Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/s34MRUBBXAv4etz_rjf1ivNvKl8.roa
File: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (raw, json)
Hash identifier: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=
Subject key identifier: B3:7E:0C:45:40:41:5C:0B:F8:7A:DC:FF:AE:37:F5:8A:F3:6F:2A:5F
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 0194921264CACD514F40D869A4690B744AD8
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/s34MRUBBXAv4etz_rjf1ivNvKl8.roa
Signing time: Thu 23 Jan 2025 07:31:06 +0000
ROA not before: Thu 23 Jan 2025 07:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206114
IP address blocks: 87.255.160.0/19 maxlen: 19
87.255.176.0/20 maxlen: 20
2a04:2800::/29 maxlen: 29
2a04:2801::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:12:64:ca:cd:51:4f:40:d8:69:a4:69:0b:74:4a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Jan 23 07:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b37e0c4540415c0bf87adcffae37f58af36f2a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:7f:f4:6c:9b:fe:ea:83:3f:92:ef:95:44:
25:cb:9d:09:da:79:ca:db:c3:95:68:51:55:87:61:
e8:09:fa:82:a9:d2:dc:b7:ca:a2:c8:9e:de:ef:a2:
8a:24:8d:e7:ce:4d:37:9d:2a:b2:fa:9c:60:fb:e9:
88:08:7f:54:13:c6:ae:4a:b5:79:c6:ec:77:90:6b:
0a:1d:cc:e1:a1:05:2b:6c:60:31:29:03:67:38:2c:
6f:a8:94:3f:8e:2d:92:fe:ec:90:8c:e0:f9:73:65:
f4:90:64:6f:ee:50:49:c0:30:6e:9d:75:ce:b6:ee:
3c:05:33:74:2f:f9:18:0f:6e:f6:7a:49:4c:25:f9:
e5:67:48:6b:32:f3:cc:4a:29:45:17:a1:ac:d4:e6:
18:a0:75:17:92:29:da:4f:2b:de:c2:91:e0:95:96:
af:9d:37:5a:60:ff:f7:19:f7:1a:61:64:7e:28:9c:
c4:6a:83:b7:40:3c:24:db:b6:77:e1:3d:03:ff:7d:
1c:fc:06:7c:29:13:8f:d6:f8:38:6a:1b:4e:0c:1b:
a6:dd:61:f9:a7:01:9b:ff:b0:d3:58:96:05:dd:94:
97:89:d0:13:55:4d:cc:ff:d9:af:9f:34:e1:0f:2c:
92:d6:52:bc:03:2f:4b:5f:eb:8d:02:60:9f:88:fd:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7E:0C:45:40:41:5C:0B:F8:7A:DC:FF:AE:37:F5:8A:F3:6F:2A:5F
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/s34MRUBBXAv4etz_rjf1ivNvKl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.160.0/19
IPv6:
2a04:2800::/29
Signature Algorithm: sha256WithRSAEncryption
2a:2c:4d:dc:96:2c:f2:67:38:ed:4c:e7:7b:ac:98:82:eb:7a:
fb:e0:71:5b:d0:18:17:89:4e:7a:27:74:3c:8a:e2:f5:5c:59:
e7:a3:5c:48:ec:be:4a:22:95:25:a6:86:14:5c:54:92:64:85:
d7:16:62:8d:69:01:e7:96:5c:ea:1c:8c:82:ed:05:74:a6:45:
91:6b:8a:61:a3:e6:17:82:ab:b2:a0:e3:6b:e7:5a:cb:76:71:
ee:ca:9d:5c:d9:f4:27:b0:fd:0d:09:04:43:c9:72:08:0e:e4:
18:e9:9f:6f:33:df:30:aa:07:d6:98:95:46:85:1b:76:ae:24:
9c:96:01:11:0f:a9:80:00:d6:8f:39:0b:dd:ba:97:03:d0:fa:
80:8b:26:3c:74:2f:ac:ab:22:b6:bc:d5:31:66:7f:7b:60:f7:
71:da:df:a8:79:37:62:15:d5:e3:a2:25:8a:57:8e:eb:dd:bc:
15:24:1f:dc:6e:2d:68:8d:9d:00:c4:53:b8:09:4b:4a:7a:b2:
21:ef:57:84:ca:5d:09:2c:41:88:4d:f2:ae:9b:4b:f4:41:3f:
cb:00:eb:89:50:d9:77:62:7e:3c:50:82:af:b6:08:0e:f4:fc:
a9:57:48:d6:03:fe:80:f1:36:74:3e:64:31:a4:0e:bf:fe:91:
0c:17:96:c2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZSSEmTKzVFPQNhppGkLdErYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjJkZGJkZjk1OGJiNGI5ODNkYTk2MmVjZjAzYmVhZWUz
OGQ0NDkwHhcNMjUwMTIzMDczMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzdlMGM0NTQwNDE1YzBiZjg3YWRjZmZhZTM3ZjU4YWYzNmYyYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfZ/9Gyb/uqDP5LvlUQly50J2nnK
28OVaFFVh2HoCfqCqdLct8qiyJ7e76KKJI3nzk03nSqy+pxg++mICH9UE8auSrV5
xux3kGsKHczhoQUrbGAxKQNnOCxvqJQ/ji2S/uyQjOD5c2X0kGRv7lBJwDBunXXO
tu48BTN0L/kYD272eklMJfnlZ0hrMvPMSilFF6Gs1OYYoHUXkinaTyvewpHglZav
nTdaYP/3GfcaYWR+KJzEaoO3QDwk27Z34T0D/30c/AZ8KROP1vg4ahtODBum3WH5
pwGb/7DTWJYF3ZSXidATVU3M/9mvnzThDyyS1lK8Ay9LX+uNAmCfiP08kwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLN+DEVAQVwL+Hrc/6439YrzbypfMB8GA1UdIwQY
MBaAFI1i3b35WLtLmD2pYuzwO+ruONRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYt
MDZlMDBhM2VhMDYyLzEvczM0TVJVQkJYQXY0ZXR6X3JqZjFpdk52S2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYtMDZlMDBhM2VhMDYy
LzEvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFV/+gMA0E
AgACMAcDBQMqBCgAMA0GCSqGSIb3DQEBCwUAA4IBAQAqLE3clizyZzjtTOd7rJiC
63r74HFb0BgXiU56J3Q8iuL1XFnno1xI7L5KIpUlpoYUXFSSZIXXFmKNaQHnllzq
HIyC7QV0pkWRa4pho+YXgquyoONr51rLdnHuyp1c2fQnsP0NCQRDyXIIDuQY6Z9v
M98wqgfWmJVGhRt2riSclgERD6mAANaPOQvdupcD0PqAiyY8dC+sqyK2vNUxZn97
YPdx2t+oeTdiFdXjoiWKV47r3bwVJB/cbi1ojZ0AxFO4CUtKerIh71eEyl0JLEGI
TfKum0v0QT/LAOuJUNl3Yn48UIKvtggO9PypV0jWA/6A8TZ0PmQxpA6//pEMF5bC
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:27 2025 by rpki-client