Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/eDtFVzPdi04PDGMigTAGGtNFE6M.roa
File: eDtFVzPdi04PDGMigTAGGtNFE6M.roa (raw, json)
Hash identifier: KaWgiD6oNbZB9hq09RBJ31eMaExFYbL9o5SgX3KgrfA=
Subject key identifier: 78:3B:45:57:33:DD:8B:4E:0F:0C:63:22:81:30:06:1A:D3:45:13:A3
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 01941F8C56B73A1577953C6285099FC15A99
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/eDtFVzPdi04PDGMigTAGGtNFE6M.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197677
IP address blocks: 185.227.4.0/24 maxlen: 24
2a13:c0::/48 maxlen: 48
2a13:c0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:b7:3a:15:77:95:3c:62:85:09:9f:c1:5a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=783b455733dd8b4e0f0c63228130061ad34513a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:e3:86:d4:ff:ef:79:f8:7e:ba:23:b5:a2:
b3:f6:93:6d:23:c0:cd:e9:bc:ae:5e:95:ab:3d:48:
71:3c:78:44:a3:74:a4:ae:63:66:8f:1b:6f:57:d0:
4f:24:e7:29:f4:c3:cd:be:2d:cd:1f:b7:0a:fa:20:
18:49:4b:6b:7a:42:4e:64:d9:13:80:bc:cb:34:fc:
eb:c4:1e:71:e0:03:b0:0f:3b:0d:2f:94:48:4c:81:
8a:3a:cc:05:50:78:94:14:e1:11:18:b2:d0:5e:ea:
14:6f:39:75:30:0f:19:6c:9e:4e:c2:41:7f:82:74:
fe:39:15:7f:9a:71:1c:6f:d7:6b:50:fa:da:4c:64:
ab:1f:54:25:07:85:7a:28:da:c9:40:2a:d2:bf:73:
f7:f3:12:12:cc:c1:52:b4:2f:e8:4f:a6:1c:76:bd:
e9:41:45:e8:7d:09:4f:83:03:ad:5f:e8:e0:43:d8:
b2:c7:44:6a:a9:21:93:02:20:fd:0e:9f:fd:25:0f:
a5:0b:6e:f8:bb:52:2e:1b:18:e4:08:aa:f0:ba:a3:
31:a7:e7:9c:35:48:c6:d9:ac:e5:1d:59:bd:50:32:
69:f6:1f:61:5e:44:2c:5a:0c:a8:e7:f2:59:92:f8:
55:6e:ed:f7:4d:a7:1b:58:5f:ac:cd:69:31:3d:d8:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:45:57:33:DD:8B:4E:0F:0C:63:22:81:30:06:1A:D3:45:13:A3
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/eDtFVzPdi04PDGMigTAGGtNFE6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.4.0/24
IPv6:
2a13:c0::/48
2a13:c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
59:4a:d8:7f:a5:5f:2a:8b:d0:4b:3b:57:fe:db:59:79:b6:6c:
3b:d2:76:8a:fd:6e:5e:0e:14:a2:d0:ac:3c:ba:30:19:8a:39:
d8:50:25:f4:86:11:81:98:07:9f:99:30:d7:bc:a9:d7:e9:5e:
c5:ca:8d:ca:fb:d4:81:22:d7:98:66:12:52:1d:2a:b5:38:c1:
98:db:42:c9:6f:02:07:d0:df:2e:d6:1d:cb:20:d1:a0:04:1d:
9f:72:12:18:d6:83:4d:24:63:7d:bc:fa:b2:a2:d2:d1:4c:f8:
c1:63:6a:ed:9a:4f:83:bc:3a:92:81:90:d2:14:08:08:5e:e1:
b0:bc:86:f5:22:bd:1b:6d:3c:1d:8b:57:02:c3:a6:6a:34:dd:
e3:de:05:e4:9a:c9:25:ac:0a:e5:74:1b:57:5c:87:05:e1:17:
98:d2:be:f3:f0:39:e0:4f:8e:9b:bb:f2:12:74:b9:8f:19:ee:
11:0b:4d:25:21:6b:b7:65:8b:05:59:7d:9a:bc:b0:3e:92:bd:
07:b4:40:58:af:74:fe:cc:e8:ff:35:bf:f2:20:e3:8d:51:8d:
bd:0a:d1:a5:89:78:2f:d8:45:47:7d:ac:f1:5b:ef:79:6e:fa:
ef:92:ea:a4:31:21:c1:bf:a1:83:26:11:8e:a5:30:ae:b1:b4:
d8:d9:f9:b9
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQfjFa3OhV3lTxihQmfwVqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE1ZTJiZWMwYTNlYzc5NWY4ZjE5Y2Q0N2ZlY2M2ODA2
NzhiMDgwHhcNMjUwMTAxMDE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODNiNDU1NzMzZGQ4YjRlMGYwYzYzMjI4MTMwMDYxYWQzNDUxM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzifjhtT/73n4frojtaKz9pNtI8DN
6byuXpWrPUhxPHhEo3SkrmNmjxtvV9BPJOcp9MPNvi3NH7cK+iAYSUtrekJOZNkT
gLzLNPzrxB5x4AOwDzsNL5RITIGKOswFUHiUFOERGLLQXuoUbzl1MA8ZbJ5OwkF/
gnT+ORV/mnEcb9drUPraTGSrH1QlB4V6KNrJQCrSv3P38xISzMFStC/oT6Ycdr3p
QUXofQlPgwOtX+jgQ9iyx0RqqSGTAiD9Dp/9JQ+lC274u1IuGxjkCKrwuqMxp+ec
NUjG2azlHVm9UDJp9h9hXkQsWgyo5/JZkvhVbu33TacbWF+szWkxPdhdOQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHg7RVcz3YtODwxjIoEwBhrTRROjMB8GA1UdIwQY
MBaAFGP6XivsCj7HlfjxnNR/7MaAZ4sIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2Et
ZTRmMmNkYzdhNDExLzEvZUR0RlZ6UGRpMDRQREdNaWdUQUdHdE5GRTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2EtZTRmMmNkYzdhNDEx
LzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAueMEMBgE
AgACMBIDBwAqEwDAAAADBwAqEwDAAAMwDQYJKoZIhvcNAQELBQADggEBAFlK2H+l
XyqL0Es7V/7bWXm2bDvSdor9bl4OFKLQrDy6MBmKOdhQJfSGEYGYB5+ZMNe8qdfp
XsXKjcr71IEi15hmElIdKrU4wZjbQslvAgfQ3y7WHcsg0aAEHZ9yEhjWg00kY328
+rKi0tFM+MFjau2aT4O8OpKBkNIUCAhe4bC8hvUivRttPB2LVwLDpmo03ePeBeSa
ySWsCuV0G1dchwXhF5jSvvPwOeBPjpu78hJ0uY8Z7hELTSUha7dliwVZfZq8sD6S
vQe0QFivdP7M6P81v/Ig441Rjb0K0aWJeC/YRUd9rPFb73lu+u+S6qQxIcG/oYMm
EY6lMK6xtNjZ+bk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:55:12 2025 by rpki-client