Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/aD4ioP8gjb0hx8YQDXC5SNzMzUs.roa
File: aD4ioP8gjb0hx8YQDXC5SNzMzUs.roa (raw, json)
Hash identifier: yU020JUGihSFwGMLXiDxQbplODmP3bvw7D4/kPZyPGs=
Subject key identifier: 68:3E:22:A0:FF:20:8D:BD:21:C7:C6:10:0D:70:B9:48:DC:CC:CD:4B
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 019427B6964A39C93AA423AC2FB87518E78E
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/aD4ioP8gjb0hx8YQDXC5SNzMzUs.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208002
IP address blocks: 185.137.212.0/24 maxlen: 24
185.137.213.0/24 maxlen: 24
185.137.214.0/24 maxlen: 24
185.137.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:96:4a:39:c9:3a:a4:23:ac:2f:b8:75:18:e7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=683e22a0ff208dbd21c7c6100d70b948dccccd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:36:b3:94:43:0b:8f:11:f0:0a:c0:a2:cd:
7e:d2:7b:9c:6b:41:f4:a4:c7:54:84:90:50:2a:c5:
f8:07:ae:92:cb:e5:d0:4c:36:b5:0d:cf:39:52:1d:
cb:4c:f0:14:c1:29:e8:90:84:b2:e3:43:c5:aa:a7:
2d:3f:59:d3:33:bf:81:4b:75:f3:fd:90:7b:f9:2c:
f0:d8:7d:02:88:84:92:9f:ad:ac:bc:d1:80:3f:5f:
02:24:ab:96:66:ce:63:89:9b:b5:0d:4e:d3:26:57:
80:ea:39:87:e2:ff:f4:9b:64:9a:2e:f0:40:4f:94:
76:4d:06:b6:7b:9c:f8:fa:83:d9:fb:e2:87:14:58:
01:d3:63:7e:59:ba:04:1c:54:c7:b8:1f:3d:25:5f:
9b:09:65:17:31:6d:1f:26:b3:29:ff:f2:50:ef:27:
8b:f1:51:91:fe:65:9a:57:cd:00:f1:03:55:1d:85:
6e:30:ee:4c:ea:8a:a7:b9:f2:34:cd:1a:61:1c:80:
c0:8a:f3:71:be:d3:55:ef:16:54:2d:8a:92:96:a1:
e7:a0:de:23:5d:e4:e1:40:78:75:3c:53:a5:e2:1c:
5c:17:ff:87:28:c5:08:8e:c4:2f:4c:05:6d:16:d2:
93:8c:41:e4:3c:4d:06:46:30:a2:8b:a3:a1:01:15:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:22:A0:FF:20:8D:BD:21:C7:C6:10:0D:70:B9:48:DC:CC:CD:4B
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/aD4ioP8gjb0hx8YQDXC5SNzMzUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:41:35:6e:3f:d8:ef:e0:83:2c:d2:8f:ff:12:2e:f8:99:fd:
14:0e:5a:88:8a:83:4a:ec:5a:76:5c:a0:f1:05:37:ce:f8:b4:
92:4a:cb:8e:07:fe:2c:df:54:8b:58:1f:2a:f1:82:ae:fc:0f:
c2:04:7e:97:b8:0d:dc:b9:6f:a9:38:40:34:93:ca:b0:31:a0:
04:d8:b6:e7:89:6f:c2:ef:28:d9:1f:dc:d7:2c:cf:8f:da:92:
e4:b6:a0:41:3b:5c:b1:13:cf:44:9d:d1:a2:6d:8d:3e:14:62:
7d:91:a4:15:67:b0:1c:f7:01:63:17:e0:5b:c2:28:cc:6d:74:
d0:ff:a1:ee:40:c2:08:b2:ce:e8:ff:f2:43:e5:d2:ac:dc:f9:
dd:52:3f:26:7b:04:5f:7c:df:d7:61:a0:fe:b0:b9:46:cf:cb:
57:eb:f4:9e:4e:93:ef:dd:a5:5d:28:3b:71:4c:48:c3:7f:5f:
3b:06:42:22:53:fd:d8:03:83:91:fd:c1:5d:12:31:c3:57:70:
f5:12:88:42:a7:0f:1d:fd:a3:b8:5f:d3:b7:43:fd:ea:ed:2d:
9e:64:d9:82:a8:81:d4:6f:a5:03:0c:27:2a:8c:53:21:96:ef:
b6:c7:5b:88:01:bf:1d:b0:9f:58:8a:e2:33:c2:28:80:53:38:
e8:51:25:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntpZKOck6pCOsL7h1GOeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYTAyYjE5N2RiYWY3ZGViNzRlMGEyN2Q5ZDRlY2QzZmFl
MWU4ZWQwHhcNMjUwMTAyMTU1MTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODNlMjJhMGZmMjA4ZGJkMjFjN2M2MTAwZDcwYjk0OGRjY2NjZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5c2s5RDC48R8ArAos1+0nuca0H0
pMdUhJBQKsX4B66Sy+XQTDa1Dc85Uh3LTPAUwSnokISy40PFqqctP1nTM7+BS3Xz
/ZB7+Szw2H0CiISSn62svNGAP18CJKuWZs5jiZu1DU7TJleA6jmH4v/0m2SaLvBA
T5R2TQa2e5z4+oPZ++KHFFgB02N+WboEHFTHuB89JV+bCWUXMW0fJrMp//JQ7yeL
8VGR/mWaV80A8QNVHYVuMO5M6oqnufI0zRphHIDAivNxvtNV7xZULYqSlqHnoN4j
XeThQHh1PFOl4hxcF/+HKMUIjsQvTAVtFtKTjEHkPE0GRjCii6OhARUMtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGg+IqD/II29IcfGEA1wuUjczM1LMB8GA1UdIwQY
MBaAFO6gKxl9uvfet04KJ9nU7NP64ejtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FBckdYMjY5OTYzVGdvbjJkVHMwX3JoNk8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85NzFiMTEtMjgwZS00Y2VkLWI5OWMt
YmJjY2FiOTEzYjVkLzEvYUQ0aW9QOGdqYjBoeDhZUURYQzVTTnpNelVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85NzFiMTEtMjgwZS00Y2VkLWI5OWMtYmJjY2FiOTEzYjVk
LzEvN3FBckdYMjY5OTYzVGdvbjJkVHMwX3JoNk8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYnUMA0G
CSqGSIb3DQEBCwUAA4IBAQBKQTVuP9jv4IMs0o//Ei74mf0UDlqIioNK7Fp2XKDx
BTfO+LSSSsuOB/4s31SLWB8q8YKu/A/CBH6XuA3cuW+pOEA0k8qwMaAE2LbniW/C
7yjZH9zXLM+P2pLktqBBO1yxE89EndGibY0+FGJ9kaQVZ7Ac9wFjF+BbwijMbXTQ
/6HuQMIIss7o//JD5dKs3PndUj8mewRffN/XYaD+sLlGz8tX6/SeTpPv3aVdKDtx
TEjDf187BkIiU/3YA4OR/cFdEjHDV3D1EohCpw8d/aO4X9O3Q/3q7S2eZNmCqIHU
b6UDDCcqjFMhlu+2x1uIAb8dsJ9YiuIzwiiAUzjoUSWX
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:30:00 2025 by rpki-client