Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/g18JNzeaBDj_rWrQtxiFnJVw5p8.roa
File: g18JNzeaBDj_rWrQtxiFnJVw5p8.roa (raw, json)
Hash identifier: v8/3+xfdKEGc+rWwjKdCG8v4y8xmqF/GI5hHXZ5amFw=
Subject key identifier: 83:5F:09:37:37:9A:04:38:FF:AD:6A:D0:B7:18:85:9C:95:70:E6:9F
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 0194266BBAB5832C07FF2EAA143A47407BD8
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/g18JNzeaBDj_rWrQtxiFnJVw5p8.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51956
IP address blocks: 92.53.236.0/22 maxlen: 22
92.53.236.0/24 maxlen: 24
92.53.237.0/24 maxlen: 24
92.53.238.0/24 maxlen: 24
92.53.239.0/24 maxlen: 24
185.201.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ba:b5:83:2c:07:ff:2e:aa:14:3a:47:40:7b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=835f0937379a0438ffad6ad0b718859c9570e69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:67:4e:c8:73:af:38:ba:99:d2:15:a4:c9:
e4:4f:28:5b:e3:43:e5:3e:3e:ec:72:29:91:b0:74:
36:a3:bf:54:b0:52:7c:1f:6b:9d:d1:3b:b7:5d:50:
93:d7:d2:27:5d:ef:f3:c2:9e:16:4f:c6:89:5e:bd:
fe:d4:c6:74:e0:be:45:14:ac:dc:86:37:9b:ba:e0:
0f:a2:1c:c5:82:f7:4b:e0:f0:e7:73:8e:e1:3f:4d:
72:8e:b2:af:74:f6:48:b7:42:b0:de:af:15:70:a5:
6b:18:15:bf:b7:e4:46:52:c3:6f:b9:1e:b2:fb:30:
ae:cb:08:88:5e:aa:5f:88:df:a3:60:1d:e2:18:37:
62:75:de:96:f2:a2:d5:b4:33:4e:6f:91:24:2f:95:
d3:9e:f0:3f:09:ac:8b:d1:56:cc:20:15:d8:cf:61:
d7:b8:6e:1c:4e:ba:95:36:d8:a8:33:da:03:8f:a1:
8d:58:3e:02:f0:a3:56:d0:34:d7:ba:e6:71:4e:1b:
1b:0e:ea:ed:16:00:e9:f0:43:8c:60:b6:18:0b:f5:
0a:a3:f8:71:55:94:26:4d:f3:a1:2c:44:08:c0:0f:
88:f5:2a:2f:0c:1f:e1:f5:69:2b:e6:84:7f:e0:e4:
c4:17:03:1e:a4:2e:7f:a0:7b:21:bd:7e:45:d8:e6:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5F:09:37:37:9A:04:38:FF:AD:6A:D0:B7:18:85:9C:95:70:E6:9F
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/g18JNzeaBDj_rWrQtxiFnJVw5p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.236.0/22
185.201.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:65:97:d6:4c:66:3d:79:88:73:b4:ed:f1:ed:b3:e8:33:54:
2a:2a:06:85:e2:5e:2f:4d:d5:28:0c:33:e2:19:1c:0b:e1:59:
f6:18:39:e5:87:df:93:1c:f5:48:a6:10:fa:27:a4:d7:7e:47:
46:0d:69:57:c0:f0:41:e3:9f:d2:3d:39:87:ae:b9:c0:29:35:
33:8a:02:93:7a:ab:49:7f:c5:fb:95:c7:8c:25:11:6d:be:96:
24:7b:1c:61:6e:fb:32:44:4d:85:42:66:b3:a6:09:58:b5:5b:
ae:40:ed:86:72:84:d9:e7:33:53:74:d0:f3:93:11:a8:95:55:
87:db:ff:5c:1d:cd:60:88:49:87:52:34:5b:05:03:c8:1c:3f:
9d:ef:a9:13:57:85:c6:6c:af:f1:e8:49:91:13:7a:c7:d6:50:
b9:e1:cf:cb:d8:45:46:cb:03:53:09:ed:0c:a0:55:07:2b:7d:
78:d1:3b:53:56:ea:ac:40:bc:5a:5a:4e:50:e8:5b:c5:29:dd:
8b:1b:ac:18:8c:13:2e:dc:c8:3e:71:6f:2a:1a:c0:d7:fe:f6:
38:fd:fc:5a:fe:b3:58:0f:81:cd:e2:bd:a9:de:86:cb:92:42:
58:5f:64:c7:56:c2:af:f7:72:a7:d1:29:9c:bc:2d:2f:7b:2a:
68:a5:16:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQma7q1gywH/y6qFDpHQHvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj
ZTBmNmIwHhcNMjUwMTAyMDk0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzVmMDkzNzM3OWEwNDM4ZmZhZDZhZDBiNzE4ODU5Yzk1NzBlNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MRnTshzrzi6mdIVpMnkTyhb40Pl
Pj7scimRsHQ2o79UsFJ8H2ud0Tu3XVCT19InXe/zwp4WT8aJXr3+1MZ04L5FFKzc
hjebuuAPohzFgvdL4PDnc47hP01yjrKvdPZIt0Kw3q8VcKVrGBW/t+RGUsNvuR6y
+zCuywiIXqpfiN+jYB3iGDdidd6W8qLVtDNOb5EkL5XTnvA/CayL0VbMIBXYz2HX
uG4cTrqVNtioM9oDj6GNWD4C8KNW0DTXuuZxThsbDurtFgDp8EOMYLYYC/UKo/hx
VZQmTfOhLEQIwA+I9SovDB/h9Wkr5oR/4OTEFwMepC5/oHshvX5F2Oa8iwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFINfCTc3mgQ4/61q0LcYhZyVcOafMB8GA1UdIwQY
MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt
ODgyYzQ0OGUyZWY2LzEvZzE4Sk56ZWFCRGpfcldyUXR4aUZuSlZ3NXA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2
LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXDXsAwQC
ucmsMA0GCSqGSIb3DQEBCwUAA4IBAQBqZZfWTGY9eYhztO3x7bPoM1QqKgaF4l4v
TdUoDDPiGRwL4Vn2GDnlh9+THPVIphD6J6TXfkdGDWlXwPBB45/SPTmHrrnAKTUz
igKTeqtJf8X7lceMJRFtvpYkexxhbvsyRE2FQmazpglYtVuuQO2GcoTZ5zNTdNDz
kxGolVWH2/9cHc1giEmHUjRbBQPIHD+d76kTV4XGbK/x6EmRE3rH1lC54c/L2EVG
ywNTCe0MoFUHK3140TtTVuqsQLxaWk5Q6FvFKd2LG6wYjBMu3Mg+cW8qGsDX/vY4
/fxa/rNYD4HN4r2p3obLkkJYX2THVsKv93Kn0SmcvC0veypopRZ0
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:02 2025 by rpki-client