Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/3AgNndxC3sa0yZvKsMQhIngarPI.roa
File: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (raw, json)
Hash identifier: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=
Subject key identifier: DC:08:0D:9D:DC:42:DE:C6:B4:C9:9B:CA:B0:C4:21:22:78:1A:AC:F2
Certificate issuer: /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial: 019422FBFE5260CA601027E6EBA9E33B96EC
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/3AgNndxC3sa0yZvKsMQhIngarPI.roa
Signing time: Wed 01 Jan 2025 17:48:47 +0000
ROA not before: Wed 01 Jan 2025 17:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203953
IP address blocks: 80.210.64.0/20 maxlen: 20
185.15.72.0/22 maxlen: 22
185.50.192.0/22 maxlen: 22
185.118.248.0/22 maxlen: 22
185.181.220.0/22 maxlen: 22
195.192.232.0/22 maxlen: 22
212.237.128.0/20 maxlen: 20
213.32.240.0/21 maxlen: 21
217.61.216.0/21 maxlen: 21
2a05:f6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fe:52:60:ca:60:10:27:e6:eb:a9:e3:3b:96:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Validity
Not Before: Jan 1 17:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc080d9ddc42dec6b4c99bcab0c42122781aacf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:0a:56:7a:ac:a9:8d:d3:34:08:f4:d9:e3:
0b:58:9f:c2:fc:b5:87:c3:a3:f2:20:f2:ba:7c:39:
14:cb:bb:50:24:a8:67:4d:3b:1a:de:a2:4b:8b:ba:
b5:7a:8c:52:f9:e6:fc:8b:80:a9:af:55:1c:3c:44:
75:06:7a:4b:02:f1:f4:01:1d:1c:f6:66:52:bc:13:
ea:a4:cc:e9:6c:31:a0:d0:21:3b:ce:fa:1b:1b:ee:
3d:38:0b:4a:6d:c7:f4:b0:18:03:71:d2:1c:46:38:
1f:9d:11:93:9b:10:22:e1:4a:cf:7a:ae:64:43:d1:
92:50:98:9e:2d:93:7d:d0:57:ca:5b:ae:6a:06:af:
da:92:1a:d1:20:57:f6:64:b9:0c:4e:10:d7:e8:c1:
a5:5d:af:a6:d2:17:d6:03:a0:08:fa:c5:70:e3:57:
89:06:dd:92:d0:ce:0d:f5:9a:20:55:c0:18:4d:da:
4a:f6:05:10:e8:36:54:98:4b:52:8d:1e:dc:72:8d:
f2:a9:b8:e0:a5:69:cb:fa:49:47:4b:a7:9d:cf:34:
9d:48:69:ab:35:ac:49:6f:5d:67:21:02:f0:b3:a8:
46:4c:3f:67:66:9f:af:0c:4b:23:e3:09:1b:f4:d1:
8e:d0:4a:e1:73:e9:14:93:05:c2:4c:d5:6a:48:72:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:08:0D:9D:DC:42:DE:C6:B4:C9:9B:CA:B0:C4:21:22:78:1A:AC:F2
X509v3 Authority Key Identifier:
keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/3AgNndxC3sa0yZvKsMQhIngarPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.210.64.0/20
185.15.72.0/22
185.50.192.0/22
185.118.248.0/22
185.181.220.0/22
195.192.232.0/22
212.237.128.0/20
213.32.240.0/21
217.61.216.0/21
IPv6:
2a05:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:cf:34:f1:8b:e1:ab:3b:70:43:22:f3:cd:33:a1:bd:1e:19:
a5:3b:2a:0b:fa:ef:c7:3b:83:5b:b5:df:08:74:a7:a2:89:51:
ab:8c:fe:f9:90:60:aa:37:5b:c7:2b:08:3b:b1:9f:28:5b:a7:
99:ea:ab:93:26:0d:6f:7f:32:1c:39:e3:88:93:8b:34:50:43:
d7:d3:a3:6c:75:6e:53:a0:57:74:b1:7d:61:3e:c1:45:b4:32:
cf:31:7b:a5:39:d3:87:f7:6c:9d:03:69:a8:b5:e8:6b:35:eb:
f3:16:ba:39:67:08:4c:29:93:e6:39:01:20:17:43:bf:a2:ce:
6e:3a:6c:12:0c:18:8e:e0:ed:fa:01:30:8e:1d:6d:be:e3:8b:
fc:52:44:51:bf:14:c3:9c:32:ea:8a:75:56:b2:f9:8f:a8:0a:
53:43:7e:10:4c:5d:8d:5f:b5:a4:18:70:76:e3:e2:13:61:e1:
ff:93:e7:31:f2:e8:34:1f:ae:6a:55:61:6a:0a:30:73:d8:6b:
9e:e6:90:d9:36:00:ed:d5:47:b7:38:c9:7b:11:6f:c0:df:76:
ac:5d:7b:ea:48:83:17:fe:50:57:5a:85:18:71:a4:de:6b:f8:
7a:9c:c0:29:0a:c5:8b:97:c6:ae:6f:e0:ea:52:0e:6d:ce:a3:
52:1e:35:65
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZQi+/5SYMpgECfm66njO5bsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yjc3MTE4YmQ1NmIyYjNiNDQ5OWM1NjZhN2M2NDhhYWQ3
YTZlOWYwHhcNMjUwMTAxMTc0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzA4MGQ5ZGRjNDJkZWM2YjRjOTliY2FiMGM0MjEyMjc4MWFhY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWcKVnqsqY3TNAj02eMLWJ/C/LWH
w6PyIPK6fDkUy7tQJKhnTTsa3qJLi7q1eoxS+eb8i4Cpr1UcPER1BnpLAvH0AR0c
9mZSvBPqpMzpbDGg0CE7zvobG+49OAtKbcf0sBgDcdIcRjgfnRGTmxAi4UrPeq5k
Q9GSUJieLZN90FfKW65qBq/akhrRIFf2ZLkMThDX6MGlXa+m0hfWA6AI+sVw41eJ
Bt2S0M4N9ZogVcAYTdpK9gUQ6DZUmEtSjR7cco3yqbjgpWnL+klHS6edzzSdSGmr
NaxJb11nIQLws6hGTD9nZp+vDEsj4wkb9NGO0Erhc+kUkwXCTNVqSHK80QIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFNwIDZ3cQt7GtMmbyrDEISJ4GqzyMB8GA1UdIwQY
MBaAFFe3cRi9VrKztEmcVmp8ZIqtem6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2It
MDY1YWE0MTU1ZWQ0LzEvM0FnTm5keEMzc2EweVp2S3NNUWhJbmdhclBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2ItMDY1YWE0MTU1ZWQ0
LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQEUNJAAwQC
uQ9IAwQCuTLAAwQCuXb4AwQCubXcAwQCw8DoAwQE1O2AAwQD1SDwAwQD2T3YMA0E
AgACMAcDBQMqBfbAMA0GCSqGSIb3DQEBCwUAA4IBAQAazzTxi+GrO3BDIvPNM6G9
HhmlOyoL+u/HO4Nbtd8IdKeiiVGrjP75kGCqN1vHKwg7sZ8oW6eZ6quTJg1vfzIc
OeOIk4s0UEPX06NsdW5ToFd0sX1hPsFFtDLPMXulOdOH92ydA2motehrNevzFro5
ZwhMKZPmOQEgF0O/os5uOmwSDBiO4O36ATCOHW2+44v8UkRRvxTDnDLqinVWsvmP
qApTQ34QTF2NX7WkGHB24+ITYeH/k+cx8ug0H65qVWFqCjBz2Gue5pDZNgDt1Ue3
OMl7EW/A33asXXvqSIMX/lBXWoUYcaTea/h6nMApCsWLl8aub+DqUg5tzqNSHjVl
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:28:53 2025 by rpki-client