88:d5:9f:a3:e9:04:5b:ad:
f6:12:7b:9c:2d:dc:dd:a6:2e:ae:e1:29:0c:c3:3c:19:75:d1:
1b:dc:14:5f:53:dd:27:c9:28:d0:57:ef:5e:d7:7c:ec:dc:7e:
6c:e2:85:de
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQg1cWT3ENakb+gS6+4OmMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz
ZWNiNjAwHhcNMjUwMTAxMDc0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzJhZjU1ODBiMGE3Njk2Y2FkYzFmYjY2OWNhOWFmMzc0MDFhMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZFutQ1W9EeMZgN9TtwP8/4UUZTq
gLNO5qBPFLjxQa0wnkE3tQZTinBu3z6iPuOwZeiWyfQwbYV4yXwiP1GfGwkHsgKG
Lby7h8E8jp0v/ZL2R6BJ35ZJ2vmS6qUNyepSrJCUTEwwSBEb0PNocGOQdDZWb5Ya
KAKMwEieYDgbhy6Hoa0hRs/Z25sLsv7J+SaSk8qQfKj03vLnKM7U9mKuXGVCKHG1
Tz5cB+DfPWUu4oFnXXhBaMKEYg3XuzcBWyaiwoRcqd9MLjI8tptqQRGf6S4NpaFb
6yKp3eJ2b+ehfkZ20Zr33XmIQZuruKRtN/eqWttbFnuCNK8+ntFMpgnUfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLMq9VgLCnaWytwftmnKmvN0AaLmMB8GA1UdIwQY
MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct
ZTBkN2RkNWUyZTZmLzEvc3lyMVdBc0tkcGJLM0ItMmFjcWE4M1FCb3VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm
LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNY7AwQA
ufnEAwQAwpxZMA0GCSqGSIb3DQEBCwUAA4IBAQAbeUq4hupvLa+2ulXHwvVZdJwL
40uxOIyFRslis0dS4+MbmK6bN9vz8xcvs3gYAxMIoBq8UMLBU5Kisq7lVpyS68vA
i8VEX5LwQQkI26qZ61UJ4GfIk4MOWa7Jxjj4oJSnzNLeUoQAWbgDgcCEYGwzT/fl
BBd9Drnq+t7HxQYVTB2m72fC9J525PPxfvdk3sJh9wA2mvaphIRliXVFTPoMyD1J
bD9ndX2w6cktylodYJVfH3uWLnC3R78CAU+PP9nOSLD16K/3IhOUaX+U6AqJiNWf
o+kEW632EnucLdzdpi6u4SkMwzwZddEb3BRfU90nySjQV+9e13zs3H5s4oXe
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:38:56 2025 by rpki-client