Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa
File: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (raw, json)
Hash identifier: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=
Subject key identifier: 8B:C4:38:83:85:6C:96:21:8D:36:9F:3B:BD:DE:A8:62:DA:89:FF:39
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 0194A782FAFA60A83777DC9FB8FF8476D3FA
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa
Signing time: Mon 27 Jan 2025 11:26:06 +0000
ROA not before: Mon 27 Jan 2025 11:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47164
IP address blocks: 185.174.180.0/22 maxlen: 24
185.174.180.0/24 maxlen: 24
185.174.181.0/24 maxlen: 24
185.174.182.0/24 maxlen: 24
185.174.183.0/24 maxlen: 24
185.227.104.0/22 maxlen: 24
185.227.104.0/24 maxlen: 24
2a0b:b100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:82:fa:fa:60:a8:37:77:dc:9f:b8:ff:84:76:d3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Jan 27 11:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bc43883856c96218d369f3bbddea862da89ff39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:c6:0a:2f:66:fb:6a:ab:93:89:f7:0a:ae:
3a:f2:0a:70:07:14:9c:92:ef:8c:27:8b:e6:d6:49:
71:76:94:e0:3c:ca:51:bd:78:f6:86:2a:be:b3:ed:
c0:e6:e0:56:1c:81:28:14:de:39:37:b6:48:e8:d8:
40:9b:53:f2:bc:41:89:83:6a:76:63:d5:70:a9:50:
f2:46:a2:14:d2:af:e3:30:62:d3:48:ca:a9:10:ca:
b3:34:1d:5e:1f:09:15:53:c3:77:bb:72:82:23:45:
59:a4:d5:41:3c:e2:a2:63:86:fd:0d:f0:26:7c:21:
e7:29:08:eb:f1:e7:38:e0:08:19:6c:ef:bf:b1:0a:
82:60:e4:4b:3c:22:5a:15:d6:9c:aa:5f:33:9d:22:
21:2a:3c:54:06:13:37:d9:fd:b3:2a:6e:05:a8:69:
3c:e1:73:df:85:04:3d:d5:4e:3e:08:af:24:2d:71:
38:04:17:2c:72:4e:0f:e1:dd:0d:c1:43:a5:29:8a:
1c:41:82:60:76:65:ff:03:1c:bd:04:34:42:ee:d2:
64:de:c3:71:2f:d2:97:3e:37:92:94:d9:d1:d9:4a:
4f:d1:93:cd:91:c3:3a:e3:e7:b3:56:1e:d3:b3:96:
9d:04:04:08:f9:cb:98:af:0b:2a:e0:67:35:a0:73:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C4:38:83:85:6C:96:21:8D:36:9F:3B:BD:DE:A8:62:DA:89:FF:39
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.180.0/22
185.227.104.0/22
IPv6:
2a0b:b100::/29
Signature Algorithm: sha256WithRSAEncryption
80:84:b0:92:51:dc:d9:76:eb:30:ce:c8:71:e5:19:2b:01:bc:
66:7f:5b:b1:29:26:8b:24:98:42:32:3a:b9:f9:49:85:b1:32:
ac:74:05:23:93:ca:47:68:24:b9:86:4b:b6:f2:69:53:57:a6:
b0:72:bf:0e:63:7a:1c:45:0e:43:1f:51:e3:89:a4:9b:77:19:
d4:d0:d0:04:e3:4f:1a:fa:d7:ca:fc:12:fb:b2:07:68:63:d1:
3f:09:b7:cf:a5:57:2d:a4:19:4d:63:fc:5b:0a:f1:e7:1d:55:
10:c5:38:85:5a:50:0f:dc:81:5d:ae:93:c9:0c:58:bf:a3:7b:
97:7f:e1:3e:57:91:c7:50:db:98:fc:e6:6a:ce:a6:46:13:6e:
71:d7:ed:28:be:9b:3b:1a:a0:40:87:5d:09:d9:32:0c:20:6f:
e4:94:bd:a7:0e:c3:97:50:41:d4:da:1b:d0:69:6f:15:52:ca:
5b:db:ae:4f:65:82:39:1d:b1:b8:44:5d:7e:61:12:05:75:75:
7f:74:16:43:a1:45:ad:54:3c:a9:02:cb:a1:a8:45:01:28:6d:
02:52:d9:ef:a3:33:69:64:33:30:9c:be:d8:21:01:44:93:02:
da:88:af:4a:b5:ea:f7:47:f6:93:a7:77:dd:30:a1:6e:39:63:
d6:f5:2c:7f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZSngvr6YKg3d9yfuP+EdtP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTdiNTkzYzgwNGE2ODNmMGM4ZmEzZWRhOTMzNWFmOTJh
ODkwNDQwHhcNMjUwMTI3MTEyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmM0Mzg4Mzg1NmM5NjIxOGQzNjlmM2JiZGRlYTg2MmRhODlmZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H3GCi9m+2qrk4n3Cq468gpwBxSc
ku+MJ4vm1klxdpTgPMpRvXj2hiq+s+3A5uBWHIEoFN45N7ZI6NhAm1PyvEGJg2p2
Y9VwqVDyRqIU0q/jMGLTSMqpEMqzNB1eHwkVU8N3u3KCI0VZpNVBPOKiY4b9DfAm
fCHnKQjr8ec44AgZbO+/sQqCYORLPCJaFdacql8znSIhKjxUBhM32f2zKm4FqGk8
4XPfhQQ91U4+CK8kLXE4BBcsck4P4d0NwUOlKYocQYJgdmX/Axy9BDRC7tJk3sNx
L9KXPjeSlNnR2UpP0ZPNkcM64+ezVh7Ts5adBAQI+cuYrwsq4Gc1oHPTbwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIvEOIOFbJYhjTafO73eqGLaif85MB8GA1UdIwQY
MBaAFCOntZPIBKaD8Mj6PtqTNa+SqJBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjIt
M2ZiNWFkZGU2MDQwLzEvaThRNGc0VnNsaUdOTnA4N3ZkNm9ZdHFKX3prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjItM2ZiNWFkZGU2MDQw
LzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCua60AwQC
ueNoMA0EAgACMAcDBQMqC7EAMA0GCSqGSIb3DQEBCwUAA4IBAQCAhLCSUdzZdusw
zshx5RkrAbxmf1uxKSaLJJhCMjq5+UmFsTKsdAUjk8pHaCS5hku28mlTV6awcr8O
Y3ocRQ5DH1HjiaSbdxnU0NAE408a+tfK/BL7sgdoY9E/CbfPpVctpBlNY/xbCvHn
HVUQxTiFWlAP3IFdrpPJDFi/o3uXf+E+V5HHUNuY/OZqzqZGE25x1+0ovps7GqBA
h10J2TIMIG/klL2nDsOXUEHU2hvQaW8VUspb265PZYI5HbG4RF1+YRIFdXV/dBZD
oUWtVDypAsuhqEUBKG0CUtnvozNpZDMwnL7YIQFEkwLaiK9Kter3R/aTp3fdMKFu
OWPW9Sx/
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:00:47 2025 by rpki-client