Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/QtXoVnj67TwjPgxEcqYom66X0y8.roa
File: QtXoVnj67TwjPgxEcqYom66X0y8.roa (raw, json)
Hash identifier: G8VO9HJj4m/eWjxYvgve0bBNmaJFIBzj2OTGT7rn2u8=
Subject key identifier: 42:D5:E8:56:78:FA:ED:3C:23:3E:0C:44:72:A6:28:9B:AE:97:D3:2F
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 019422FBD46FEB4BA3F6AF432C96F10FD13F
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/QtXoVnj67TwjPgxEcqYom66X0y8.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28889
IP address blocks: 80.66.32.0/19 maxlen: 19
85.193.128.0/20 maxlen: 20
85.193.176.0/20 maxlen: 24
185.54.208.0/24 maxlen: 24
185.54.209.0/24 maxlen: 24
2a00:eb40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d4:6f:eb:4b:a3:f6:af:43:2c:96:f1:0f:d1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42d5e85678faed3c233e0c4472a6289bae97d32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:a7:af:41:ec:c7:89:8f:a5:cb:ec:68:4b:
c0:a1:d1:53:ef:fc:f6:46:8a:dd:be:07:2c:50:94:
2c:3a:31:35:cb:3e:dd:07:6d:56:13:c2:81:b5:4e:
b1:9e:57:10:88:f7:ae:a5:c7:3c:65:69:c3:70:e5:
39:7e:0c:be:68:de:7b:d3:2a:cd:32:7a:40:7a:50:
ac:5f:be:8c:17:43:c5:45:be:0a:85:48:83:d0:f9:
e0:b5:ef:ec:30:c7:be:03:fd:63:1a:83:82:d4:2b:
83:0f:c1:c8:25:c9:37:86:f9:da:18:69:7f:70:55:
ff:3a:82:71:5d:cb:14:08:a4:14:e7:c4:84:c3:d0:
92:ec:17:b1:ea:97:14:5c:ca:b0:06:2e:a7:2e:2c:
1d:ba:50:6f:73:15:dc:7d:3d:03:ea:b6:aa:91:cc:
54:c9:6b:95:9a:3c:f4:c1:68:f5:28:10:a4:98:67:
72:e9:63:03:78:9b:e0:e6:77:97:34:6b:69:e1:0a:
27:37:f5:f4:79:2d:77:bf:e4:13:88:9c:10:d2:ab:
e4:ef:bf:ba:34:f8:17:2d:ad:11:d2:69:e6:de:06:
d3:be:e9:ee:f4:a9:f8:75:ed:a9:6f:7a:52:4b:2e:
bf:dc:6c:03:3b:1d:9f:fc:96:ff:53:37:6d:e8:9a:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D5:E8:56:78:FA:ED:3C:23:3E:0C:44:72:A6:28:9B:AE:97:D3:2F
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/QtXoVnj67TwjPgxEcqYom66X0y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.32.0/19
85.193.128.0/20
85.193.176.0/20
185.54.208.0/23
IPv6:
2a00:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
3d:75:1c:10:ea:ed:ea:be:79:66:37:ff:f0:45:3a:e5:0d:e0:
bf:31:a8:fa:aa:45:ca:6d:0d:3a:f0:c6:9f:7b:8b:17:85:cb:
cc:be:89:53:08:61:f5:b9:86:01:ca:91:df:0f:f7:7c:45:3c:
02:4e:bb:38:76:d9:69:d3:49:f2:fd:d0:30:1c:6a:c3:7e:35:
1d:5b:60:e8:8a:10:0b:53:e2:38:01:14:cf:84:69:ef:22:44:
ee:df:df:93:c0:7c:a4:26:1f:ad:5e:71:e6:89:ef:83:46:bd:
16:0c:cc:d5:fc:a6:45:bb:73:58:ee:e8:53:dc:01:ec:c4:c7:
d8:39:c5:6c:cf:56:9d:4f:2d:39:ce:18:6c:5a:c3:1f:d3:ee:
1f:96:b4:68:de:fd:d9:26:ac:62:50:76:c0:90:eb:aa:5f:4a:
35:c9:25:0c:c5:97:3b:f8:3b:a4:60:6e:97:37:76:ef:c6:0b:
74:51:46:fb:1a:10:c1:47:15:cc:88:87:7e:e2:ee:c3:72:bc:
18:16:a3:ee:fa:40:c1:99:16:9e:10:9c:7f:be:9a:a6:75:12:
9c:6d:cd:4c:c4:c8:3b:52:d2:18:69:87:49:8a:56:7e:d4:ce:
d4:2c:80:e6:27:c1:eb:36:89:d9:9b:ce:56:47:72:7a:56:0e:
6c:be:ca:fa
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQi+9Rv60uj9q9DLJbxD9E/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Y2ViNjFlNzFhNjE5ZjIzMTRlOWQ5ODQ2ZWM2N2JjODhh
MTI0NGMwHhcNMjUwMTAxMTc0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmQ1ZTg1Njc4ZmFlZDNjMjMzZTBjNDQ3MmE2Mjg5YmFlOTdkMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4umnr0Hsx4mPpcvsaEvAodFT7/z2
RordvgcsUJQsOjE1yz7dB21WE8KBtU6xnlcQiPeupcc8ZWnDcOU5fgy+aN570yrN
MnpAelCsX76MF0PFRb4KhUiD0Pngte/sMMe+A/1jGoOC1CuDD8HIJck3hvnaGGl/
cFX/OoJxXcsUCKQU58SEw9CS7Bex6pcUXMqwBi6nLiwdulBvcxXcfT0D6raqkcxU
yWuVmjz0wWj1KBCkmGdy6WMDeJvg5neXNGtp4QonN/X0eS13v+QTiJwQ0qvk77+6
NPgXLa0R0mnm3gbTvunu9Kn4de2pb3pSSy6/3GwDOx2f/Jb/Uzdt6JoGWQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFELV6FZ4+u08Iz4MRHKmKJuul9MvMB8GA1UdIwQY
MBaAFETOth5xphnyMU6dmEbsZ7yIoSRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk02MkhuR21HZkl4VHAyWVJ1eG52SWloSkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wN2VhYzctNGQ1Mi00NmQ5LWJhNDQt
ODk0NTg2MGQ1MjM4LzEvUXRYb1ZuajY3VHdqUGd4RWNxWW9tNjZYMHk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wN2VhYzctNGQ1Mi00NmQ5LWJhNDQtODk0NTg2MGQ1MjM4
LzEvUk02MkhuR21HZkl4VHAyWVJ1eG52SWloSkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFUEIgAwQE
VcGAAwQEVcGwAwQBuTbQMA0EAgACMAcDBQAqAOtAMA0GCSqGSIb3DQEBCwUAA4IB
AQA9dRwQ6u3qvnlmN//wRTrlDeC/Maj6qkXKbQ068Mafe4sXhcvMvolTCGH1uYYB
ypHfD/d8RTwCTrs4dtlp00ny/dAwHGrDfjUdW2DoihALU+I4ARTPhGnvIkTu39+T
wHykJh+tXnHmie+DRr0WDMzV/KZFu3NY7uhT3AHsxMfYOcVsz1adTy05zhhsWsMf
0+4flrRo3v3ZJqxiUHbAkOuqX0o1ySUMxZc7+DukYG6XN3bvxgt0UUb7GhDBRxXM
iId+4u7DcrwYFqPu+kDBmRaeEJx/vpqmdRKcbc1MxMg7UtIYaYdJilZ+1M7ULIDm
J8HrNonZm85WR3J6Vg5svsr6
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:41:14 2025 by rpki-client