Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa
File: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (raw, json)
Hash identifier: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=
Subject key identifier: DA:47:C0:2A:04:BA:AE:D3:F1:3A:89:10:76:08:90:70:55:B4:49:B7
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 019423D6D9341F7FB17072157CAB91407684
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34525
IP address blocks: 83.175.144.0/20 maxlen: 22
91.224.120.0/23 maxlen: 23
109.231.0.0/18 maxlen: 18
109.231.0.0/20 maxlen: 22
109.231.16.0/20 maxlen: 22
109.231.48.0/21 maxlen: 22
185.13.232.0/22 maxlen: 22
2a00:1ce8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d9:34:1f:7f:b1:70:72:15:7c:ab:91:40:76:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da47c02a04baaed3f13a89107608907055b449b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:da:d4:58:87:bb:4e:f5:4e:9f:d7:39:d8:
05:fd:c1:de:a9:15:8f:15:b4:58:06:8b:de:24:b1:
99:3a:e4:a6:f4:6a:3e:b8:09:44:fd:f4:8d:1c:2f:
94:fd:50:7a:6c:84:ad:fc:08:ea:c6:e4:3d:0f:bf:
aa:8c:eb:10:1d:1a:60:87:47:71:58:38:1b:67:31:
05:a5:a8:db:b8:fc:54:10:43:23:d7:3b:45:19:bd:
3e:8e:be:d1:a7:4e:73:63:b2:b8:be:80:63:20:05:
ff:1c:45:4b:18:58:42:df:51:f1:0d:93:a3:ea:c3:
74:9d:5a:f1:14:b3:c1:3d:c7:45:47:05:58:a6:9d:
2c:5e:0c:57:93:1a:5b:73:1c:15:6e:89:70:e1:c4:
2e:a7:ae:e9:c0:ac:18:9e:7c:74:69:cd:19:53:22:
ec:7b:d5:35:3b:e0:3b:a2:7c:02:ad:fe:a2:1c:98:
2e:27:86:43:68:f3:44:94:b5:b6:1b:07:c1:9f:46:
89:1a:aa:fd:64:4c:47:af:7d:fd:00:a9:cc:ad:37:
16:03:d7:71:b5:0d:60:46:a6:66:c1:30:de:95:90:
0e:4d:7b:65:82:60:9c:34:58:e3:a7:fe:f9:4e:50:
85:c0:ec:f6:c3:95:f1:ce:c7:99:61:0e:fc:66:be:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:C0:2A:04:BA:AE:D3:F1:3A:89:10:76:08:90:70:55:B4:49:B7
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.144.0/20
91.224.120.0/23
109.231.0.0/18
185.13.232.0/22
IPv6:
2a00:1ce8::/32
Signature Algorithm: sha256WithRSAEncryption
2b:ec:c2:21:66:87:eb:17:3f:6c:a8:23:60:36:45:42:ee:07:
4b:81:d1:7f:73:c9:62:d7:ad:c0:c6:02:71:10:28:90:3c:4b:
29:6e:12:e8:f5:56:81:78:d2:60:13:88:fc:ee:d8:b3:70:25:
38:18:80:1b:16:00:71:99:01:f0:a7:06:c1:94:6d:e2:6d:6b:
4e:dc:43:0c:90:b4:6d:da:26:70:e0:d3:56:84:be:65:85:d5:
12:da:2c:11:38:27:51:3f:72:6d:a1:ff:bb:cc:bb:ac:c9:bd:
b8:f5:37:f4:35:75:0f:7c:ec:a5:5a:fe:1d:a3:4f:3e:f3:ee:
86:f2:89:08:97:a0:e6:e6:cc:b6:0c:98:6e:83:1c:9d:b7:50:
80:0a:9d:38:9d:7d:9d:e6:8f:ff:67:d5:c9:be:e7:43:9b:df:
d7:26:56:44:fd:7b:87:46:4c:69:35:47:bd:08:89:24:b0:17:
fa:43:d3:ad:f3:f5:59:73:be:98:1e:2a:11:da:6a:97:93:7e:
d1:e6:d1:fc:aa:25:80:fd:14:19:28:9e:ab:16:25:75:e5:dd:
6a:18:00:88:3d:37:b3:64:81:95:5f:73:5e:37:e3:ab:f0:dd:
2d:ce:d1:7a:af:47:3b:8b:2c:e5:38:76:bf:0f:21:df:bf:5b:
7b:1c:eb:37
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQj1tk0H3+xcHIVfKuRQHaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2UwOGQ1NjQ3NWJhZTQwN2E0ZjJiY2E4ZTg5YTA5OTc2
ODVhM2EwHhcNMjUwMTAxMjE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTQ3YzAyYTA0YmFhZWQzZjEzYTg5MTA3NjA4OTA3MDU1YjQ0OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquLa1FiHu071Tp/XOdgF/cHeqRWP
FbRYBoveJLGZOuSm9Go+uAlE/fSNHC+U/VB6bISt/AjqxuQ9D7+qjOsQHRpgh0dx
WDgbZzEFpajbuPxUEEMj1ztFGb0+jr7Rp05zY7K4voBjIAX/HEVLGFhC31HxDZOj
6sN0nVrxFLPBPcdFRwVYpp0sXgxXkxpbcxwVbolw4cQup67pwKwYnnx0ac0ZUyLs
e9U1O+A7onwCrf6iHJguJ4ZDaPNElLW2GwfBn0aJGqr9ZExHr339AKnMrTcWA9dx
tQ1gRqZmwTDelZAOTXtlgmCcNFjjp/75TlCFwOz2w5XxzseZYQ78Zr71jQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNpHwCoEuq7T8TqJEHYIkHBVtEm3MB8GA1UdIwQY
MBaAFB5+CNVkdbrkB6TyvKjomgmXaFo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kMjc1NjctNzEwYy00OGNkLTllNWQt
MzAwMmRmODI1ZDVkLzEvMmtmQUtnUzZydFB4T29rUWRnaVFjRlcwU2JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kMjc1NjctNzEwYy00OGNkLTllNWQtMzAwMmRmODI1ZDVk
LzEvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEU6+QAwQB
W+B4AwQGbecAAwQCuQ3oMA0EAgACMAcDBQAqABzoMA0GCSqGSIb3DQEBCwUAA4IB
AQAr7MIhZofrFz9sqCNgNkVC7gdLgdF/c8li163AxgJxECiQPEspbhLo9VaBeNJg
E4j87tizcCU4GIAbFgBxmQHwpwbBlG3ibWtO3EMMkLRt2iZw4NNWhL5lhdUS2iwR
OCdRP3Jtof+7zLusyb249Tf0NXUPfOylWv4do08+8+6G8okIl6Dm5sy2DJhugxyd
t1CACp04nX2d5o//Z9XJvudDm9/XJlZE/XuHRkxpNUe9CIkksBf6Q9Ot8/VZc76Y
HioR2mqXk37R5tH8qiWA/RQZKJ6rFiV15d1qGACIPTezZIGVX3NeN+Or8N0tztF6
r0c7iyzlOHa/DyHfv1t7HOs3
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:22 2025 by rpki-client