Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa
File: A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa (raw, json)
Hash identifier: oflLVWiMQR/h5//frwNh8Zh/ixGNkdyJmqiH96c6izM=
Subject key identifier: 03:71:34:F8:1C:7E:4A:43:AB:68:08:B7:20:B3:4B:C1:BB:4A:DA:AF
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 01942369269372F7AA603B53287EC84909AF
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa
Signing time: Wed 01 Jan 2025 19:48:01 +0000
ROA not before: Wed 01 Jan 2025 19:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38913
IP address blocks: 88.214.28.0/22 maxlen: 22
2a09:8b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:26:93:72:f7:aa:60:3b:53:28:7e:c8:49:09:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Jan 1 19:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037134f81c7e4a43ab6808b720b34bc1bb4adaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:ad:fd:57:f1:2a:5e:d1:75:51:b7:b9:88:
a4:13:6e:b5:2e:b0:eb:3e:cf:75:d0:85:52:42:00:
02:af:73:7a:c3:20:a0:c9:d5:b9:c7:48:ff:eb:a9:
77:40:05:d2:b6:23:2e:27:22:b5:65:aa:61:92:28:
aa:82:b9:b9:51:38:bf:a4:60:dd:46:a1:e0:a6:ee:
79:b3:3e:e1:b6:c6:2b:df:fb:1e:7f:c8:e0:2a:1f:
02:eb:b9:70:47:5b:e2:0a:63:dd:ae:f5:d5:94:47:
bd:ad:f2:83:52:27:15:24:be:40:ea:cd:66:a7:f4:
00:7b:e2:b2:0b:44:fb:5b:dc:89:8b:ed:a9:f9:83:
98:67:31:21:57:17:8e:a4:84:44:a2:75:8a:da:f8:
da:10:fd:41:43:56:da:b3:ee:1e:22:bb:95:58:4f:
83:ed:f9:db:65:b3:23:4f:fa:ac:f3:14:d1:a7:a4:
58:e5:1d:a4:ef:3c:f7:b8:54:97:61:8b:9c:96:68:
c2:2c:68:6d:19:7e:d5:ad:b5:0d:09:a1:05:a3:90:
2f:de:23:0f:55:1a:26:cd:0b:bc:5c:c4:c2:b6:c3:
4d:4d:67:aa:4b:d8:9a:a0:c4:b8:d4:06:5e:7b:8a:
30:8b:54:49:78:2a:55:aa:bc:aa:1a:65:db:10:25:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:34:F8:1C:7E:4A:43:AB:68:08:B7:20:B3:4B:C1:BB:4A:DA:AF
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.28.0/22
IPv6:
2a09:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
99:14:18:f4:c9:2f:21:ea:f2:e2:70:ae:00:2c:dd:bc:7a:74:
fd:95:b9:e6:2b:87:65:f2:25:e0:37:69:5b:c0:91:a9:41:88:
77:e5:60:88:d8:89:62:b3:90:b1:b2:86:ab:da:07:bb:7e:e6:
92:50:83:d5:31:6b:f1:5d:ab:11:f5:c3:ad:dd:d1:72:8d:c1:
6a:2b:36:16:43:a3:a8:aa:60:75:f7:a6:48:29:f3:15:01:82:
4f:0f:ca:50:61:ef:9c:f9:1f:86:35:e6:8e:d8:92:af:04:85:
9b:8b:42:8a:59:ca:37:b2:64:5f:ff:ed:82:56:66:0f:bb:9d:
93:e1:d9:f6:87:6a:30:a1:cc:90:41:49:9f:64:27:04:11:1d:
f9:54:0d:04:f8:ea:57:43:30:e2:cf:ec:c7:92:89:22:38:99:
53:41:80:de:0f:c3:ae:15:2e:bf:08:72:51:e5:ae:80:47:2e:
82:cc:a9:ee:02:8c:a5:94:bb:6d:12:76:60:c4:ed:e7:6a:0a:
5c:f1:03:88:d7:01:d8:ec:db:b6:8b:f6:13:1d:c8:b0:a4:9d:
6b:a2:df:af:5a:ed:1e:0e:12:0f:35:95:9c:2a:b4:15:11:3c:
e0:10:4e:f2:c4:ca:d0:12:c2:7d:dc:52:8f:92:97:72:9d:61:
0a:9d:93:78
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjaSaTcveqYDtTKH7ISQmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4
YTVlM2IwHhcNMjUwMTAxMTk0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzcxMzRmODFjN2U0YTQzYWI2ODA4YjcyMGIzNGJjMWJiNGFkYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DWt/VfxKl7RdVG3uYikE261LrDr
Ps910IVSQgACr3N6wyCgydW5x0j/66l3QAXStiMuJyK1Zaphkiiqgrm5UTi/pGDd
RqHgpu55sz7htsYr3/sef8jgKh8C67lwR1viCmPdrvXVlEe9rfKDUicVJL5A6s1m
p/QAe+KyC0T7W9yJi+2p+YOYZzEhVxeOpIREonWK2vjaEP1BQ1bas+4eIruVWE+D
7fnbZbMjT/qs8xTRp6RY5R2k7zz3uFSXYYuclmjCLGhtGX7VrbUNCaEFo5Av3iMP
VRomzQu8XMTCtsNNTWeqS9iaoMS41AZee4owi1RJeCpVqryqGmXbECWauQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFANxNPgcfkpDq2gItyCzS8G7StqvMB8GA1UdIwQY
MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt
YzJiYTI0NjUzZjdiLzEvQTNFMC1CeC1Ta09yYUFpM0lMTkx3YnRLMnE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi
LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCWNYcMA0E
AgACMAcDBQMqCYsAMA0GCSqGSIb3DQEBCwUAA4IBAQCZFBj0yS8h6vLicK4ALN28
enT9lbnmK4dl8iXgN2lbwJGpQYh35WCI2Ilis5Cxsoar2ge7fuaSUIPVMWvxXasR
9cOt3dFyjcFqKzYWQ6OoqmB196ZIKfMVAYJPD8pQYe+c+R+GNeaO2JKvBIWbi0KK
Wco3smRf/+2CVmYPu52T4dn2h2owocyQQUmfZCcEER35VA0E+OpXQzDiz+zHkoki
OJlTQYDeD8OuFS6/CHJR5a6ARy6CzKnuAoyllLttEnZgxO3nagpc8QOI1wHY7Nu2
i/YTHciwpJ1rot+vWu0eDhIPNZWcKrQVETzgEE7yxMrQEsJ93FKPkpdynWEKnZN4
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:34:50 2025 by rpki-client