Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/rhqZvKha4o1ipI5Jdg-cIoBZsXM.roa
File: rhqZvKha4o1ipI5Jdg-cIoBZsXM.roa (raw, json)
Hash identifier: HWsJ0ZHMQBXtHE7mIjxrdVb1nSEl+Bedc4DwhT1MfLc=
Subject key identifier: AE:1A:99:BC:A8:5A:E2:8D:62:A4:8E:49:76:0F:9C:22:80:59:B1:73
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018617634EFEC0D1F5C5E8BA2B54A17570A9
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/rhqZvKha4o1ipI5Jdg-cIoBZsXM.roa
Signing time: Fri 03 Feb 2023 13:07:09 +0000
ROA not before: Fri 03 Feb 2023 13:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 46.23.100.0/22 maxlen: 22
109.205.212.0/24 maxlen: 24
5.10.248.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
185.81.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:63:4e:fe:c0:d1:f5:c5:e8:ba:2b:54:a1:75:70:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 3 13:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae1a99bca85ae28d62a48e49760f9c228059b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3b:23:e5:34:6d:c8:5e:a3:7b:6f:39:d8:3b:
63:14:78:5e:b5:ba:72:c2:4c:02:ad:2e:67:b4:9d:
ca:e8:1b:97:df:f0:95:3a:47:ab:82:5e:f7:02:0c:
7a:52:31:94:dc:d2:43:07:f0:c3:bb:bc:12:61:7e:
b6:f6:3f:54:68:6b:f7:0c:24:2c:44:a5:71:ca:78:
5a:1f:9a:9a:f6:77:6b:f6:7a:76:60:45:a1:d9:5d:
6b:b0:8c:5c:3c:0f:4c:5f:f4:cc:ef:b0:09:ad:bc:
bb:30:0b:f6:34:d2:31:d6:5d:62:95:76:f8:ed:75:
9b:e9:46:f4:86:f0:6d:f5:5c:98:81:4a:b2:b8:b7:
ec:31:23:2a:23:e9:a2:e0:a5:cb:16:c3:b3:55:5c:
95:c7:ee:7d:c9:c2:33:27:f6:32:c9:77:7c:2a:f1:
4e:5c:1f:80:35:6e:d7:5f:5d:2a:b5:d6:eb:3d:10:
1c:4f:22:fd:36:6c:c1:98:c9:bd:61:23:a2:bb:97:
16:d5:71:0a:a5:14:7e:2e:5a:c5:f5:55:20:57:36:
b9:60:2f:3d:00:3b:ca:33:89:5e:61:c9:ba:2c:13:
52:05:1f:e2:89:8e:1a:6b:f1:3b:9f:52:94:de:b0:
56:98:3f:4c:cc:9d:7c:61:7c:95:a3:32:68:04:f9:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:99:BC:A8:5A:E2:8D:62:A4:8E:49:76:0F:9C:22:80:59:B1:73
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/rhqZvKha4o1ipI5Jdg-cIoBZsXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.100.0/22
109.205.212.0/24
185.81.217.0/24
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:ea:28:21:9a:2d:68:ff:9f:3a:18:6c:66:1c:33:7c:79:8f:
d3:12:1a:b8:63:e1:ab:39:29:90:0e:53:9a:d4:46:ad:fe:69:
e4:3d:8f:07:68:b1:4d:57:6f:26:93:24:cf:14:a2:75:7a:6e:
52:8d:54:b2:64:6f:08:3d:a3:86:1a:81:32:86:1c:d6:df:46:
d7:03:8a:c9:be:6a:23:a2:c9:b3:d0:50:b0:fd:17:ac:f0:a1:
f2:87:02:5a:12:5c:42:79:84:35:88:a9:fc:59:3c:12:34:5d:
72:40:20:79:80:c2:a5:ec:0d:45:f4:4b:78:f4:af:b8:b9:c0:
ad:95:ac:ae:19:89:be:2c:6a:e1:6f:b3:da:0d:c8:1c:34:00:
7f:11:b9:0d:74:10:b8:48:f7:6f:4c:5f:0a:db:d0:92:d9:a6:
7b:57:d0:94:bd:d3:20:18:ee:99:6c:06:0e:5f:8f:22:42:3b:
53:eb:ab:c1:b4:a1:79:38:71:db:16:54:cd:e3:85:ea:77:c5:
0e:89:5c:16:a7:0a:72:c4:04:61:be:21:2c:1e:c1:1f:a5:e0:
98:46:71:4f:c3:e0:d9:c3:c1:86:5c:de:56:a3:86:d2:a8:23:
70:3a:f5:02:90:3c:50:34:79:18:04:05:08:b1:e5:42:5f:52:
0e:1d:d4:68
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYYXY07+wNH1xei6K1ShdXCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMjAzMTMwNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTFhOTliY2E4NWFlMjhkNjJhNDhlNDk3NjBmOWMyMjgwNTliMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTsj5TRtyF6je2852DtjFHhetbpy
wkwCrS5ntJ3K6BuX3/CVOkergl73Agx6UjGU3NJDB/DDu7wSYX629j9UaGv3DCQs
RKVxynhaH5qa9ndr9np2YEWh2V1rsIxcPA9MX/TM77AJrby7MAv2NNIx1l1ilXb4
7XWb6Ub0hvBt9VyYgUqyuLfsMSMqI+mi4KXLFsOzVVyVx+59ycIzJ/YyyXd8KvFO
XB+ANW7XX10qtdbrPRAcTyL9NmzBmMm9YSOiu5cW1XEKpRR+LlrF9VUgVza5YC89
ADvKM4leYcm6LBNSBR/iiY4aa/E7n1KU3rBWmD9MzJ18YXyVozJoBPn0AQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFK4ambyoWuKNYqSOSXYPnCKAWbFzMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvcmhxWnZLaGE0bzFpcEk1SmRnLWNJb0Jac1hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBQr4AwQC
LhdkAwQAbc3UAwQAuVHZAwQCvEAMMA0GCSqGSIb3DQEBCwUAA4IBAQB/6ighmi1o
/586GGxmHDN8eY/TEhq4Y+GrOSmQDlOa1Eat/mnkPY8HaLFNV28mkyTPFKJ1em5S
jVSyZG8IPaOGGoEyhhzW30bXA4rJvmojosmz0FCw/Res8KHyhwJaElxCeYQ1iKn8
WTwSNF1yQCB5gMKl7A1F9Et49K+4ucCtlayuGYm+LGrhb7PaDcgcNAB/EbkNdBC4
SPdvTF8K29CS2aZ7V9CUvdMgGO6ZbAYOX48iQjtT66vBtKF5OHHbFlTN44Xqd8UO
iVwWpwpyxARhviEsHsEfpeCYRnFPw+DZw8GGXN5Wo4bSqCNwOvUCkDxQNHkYBAUI
seVCX1IOHdRo
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:11 2025 by rpki-client