Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/2HWaYe8To0qjjtVdcy7I7ttFbbg.roa
File: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (raw, json)
Hash identifier: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=
Subject key identifier: D8:75:9A:61:EF:13:A3:4A:A3:8E:D5:5D:73:2E:C8:EE:DB:45:6D:B8
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 0194274854978F8E4116B0304558F9505194
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/2HWaYe8To0qjjtVdcy7I7ttFbbg.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201241
IP address blocks: 185.235.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:54:97:8f:8e:41:16:b0:30:45:58:f9:50:51:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8759a61ef13a34aa38ed55d732ec8eedb456db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:a5:38:47:28:ca:49:8e:6c:40:91:1f:39:
97:71:93:c2:51:9c:53:39:90:dd:6d:be:06:6a:16:
8d:78:9b:13:d2:c2:42:e8:b4:96:08:c0:23:61:4a:
63:1f:8d:60:33:57:25:22:25:eb:50:90:cd:a9:3b:
37:86:a3:53:c7:5e:e4:53:f5:16:d1:a8:a2:b9:82:
41:6c:74:58:70:61:e7:07:de:34:dd:74:22:60:35:
8b:44:4c:ec:56:47:03:0a:5b:a0:a4:b0:fd:01:02:
b8:bf:ae:52:6d:05:df:18:85:e8:d4:ad:dd:b2:42:
eb:ea:ff:9f:0e:93:e1:4a:3c:7e:58:c7:c9:7a:ce:
78:a2:1e:1e:ff:25:82:c5:78:1d:e2:93:0d:c6:ba:
03:c8:20:b2:b0:fa:c2:b5:ff:a7:05:f6:7c:59:6e:
a3:40:78:7f:ca:ec:33:02:c0:54:3f:34:ad:23:67:
16:2a:2b:3d:c2:3a:0e:17:72:df:78:f0:b3:3c:27:
69:a4:90:f4:37:42:34:57:bc:71:48:d8:17:30:7a:
a2:8d:7f:4b:7b:da:68:87:a1:a9:e5:0b:bd:76:64:
2d:80:64:0c:2a:14:80:d5:51:e7:b0:10:79:64:e6:
62:7c:8a:5f:46:63:8f:ee:cb:9f:05:56:f0:2e:53:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:9A:61:EF:13:A3:4A:A3:8E:D5:5D:73:2E:C8:EE:DB:45:6D:B8
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/2HWaYe8To0qjjtVdcy7I7ttFbbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:fd:62:92:95:5a:f0:a1:2b:d7:67:fb:4c:2d:ef:c0:ce:f3:
e4:9c:07:79:1b:18:f2:cd:2a:34:78:42:a8:80:55:d4:a6:87:
9b:ec:fa:2f:4e:53:63:ca:6c:73:09:71:07:38:dc:b8:88:65:
72:9b:7c:e9:64:ee:19:d0:f0:22:84:76:90:6a:f9:ea:8b:22:
28:1f:7e:a8:3e:bb:09:f6:48:82:7c:bc:5e:3b:41:58:12:a6:
53:56:8b:99:06:0e:3e:8e:02:62:a0:2d:d3:52:8d:78:82:a1:
00:a2:dc:65:08:64:f8:b2:32:be:e1:21:7c:61:90:6a:f6:c4:
75:9b:66:72:31:a0:7c:0d:15:db:be:31:9f:ff:12:72:d3:3f:
30:66:fb:0c:56:8f:1e:5a:23:71:da:73:99:e8:63:c3:b3:1d:
32:d6:a4:b4:fd:fb:e6:d2:b2:95:ea:c1:d2:5d:dd:ee:9c:db:
d2:06:40:0e:c9:3f:b3:2d:78:52:7f:65:d5:8b:93:e0:97:e5:
a7:9a:29:52:aa:d6:fa:1a:f6:3a:18:85:5d:27:47:27:60:57:
8b:da:7d:b0:05:4c:06:d5:39:86:9d:46:1e:37:f5:50:f6:36:
16:0d:25:06:e6:cd:d8:ad:ce:3f:31:51:18:01:4a:c7:be:7d:
ca:28:0a:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSFSXj45BFrAwRVj5UFGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ZlMDA1ZDdlNThlYzAzM2NhOWFiYTg3ZTA2MDYwMjE1
MzM2MTcwHhcNMjUwMTAyMTM1MDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODc1OWE2MWVmMTNhMzRhYTM4ZWQ1NWQ3MzJlYzhlZWRiNDU2ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1silOEcoykmObECRHzmXcZPCUZxT
OZDdbb4GahaNeJsT0sJC6LSWCMAjYUpjH41gM1clIiXrUJDNqTs3hqNTx17kU/UW
0aiiuYJBbHRYcGHnB9403XQiYDWLREzsVkcDClugpLD9AQK4v65SbQXfGIXo1K3d
skLr6v+fDpPhSjx+WMfJes54oh4e/yWCxXgd4pMNxroDyCCysPrCtf+nBfZ8WW6j
QHh/yuwzAsBUPzStI2cWKis9wjoOF3LfePCzPCdppJD0N0I0V7xxSNgXMHqijX9L
e9poh6Gp5Qu9dmQtgGQMKhSA1VHnsBB5ZOZifIpfRmOP7sufBVbwLlMm0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNh1mmHvE6NKo47VXXMuyO7bRW24MB8GA1UdIwQY
MBaAFMd/4AXX5Y7AM8qauofgYGAhUzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEt
MGVkMjRlYmM0ZWQ4LzEvMkhXYVllOFRvMHFqanRWZGN5N0k3dHRGYmJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEtMGVkMjRlYmM0ZWQ4
LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuessMA0G
CSqGSIb3DQEBCwUAA4IBAQCz/WKSlVrwoSvXZ/tMLe/AzvPknAd5GxjyzSo0eEKo
gFXUpoeb7PovTlNjymxzCXEHONy4iGVym3zpZO4Z0PAihHaQavnqiyIoH36oPrsJ
9kiCfLxeO0FYEqZTVouZBg4+jgJioC3TUo14gqEAotxlCGT4sjK+4SF8YZBq9sR1
m2ZyMaB8DRXbvjGf/xJy0z8wZvsMVo8eWiNx2nOZ6GPDsx0y1qS0/fvm0rKV6sHS
Xd3unNvSBkAOyT+zLXhSf2XVi5Pgl+WnmilSqtb6GvY6GIVdJ0cnYFeL2n2wBUwG
1TmGnUYeN/VQ9jYWDSUG5s3Yrc4/MVEYAUrHvn3KKAqK
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:16 2025 by rpki-client