Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa
File: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (raw, json)
Hash identifier: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=
Subject key identifier: 57:DC:CB:27:FB:27:5D:6B:2C:04:F6:35:46:68:2E:DD:94:C3:FA:B5
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 019422FB4A1458D839D83AB8D74D61F8A2DD
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa
Signing time: Wed 01 Jan 2025 17:48:01 +0000
ROA not before: Wed 01 Jan 2025 17:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201722
IP address blocks: 185.82.112.0/24 maxlen: 24
185.82.113.0/24 maxlen: 24
185.82.114.0/24 maxlen: 24
185.82.115.0/24 maxlen: 24
2a05:8f80::/32 maxlen: 32
2a05:8f81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4a:14:58:d8:39:d8:3a:b8:d7:4d:61:f8:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Jan 1 17:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57dccb27fb275d6b2c04f63546682edd94c3fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:13:04:be:11:c9:05:85:ba:ad:fb:f9:00:
1f:4f:ab:d0:b1:df:c7:8a:02:7b:5e:3f:2a:06:50:
d5:d3:fb:3f:cf:03:f0:b1:2d:7d:4c:3b:0a:ab:8b:
60:a5:10:26:0a:db:8e:23:ef:cb:8d:8a:22:06:c8:
cd:86:b1:59:f2:5e:0e:38:b3:95:03:67:f1:c2:3c:
66:a6:e0:61:9b:66:51:42:d4:48:60:4c:42:50:6c:
2e:ac:e0:b7:0f:24:57:50:2d:cf:f1:49:0e:4e:9b:
eb:85:e8:e8:f3:a3:1a:27:29:97:30:4d:19:c3:3b:
5a:eb:a6:c9:25:68:75:f7:37:13:86:97:50:97:e3:
6a:32:1d:6a:02:5d:e2:a1:10:32:30:7b:08:2d:68:
16:d3:bd:5a:69:ee:91:9a:88:69:6b:cc:62:c3:22:
ec:ee:1b:bb:39:5c:63:57:75:d0:49:93:5f:a0:3f:
70:f4:c4:9f:46:1a:02:40:b1:8d:0c:a9:d9:6d:df:
36:3c:b6:34:ea:d9:18:da:45:e6:f1:ee:af:9a:32:
f3:c2:f1:e7:f7:8a:cc:63:cd:49:37:97:0f:45:df:
c4:46:92:5d:7c:b8:ba:96:a3:89:72:b4:9d:ee:9e:
19:3f:03:ad:00:89:b3:f9:68:a9:a6:37:8b:1b:cd:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:CB:27:FB:27:5D:6B:2C:04:F6:35:46:68:2E:DD:94:C3:FA:B5
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.112.0/22
IPv6:
2a05:8f80::/31
Signature Algorithm: sha256WithRSAEncryption
32:42:80:13:99:e1:1f:86:ba:64:47:34:fe:14:80:5e:9e:19:
57:ed:33:9c:b0:90:df:5e:2b:be:75:7f:c8:ff:e3:55:c0:da:
86:a3:ac:92:fa:a0:be:36:ea:32:49:1d:5f:88:1a:92:1f:94:
0c:02:c4:ed:76:80:45:f7:ca:64:da:9e:2d:34:67:3f:a9:e1:
76:43:78:91:ad:a1:3f:65:ec:10:cd:db:42:29:44:78:58:a2:
cd:a8:e1:8d:c4:0b:0f:29:ec:19:14:9b:64:e7:13:ab:e1:da:
29:44:c3:4e:17:30:be:83:31:27:34:de:dc:65:b8:da:63:84:
dc:84:b6:af:c5:d7:c4:a7:ac:c4:7c:9c:05:3b:59:dd:55:76:
9a:37:a9:c8:45:81:95:50:f2:5d:79:66:2c:d8:bd:89:67:72:
a6:c2:d8:5e:c9:08:d2:54:7c:ea:ff:6e:ae:71:94:14:2b:20:
cf:e0:12:38:c5:14:ed:22:84:57:48:69:80:e0:f6:4a:87:51:
ba:0c:14:30:cb:78:04:09:c1:f6:a5:92:75:60:02:26:9f:73:
09:21:b0:b0:e7:08:34:38:55:c7:cc:32:b0:20:1e:b9:fa:03:
10:b9:42:bd:da:a9:66:81:cf:3d:35:17:54:1a:93:5d:ce:fe:
d2:ca:3a:7d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQi+0oUWNg52Dq4101h+KLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYzNhZDVmZjY1YjhkY2I0NzYyMjlmMTJkNDU3ZDc3NjFh
MGI5N2MwHhcNMjUwMTAxMTc0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2RjY2IyN2ZiMjc1ZDZiMmMwNGY2MzU0NjY4MmVkZDk0YzNmYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07cTBL4RyQWFuq37+QAfT6vQsd/H
igJ7Xj8qBlDV0/s/zwPwsS19TDsKq4tgpRAmCtuOI+/LjYoiBsjNhrFZ8l4OOLOV
A2fxwjxmpuBhm2ZRQtRIYExCUGwurOC3DyRXUC3P8UkOTpvrhejo86MaJymXME0Z
wzta66bJJWh19zcThpdQl+NqMh1qAl3ioRAyMHsILWgW071aae6Rmohpa8xiwyLs
7hu7OVxjV3XQSZNfoD9w9MSfRhoCQLGNDKnZbd82PLY06tkY2kXm8e6vmjLzwvHn
94rMY81JN5cPRd/ERpJdfLi6lqOJcrSd7p4ZPwOtAImz+WippjeLG834/wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFfcyyf7J11rLAT2NUZoLt2Uw/q1MB8GA1UdIwQY
MBaAFA7DrV/2W43LR2Ip8S1FfXdhoLl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzIt
YjhhYWIzMzIzNTI0LzEvVjl6TEpfc25YV3NzQlBZMVJtZ3UzWlRELXJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzItYjhhYWIzMzIzNTI0
LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVJwMA0E
AgACMAcDBQEqBY+AMA0GCSqGSIb3DQEBCwUAA4IBAQAyQoATmeEfhrpkRzT+FIBe
nhlX7TOcsJDfXiu+dX/I/+NVwNqGo6yS+qC+NuoySR1fiBqSH5QMAsTtdoBF98pk
2p4tNGc/qeF2Q3iRraE/ZewQzdtCKUR4WKLNqOGNxAsPKewZFJtk5xOr4dopRMNO
FzC+gzEnNN7cZbjaY4TchLavxdfEp6zEfJwFO1ndVXaaN6nIRYGVUPJdeWYs2L2J
Z3KmwtheyQjSVHzq/26ucZQUKyDP4BI4xRTtIoRXSGmA4PZKh1G6DBQwy3gECcH2
pZJ1YAImn3MJIbCw5wg0OFXHzDKwIB65+gMQuUK92qlmgc89NRdUGpNdzv7Syjp9
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:46 2025 by rpki-client