Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa
File: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (raw, json)
Hash identifier: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=
Subject key identifier: 55:C1:AE:29:E2:D1:44:72:87:89:4A:35:A7:72:7C:C1:1E:E1:95:2E
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 019424B3B2489CE4DDFFFF530A54B6B2B116
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201789
IP address blocks: 185.54.160.0/24 maxlen: 24
185.54.161.0/24 maxlen: 24
185.54.162.0/24 maxlen: 24
185.54.163.0/24 maxlen: 24
185.119.88.0/24 maxlen: 24
185.119.91.0/24 maxlen: 24
185.241.213.0/24 maxlen: 24
185.241.214.0/24 maxlen: 24
2a0c:bf80:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b2:48:9c:e4:dd:ff:ff:53:0a:54:b6:b2:b1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55c1ae29e2d1447287894a35a7727cc11ee1952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:8c:e3:1e:81:22:35:1e:e3:15:42:77:e1:
87:b2:06:ef:72:a6:d3:7a:29:ce:a2:37:2f:b2:19:
27:2e:cd:95:98:b9:74:f6:c0:18:fb:7f:ee:a5:47:
41:23:b0:95:cc:c8:1e:88:6c:79:80:de:f6:39:d0:
5b:e7:b5:d8:d5:0f:dd:3e:95:59:4e:2f:61:7c:b9:
31:47:91:72:4f:d4:89:6c:15:f1:29:13:54:09:7b:
a1:c2:67:8e:ab:bb:5c:10:e5:7b:2d:48:87:51:66:
23:59:3f:a4:7a:2a:c7:fd:c4:00:b7:d1:52:40:6e:
81:74:16:83:03:42:cc:f5:71:48:ae:e2:eb:1e:f3:
58:57:94:82:a6:97:82:70:ed:e8:41:ee:0b:e1:e1:
15:0e:4d:2b:5e:cd:0c:7f:cd:73:14:9d:38:7b:56:
6e:63:72:d4:f1:cd:00:fa:de:d5:3f:d7:13:1e:9c:
87:93:ea:88:6e:1b:1a:05:cf:6d:dc:06:9f:17:b5:
2d:66:8d:88:5f:d0:86:00:e3:f5:de:37:89:f1:fc:
ac:20:98:fe:ca:36:46:bf:cc:31:20:19:ca:95:93:
88:27:ee:6a:6a:de:f1:70:d5:d6:c3:6a:2a:ea:66:
7a:37:7f:76:a6:97:5c:bb:19:51:69:43:78:44:b1:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C1:AE:29:E2:D1:44:72:87:89:4A:35:A7:72:7C:C1:1E:E1:95:2E
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.160.0/22
185.119.88.0/24
185.119.91.0/24
185.241.213.0-185.241.214.255
IPv6:
2a0c:bf80:1b::/48
Signature Algorithm: sha256WithRSAEncryption
e1:05:ce:ba:21:a2:07:48:e1:b4:ed:7a:00:7f:a1:a7:80:e6:
b4:aa:50:48:13:ec:49:3d:3d:67:44:82:3e:da:8a:a6:93:9d:
a9:cf:a3:47:d2:26:51:f4:e1:7f:81:fb:10:1a:36:b4:ed:be:
87:9b:65:b8:f1:df:b4:5d:38:1e:83:3a:a4:1e:a5:4c:11:36:
58:27:a9:99:34:ef:34:9a:4e:18:63:4d:dd:f7:a4:48:26:b5:
4b:a7:51:e6:79:1e:26:99:7a:72:7d:ad:c6:84:51:40:99:20:
32:f4:03:94:d7:0b:f5:98:5a:03:b2:1f:0f:68:69:2a:99:6e:
62:34:8c:31:00:ec:c5:0d:ed:e4:92:66:7a:fe:d3:6a:6f:75:
3a:0b:84:94:c7:11:09:6d:e6:2a:1d:16:51:7b:79:08:0d:c1:
60:4d:f5:b4:60:ca:fc:02:3d:67:e2:ce:ee:ae:4b:71:ed:eb:
86:5e:28:7b:51:a7:f9:d2:52:ec:86:11:ba:26:e2:99:48:d9:
53:9c:06:23:41:6c:e6:67:67:1a:43:b3:c7:23:76:f8:26:8d:
f5:5c:8f:3a:73:ea:d7:16:71:49:51:72:3c:a4:bf:d1:55:5f:
cb:71:41:23:ff:b0:40:27:60:5e:1f:07:cb:d0:49:58:b1:74:
21:f2:82:df
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZQks7JInOTd//9TClS2srEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4
MzdiNDQwHhcNMjUwMTAyMDE0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWMxYWUyOWUyZDE0NDcyODc4OTRhMzVhNzcyN2NjMTFlZTE5NTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7uM4x6BIjUe4xVCd+GHsgbvcqbT
einOojcvshknLs2VmLl09sAY+3/upUdBI7CVzMgeiGx5gN72OdBb57XY1Q/dPpVZ
Ti9hfLkxR5FyT9SJbBXxKRNUCXuhwmeOq7tcEOV7LUiHUWYjWT+keirH/cQAt9FS
QG6BdBaDA0LM9XFIruLrHvNYV5SCppeCcO3oQe4L4eEVDk0rXs0Mf81zFJ04e1Zu
Y3LU8c0A+t7VP9cTHpyHk+qIbhsaBc9t3AafF7UtZo2IX9CGAOP13jeJ8fysIJj+
yjZGv8wxIBnKlZOIJ+5qat7xcNXWw2oq6mZ6N392ppdcuxlRaUN4RLEfkwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFFXBrini0URyh4lKNadyfMEe4ZUuMB8GA1UdIwQY
MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt
ZDhjMzUxZDkzZWM2LzEvVmNHdUtlTFJSSEtIaVVvMXAzSjh3UjdobFM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2
LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgAwQCuTagAwQA
uXdYAwQAuXdbMAwDBAC58dUDBAC58dYwDwQCAAIwCQMHACoMv4AAGzANBgkqhkiG
9w0BAQsFAAOCAQEA4QXOuiGiB0jhtO16AH+hp4DmtKpQSBPsST09Z0SCPtqKppOd
qc+jR9ImUfThf4H7EBo2tO2+h5tluPHftF04HoM6pB6lTBE2WCepmTTvNJpOGGNN
3fekSCa1S6dR5nkeJpl6cn2txoRRQJkgMvQDlNcL9ZhaA7IfD2hpKpluYjSMMQDs
xQ3t5JJmev7Tam91OguElMcRCW3mKh0WUXt5CA3BYE31tGDK/AI9Z+LO7q5Lce3r
hl4oe1Gn+dJS7IYRuibimUjZU5wGI0Fs5mdnGkOzxyN2+CaN9VyPOnPq1xZxSVFy
PKS/0VVfy3FBI/+wQCdgXh8Hy9BJWLF0IfKC3w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:30 2025 by rpki-client