Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/0eBNXDs625wWt3eSViaFroIf-H4.roa
File: 0eBNXDs625wWt3eSViaFroIf-H4.roa (raw, json)
Hash identifier: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=
Subject key identifier: D1:E0:4D:5C:3B:3A:DB:9C:16:B7:77:92:56:26:85:AE:82:1F:F8:7E
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 01941FFA29EF411B517091C589E0455DF731
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/0eBNXDs625wWt3eSViaFroIf-H4.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57219
IP address blocks: 185.198.18.0/23 maxlen: 23
2001:7f8:b3::/48 maxlen: 48
2a0a:8240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:29:ef:41:1b:51:70:91:c5:89:e0:45:5d:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e04d5c3b3adb9c16b77792562685ae821ff87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:20:54:00:67:ec:61:62:e8:5b:93:c4:31:
91:bc:4c:0b:4e:f4:07:30:f7:a5:38:59:51:26:11:
29:a4:d3:77:d4:21:1b:16:a2:b9:c1:35:25:5d:09:
f0:07:79:a3:8e:14:21:a5:ca:44:16:e7:d1:e1:a3:
be:a6:5c:3d:f0:77:7c:c4:57:ff:d4:54:f7:74:a8:
36:fb:ae:ce:2b:b4:a8:81:ae:99:ec:83:c7:b2:78:
dc:9a:26:03:d7:6e:b7:69:63:3f:7b:2c:94:ba:97:
cb:c5:55:8a:cd:91:3d:1f:47:55:f3:c3:4b:ee:fb:
51:4e:6f:ee:dd:6d:12:b7:8e:1d:7c:c9:94:7b:00:
fd:c0:39:42:bc:26:6a:bc:21:29:7b:e5:6d:3f:cb:
d1:c0:78:f6:84:46:f3:ea:4e:fc:2d:00:12:19:4b:
7c:2d:b3:ed:5f:21:6b:db:e0:8a:0a:be:0a:bf:7c:
4d:35:fa:ba:ac:1d:02:67:c4:0a:8d:55:b0:df:c2:
fd:b8:b5:31:62:61:15:75:ab:20:ff:6c:99:1f:6f:
7c:4c:ce:71:55:f5:31:b1:86:73:e3:ac:19:29:a8:
2a:66:33:fc:25:d3:2f:e5:cf:ae:bc:95:d4:a9:df:
e7:ab:39:cb:4d:e9:ab:44:7b:37:ec:be:c5:68:62:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:4D:5C:3B:3A:DB:9C:16:B7:77:92:56:26:85:AE:82:1F:F8:7E
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/0eBNXDs625wWt3eSViaFroIf-H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.18.0/23
IPv6:
2001:7f8:b3::/48
2a0a:8240::/29
Signature Algorithm: sha256WithRSAEncryption
50:9d:d3:04:ce:e9:96:f1:c7:77:2c:35:f4:d2:91:e8:4a:bc:
9f:7b:a4:db:01:5d:99:5e:f0:35:7b:3f:78:d6:b0:4b:2a:9d:
f3:10:3e:f5:0b:e2:0e:e3:fc:7c:c5:a1:c7:18:0d:14:a1:1b:
88:a4:29:f5:5e:59:20:73:85:0d:b2:06:7a:0d:6d:13:a7:0d:
91:48:13:e1:f2:2c:61:e1:f5:22:8a:82:3a:58:c0:55:ab:38:
0a:2f:74:8a:99:5e:ac:dd:ce:3d:e6:b3:a7:72:c5:04:d0:d1:
3b:9d:ab:48:3d:de:62:2c:ae:56:97:e7:32:98:42:76:0c:8d:
52:b9:16:58:64:6b:73:7d:b5:f6:9d:88:04:99:76:85:a2:cc:
93:ad:18:31:28:2d:bf:f4:16:55:c9:8b:47:67:7e:80:60:21:
79:8f:b5:92:97:97:f5:57:c0:09:23:5b:df:c6:da:2f:97:bb:
41:bd:40:67:b8:a3:3a:7e:92:95:f2:84:aa:86:cd:f4:63:55:
24:fd:94:1a:82:b7:4b:59:26:e4:bb:57:55:a6:92:14:f1:84:
5a:d2:c4:fd:2a:2c:b7:59:dd:7f:64:5e:53:00:f0:92:bc:ae:
d5:ba:f9:b6:19:38:bf:9c:7b:d3:32:d7:3c:04:74:47:6b:3c:
2e:20:34:a5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQf+invQRtRcJHFieBFXfcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTEwZmE5ZWNhOGVjOGRkZDVlMTI1NDI2NDM4ZThkZjhj
ODdhYmMwHhcNMjUwMTAxMDM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWUwNGQ1YzNiM2FkYjljMTZiNzc3OTI1NjI2ODVhZTgyMWZmODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPMgVABn7GFi6FuTxDGRvEwLTvQH
MPelOFlRJhEppNN31CEbFqK5wTUlXQnwB3mjjhQhpcpEFufR4aO+plw98Hd8xFf/
1FT3dKg2+67OK7Soga6Z7IPHsnjcmiYD1263aWM/eyyUupfLxVWKzZE9H0dV88NL
7vtRTm/u3W0St44dfMmUewD9wDlCvCZqvCEpe+VtP8vRwHj2hEbz6k78LQASGUt8
LbPtXyFr2+CKCr4Kv3xNNfq6rB0CZ8QKjVWw38L9uLUxYmEVdasg/2yZH298TM5x
VfUxsYZz46wZKagqZjP8JdMv5c+uvJXUqd/nqznLTemrRHs37L7FaGJw5QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNHgTVw7OtucFrd3klYmha6CH/h+MB8GA1UdIwQY
MBaAFJOhD6nsqOyN3V4SVCZDjo34yHq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjIt
NDg3OTBmNjAwYzY0LzEvMGVCTlhEczYyNXdXdDNlU1ZpYUZyb0lmLUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjItNDg3OTBmNjAwYzY0
LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQBucYSMBYE
AgACMBADBwAgAQf4ALMDBQMqCoJAMA0GCSqGSIb3DQEBCwUAA4IBAQBQndMEzumW
8cd3LDX00pHoSryfe6TbAV2ZXvA1ez941rBLKp3zED71C+IO4/x8xaHHGA0UoRuI
pCn1Xlkgc4UNsgZ6DW0Tpw2RSBPh8ixh4fUiioI6WMBVqzgKL3SKmV6s3c495rOn
csUE0NE7natIPd5iLK5Wl+cymEJ2DI1SuRZYZGtzfbX2nYgEmXaFosyTrRgxKC2/
9BZVyYtHZ36AYCF5j7WSl5f1V8AJI1vfxtovl7tBvUBnuKM6fpKV8oSqhs30Y1Uk
/ZQagrdLWSbku1dVppIU8YRa0sT9Kiy3Wd1/ZF5TAPCSvK7Vuvm2GTi/nHvTMtc8
BHRHazwuIDSl
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:14 2025 by rpki-client