Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa
File: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (raw, json)
Hash identifier: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=
Subject key identifier: F0:B5:20:70:EA:22:C3:2C:40:CB:BB:F8:AF:E2:2E:E8:19:D1:8D:03
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 0194258F3AE63A502CFDA1A8029D069C4685
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa
Signing time: Thu 02 Jan 2025 05:48:51 +0000
ROA not before: Thu 02 Jan 2025 05:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204813
IP address blocks: 185.105.120.0/22 maxlen: 22
185.107.248.0/22 maxlen: 22
185.225.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3a:e6:3a:50:2c:fd:a1:a8:02:9d:06:9c:46:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0b52070ea22c32c40cbbbf8afe22ee819d18d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:f9:f4:32:d6:14:ff:4b:ce:a2:c5:94:dc:
3f:9f:25:f0:71:35:76:3e:cd:c2:0b:7c:00:23:92:
f9:1e:fd:56:f4:b0:4d:58:c1:18:3e:43:62:45:f4:
3e:aa:21:0b:d0:28:31:87:60:54:2c:73:dd:31:71:
ae:42:71:61:24:1b:46:1d:3b:4c:75:8c:65:20:4e:
9a:03:e6:3a:cd:ed:6b:5f:13:e1:95:8b:94:6f:91:
25:4e:93:4d:e3:78:19:39:0e:b1:4f:90:fa:d8:fc:
88:ec:c5:26:ac:b8:72:2d:c1:4a:99:60:e8:fa:58:
ce:8d:bc:37:ae:a2:e6:eb:cf:3b:b5:dc:ff:5c:92:
39:7d:4b:77:de:da:a7:b1:83:a0:c2:42:37:b4:ae:
96:04:5f:a5:5c:34:77:04:84:06:83:c9:52:a0:af:
c6:99:af:f5:11:03:0c:66:b7:23:fd:2a:07:a6:f2:
d0:4c:ff:cd:e4:4d:8a:2d:1a:0f:e4:31:8a:25:e5:
04:48:0c:e6:9e:2e:03:bb:9b:1e:04:c1:69:c5:0a:
c2:3d:93:b9:9b:b0:05:7c:62:b0:b8:f7:f1:c2:91:
eb:fa:81:50:a1:e4:5c:52:7f:f1:a2:37:ad:d0:ba:
e2:dd:02:cc:35:ae:38:0a:fd:bb:01:94:4a:f2:0d:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B5:20:70:EA:22:C3:2C:40:CB:BB:F8:AF:E2:2E:E8:19:D1:8D:03
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.120.0/22
185.107.248.0/22
185.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
08:17:2e:7e:b6:92:99:c4:a8:cf:0f:6b:9a:40:df:69:24:35:
bd:ad:9a:67:14:4d:8f:8b:1a:19:25:a2:46:dc:22:ae:f3:6d:
94:4d:a0:6f:c1:c1:6e:b2:d0:c9:6a:c9:c8:d7:05:d8:02:2a:
5c:1d:2a:e2:b1:5a:83:28:b7:63:a3:dd:fb:74:65:cc:54:1c:
3b:41:ee:4c:11:64:6e:4d:31:43:9a:44:66:65:6c:c8:53:02:
92:2e:04:39:3f:28:54:d4:a6:b4:e0:e7:dc:5d:25:3b:44:3f:
b4:19:97:90:6e:2e:79:35:cd:91:c1:a1:50:87:18:81:42:4e:
2c:2b:c2:c2:ab:ce:25:8e:d7:a0:67:30:2d:a5:26:ca:ca:23:
21:31:33:6a:39:5d:e7:55:de:76:69:15:1c:59:e9:cc:b1:a7:
2a:d3:74:26:ca:da:82:77:1a:38:b8:1b:85:b3:a2:ac:41:4b:
4c:64:fe:a7:ce:bd:46:f8:1e:1e:99:8c:e5:95:4c:d8:fb:bd:
85:52:01:6e:f3:fc:fb:e0:9e:8d:8a:4e:7a:16:40:8a:10:8a:
be:54:7f:9d:f6:53:e6:d5:2f:9e:8d:33:43:dc:58:d7:78:e8:
92:20:ec:ef:15:c5:37:d0:bb:9c:a9:fa:d3:33:90:1d:fc:73:
df:49:53:66
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQljzrmOlAs/aGoAp0GnEaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjQ0NWIwMGE4NjAwYjgzMzRjMWQzYWFkZjFlZjcxOTE0
ZTY4YzkwHhcNMjUwMTAyMDU0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGI1MjA3MGVhMjJjMzJjNDBjYmJiZjhhZmUyMmVlODE5ZDE4ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ/59DLWFP9LzqLFlNw/nyXwcTV2
Ps3CC3wAI5L5Hv1W9LBNWMEYPkNiRfQ+qiEL0Cgxh2BULHPdMXGuQnFhJBtGHTtM
dYxlIE6aA+Y6ze1rXxPhlYuUb5ElTpNN43gZOQ6xT5D62PyI7MUmrLhyLcFKmWDo
+ljOjbw3rqLm6887tdz/XJI5fUt33tqnsYOgwkI3tK6WBF+lXDR3BIQGg8lSoK/G
ma/1EQMMZrcj/SoHpvLQTP/N5E2KLRoP5DGKJeUESAzmni4Du5seBMFpxQrCPZO5
m7AFfGKwuPfxwpHr+oFQoeRcUn/xojet0Lri3QLMNa44Cv27AZRK8g1t0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPC1IHDqIsMsQMu7+K/iLugZ0Y0DMB8GA1UdIwQY
MBaAFOK0RbAKhgC4M0wdOq3x73GRTmjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hOTFhZmUtOTY1MS00ZGUzLWFkODgt
ZDgzOTNlMTg1NzMyLzEvOExVZ2NPb2l3eXhBeTd2NHItSXU2Qm5SalFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hOTFhZmUtOTY1MS00ZGUzLWFkODgtZDgzOTNlMTg1NzMy
LzEvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuWl4AwQC
uWv4AwQCueG0MA0GCSqGSIb3DQEBCwUAA4IBAQAIFy5+tpKZxKjPD2uaQN9pJDW9
rZpnFE2PixoZJaJG3CKu822UTaBvwcFustDJasnI1wXYAipcHSrisVqDKLdjo937
dGXMVBw7Qe5MEWRuTTFDmkRmZWzIUwKSLgQ5PyhU1Ka04OfcXSU7RD+0GZeQbi55
Nc2RwaFQhxiBQk4sK8LCq84ljtegZzAtpSbKyiMhMTNqOV3nVd52aRUcWenMsacq
03QmytqCdxo4uBuFs6KsQUtMZP6nzr1G+B4emYzllUzY+72FUgFu8/z74J6Nik56
FkCKEIq+VH+d9lPm1S+ejTND3FjXeOiSIOzvFcU30LucqfrTM5Ad/HPfSVNm
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:16:10 2025 by rpki-client