Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/CqZAFiIzp-k21bzGsuj1395ZHTc.roa
File: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (raw, json)
Hash identifier: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=
Subject key identifier: 0A:A6:40:16:22:33:A7:E9:36:D5:BC:C6:B2:E8:F5:DF:DE:59:1D:37
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 01942144638FC0A335CBC503D2DB4B2DC295
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/CqZAFiIzp-k21bzGsuj1395ZHTc.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48348
IP address blocks: 185.208.216.0/22 maxlen: 22
185.208.216.0/24 maxlen: 24
185.208.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:63:8f:c0:a3:35:cb:c5:03:d2:db:4b:2d:c2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aa640162233a7e936d5bcc6b2e8f5dfde591d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:61:9e:13:6c:4a:d5:0f:65:9b:6a:35:cc:
08:95:73:05:8e:41:07:6f:33:13:38:6a:ba:bf:3c:
66:73:96:53:23:44:3f:5f:69:73:ed:14:0b:f6:79:
9e:39:fd:2d:ad:9c:80:04:dc:9b:55:ed:bb:89:63:
ce:51:5e:74:ec:91:b9:d5:fd:99:26:6f:01:55:37:
4d:9a:5e:9f:7b:6e:e8:8a:b0:8a:86:15:b1:35:b8:
2f:5e:c2:29:f9:f2:14:af:7f:1e:14:88:89:4c:62:
99:c5:8c:fa:c6:62:19:76:3a:2b:2c:a2:23:17:21:
56:0e:aa:b0:75:c8:9f:ab:59:63:79:0e:bd:be:da:
28:4d:10:63:29:e4:66:62:67:4d:6d:dc:db:9d:1b:
f2:4b:62:10:b1:31:b7:1f:66:84:4d:1f:76:6f:1b:
55:1c:d4:e3:99:5f:e2:cc:60:89:d0:9b:a5:87:cb:
d8:47:0b:64:d0:17:9c:73:47:4e:bb:07:b4:3b:fa:
5a:8d:f1:c1:22:87:6d:8f:f7:73:17:1d:47:10:d0:
be:9c:34:bc:8f:6b:ea:c2:56:00:f9:6b:ea:56:8c:
d2:eb:49:6e:1e:8a:a2:65:d4:4a:0c:bd:21:f0:d2:
c1:8b:ea:36:94:ca:77:dc:de:22:9d:98:e4:4b:d3:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:40:16:22:33:A7:E9:36:D5:BC:C6:B2:E8:F5:DF:DE:59:1D:37
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/CqZAFiIzp-k21bzGsuj1395ZHTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.216.0/22
Signature Algorithm: sha256WithRSAEncryption
13:19:3d:f9:45:dd:10:51:b4:61:fb:63:05:4c:07:80:f4:32:
d0:71:4f:11:af:c7:00:51:2a:08:10:7f:79:46:c3:8f:38:51:
13:ad:fc:2b:1b:d1:9b:be:e0:2c:57:0e:be:97:40:17:04:b8:
c9:19:79:b5:a3:5c:b9:bb:e9:6e:eb:94:d7:ce:e3:bc:58:ef:
75:d7:46:55:0c:da:57:a0:24:bb:aa:2c:02:7b:16:67:81:9d:
eb:56:d5:66:b2:ae:37:c0:c6:72:8c:e2:d5:7a:7d:58:2a:38:
f3:42:fb:ef:e4:5e:b2:68:36:07:a0:86:a3:4c:4a:37:14:18:
3e:ed:85:9e:ae:57:4a:19:35:52:44:c0:c7:72:90:a9:4c:33:
d5:95:47:6d:26:6b:d6:3c:79:cc:ba:d2:2c:b5:80:22:c1:bb:
92:00:76:75:bd:da:a0:93:fe:2f:f9:d6:9c:b0:7b:24:04:70:
b3:17:e3:62:b8:d7:b7:ad:1e:90:4f:a5:7e:82:a0:ea:b2:d7:
b0:85:d6:0b:4a:81:4c:6d:0b:93:b7:5c:9d:b9:ff:27:04:dd:
88:25:d2:e1:31:6d:5b:a2:c7:85:1e:a3:dd:fa:96:84:f2:e4:
c6:91:a6:92:cf:bf:81:f6:25:19:b6:87:ac:da:de:f7:50:f4:
85:d0:c6:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRGOPwKM1y8UD0ttLLcKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjJiMmY2MTEzYmE0MzBmNzJlNTU0NDViNWM3ODQ5ZGM3
Y2ZhZWQwHhcNMjUwMTAxMDk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWE2NDAxNjIyMzNhN2U5MzZkNWJjYzZiMmU4ZjVkZmRlNTkxZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxthnhNsStUPZZtqNcwIlXMFjkEH
bzMTOGq6vzxmc5ZTI0Q/X2lz7RQL9nmeOf0trZyABNybVe27iWPOUV507JG51f2Z
Jm8BVTdNml6fe27oirCKhhWxNbgvXsIp+fIUr38eFIiJTGKZxYz6xmIZdjorLKIj
FyFWDqqwdcifq1ljeQ69vtooTRBjKeRmYmdNbdzbnRvyS2IQsTG3H2aETR92bxtV
HNTjmV/izGCJ0Julh8vYRwtk0Becc0dOuwe0O/pajfHBIodtj/dzFx1HENC+nDS8
j2vqwlYA+WvqVozS60luHoqiZdRKDL0h8NLBi+o2lMp33N4inZjkS9N3IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqmQBYiM6fpNtW8xrLo9d/eWR03MB8GA1UdIwQY
MBaAFFiysvYRO6Qw9y5VRFtceEncfPrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YjM2OWYtYjA2ZS00YWYwLTlhY2It
YTRjY2NlZjhjNGE4LzEvQ3FaQUZpSXpwLWsyMWJ6R3N1ajEzOTVaSFRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83YjM2OWYtYjA2ZS00YWYwLTlhY2ItYTRjY2NlZjhjNGE4
LzEvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudDYMA0G
CSqGSIb3DQEBCwUAA4IBAQATGT35Rd0QUbRh+2MFTAeA9DLQcU8Rr8cAUSoIEH95
RsOPOFETrfwrG9GbvuAsVw6+l0AXBLjJGXm1o1y5u+lu65TXzuO8WO9110ZVDNpX
oCS7qiwCexZngZ3rVtVmsq43wMZyjOLVen1YKjjzQvvv5F6yaDYHoIajTEo3FBg+
7YWerldKGTVSRMDHcpCpTDPVlUdtJmvWPHnMutIstYAiwbuSAHZ1vdqgk/4v+dac
sHskBHCzF+NiuNe3rR6QT6V+gqDqstewhdYLSoFMbQuTt1yduf8nBN2IJdLhMW1b
oseFHqPd+paE8uTGkaaSz7+B9iUZtoes2t73UPSF0MZA
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:11 2025 by rpki-client