Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa
File: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (raw, json)
Hash identifier: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=
Subject key identifier: 0A:B6:14:38:F0:05:3C:4B:6E:1E:42:B2:26:1C:D0:13:C5:2B:52:83
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 0194266B3A224C5ACCA2D2633D3F1C67631F
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa
Signing time: Thu 02 Jan 2025 09:49:08 +0000
ROA not before: Thu 02 Jan 2025 09:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15955
IP address blocks: 185.101.48.0/22 maxlen: 22
212.77.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3a:22:4c:5a:cc:a2:d2:63:3d:3f:1c:67:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Jan 2 09:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ab61438f0053c4b6e1e42b2261cd013c52b5283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:c4:d6:19:92:a9:eb:39:6e:3e:9f:d5:65:
c5:26:99:a7:ff:d5:a5:07:35:b2:93:b5:ef:30:ee:
fd:69:54:7e:17:1f:e3:f7:b4:61:bd:6e:55:60:48:
1a:32:17:26:18:9d:d0:67:23:82:78:d6:45:95:c5:
83:b9:6b:73:9a:e3:1d:ff:89:75:65:e9:93:be:7e:
ea:6d:28:b5:92:a5:f7:89:24:62:ba:e3:9a:0f:aa:
53:66:a9:f3:42:64:ad:1c:2f:6e:70:26:57:c3:06:
fa:91:d3:59:dd:0b:f3:e2:31:c6:df:a4:f3:fb:02:
c9:56:23:4e:fe:b1:1e:db:78:96:05:7e:16:85:25:
3d:fb:a0:7c:5d:32:53:82:01:cb:4a:05:49:51:c4:
a4:e0:1c:94:f1:32:d9:1a:fc:94:fd:17:b1:25:af:
51:e6:f5:e3:ab:81:17:c7:57:9d:a8:19:88:a2:87:
be:fc:43:31:c9:ce:8b:fd:6d:69:cc:c5:61:b0:dd:
ee:ab:9e:60:4d:e4:79:2e:9d:d4:e0:f6:ca:05:d3:
59:55:78:c0:ec:5d:e3:46:82:e5:ee:f5:69:be:a5:
da:21:22:4e:7a:00:36:fb:09:30:68:e5:a3:3f:1d:
87:bf:91:be:f7:8c:1f:c9:d2:e7:9c:07:8e:6d:75:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:14:38:F0:05:3C:4B:6E:1E:42:B2:26:1C:D0:13:C5:2B:52:83
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.48.0/22
212.77.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:6b:c2:9f:70:2f:e7:ed:ab:2e:b0:1b:48:7b:5c:97:99:87:
b3:0c:43:5b:3b:7c:65:db:df:75:c1:a9:c1:43:48:4d:02:e0:
e7:f8:a0:ec:68:d6:94:15:be:3f:15:2f:65:9f:6e:a8:12:92:
4a:31:cc:39:69:6a:c5:0b:04:26:45:ed:fa:0a:ca:0a:7b:6a:
e8:f8:52:2f:98:fe:fa:fa:f4:e2:64:1d:88:c3:bc:1c:7b:71:
ed:5a:f5:6c:55:7a:f7:1f:90:e7:63:25:27:5e:54:bc:ad:3a:
b6:50:bb:1f:22:ce:f5:7b:55:98:08:61:f1:55:61:a9:8c:97:
53:f3:a1:48:17:ae:5e:2a:d4:07:25:a4:49:f2:be:b2:92:e0:
bd:3e:8b:95:c5:0c:1e:e8:3e:26:b4:0a:a1:a7:34:3b:9a:2c:
07:6d:98:65:c3:d0:77:09:95:43:ba:ba:84:ae:f2:36:f9:81:
13:d9:76:a2:33:1c:ee:94:cf:d7:17:70:58:84:6e:b4:fb:96:
a7:50:a6:a1:93:0c:8e:90:67:0a:e5:b2:73:bd:0b:75:ef:27:
7f:02:94:91:3a:6f:02:d9:a7:d9:bb:c2:dc:f1:39:8f:f7:3e:
16:43:69:e7:97:47:29:17:d4:f1:71:b7:3c:60:05:1f:6e:ae:
b3:fc:c1:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQmazoiTFrMotJjPT8cZ2MfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZDYyZTQyYzA4ZTE2MDFjNDU3MWUwZDg4YTM0OWEwNTA5
ZGVhNWUwHhcNMjUwMTAyMDk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWI2MTQzOGYwMDUzYzRiNmUxZTQyYjIyNjFjZDAxM2M1MmI1MjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLfE1hmSqes5bj6f1WXFJpmn/9Wl
BzWyk7XvMO79aVR+Fx/j97RhvW5VYEgaMhcmGJ3QZyOCeNZFlcWDuWtzmuMd/4l1
ZemTvn7qbSi1kqX3iSRiuuOaD6pTZqnzQmStHC9ucCZXwwb6kdNZ3Qvz4jHG36Tz
+wLJViNO/rEe23iWBX4WhSU9+6B8XTJTggHLSgVJUcSk4ByU8TLZGvyU/RexJa9R
5vXjq4EXx1edqBmIooe+/EMxyc6L/W1pzMVhsN3uq55gTeR5Lp3U4PbKBdNZVXjA
7F3jRoLl7vVpvqXaISJOegA2+wkwaOWjPx2Hv5G+94wfydLnnAeObXXllQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAq2FDjwBTxLbh5CsiYc0BPFK1KDMB8GA1UdIwQY
MBaAFH/WLkLAjhYBxFceDYijSaBQnepeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAt
ZTc1YTVlYTg5ZmQxLzEvQ3JZVU9QQUZQRXR1SGtLeUpoelFFOFVyVW9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAtZTc1YTVlYTg5ZmQx
LzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuWUwAwQF
1E0gMA0GCSqGSIb3DQEBCwUAA4IBAQCma8KfcC/n7asusBtIe1yXmYezDENbO3xl
2991wanBQ0hNAuDn+KDsaNaUFb4/FS9ln26oEpJKMcw5aWrFCwQmRe36CsoKe2ro
+FIvmP76+vTiZB2Iw7wce3HtWvVsVXr3H5DnYyUnXlS8rTq2ULsfIs71e1WYCGHx
VWGpjJdT86FIF65eKtQHJaRJ8r6ykuC9PouVxQwe6D4mtAqhpzQ7miwHbZhlw9B3
CZVDurqErvI2+YET2XaiMxzulM/XF3BYhG60+5anUKahkwyOkGcK5bJzvQt17yd/
ApSROm8C2afZu8Lc8TmP9z4WQ2nnl0cpF9Txcbc8YAUfbq6z/MGd
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:50 2025 by rpki-client