Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa
File: g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa (raw, json)
Hash identifier: Vtrkb6OsU8qQ3CnvGKXLNE1uPP6pvCa3n/XLcp+xWOc=
Subject key identifier: 83:D6:82:FD:AE:F0:0B:B7:12:4B:89:07:6D:5B:97:71:AA:19:F5:6D
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 0194266C087C0557D3B262A9149B3047573D
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6740
IP address blocks: 82.202.0.0/18 maxlen: 18
185.193.128.0/22 maxlen: 22
212.90.224.0/19 maxlen: 19
213.235.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:08:7c:05:57:d3:b2:62:a9:14:9b:30:47:57:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83d682fdaef00bb7124b89076d5b9771aa19f56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:71:e7:f4:bc:d2:7b:f8:00:04:fe:4b:80:d2:
3d:e0:5a:81:b9:1d:e0:07:dd:fb:b0:58:8d:9e:4a:
a1:3d:4d:ed:3f:aa:16:9c:47:87:c5:5a:e5:a3:b4:
45:04:c1:b5:25:6d:01:06:a0:d0:f0:bc:ae:46:98:
15:26:c1:09:58:24:2c:47:db:39:01:4c:71:f7:e6:
3a:dd:3a:c9:15:31:95:05:aa:08:fa:20:ab:fa:dc:
ba:65:68:67:94:fd:5c:6a:31:52:0e:c1:74:5b:ed:
d2:c7:eb:52:75:56:bf:19:68:34:12:92:1b:b2:48:
37:90:59:be:95:b4:08:f2:18:6f:86:bd:37:28:50:
94:1e:7d:49:ff:3a:b5:5a:09:9f:9a:fb:d3:43:34:
b8:fa:83:51:12:e5:39:d8:51:72:74:25:39:55:5b:
31:a3:9c:8a:75:ab:67:ef:53:8a:57:a0:a2:c3:6e:
5c:8d:3d:10:5d:e3:7f:19:f3:e3:f3:23:ae:72:ec:
3d:6c:bc:17:e8:cb:22:6f:ec:fc:47:99:a3:46:d0:
18:84:d2:56:de:e6:6c:75:a6:4d:ea:ba:fc:bf:9b:
8c:87:47:cb:7f:94:b8:32:b2:42:ea:55:63:0f:60:
0e:3d:8b:c0:c8:b6:9e:02:02:f6:cd:bb:17:ee:2c:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D6:82:FD:AE:F0:0B:B7:12:4B:89:07:6D:5B:97:71:AA:19:F5:6D
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.0.0/18
185.193.128.0/22
212.90.224.0/19
213.235.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:f8:9c:45:d9:75:94:b2:0e:c6:92:36:d0:0e:a4:66:0a:5c:
e0:2f:d9:09:33:3f:ef:7c:fe:ae:81:9c:80:95:33:06:6e:7d:
5f:d3:76:64:a0:e1:03:62:7c:09:82:06:3a:9b:8d:eb:e1:71:
84:b1:93:32:9d:3f:46:70:be:30:39:42:7f:c4:ee:e4:cc:94:
c4:89:a0:0f:2e:0d:7b:1d:a2:29:e5:da:03:66:8d:fb:56:d4:
f2:58:94:b7:42:cb:72:53:57:c3:3e:0a:25:a5:a3:6f:72:04:
fc:ed:8f:b4:29:72:22:2c:c0:f6:d5:86:f7:e3:96:a4:98:e1:
6d:aa:93:19:96:d6:ed:2f:f8:d7:7c:1d:ee:ca:ac:fc:e4:06:
3e:ef:22:eb:9a:22:6d:da:38:93:e8:e4:95:19:8a:4f:b0:fb:
02:8e:cc:27:c1:80:f9:1f:6b:f9:a5:ce:37:2b:1a:5b:55:3e:
cc:88:8a:75:5b:b1:58:02:46:3c:eb:4f:ff:79:6d:d8:9e:b3:
91:97:18:f4:67:85:5e:56:b1:cd:0a:dd:97:07:89:1d:72:87:
78:69:14:b3:c9:e0:33:54:32:a3:32:0b:e0:3a:b0:95:10:15:
57:ce:ce:a6:9c:30:90:07:af:3a:5b:5b:4b:79:6a:15:4d:64:
ab:ab:d0:20
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQmbAh8BVfTsmKpFJswR1c9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjkzY2YxZWVmNWZiMGJmNzJlZDVjMmUyMjg2N2QxMTI0
YWYzZDgwHhcNMjUwMTAyMDk1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2Q2ODJmZGFlZjAwYmI3MTI0Yjg5MDc2ZDViOTc3MWFhMTlmNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HHn9LzSe/gABP5LgNI94FqBuR3g
B937sFiNnkqhPU3tP6oWnEeHxVrlo7RFBMG1JW0BBqDQ8LyuRpgVJsEJWCQsR9s5
AUxx9+Y63TrJFTGVBaoI+iCr+ty6ZWhnlP1cajFSDsF0W+3Sx+tSdVa/GWg0EpIb
skg3kFm+lbQI8hhvhr03KFCUHn1J/zq1WgmfmvvTQzS4+oNREuU52FFydCU5VVsx
o5yKdatn71OKV6Ciw25cjT0QXeN/GfPj8yOucuw9bLwX6Msib+z8R5mjRtAYhNJW
3uZsdaZN6rr8v5uMh0fLf5S4MrJC6lVjD2AOPYvAyLaeAgL2zbsX7ixAWwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIPWgv2u8Au3EkuJB21bl3GqGfVtMB8GA1UdIwQY
MBaAFFtpPPHu9fsL9y7VwuIoZ9ESSvPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJrODhlNzEtd3YzTHRYQzRpaG4wUkpLODlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZmYxOGQtNWNjNC00MjNmLTk1MTgt
ZWI4NDNlMTdjMDVlLzEvZzlhQ19hN3dDN2NTUzRrSGJWdVhjYW9aOVcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lZmYxOGQtNWNjNC00MjNmLTk1MTgtZWI4NDNlMTdjMDVl
LzEvVzJrODhlNzEtd3YzTHRYQzRpaG4wUkpLODlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGUsoAAwQC
ucGAAwQF1FrgAwQG1etAMA0GCSqGSIb3DQEBCwUAA4IBAQC0+JxF2XWUsg7GkjbQ
DqRmClzgL9kJMz/vfP6ugZyAlTMGbn1f03ZkoOEDYnwJggY6m43r4XGEsZMynT9G
cL4wOUJ/xO7kzJTEiaAPLg17HaIp5doDZo37VtTyWJS3QstyU1fDPgolpaNvcgT8
7Y+0KXIiLMD21Yb345akmOFtqpMZltbtL/jXfB3uyqz85AY+7yLrmiJt2jiT6OSV
GYpPsPsCjswnwYD5H2v5pc43KxpbVT7MiIp1W7FYAkY860//eW3YnrORlxj0Z4Ve
VrHNCt2XB4kdcod4aRSzyeAzVDKjMgvgOrCVEBVXzs6mnDCQB686W1tLeWoVTWSr
q9Ag
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:55 2025 by rpki-client