Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/f41rVF_HbkwoS6F1emrNeNKIJNk.roa
File: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (raw, json)
Hash identifier: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=
Subject key identifier: 7F:8D:6B:54:5F:C7:6E:4C:28:4B:A1:75:7A:6A:CD:78:D2:88:24:D9
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 019425FD8B0DF04EDD1975E849A6C49A9B0A
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/f41rVF_HbkwoS6F1emrNeNKIJNk.roa
Signing time: Thu 02 Jan 2025 07:49:20 +0000
ROA not before: Thu 02 Jan 2025 07:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29405
IP address blocks: 185.152.28.0/22 maxlen: 22
2a07:7d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8b:0d:f0:4e:dd:19:75:e8:49:a6:c4:9a:9b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8d6b545fc76e4c284ba1757a6acd78d28824d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:41:b8:a8:dd:b0:53:d4:55:54:0c:8c:70:
72:3f:7a:bb:94:52:42:a3:49:0c:05:69:c9:2d:92:
16:74:3c:0c:9a:ad:6b:38:f8:09:e0:01:39:af:eb:
be:92:9d:ad:68:c2:81:96:d7:f2:00:f4:dd:e8:95:
5a:da:90:13:9f:b6:4e:da:c0:9d:8e:80:a8:ec:3b:
9c:58:ed:3f:e0:41:9e:cf:b2:80:8c:1c:28:01:6e:
a7:8a:0d:b9:e0:50:ee:c5:81:4f:f6:6d:a4:2b:bb:
77:a5:2d:7b:bb:48:de:85:2d:81:4d:25:af:8a:b7:
3a:d9:7b:9c:1f:74:51:18:c6:63:78:40:ac:1a:83:
9d:7f:28:d5:b3:97:27:d0:47:4d:af:02:a1:7c:f7:
67:75:dd:2f:9f:d8:f8:dc:56:59:63:c7:8f:99:06:
39:b3:84:93:c1:43:87:99:a2:b2:e3:14:28:89:b5:
ca:ab:03:c9:cb:5f:cf:86:e2:6e:75:4d:e2:bd:3c:
57:c2:20:f7:06:11:6f:37:3b:bf:4c:f7:a8:eb:fb:
db:7d:06:84:88:c7:38:58:cc:a7:de:f5:d4:cf:dd:
87:63:b8:98:94:61:2d:cb:ab:cc:cc:0d:7a:1f:22:
30:1d:a2:03:7b:97:2b:8b:b3:1b:82:d3:3a:a5:2c:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8D:6B:54:5F:C7:6E:4C:28:4B:A1:75:7A:6A:CD:78:D2:88:24:D9
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/f41rVF_HbkwoS6F1emrNeNKIJNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.28.0/22
IPv6:
2a07:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
83:68:0b:12:f6:37:9b:e0:bc:b1:84:18:ec:ef:f9:01:56:47:
fc:48:3d:04:7f:d1:4f:66:35:8d:96:d8:11:8d:77:97:6b:23:
29:79:aa:ea:c8:7c:2a:1f:3d:f2:d7:fa:92:a3:55:56:90:80:
5b:5c:bc:80:70:63:2b:05:ab:78:4e:1b:12:4b:11:97:d1:76:
ba:5f:ee:0a:d9:5c:3b:9b:06:39:1e:86:93:3a:98:fc:02:25:
b9:54:06:e0:fa:20:60:a0:88:b4:48:b4:11:bb:b7:da:61:aa:
20:86:31:aa:38:74:0d:17:07:0d:8f:0e:84:96:25:31:bc:75:
7d:07:e2:5b:6d:64:7a:04:c1:c4:d1:34:b6:b3:a9:f4:b6:60:
88:81:5f:7d:87:d4:41:d9:5d:00:13:30:3e:8f:c4:75:45:00:
65:c8:57:3e:69:99:71:9f:1b:e9:73:2d:f2:45:9a:9d:5f:0e:
86:ec:bc:4f:f3:2c:44:d1:08:69:f6:d2:65:c8:e0:df:99:da:
1f:3c:5c:ed:94:e3:5d:d4:97:ca:57:43:5e:6f:ca:0c:38:7a:
7a:ca:bd:7d:56:68:00:7b:bb:86:f2:05:20:8f:4e:91:22:c0:
92:d6:cc:76:6d:e6:57:78:3a:95:1d:3b:32:4f:01:ef:c4:8b:
f2:d4:96:b4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQl/YsN8E7dGXXoSabEmpsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MzBkYTIxNTE4MTg0MTQ1ZjZkNzYyMWI1YTEzYmQ1NDAz
NWFjODMwHhcNMjUwMTAyMDc0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjhkNmI1NDVmYzc2ZTRjMjg0YmExNzU3YTZhY2Q3OGQyODgyNGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK5BuKjdsFPUVVQMjHByP3q7lFJC
o0kMBWnJLZIWdDwMmq1rOPgJ4AE5r+u+kp2taMKBltfyAPTd6JVa2pATn7ZO2sCd
joCo7DucWO0/4EGez7KAjBwoAW6nig254FDuxYFP9m2kK7t3pS17u0jehS2BTSWv
irc62XucH3RRGMZjeECsGoOdfyjVs5cn0EdNrwKhfPdndd0vn9j43FZZY8ePmQY5
s4STwUOHmaKy4xQoibXKqwPJy1/PhuJudU3ivTxXwiD3BhFvNzu/TPeo6/vbfQaE
iMc4WMyn3vXUz92HY7iYlGEty6vMzA16HyIwHaIDe5cri7MbgtM6pSw+cwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH+Na1Rfx25MKEuhdXpqzXjSiCTZMB8GA1UdIwQY
MBaAFLkw2iFRgYQUX212IbWhO9VANayDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWIt
OTk0YWY1YzM0NDAyLzEvZjQxclZGX0hia3dvUzZGMWVtck5lTktJSk5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWItOTk0YWY1YzM0NDAy
LzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZgcMA0E
AgACMAcDBQAqB31AMA0GCSqGSIb3DQEBCwUAA4IBAQCDaAsS9jeb4LyxhBjs7/kB
Vkf8SD0Ef9FPZjWNltgRjXeXayMpearqyHwqHz3y1/qSo1VWkIBbXLyAcGMrBat4
ThsSSxGX0Xa6X+4K2Vw7mwY5HoaTOpj8AiW5VAbg+iBgoIi0SLQRu7faYaoghjGq
OHQNFwcNjw6EliUxvHV9B+JbbWR6BMHE0TS2s6n0tmCIgV99h9RB2V0AEzA+j8R1
RQBlyFc+aZlxnxvpcy3yRZqdXw6G7LxP8yxE0Qhp9tJlyODfmdofPFztlONd1JfK
V0Neb8oMOHp6yr19VmgAe7uG8gUgj06RIsCS1sx2beZXeDqVHTsyTwHvxIvy1Ja0
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:08:29 2025 by rpki-client