Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/a9wio39nY7HA5Emvyn8dQazuTJQ.roa
File: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (raw, json)
Hash identifier: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=
Subject key identifier: 6B:DC:22:A3:7F:67:63:B1:C0:E4:49:AF:CA:7F:1D:41:AC:EE:4C:94
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019423696D247C1BC4867CECB20C2E0CEC66
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/a9wio39nY7HA5Emvyn8dQazuTJQ.roa
Signing time: Wed 01 Jan 2025 19:48:19 +0000
ROA not before: Wed 01 Jan 2025 19:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39706
IP address blocks: 82.113.96.0/19 maxlen: 19
82.113.96.0/20 maxlen: 20
82.113.112.0/20 maxlen: 20
82.113.121.0/25 maxlen: 25
82.113.121.128/25 maxlen: 25
82.113.124.0/22 maxlen: 22
89.204.128.0/19 maxlen: 19
89.204.128.0/21 maxlen: 21
89.204.130.0/24 maxlen: 24
89.204.135.0/24 maxlen: 24
89.204.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:6d:24:7c:1b:c4:86:7c:ec:b2:0c:2e:0c:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jan 1 19:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bdc22a37f6763b1c0e449afca7f1d41acee4c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:01:3b:5e:cb:a1:34:20:76:7c:7a:d2:22:
09:7a:d8:51:05:bc:fd:95:7b:9d:c1:cf:13:5f:14:
d9:94:3b:67:19:c2:be:81:2b:87:dd:c3:dc:f9:a2:
12:f2:06:99:62:c4:67:51:67:7c:23:f6:8f:a4:ba:
5c:28:0b:ea:38:93:70:75:a3:e5:7c:52:2a:42:82:
60:a3:fd:d9:1f:5b:34:5a:a6:19:e5:12:fd:14:24:
28:92:30:92:bd:3a:c8:cd:54:5b:c3:a1:88:85:86:
da:07:f5:bb:ba:97:ec:ef:d2:23:52:2a:d6:62:21:
ad:d0:72:44:8e:ba:57:b5:9c:68:6a:26:e7:ef:97:
c9:e2:bf:2b:e4:23:45:fd:6e:d3:a2:a8:b3:57:36:
07:b9:a0:63:11:fc:84:7a:15:78:b2:59:38:84:70:
f6:54:fe:a3:fd:d1:bf:fb:6c:b3:ed:91:fe:19:68:
d8:a9:3d:bf:25:1c:24:18:21:00:7a:10:25:de:dc:
7a:a7:9f:b0:c7:d9:10:2a:4b:3b:6a:66:5d:a6:13:
e7:93:ea:1f:c9:bf:e1:d0:87:97:38:08:0c:cb:bb:
51:0b:e8:0d:3c:f1:f2:02:01:0a:14:3f:f9:b3:db:
05:3a:ce:a0:b9:76:35:31:0a:40:ef:f8:bc:0f:7c:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:22:A3:7F:67:63:B1:C0:E4:49:AF:CA:7F:1D:41:AC:EE:4C:94
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/a9wio39nY7HA5Emvyn8dQazuTJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.113.96.0/19
89.204.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:7b:f5:8b:9d:95:40:30:fa:ec:7c:a4:83:9e:08:d9:f4:ab:
19:3e:47:34:df:43:8e:dc:bb:41:e8:8d:f1:66:e1:92:41:74:
43:fc:b9:9a:6a:61:ee:76:a6:30:14:68:f2:71:cb:2b:29:ef:
18:f0:25:87:9c:af:9c:c4:6a:57:bf:0a:f9:5c:1a:aa:0c:8c:
f3:fa:34:14:05:d1:a0:21:e8:66:f2:a7:76:ec:81:9a:6c:dc:
68:28:af:3f:ac:dd:c5:72:89:14:97:ec:71:f0:e9:cd:6a:2f:
f0:3a:16:dd:de:f0:4d:23:ac:6a:ac:9d:13:1b:0f:5a:56:32:
32:e9:b1:11:41:ac:f6:cb:5d:e7:91:1d:38:00:51:dd:81:27:
a3:3d:6d:02:ab:45:a9:da:e0:d2:9b:cc:03:19:13:38:37:55:
6e:cc:a8:53:f7:63:51:23:e9:9b:9f:4b:5e:ce:19:ab:92:60:
b2:1f:a3:d1:20:01:a4:3e:8d:47:49:62:bd:87:51:07:30:ab:
bb:79:85:19:8b:73:6a:7b:2b:6f:f9:90:31:a1:b7:ff:58:e3:
9f:b7:f6:41:14:b6:a2:6b:df:20:6d:2e:e5:e0:22:6e:35:52:
f3:a9:ae:ad:fe:bc:7e:6e:4f:3b:af:bb:f8:0b:b5:f6:d7:ea:
6a:83:3d:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjaW0kfBvEhnzssgwuDOxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi
MmMyNWEwHhcNMjUwMTAxMTk0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmRjMjJhMzdmNjc2M2IxYzBlNDQ5YWZjYTdmMWQ0MWFjZWU0Yzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fkBO17LoTQgdnx60iIJethRBbz9
lXudwc8TXxTZlDtnGcK+gSuH3cPc+aIS8gaZYsRnUWd8I/aPpLpcKAvqOJNwdaPl
fFIqQoJgo/3ZH1s0WqYZ5RL9FCQokjCSvTrIzVRbw6GIhYbaB/W7upfs79IjUirW
YiGt0HJEjrpXtZxoaibn75fJ4r8r5CNF/W7ToqizVzYHuaBjEfyEehV4slk4hHD2
VP6j/dG/+2yz7ZH+GWjYqT2/JRwkGCEAehAl3tx6p5+wx9kQKks7amZdphPnk+of
yb/h0IeXOAgMy7tRC+gNPPHyAgEKFD/5s9sFOs6guXY1MQpA7/i8D3wCnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGvcIqN/Z2OxwORJr8p/HUGs7kyUMB8GA1UdIwQY
MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt
ZWMwM2ViZDE5MDAwLzEvYTl3aW8zOW5ZN0hBNUVtdnluOGRRYXp1VEpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw
LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFUnFgAwQF
WcyAMA0GCSqGSIb3DQEBCwUAA4IBAQAde/WLnZVAMPrsfKSDngjZ9KsZPkc030OO
3LtB6I3xZuGSQXRD/LmaamHudqYwFGjyccsrKe8Y8CWHnK+cxGpXvwr5XBqqDIzz
+jQUBdGgIehm8qd27IGabNxoKK8/rN3FcokUl+xx8OnNai/wOhbd3vBNI6xqrJ0T
Gw9aVjIy6bERQaz2y13nkR04AFHdgSejPW0Cq0Wp2uDSm8wDGRM4N1VuzKhT92NR
I+mbn0tezhmrkmCyH6PRIAGkPo1HSWK9h1EHMKu7eYUZi3Nqeytv+ZAxobf/WOOf
t/ZBFLaia98gbS7l4CJuNVLzqa6t/rx+bk87r7v4C7X21+pqgz3b
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:56 2025 by rpki-client