Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Ji6nEv3LafDcVTBG7aO97iudROE.roa
File: Ji6nEv3LafDcVTBG7aO97iudROE.roa (raw, json)
Hash identifier: p6pmniXLM/oWpBTXfpZqsZaAulIp2wCdQ9Jqkw9LVqE=
Subject key identifier: 26:2E:A7:12:FD:CB:69:F0:DC:55:30:46:ED:A3:BD:EE:2B:9D:44:E1
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455BB1907F8C3918DFDB366AEA4C35
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Ji6nEv3LafDcVTBG7aO97iudROE.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41343
IP address blocks: 185.110.212.0/22 maxlen: 24
185.111.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5b:b1:90:7f:8c:39:18:df:db:36:6a:ea:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=262ea712fdcb69f0dc553046eda3bdee2b9d44e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5c:ca:17:ce:a4:e7:78:02:d6:a8:4c:54:85:
a0:16:09:44:b9:a7:ee:c5:d7:bd:46:a7:7e:3f:01:
b7:eb:9d:88:7e:b1:e0:f5:f0:60:83:1d:8b:4a:78:
b0:fa:1e:e1:c9:2b:21:53:a3:97:0c:04:28:66:fb:
30:e2:4c:08:6e:6f:0d:91:f1:77:9b:cf:2b:14:95:
72:7e:a4:b7:24:36:b6:3f:45:e4:3c:70:52:81:db:
3e:44:85:22:c3:1f:c3:1a:b0:7d:bd:78:1c:d2:9c:
a0:f2:67:b0:8f:93:ec:c8:2d:c5:c5:05:7c:76:74:
ff:5b:a6:8b:d7:fa:f1:5b:ef:77:84:4a:26:c2:f1:
78:14:51:15:45:be:31:11:a2:80:77:e1:06:28:02:
77:09:53:79:08:76:de:20:62:36:86:55:80:e4:31:
49:77:ac:f9:a9:ce:0b:9c:30:bd:38:e0:78:62:81:
de:99:68:5a:ae:7a:de:e6:a6:9e:75:76:dc:3f:21:
ae:67:48:32:d9:de:c9:ed:ab:d1:9c:07:69:59:82:
d3:b0:83:f9:5f:9d:12:c6:28:54:c4:2c:d2:53:44:
15:df:3a:a7:dd:f2:e6:c8:7c:25:67:0f:be:c3:cb:
dd:d4:5c:5a:9f:a9:33:18:04:2b:30:f8:f8:f9:29:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:A7:12:FD:CB:69:F0:DC:55:30:46:ED:A3:BD:EE:2B:9D:44:E1
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Ji6nEv3LafDcVTBG7aO97iudROE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.212.0/22
185.111.0.0/22
Signature Algorithm: sha256WithRSAEncryption
36:15:e3:88:ba:60:8d:95:14:c5:50:ac:64:f7:cb:5e:ae:34:
6f:6b:ef:a6:35:6c:85:be:a3:54:f4:48:83:38:2c:ce:04:ad:
1a:03:84:85:8a:d5:d1:7d:6b:38:00:d9:1e:85:81:8f:5a:5d:
53:a4:04:1c:f3:18:18:8d:c2:ac:fa:47:8a:20:84:ec:21:3c:
a6:4a:98:0e:1a:8b:f8:8c:d4:86:b0:72:87:5c:ca:c0:4d:8a:
ff:d1:41:74:51:04:5e:f7:27:51:05:b9:f4:63:7b:38:da:1f:
e6:b3:f0:10:96:20:fa:6a:7b:73:79:d8:1e:58:a4:09:22:d5:
5d:4a:1e:8c:27:b0:12:a6:f5:45:df:83:da:0e:c6:2d:30:f4:
9e:95:c2:28:18:df:8c:35:42:8e:70:55:4e:1c:08:58:d0:9e:
72:c2:d9:40:4a:a1:85:25:35:8a:43:4b:ec:eb:13:a9:38:91:
b9:20:fb:c4:bf:37:5b:74:52:a6:d0:4f:64:cb:46:f2:05:db:
cf:66:54:9f:08:ec:1a:44:21:c7:37:62:28:31:d8:6f:d6:58:
53:f7:6f:d3:34:ba:ce:80:ab:5f:a1:ba:9f:7b:c9:2c:d1:1c:
b0:a7:2d:3d:d1:09:d0:f7:86:44:d1:b3:e9:41:c7:8d:e2:0a:
bf:e7:36:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRVuxkH+MORjf2zZq6kw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjUwMTAxMjM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjJlYTcxMmZkY2I2OWYwZGM1NTMwNDZlZGEzYmRlZTJiOWQ0NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lzKF86k53gC1qhMVIWgFglEuafu
xde9Rqd+PwG3652IfrHg9fBggx2LSniw+h7hySshU6OXDAQoZvsw4kwIbm8NkfF3
m88rFJVyfqS3JDa2P0XkPHBSgds+RIUiwx/DGrB9vXgc0pyg8mewj5PsyC3FxQV8
dnT/W6aL1/rxW+93hEomwvF4FFEVRb4xEaKAd+EGKAJ3CVN5CHbeIGI2hlWA5DFJ
d6z5qc4LnDC9OOB4YoHemWharnre5qaedXbcPyGuZ0gy2d7J7avRnAdpWYLTsIP5
X50SxihUxCzSU0QV3zqn3fLmyHwlZw++w8vd1Fxan6kzGAQrMPj4+Sl6FwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCYupxL9y2nw3FUwRu2jve4rnUThMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvSmk2bkV2M0xhZkRjVlRCRzdhTzk3aXVkUk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuW7UAwQC
uW8AMA0GCSqGSIb3DQEBCwUAA4IBAQA2FeOIumCNlRTFUKxk98terjRva++mNWyF
vqNU9EiDOCzOBK0aA4SFitXRfWs4ANkehYGPWl1TpAQc8xgYjcKs+keKIITsITym
SpgOGov4jNSGsHKHXMrATYr/0UF0UQRe9ydRBbn0Y3s42h/ms/AQliD6antzedge
WKQJItVdSh6MJ7ASpvVF34PaDsYtMPSelcIoGN+MNUKOcFVOHAhY0J5ywtlASqGF
JTWKQ0vs6xOpOJG5IPvEvzdbdFKm0E9ky0byBdvPZlSfCOwaRCHHN2IoMdhv1lhT
92/TNLrOgKtfobqfe8ks0Rywpy090QnQ94ZE0bPpQceN4gq/5zZh
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:29:49 2025 by rpki-client