Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/mOT0OYFh_GTToGk2uZIA05IaKkw.roa
File: mOT0OYFh_GTToGk2uZIA05IaKkw.roa (raw, json)
Hash identifier: GG4lCtM4E3X4xtxRGjZF0g1O2sssvUKDA/6mYRaIOI0=
Subject key identifier: 98:E4:F4:39:81:61:FC:64:D3:A0:69:36:B9:92:00:D3:92:1A:2A:4C
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019423D6E2452CC2B846F8C7372F31F6CA25
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/mOT0OYFh_GTToGk2uZIA05IaKkw.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6758
IP address blocks: 80.94.96.0/20 maxlen: 24
82.113.0.0/19 maxlen: 24
87.254.224.0/19 maxlen: 24
88.209.64.0/18 maxlen: 24
185.250.4.0/22 maxlen: 24
195.78.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e2:45:2c:c2:b8:46:f8:c7:37:2f:31:f6:ca:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98e4f4398161fc64d3a06936b99200d3921a2a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:eb:7f:75:61:28:35:9a:e6:93:05:2f:59:
26:9f:e9:0d:c1:15:11:6b:e8:7b:1b:8d:ed:e5:a2:
1d:35:11:97:53:c4:a4:5f:08:d1:78:cd:4b:60:51:
5f:7b:84:64:2b:e4:24:61:f7:bb:93:35:4f:35:90:
bb:69:3b:58:b2:27:7e:16:a7:fc:8a:72:70:bc:36:
06:d1:40:75:15:ee:6d:8e:d1:f7:39:ab:a2:2e:89:
93:23:ba:b2:ca:5b:12:f8:31:03:94:cb:ca:78:0e:
a0:6e:37:bd:b9:b9:0e:af:85:db:30:db:12:24:a0:
00:d3:d4:c8:52:db:f4:86:ac:61:67:cc:27:d1:0f:
76:22:ab:19:ef:aa:63:d0:3e:4a:d0:d1:35:2e:5a:
1d:99:28:74:52:83:8e:36:e2:c8:9c:58:02:45:82:
92:b8:51:30:05:a4:19:bf:94:34:75:28:b6:b6:1c:
28:b7:f3:54:0b:a9:fc:e4:6c:d4:05:50:23:8e:bf:
9a:6f:16:d6:d7:84:ec:33:6f:8a:68:c6:73:f4:e9:
32:fe:46:c1:09:07:2e:cf:65:95:04:1d:24:e9:86:
3d:c1:22:1a:15:a3:94:60:4e:4f:1c:c8:2d:db:a0:
11:55:d0:f5:77:5f:3e:16:2c:06:62:b0:fb:03:ac:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:F4:39:81:61:FC:64:D3:A0:69:36:B9:92:00:D3:92:1A:2A:4C
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/mOT0OYFh_GTToGk2uZIA05IaKkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.96.0/20
82.113.0.0/19
87.254.224.0/19
88.209.64.0/18
185.250.4.0/22
195.78.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:41:ce:21:37:c5:95:3e:07:ed:ea:66:f3:f2:c0:ee:05:db:
04:a2:9e:f3:b8:4e:23:b3:c4:fc:db:d3:48:f2:bd:98:23:9e:
35:5f:13:f9:5d:3f:ac:f1:56:7f:03:5f:86:70:e4:44:19:d4:
40:d5:45:11:77:68:a8:2b:67:09:22:2b:95:d7:80:23:e0:84:
f1:04:53:05:2c:f2:c9:71:71:44:04:b6:d0:c4:ea:37:0e:ec:
d7:e5:a6:b3:cb:50:57:cd:ea:a1:61:61:90:75:50:19:8e:b4:
82:e7:21:73:60:70:d5:57:eb:d2:03:80:cc:ff:8b:af:11:84:
6c:de:1e:30:51:53:c7:7e:2b:b8:e7:ff:0d:5f:c0:d3:5f:17:
d5:e7:9a:b7:bb:25:59:e7:5c:7b:eb:45:68:98:b7:d9:bc:09:
e5:66:0b:29:58:51:5f:a2:66:86:59:cf:36:99:c2:9c:fd:8b:
10:45:99:7a:ef:01:8d:79:d3:20:86:e5:27:37:c0:ae:a3:b3:
6a:7b:bf:55:ff:56:d7:be:14:44:60:90:73:3d:aa:be:1b:cd:
db:99:6b:b7:01:4f:9e:02:2e:f8:de:6c:a9:87:96:15:98:f8:
16:e0:e6:dc:ef:17:42:60:2d:17:c0:03:79:20:6b:21:0b:39:
29:35:21:25
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQj1uJFLMK4RvjHNy8x9solMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmQ5Mjc2YTZmNzhkYWMxMDAyYzM3ODNhMThkNDVlYzE0
YjVkNDMwHhcNMjUwMTAxMjE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGU0ZjQzOTgxNjFmYzY0ZDNhMDY5MzZiOTkyMDBkMzkyMWEyYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj3rf3VhKDWa5pMFL1kmn+kNwRUR
a+h7G43t5aIdNRGXU8SkXwjReM1LYFFfe4RkK+QkYfe7kzVPNZC7aTtYsid+Fqf8
inJwvDYG0UB1Fe5tjtH3OauiLomTI7qyylsS+DEDlMvKeA6gbje9ubkOr4XbMNsS
JKAA09TIUtv0hqxhZ8wn0Q92IqsZ76pj0D5K0NE1LlodmSh0UoOONuLInFgCRYKS
uFEwBaQZv5Q0dSi2thwot/NUC6n85GzUBVAjjr+abxbW14TsM2+KaMZz9Oky/kbB
CQcuz2WVBB0k6YY9wSIaFaOUYE5PHMgt26ARVdD1d18+FiwGYrD7A6wbfQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJjk9DmBYfxk06BpNrmSANOSGipMMB8GA1UdIwQY
MBaAFOK9knam942sEALDeDoY1F7BS11DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgt
NzFlZWNmODk4ZDQyLzEvbU9UME9ZRmhfR1RUb0drMnVaSUEwNUlhS2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgtNzFlZWNmODk4ZDQy
LzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEUF5gAwQF
UnEAAwQFV/7gAwQGWNFAAwQCufoEAwQFw04AMA0GCSqGSIb3DQEBCwUAA4IBAQCK
Qc4hN8WVPgft6mbz8sDuBdsEop7zuE4js8T829NI8r2YI541XxP5XT+s8VZ/A1+G
cOREGdRA1UURd2ioK2cJIiuV14Aj4ITxBFMFLPLJcXFEBLbQxOo3DuzX5aazy1BX
zeqhYWGQdVAZjrSC5yFzYHDVV+vSA4DM/4uvEYRs3h4wUVPHfiu45/8NX8DTXxfV
55q3uyVZ51x760VomLfZvAnlZgspWFFfomaGWc82mcKc/YsQRZl67wGNedMghuUn
N8Cuo7Nqe79V/1bXvhREYJBzPaq+G83bmWu3AU+eAi743myph5YVmPgW4Obc7xdC
YC0XwAN5IGshCzkpNSEl
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:34 2025 by rpki-client