Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/QmAm7-ckXWNCy_EyjMRgtbazq1M.roa
File: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (raw, json)
Hash identifier: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=
Subject key identifier: 42:60:26:EF:E7:24:5D:63:42:CB:F1:32:8C:C4:60:B5:B6:B3:AB:53
Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial: 0194221FF687B02B4BF984B47F7AEAE79E8F
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/QmAm7-ckXWNCy_EyjMRgtbazq1M.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31204
IP address blocks: 83.218.192.0/19 maxlen: 19
89.149.64.0/18 maxlen: 24
89.149.84.0/23 maxlen: 23
89.149.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f6:87:b0:2b:4b:f9:84:b4:7f:7a:ea:e7:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=426026efe7245d6342cbf1328cc460b5b6b3ab53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ae:c7:04:b6:26:e5:c0:f4:8f:de:f2:80:7f:
1e:61:f7:aa:4f:a8:13:61:10:9d:e0:3f:14:f3:2d:
10:b8:bb:e1:09:ab:cc:bc:3e:4d:3f:1e:15:4f:52:
67:f8:60:e1:02:ed:e7:ca:3e:a9:94:bc:3b:98:b4:
2e:e4:ba:e2:b5:3f:1a:24:e5:4e:1d:71:07:1b:0a:
fa:29:1f:c3:8c:09:96:96:a6:7e:fe:15:42:89:d2:
5f:ed:64:a5:a8:01:ea:93:bc:05:9d:21:ff:09:56:
ee:64:78:13:9a:2d:dd:cc:3f:8b:5d:e5:b4:b3:49:
dd:6c:1b:4d:81:cd:d2:35:1a:ed:ac:66:a8:ea:0a:
85:8b:f1:33:bd:5c:41:50:20:af:82:9a:0f:bd:d0:
26:9c:c5:59:3e:0a:7c:46:12:79:cf:d5:28:2c:64:
04:eb:8d:a4:af:a4:a6:61:2d:4b:59:85:ef:24:c6:
d9:b1:9d:9e:33:d0:34:d2:73:7e:b2:89:eb:70:a3:
f3:40:c3:98:83:41:2d:bd:de:59:73:b1:99:71:f4:
ff:3d:2b:ec:e9:6e:52:d9:9a:72:2c:72:f6:10:ed:
cd:80:a2:52:16:57:3b:53:71:1b:e9:91:d9:9c:22:
a3:d5:f5:b9:d4:98:26:0b:41:00:e1:35:eb:47:96:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:60:26:EF:E7:24:5D:63:42:CB:F1:32:8C:C4:60:B5:B6:B3:AB:53
X509v3 Authority Key Identifier:
keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/QmAm7-ckXWNCy_EyjMRgtbazq1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.218.192.0/19
89.149.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:3a:9f:3d:06:4f:dc:16:cd:89:dd:a4:ea:ec:aa:9f:91:83:
55:a1:c3:b3:19:8e:22:13:7e:71:cb:b4:4f:a4:b4:5e:1e:28:
a8:d4:49:42:fb:5d:c3:6b:e3:60:13:17:6d:b9:f5:16:bb:c6:
6e:2d:11:f5:74:2e:8f:7a:fd:0f:cf:d6:60:71:fd:d9:ac:d9:
59:f4:51:03:e9:69:8e:08:bc:41:ab:ca:9a:3c:7c:57:32:7c:
b4:2a:92:90:9e:20:7a:b8:fd:b6:e6:1d:4a:8b:64:f1:cc:cf:
c9:22:47:58:2e:23:34:4f:93:e2:81:3b:74:1a:03:fd:0b:4e:
d6:ed:69:6d:d8:85:ca:02:a1:84:8a:b0:4a:af:df:11:0c:df:
89:26:8c:ff:48:1d:6f:92:40:56:93:a3:dd:39:ec:4e:3b:15:
45:36:0e:e4:fd:31:13:a8:66:aa:1c:83:01:ca:7a:05:b0:20:
74:57:11:58:b9:e9:7d:c0:a7:ec:ce:fc:1d:b7:9e:32:69:e8:
ce:58:23:69:33:16:a8:ce:11:46:46:46:d9:9c:a5:2b:89:d8:
79:62:a4:9e:f9:f8:5e:d9:d7:69:f8:cb:ea:66:0b:0e:f8:97:
6a:18:58:1c:a7:61:40:94:21:86:91:c2:a6:65:4a:1a:a9:8f:
8f:f6:80:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH/aHsCtL+YS0f3rq556PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw
ZDc3ODcwHhcNMjUwMTAxMTM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjYwMjZlZmU3MjQ1ZDYzNDJjYmYxMzI4Y2M0NjBiNWI2YjNhYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q7HBLYm5cD0j97ygH8eYfeqT6gT
YRCd4D8U8y0QuLvhCavMvD5NPx4VT1Jn+GDhAu3nyj6plLw7mLQu5LritT8aJOVO
HXEHGwr6KR/DjAmWlqZ+/hVCidJf7WSlqAHqk7wFnSH/CVbuZHgTmi3dzD+LXeW0
s0ndbBtNgc3SNRrtrGao6gqFi/EzvVxBUCCvgpoPvdAmnMVZPgp8RhJ5z9UoLGQE
642kr6SmYS1LWYXvJMbZsZ2eM9A00nN+sonrcKPzQMOYg0Etvd5Zc7GZcfT/PSvs
6W5S2ZpyLHL2EO3NgKJSFlc7U3Eb6ZHZnCKj1fW51JgmC0EA4TXrR5Z6aQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEJgJu/nJF1jQsvxMozEYLW2s6tTMB8GA1UdIwQY
MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et
NmY3MDI0YzNhYWQ3LzEvUW1BbTctY2tYV05DeV9FeWpNUmd0YmF6cTFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3
LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFU9rAAwQG
WZVAMA0GCSqGSIb3DQEBCwUAA4IBAQA7Op89Bk/cFs2J3aTq7KqfkYNVocOzGY4i
E35xy7RPpLReHiio1ElC+13Da+NgExdtufUWu8ZuLRH1dC6Pev0Pz9Zgcf3ZrNlZ
9FED6WmOCLxBq8qaPHxXMny0KpKQniB6uP225h1Ki2TxzM/JIkdYLiM0T5PigTt0
GgP9C07W7Wlt2IXKAqGEirBKr98RDN+JJoz/SB1vkkBWk6PdOexOOxVFNg7k/TET
qGaqHIMBynoFsCB0VxFYuel9wKfszvwdt54yaejOWCNpMxaozhFGRkbZnKUridh5
YqSe+fhe2ddp+MvqZgsO+JdqGFgcp2FAlCGGkcKmZUoaqY+P9oCK
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:33 2025 by rpki-client