Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/0DAp-FN5fWxEjj8ABkpB3v75uG8.roa
File: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (raw, json)
Hash identifier: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=
Subject key identifier: D0:30:29:F8:53:79:7D:6C:44:8E:3F:00:06:4A:41:DE:FE:F9:B8:6F
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 019421B235F646CEA172C806D004C73BF978
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/0DAp-FN5fWxEjj8ABkpB3v75uG8.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204536
IP address blocks: 185.87.180.0/22 maxlen: 22
185.87.180.0/24 maxlen: 24
185.87.181.0/24 maxlen: 24
185.87.182.0/24 maxlen: 24
185.87.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:35:f6:46:ce:a1:72:c8:06:d0:04:c7:3b:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d03029f853797d6c448e3f00064a41defef9b86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:83:19:82:7f:9f:aa:ca:ab:a7:b9:49:3c:
b7:26:27:08:16:57:6e:ee:83:1e:9c:4d:a9:62:e9:
50:40:13:2e:54:13:2a:ca:1e:58:52:cc:36:3f:21:
73:0b:aa:3a:8c:2b:f6:0b:a5:0d:bd:ab:f6:34:0c:
24:35:36:39:2a:a8:73:31:52:84:cc:dd:16:0b:22:
2c:ed:e3:15:19:af:69:22:b4:c6:3a:c5:e6:ac:0b:
f9:7e:44:a4:c1:1e:02:dd:10:75:61:93:59:dd:1c:
66:15:f8:ac:36:6d:8d:fa:15:a2:66:03:b8:72:76:
65:b2:7e:51:fa:ff:85:b1:0e:b5:d3:b1:e8:0a:e4:
21:3b:7a:1e:d6:81:21:42:a9:aa:c8:63:62:b7:a4:
56:48:f5:1f:18:7e:3b:c6:f3:ad:83:c4:97:91:5c:
ff:05:ef:31:29:43:6c:2a:00:40:da:31:58:8d:81:
8d:aa:f2:b5:be:46:46:15:68:34:a5:4b:83:e9:3c:
70:aa:78:76:b3:ce:10:46:4b:9d:bb:80:e4:3a:2e:
e8:c0:22:f6:00:e7:a6:aa:aa:10:cf:80:78:e9:68:
0f:48:1b:46:4f:1e:95:e8:ab:57:fb:22:66:91:bc:
6a:1d:a3:46:41:5c:d7:98:d1:93:91:fb:e8:5b:d5:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:29:F8:53:79:7D:6C:44:8E:3F:00:06:4A:41:DE:FE:F9:B8:6F
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/0DAp-FN5fWxEjj8ABkpB3v75uG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.180.0/22
Signature Algorithm: sha256WithRSAEncryption
24:c1:3d:e7:b0:34:11:4b:91:32:71:97:5b:f8:76:b3:f5:40:
22:72:90:5a:a0:97:00:96:f2:93:b9:28:7e:1e:0b:f0:51:07:
f1:ed:ad:91:69:f5:02:25:5a:01:5c:f6:7d:9a:39:3c:45:1e:
59:97:2c:25:77:a4:60:43:6f:c4:dd:5b:17:3b:af:a2:0b:d1:
40:2f:6a:88:e8:3f:91:dd:89:a4:90:1d:2f:9d:66:4d:be:2e:
71:41:e9:6f:0d:10:57:43:45:e4:2e:02:05:07:7d:63:66:99:
48:01:3b:54:c4:51:62:c7:d9:c1:ea:2b:7d:36:fb:9f:ea:b5:
0c:47:01:8e:77:a0:3d:50:59:92:e8:bd:b7:13:2d:a6:b4:d4:
01:3d:09:a4:5b:f3:cf:c4:01:f3:01:88:1f:7d:5b:aa:ea:11:
ff:ec:a1:d5:9a:48:43:1d:52:de:2e:b8:87:52:e1:d0:b1:cb:
0e:9b:c4:f8:79:a1:58:43:f8:b3:5e:83:ac:fe:ed:1f:08:ba:
ad:a9:ca:60:7a:4c:99:be:1e:36:78:e3:c8:6f:65:bb:53:52:
9f:f2:9b:d6:4d:84:28:ff:4e:6a:d8:38:c9:89:16:32:ae:44:
19:c1:d3:97:a0:e2:1a:bd:ef:89:96:70:00:2b:9c:09:70:1f:
00:72:83:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsjX2Rs6hcsgG0ATHO/l4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWJlZjVhMWEzMWVmNWNmYzAzNmI5YzJiNzBhNDJhYmQw
NDAwN2UwHhcNMjUwMTAxMTE0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDMwMjlmODUzNzk3ZDZjNDQ4ZTNmMDAwNjRhNDFkZWZlZjliODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3KDGYJ/n6rKq6e5STy3JicIFldu
7oMenE2pYulQQBMuVBMqyh5YUsw2PyFzC6o6jCv2C6UNvav2NAwkNTY5KqhzMVKE
zN0WCyIs7eMVGa9pIrTGOsXmrAv5fkSkwR4C3RB1YZNZ3RxmFfisNm2N+hWiZgO4
cnZlsn5R+v+FsQ6107HoCuQhO3oe1oEhQqmqyGNit6RWSPUfGH47xvOtg8SXkVz/
Be8xKUNsKgBA2jFYjYGNqvK1vkZGFWg0pUuD6Txwqnh2s84QRkudu4DkOi7owCL2
AOemqqoQz4B46WgPSBtGTx6V6KtX+yJmkbxqHaNGQVzXmNGTkfvoW9W+5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAwKfhTeX1sRI4/AAZKQd7++bhvMB8GA1UdIwQY
MBaAFNgb71oaMe9c/ANrnCtwpCq9BAB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQt
OWNlZWJhOGJhMjRjLzEvMERBcC1GTjVmV3hFamo4QUJrcEIzdjc1dUc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQtOWNlZWJhOGJhMjRj
LzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVe0MA0G
CSqGSIb3DQEBCwUAA4IBAQAkwT3nsDQRS5EycZdb+Haz9UAicpBaoJcAlvKTuSh+
HgvwUQfx7a2RafUCJVoBXPZ9mjk8RR5Zlywld6RgQ2/E3VsXO6+iC9FAL2qI6D+R
3YmkkB0vnWZNvi5xQelvDRBXQ0XkLgIFB31jZplIATtUxFFix9nB6it9Nvuf6rUM
RwGOd6A9UFmS6L23Ey2mtNQBPQmkW/PPxAHzAYgffVuq6hH/7KHVmkhDHVLeLriH
UuHQscsOm8T4eaFYQ/izXoOs/u0fCLqtqcpgekyZvh42eOPIb2W7U1Kf8pvWTYQo
/05q2DjJiRYyrkQZwdOXoOIave+JlnAAK5wJcB8AcoNg
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:55 2025 by rpki-client