Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/DVsFv0t_ecOVNHO3HwANDhXlask.roa
File: DVsFv0t_ecOVNHO3HwANDhXlask.roa (raw, json)
Hash identifier: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=
Subject key identifier: 0D:5B:05:BF:4B:7F:79:C3:95:34:73:B7:1F:00:0D:0E:15:E5:6A:C9
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5C3873D02022F5DB393F48434FAC
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/DVsFv0t_ecOVNHO3HwANDhXlask.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44525
IP address blocks: 109.160.57.0/24 maxlen: 24
109.160.58.0/24 maxlen: 24
109.160.60.0/24 maxlen: 24
109.160.61.0/24 maxlen: 24
109.160.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5c:38:73:d0:20:22:f5:db:39:3f:48:43:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d5b05bf4b7f79c3953473b71f000d0e15e56ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:79:ed:a0:b4:4d:c0:19:76:11:88:bd:f6:
40:14:d8:fc:fd:b1:01:4e:8a:a1:05:f2:e5:f5:3b:
a5:aa:d5:0c:d0:b9:fa:71:af:01:dc:2e:43:1f:b1:
13:67:95:4a:3d:b7:90:9b:3a:17:21:f9:66:e4:c2:
f2:1f:3b:a3:67:7d:02:51:1d:70:90:82:8b:bd:bb:
8f:31:7c:15:d7:0c:c4:31:d7:39:a4:52:c6:61:9f:
db:5c:bd:4e:25:ed:e5:bd:6e:ba:a4:13:0a:ee:75:
7c:2c:0c:a1:cc:dd:52:a2:e4:13:31:2a:52:d6:11:
47:c2:40:67:6d:fb:bd:0a:60:34:98:21:98:aa:2b:
bc:3a:07:df:7a:b4:2a:ef:3a:3e:3c:5c:cf:11:8f:
8d:6a:e2:b7:7d:6e:d6:3f:88:9a:e8:5a:f4:56:eb:
fa:8b:24:5e:c5:ff:4f:ea:39:fa:1a:41:bc:78:03:
31:e7:12:0d:00:99:fe:b2:83:76:5c:10:7d:7d:5a:
64:9a:ef:47:39:b8:a6:62:32:11:5e:d2:46:dd:06:
00:d4:da:d3:df:aa:ec:96:8a:7d:e2:06:3d:91:48:
69:29:38:02:f2:da:d4:c5:f5:47:d4:d8:3a:c0:d2:
90:6a:e8:82:97:9b:6c:fe:60:22:d1:9f:04:9a:d8:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5B:05:BF:4B:7F:79:C3:95:34:73:B7:1F:00:0D:0E:15:E5:6A:C9
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/DVsFv0t_ecOVNHO3HwANDhXlask.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.57.0-109.160.58.255
109.160.60.0/23
109.160.86.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f0:b3:f3:f0:50:cc:2b:d8:10:cf:40:fa:9b:24:1b:f7:2c:
4a:fe:83:1b:44:5e:de:2d:e8:78:e0:70:50:f2:66:7c:95:7b:
0d:dc:22:d6:6a:7a:9c:f4:40:4a:68:59:c1:fb:2b:92:0b:93:
05:ce:0d:5c:d0:c1:95:42:0f:44:80:9b:eb:5c:e4:25:3f:12:
b2:ee:be:9e:ae:e7:52:4d:3b:e2:31:1c:eb:ff:ed:eb:c9:ed:
00:9c:d9:a0:68:68:cc:9d:52:98:13:93:9d:d0:72:ff:c5:74:
78:1e:ff:7b:97:95:b9:c9:21:2d:6d:af:61:43:f3:13:57:54:
26:ed:cb:80:0b:b7:5f:12:2e:cc:93:c9:4b:6c:7d:ca:86:6e:
e8:54:fa:ac:3c:56:be:45:36:27:8f:3b:0f:e5:d6:81:0d:30:
aa:86:5b:ad:9b:c1:4a:24:bd:f3:41:48:75:64:5c:22:60:c9:
c4:81:60:a4:96:b4:3e:74:e6:4b:cd:b5:1c:b0:ce:c9:cd:4f:
4f:ee:59:bd:72:9a:77:15:30:8c:e9:d0:d4:d5:f0:02:4b:b4:
88:ef:83:ba:70:4d:26:a0:e0:da:b1:77:d6:2c:e7:bd:f2:d3:
9b:f6:55:a8:f7:3f:3f:15:ce:fd:71:a4:9a:44:b8:8e:17:13:
55:0b:9c:6f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQma1w4c9AgIvXbOT9IQ0+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjUwMTAyMDk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDViMDViZjRiN2Y3OWMzOTUzNDczYjcxZjAwMGQwZTE1ZTU2YWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVB57aC0TcAZdhGIvfZAFNj8/bEB
ToqhBfLl9TulqtUM0Ln6ca8B3C5DH7ETZ5VKPbeQmzoXIflm5MLyHzujZ30CUR1w
kIKLvbuPMXwV1wzEMdc5pFLGYZ/bXL1OJe3lvW66pBMK7nV8LAyhzN1SouQTMSpS
1hFHwkBnbfu9CmA0mCGYqiu8OgfferQq7zo+PFzPEY+NauK3fW7WP4ia6Fr0Vuv6
iyRexf9P6jn6GkG8eAMx5xINAJn+soN2XBB9fVpkmu9HObimYjIRXtJG3QYA1NrT
36rslop94gY9kUhpKTgC8trUxfVH1Ng6wNKQauiCl5ts/mAi0Z8EmtjdywIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFA1bBb9Lf3nDlTRztx8ADQ4V5WrJMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvRFZzRnYwdF9lY09WTkhPM0h3QU5EaFhsYXNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABtoDkD
BABtoDoDBAFtoDwDBABtoFYwDQYJKoZIhvcNAQELBQADggEBAAXws/PwUMwr2BDP
QPqbJBv3LEr+gxtEXt4t6HjgcFDyZnyVew3cItZqepz0QEpoWcH7K5ILkwXODVzQ
wZVCD0SAm+tc5CU/ErLuvp6u51JNO+IxHOv/7evJ7QCc2aBoaMydUpgTk53Qcv/F
dHge/3uXlbnJIS1tr2FD8xNXVCbty4ALt18SLsyTyUtsfcqGbuhU+qw8Vr5FNieP
Ow/l1oENMKqGW62bwUokvfNBSHVkXCJgycSBYKSWtD505kvNtRywzsnNT0/uWb1y
mncVMIzp0NTV8AJLtIjvg7pwTSag4Nqxd9Ys573y05v2Vaj3Pz8Vzv1xpJpEuI4X
E1ULnG8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:54 2025 by rpki-client