Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa
File: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (raw, json)
Hash identifier: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=
Subject key identifier: A7:1C:00:56:5B:95:47:03:DA:0B:8F:CA:E8:49:37:5B:1F:9E:AF:F5
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 019427B5E54170747BF4E7DF9248E1EC2D48
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa
Signing time: Thu 02 Jan 2025 15:50:19 +0000
ROA not before: Thu 02 Jan 2025 15:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51938
IP address blocks: 185.54.96.0/22 maxlen: 22
185.54.96.0/24 maxlen: 24
185.54.97.0/24 maxlen: 24
185.54.98.0/24 maxlen: 24
185.54.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e5:41:70:74:7b:f4:e7:df:92:48:e1:ec:2d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a71c00565b954703da0b8fcae849375b1f9eaff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:53:c9:8e:03:c6:73:ec:70:00:5c:11:9d:
9d:c9:86:4b:d8:6a:51:16:90:b2:68:f7:44:48:2f:
5d:f4:60:99:0d:2c:f3:4c:5a:13:53:88:d4:cb:17:
29:fc:e4:ee:0e:d7:bf:72:53:88:d8:16:9b:9e:27:
8d:5f:fd:3e:5b:2e:c2:42:47:e9:06:03:67:96:4f:
90:fc:08:f2:e5:e7:87:ab:5d:1a:5f:11:aa:13:23:
19:0e:ee:99:4d:db:e5:fe:f8:3d:41:b3:9c:04:0b:
c6:a2:77:6a:23:d2:16:9f:fa:4f:a8:ea:ec:12:69:
93:4d:f4:98:02:f7:c1:c5:c7:b5:90:0a:d2:59:38:
65:84:ad:29:3f:4d:b0:eb:55:d0:99:f0:fd:70:7f:
48:eb:44:62:ca:e4:82:2d:d2:e2:35:c4:02:c2:e4:
24:cf:b3:64:c0:5b:7d:0b:3b:ac:48:78:2f:df:c2:
32:ca:5d:11:7d:a6:d9:93:e9:b7:18:82:e1:b4:ca:
f8:09:44:1e:97:b0:7a:8d:59:db:4c:3a:34:bd:a9:
fe:a0:cb:b8:8c:4a:23:4d:12:1f:ee:14:42:56:36:
ac:24:64:7b:44:87:e9:66:f9:20:76:b2:f7:3b:23:
38:bf:8f:62:87:f7:8c:22:d0:61:7e:c1:39:70:f0:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:00:56:5B:95:47:03:DA:0B:8F:CA:E8:49:37:5B:1F:9E:AF:F5
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c2:4c:41:b2:4b:f8:dd:9f:e7:c0:f7:e5:31:fd:a8:c3:59:
0c:37:b3:10:59:b4:b9:b3:27:26:24:f3:2b:9b:1b:c6:7d:3e:
86:1c:ad:bf:ab:c5:ae:0a:21:90:0f:b4:d6:27:fd:b5:02:75:
36:f7:ee:1a:e6:e5:55:3b:39:56:1b:c2:fc:46:ea:46:46:3d:
21:2a:5e:b5:6b:e8:99:ac:60:81:ff:92:60:71:f9:72:e5:70:
2a:c8:f7:71:9b:5a:f5:7c:d7:9f:8b:74:e7:0d:34:0f:81:51:
63:bc:f1:30:0c:e6:0c:4b:a8:7f:5d:47:35:d3:b6:db:76:d3:
e4:1f:e1:c8:7b:44:08:4f:b8:c2:e0:00:7e:07:c3:87:1f:9e:
70:ee:44:95:33:55:03:38:a2:94:ff:ef:d5:de:c4:30:7e:07:
96:50:1f:ab:be:25:00:a7:28:ed:30:18:2c:ff:99:45:c1:5f:
38:c5:0f:43:8b:81:8c:68:72:e3:a7:d4:55:5d:9c:4d:1f:fd:
47:7f:d9:9a:d7:d5:bd:5e:ef:2f:f2:b0:72:15:33:24:18:8a:
f6:6c:d6:a4:5f:d0:4d:d8:e1:57:6a:3a:4a:b0:4f:f2:66:10:
f1:44:84:5d:a6:fc:c1:3b:3f:d0:d2:c1:d3:b0:f4:0c:ce:e1:
22:b7:b8:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnteVBcHR79Offkkjh7C1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2NiMjk3OGJiNTRlYjU1N2NhZTNmZmIzNWU0NmFjNGQ1
YzIyYmYwHhcNMjUwMTAyMTU1MDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzFjMDA1NjViOTU0NzAzZGEwYjhmY2FlODQ5Mzc1YjFmOWVhZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXpTyY4DxnPscABcEZ2dyYZL2GpR
FpCyaPdESC9d9GCZDSzzTFoTU4jUyxcp/OTuDte/clOI2BabnieNX/0+Wy7CQkfp
BgNnlk+Q/Ajy5eeHq10aXxGqEyMZDu6ZTdvl/vg9QbOcBAvGondqI9IWn/pPqOrs
EmmTTfSYAvfBxce1kArSWThlhK0pP02w61XQmfD9cH9I60RiyuSCLdLiNcQCwuQk
z7NkwFt9CzusSHgv38Iyyl0RfabZk+m3GILhtMr4CUQel7B6jVnbTDo0van+oMu4
jEojTRIf7hRCVjasJGR7RIfpZvkgdrL3OyM4v49ih/eMItBhfsE5cPAYgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKccAFZblUcD2guPyuhJN1sfnq/1MB8GA1UdIwQY
MBaAFH18speLtU61V8rj/7NeRqxNXCK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5Mzct
MjRjM2Q5ZTI1NDAxLzEvcHh3QVZsdVZSd1BhQzRfSzZFazNXeC1lcl9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5MzctMjRjM2Q5ZTI1NDAx
LzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTZgMA0G
CSqGSIb3DQEBCwUAA4IBAQArwkxBskv43Z/nwPflMf2ow1kMN7MQWbS5sycmJPMr
mxvGfT6GHK2/q8WuCiGQD7TWJ/21AnU29+4a5uVVOzlWG8L8RupGRj0hKl61a+iZ
rGCB/5Jgcfly5XAqyPdxm1r1fNefi3TnDTQPgVFjvPEwDOYMS6h/XUc107bbdtPk
H+HIe0QIT7jC4AB+B8OHH55w7kSVM1UDOKKU/+/V3sQwfgeWUB+rviUApyjtMBgs
/5lFwV84xQ9Di4GMaHLjp9RVXZxNH/1Hf9ma19W9Xu8v8rByFTMkGIr2bNakX9BN
2OFXajpKsE/yZhDxRIRdpvzBOz/Q0sHTsPQMzuEit7gd
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:29:59 2025 by rpki-client