Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/RcUeax2IJNxx-VLzmeCKMxA0SJU.roa
File: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (raw, json)
Hash identifier: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=
Subject key identifier: 45:C5:1E:6B:1D:88:24:DC:71:F9:52:F3:99:E0:8A:33:10:34:48:95
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 01942067BDB9307AC5CC21791199977F34DE
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/RcUeax2IJNxx-VLzmeCKMxA0SJU.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198614
IP address blocks: 87.238.248.0/22 maxlen: 22
87.238.252.0/22 maxlen: 22
185.200.72.0/24 maxlen: 24
185.200.73.0/24 maxlen: 24
185.200.74.0/24 maxlen: 24
185.200.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bd:b9:30:7a:c5:cc:21:79:11:99:97:7f:34:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45c51e6b1d8824dc71f952f399e08a3310344895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:c9:e1:e3:d7:89:d4:e1:41:5b:44:a1:a8:
9f:96:15:02:61:2f:74:b0:74:16:f3:26:c5:9c:3f:
cd:8d:6b:53:37:33:10:a1:97:9b:fa:0e:78:95:fa:
09:0c:5b:e6:26:0b:91:65:e6:1b:e0:49:2e:63:67:
28:de:4a:e7:4f:46:bd:ae:cc:49:48:c4:3f:a1:e4:
3d:2d:d8:9d:d0:05:f5:c8:6a:6b:dd:9a:ea:98:2f:
c7:49:73:35:09:ff:bb:cc:b9:1f:93:7d:e1:74:15:
4d:bb:7f:16:eb:30:84:5c:85:b5:af:fe:90:9b:e1:
20:66:c0:a8:54:fa:aa:4f:3c:49:ea:2c:e2:6b:24:
65:39:53:a6:a0:35:6b:2d:03:75:44:94:0f:72:7e:
7b:e6:af:a2:70:80:d8:de:73:8c:81:64:15:af:3e:
74:e3:77:54:46:cd:69:d5:4c:af:9a:f7:88:68:2a:
a6:1c:dc:bc:9a:2a:be:00:b6:96:5a:d6:6c:de:c8:
63:44:3d:eb:26:9f:0d:3f:e9:f1:0d:5a:f6:12:7e:
aa:7d:c5:bc:fa:f6:ba:74:a4:9d:18:6a:50:83:12:
fe:5c:4a:e7:d6:a1:47:b7:53:c8:3a:10:a6:3c:3d:
f4:6a:eb:ab:2d:88:e4:f4:b0:89:fb:2e:2b:a0:ca:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:1E:6B:1D:88:24:DC:71:F9:52:F3:99:E0:8A:33:10:34:48:95
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/RcUeax2IJNxx-VLzmeCKMxA0SJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.248.0/21
185.200.72.0/22
Signature Algorithm: sha256WithRSAEncryption
70:99:c6:e3:6e:de:04:ab:1a:01:46:78:68:22:50:88:50:ac:
f0:07:48:c0:51:55:19:1a:2a:47:b3:bc:f5:b2:3e:48:2d:30:
e7:31:97:7c:cb:22:11:17:a0:93:33:f2:40:68:2a:3d:29:af:
a3:db:a2:31:ce:c9:3c:72:f7:86:3b:74:3a:13:aa:a3:8a:12:
50:ef:9c:88:27:b9:67:d1:0c:f8:84:0b:8b:83:d5:68:6b:60:
ba:c5:df:2a:8b:a6:62:80:5f:f6:5f:20:ec:30:cf:10:b0:83:
fd:d4:99:8c:44:b5:5f:44:de:ed:d7:5c:bd:39:ef:31:b6:e3:
a6:9b:f0:30:06:07:98:94:ca:df:88:0a:c4:21:7d:2d:27:0e:
aa:30:26:5b:df:83:dd:12:cf:b1:e2:44:19:4f:2e:a3:40:ae:
58:ff:8a:fd:6d:bb:29:56:77:a8:36:77:f2:3e:85:f3:09:0b:
c2:fd:ee:43:de:dc:26:ba:9c:47:52:e1:fa:11:bb:bf:f0:de:
a3:88:90:60:db:cf:ca:76:73:26:fe:9b:10:49:4c:41:ec:1f:
8d:98:c0:fd:01:fc:04:1b:6d:74:ab:5d:61:76:c5:3a:01:5d:
cc:87:bc:b1:85:d3:38:20:fc:f4:d1:64:f6:2a:34:de:ba:82:
a4:84:4b:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgZ725MHrFzCF5EZmXfzTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGNiMDlkZTgyNjUwZWU0Y2M0MzI3ZWFiNjc3MGI3YWIx
NDdlZmIwHhcNMjUwMTAxMDU0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWM1MWU2YjFkODgyNGRjNzFmOTUyZjM5OWUwOGEzMzEwMzQ0ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxPJ4ePXidThQVtEoaiflhUCYS90
sHQW8ybFnD/NjWtTNzMQoZeb+g54lfoJDFvmJguRZeYb4EkuY2co3krnT0a9rsxJ
SMQ/oeQ9Ldid0AX1yGpr3ZrqmC/HSXM1Cf+7zLkfk33hdBVNu38W6zCEXIW1r/6Q
m+EgZsCoVPqqTzxJ6iziayRlOVOmoDVrLQN1RJQPcn575q+icIDY3nOMgWQVrz50
43dURs1p1UyvmveIaCqmHNy8miq+ALaWWtZs3shjRD3rJp8NP+nxDVr2En6qfcW8
+va6dKSdGGpQgxL+XErn1qFHt1PIOhCmPD30auurLYjk9LCJ+y4roMr+7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEXFHmsdiCTccflS85ngijMQNEiVMB8GA1UdIwQY
MBaAFP9MsJ3oJlDuTMQyfqtncLerFH77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZWQ5NDYtOWVmYS00OGI3LWE4Yzct
MTQ2NWE0YjUyMTM2LzEvUmNVZWF4MklKTnh4LVZMem1lQ0tNeEEwU0pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hZWQ5NDYtOWVmYS00OGI3LWE4YzctMTQ2NWE0YjUyMTM2
LzEvXzB5d25lZ21VTzVNeERKLXEyZHd0NnNVZnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV+74AwQC
uchIMA0GCSqGSIb3DQEBCwUAA4IBAQBwmcbjbt4EqxoBRnhoIlCIUKzwB0jAUVUZ
GipHs7z1sj5ILTDnMZd8yyIRF6CTM/JAaCo9Ka+j26Ixzsk8cveGO3Q6E6qjihJQ
75yIJ7ln0Qz4hAuLg9Voa2C6xd8qi6ZigF/2XyDsMM8QsIP91JmMRLVfRN7t11y9
Oe8xtuOmm/AwBgeYlMrfiArEIX0tJw6qMCZb34PdEs+x4kQZTy6jQK5Y/4r9bbsp
VneoNnfyPoXzCQvC/e5D3twmupxHUuH6Ebu/8N6jiJBg28/KdnMm/psQSUxB7B+N
mMD9AfwEG210q11hdsU6AV3Mh7yxhdM4IPz00WT2KjTeuoKkhEub
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:15 2025 by rpki-client