Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/Rno-yJEc1S8JUuAc_nrhiZ05e-w.roa
File: Rno-yJEc1S8JUuAc_nrhiZ05e-w.roa (raw, json)
Hash identifier: iIJodFy51l2Con55T/5O5td+doKVzX9/SEMJ2gNPQZw=
Subject key identifier: 46:7A:3E:C8:91:1C:D5:2F:09:52:E0:1C:FE:7A:E1:89:9D:39:7B:EC
Certificate issuer: /CN=ed536c19a691c2f544220a9521474a8765e59cf1
Certificate serial: 018CC348ADE436D32D1BBB0DA40DC7BEAC03
Authority key identifier: ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/Rno-yJEc1S8JUuAc_nrhiZ05e-w.roa
Signing time: Mon 01 Jan 2024 04:29:29 +0000
ROA not before: Mon 01 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210021
IP address blocks: 185.206.81.0/24 maxlen: 24
185.206.83.0/24 maxlen: 24
185.206.80.0/24 maxlen: 24
185.206.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ad:e4:36:d3:2d:1b:bb:0d:a4:0d:c7:be:ac:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed536c19a691c2f544220a9521474a8765e59cf1
Validity
Not Before: Jan 1 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=467a3ec8911cd52f0952e01cfe7ae1899d397bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:24:b5:ce:9e:1a:09:05:b3:09:25:bb:a4:
e1:9c:00:b8:f0:87:21:b6:73:92:f5:6d:41:ab:5b:
7f:bd:d1:f6:ea:b7:25:7e:60:94:1b:49:19:96:35:
d7:a8:19:1c:aa:8c:60:62:c3:98:51:50:90:ac:4a:
c4:98:fd:40:d6:e2:9b:14:97:fc:34:38:e9:5e:d8:
0a:23:1e:b6:fb:14:5d:43:c8:56:00:3f:a7:ff:82:
6b:38:7b:4f:a4:8a:bf:6e:4a:be:39:96:5e:e5:02:
ce:d8:86:58:45:e8:5e:b5:47:05:54:b0:f1:76:d1:
ff:30:26:b9:87:b5:e8:e1:0a:90:02:33:ab:ac:79:
ca:62:d1:0f:08:f2:b7:d2:fb:b5:02:6a:ff:f8:2a:
78:eb:69:ce:e9:7f:5f:8b:cb:40:b8:de:73:83:b0:
42:82:e3:6c:75:80:49:55:8f:d6:af:35:89:69:8f:
16:59:f0:86:58:6f:af:82:be:0b:fa:3b:5c:8a:3e:
fc:9e:3d:31:32:ee:62:db:14:5d:6e:e7:15:df:8d:
2f:6d:d0:9d:e1:7c:c7:64:9c:6a:43:05:57:96:92:
bd:69:b3:c6:76:3b:66:35:c0:cd:96:28:bd:94:08:
0b:9b:be:01:b6:67:a8:70:f2:fa:bf:47:dc:e7:80:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:3E:C8:91:1C:D5:2F:09:52:E0:1C:FE:7A:E1:89:9D:39:7B:EC
X509v3 Authority Key Identifier:
keyid:ED:53:6C:19:A6:91:C2:F5:44:22:0A:95:21:47:4A:87:65:E5:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VNsGaaRwvVEIgqVIUdKh2XlnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/Rno-yJEc1S8JUuAc_nrhiZ05e-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6e20ca-a1ef-4ae8-aef1-e4509fb9cf20/1/7VNsGaaRwvVEIgqVIUdKh2XlnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.80.0/22
Signature Algorithm: sha256WithRSAEncryption
33:09:b3:dc:d4:d5:99:81:b2:a0:b3:e3:d1:45:53:80:fc:24:
e8:5c:2c:bc:ef:16:07:1e:a7:9e:9e:74:07:36:18:af:e4:3c:
b5:c0:94:a2:b1:c3:2c:9a:7e:03:89:f7:fa:b4:2d:b2:3e:dd:
69:50:01:32:1d:98:c8:70:ba:f3:21:95:53:20:97:86:05:8c:
3b:ee:2d:f6:9a:95:84:ba:61:b9:31:cf:c5:59:61:6e:6a:f9:
9f:66:29:db:7a:c0:48:62:ca:6f:06:39:19:95:2a:e4:35:c7:
5d:35:27:9f:31:83:e5:9e:bf:69:22:01:06:2e:c4:23:7c:bf:
49:2e:e8:53:25:70:f1:d5:7f:5c:33:c1:8a:a0:b5:97:36:89:
eb:b4:44:2d:4d:f8:8e:85:9b:8a:05:7d:5f:08:db:a9:9a:c7:
66:05:4c:02:4c:7b:2a:ac:0b:f8:3a:5c:bf:f3:8b:79:82:42:
1a:14:03:48:31:72:a7:7f:8b:21:52:3e:49:b4:27:59:1f:a4:
60:85:e0:d8:a2:60:9a:28:98:48:41:64:b8:b8:c8:bc:48:b8:
a1:35:1d:0a:23:95:e8:56:87:7c:1e:31:d4:50:f1:9f:17:b1:
3a:f2:a4:b9:f5:75:c8:c0:72:a0:7a:01:74:94:54:2d:35:c7:
f8:e2:91:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSK3kNtMtG7sNpA3HvqwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTM2YzE5YTY5MWMyZjU0NDIyMGE5NTIxNDc0YTg3NjVl
NTljZjEwHhcNMjQwMTAxMDQyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjdhM2VjODkxMWNkNTJmMDk1MmUwMWNmZTdhZTE4OTlkMzk3YmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Qktc6eGgkFswklu6ThnAC48Ich
tnOS9W1Bq1t/vdH26rclfmCUG0kZljXXqBkcqoxgYsOYUVCQrErEmP1A1uKbFJf8
NDjpXtgKIx62+xRdQ8hWAD+n/4JrOHtPpIq/bkq+OZZe5QLO2IZYRehetUcFVLDx
dtH/MCa5h7Xo4QqQAjOrrHnKYtEPCPK30vu1Amr/+Cp462nO6X9fi8tAuN5zg7BC
guNsdYBJVY/WrzWJaY8WWfCGWG+vgr4L+jtcij78nj0xMu5i2xRdbucV340vbdCd
4XzHZJxqQwVXlpK9abPGdjtmNcDNlii9lAgLm74BtmeocPL6v0fc54A2SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZ6PsiRHNUvCVLgHP564YmdOXvsMB8GA1UdIwQY
MBaAFO1TbBmmkcL1RCIKlSFHSodl5ZzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZOc0dhYVJ3dlZFSWdxVklVZEtoMlhsblBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82ZTIwY2EtYTFlZi00YWU4LWFlZjEt
ZTQ1MDlmYjljZjIwLzEvUm5vLXlKRWMxUzhKVXVBY19ucmhpWjA1ZS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82ZTIwY2EtYTFlZi00YWU4LWFlZjEtZTQ1MDlmYjljZjIw
LzEvN1ZOc0dhYVJ3dlZFSWdxVklVZEtoMlhsblBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc5QMA0G
CSqGSIb3DQEBCwUAA4IBAQAzCbPc1NWZgbKgs+PRRVOA/CToXCy87xYHHqeennQH
Nhiv5Dy1wJSiscMsmn4Diff6tC2yPt1pUAEyHZjIcLrzIZVTIJeGBYw77i32mpWE
umG5Mc/FWWFuavmfZinbesBIYspvBjkZlSrkNcddNSefMYPlnr9pIgEGLsQjfL9J
LuhTJXDx1X9cM8GKoLWXNonrtEQtTfiOhZuKBX1fCNupmsdmBUwCTHsqrAv4Oly/
84t5gkIaFANIMXKnf4shUj5JtCdZH6RgheDYomCaKJhIQWS4uMi8SLihNR0KI5Xo
Vod8HjHUUPGfF7E68qS59XXIwHKgegF0lFQtNcf44pFX
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:25 2025 by rpki-client