Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/omD35PZpVyqvkF4OdnFj08JxMFc.roa
File: omD35PZpVyqvkF4OdnFj08JxMFc.roa (raw, json)
Hash identifier: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=
Subject key identifier: A2:60:F7:E4:F6:69:57:2A:AF:90:5E:0E:76:71:63:D3:C2:71:30:57
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 019424449D7898629969598E558F96238394
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/omD35PZpVyqvkF4OdnFj08JxMFc.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211918
IP address blocks: 185.235.140.0/24 maxlen: 24
2a0d:6480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9d:78:98:62:99:69:59:8e:55:8f:96:23:83:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a260f7e4f669572aaf905e0e767163d3c2713057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:eb:d4:4c:37:1c:04:dd:b4:73:2b:d0:f3:
db:2e:c5:aa:d1:ff:fb:15:cd:3f:e3:b5:b9:cf:2f:
fa:e4:17:ed:5f:f4:ca:08:58:a0:d9:c8:08:e8:b0:
2f:03:3a:5e:1a:ac:0b:b6:9e:42:56:80:68:c4:cd:
af:fd:b5:cd:df:57:9c:5d:a4:cf:22:f3:d0:32:5b:
57:e7:a4:e7:48:f1:26:af:d2:72:cf:b9:1e:d4:2c:
ed:b3:2b:6c:d5:09:05:ee:f1:17:28:b5:3e:a0:92:
29:f6:9a:b2:2b:fb:5c:de:5b:71:e5:7c:44:b9:ba:
17:ed:97:92:d4:f1:03:cf:36:34:e4:6a:20:25:c3:
26:0f:28:e6:fc:a5:5e:a7:81:60:82:e1:65:2f:a7:
d4:9e:2a:4a:01:20:c2:36:3c:24:6a:15:26:17:bb:
7b:97:34:1c:2c:9e:42:bb:69:41:d8:c8:d6:8d:88:
12:14:b7:8b:e1:af:33:70:25:b8:64:8c:17:5e:1f:
95:a0:0d:2d:df:d1:19:80:c6:b5:c5:de:7c:1e:bb:
ae:6c:05:bd:69:d2:12:db:29:14:51:5c:6a:eb:45:
87:c3:48:06:14:bf:6c:22:19:f9:2c:f8:4b:a9:d3:
1b:66:84:be:d6:82:15:05:83:86:f3:e8:17:9a:f2:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:60:F7:E4:F6:69:57:2A:AF:90:5E:0E:76:71:63:D3:C2:71:30:57
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/omD35PZpVyqvkF4OdnFj08JxMFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.140.0/24
IPv6:
2a0d:6480::/29
Signature Algorithm: sha256WithRSAEncryption
03:a9:dc:b3:25:91:0e:8e:93:77:04:2a:db:55:81:1e:95:a6:
11:fe:bd:5c:d2:ab:ba:91:6c:f5:a1:70:d4:ee:1b:ae:59:b1:
a2:12:75:c7:8e:bd:ed:83:c5:24:a4:28:cc:4a:4a:18:18:2d:
7b:92:a3:f8:ee:51:09:fa:fc:56:22:83:43:4e:1d:42:a8:04:
60:f1:7d:2e:3f:b2:29:73:b0:0a:98:88:45:02:21:0f:3b:4c:
89:d8:9e:b5:02:c2:65:e9:9d:60:4c:6b:b7:07:7e:4c:7f:5a:
09:3e:65:45:6f:80:ef:6c:66:5c:07:ba:07:63:0b:86:78:c1:
dc:51:68:a2:cc:e2:a1:67:27:af:c0:e0:9f:4c:19:2a:de:2e:
9c:9d:2c:53:5f:14:2c:87:fd:0b:f8:98:53:12:cc:99:8a:72:
dd:60:32:d1:79:d5:65:62:61:81:ea:d1:e0:5e:88:78:4b:f4:
27:2a:74:3b:28:92:a0:31:12:58:88:9f:a4:dc:66:52:25:4f:
69:7c:3e:c6:eb:53:9b:52:c6:96:35:46:3e:95:d8:8b:9a:80:
c4:36:f0:00:63:a5:fe:03:20:9b:12:f6:6a:44:9e:e9:d3:a5:
a0:0f:cd:85:79:76:40:77:f2:5a:0f:42:05:a5:89:a7:2c:1e:
49:8f:91:38
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkRJ14mGKZaVmOVY+WI4OUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj
NTNiMDUwHhcNMjUwMTAxMjM0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjYwZjdlNGY2Njk1NzJhYWY5MDVlMGU3NjcxNjNkM2MyNzEzMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko7r1Ew3HATdtHMr0PPbLsWq0f/7
Fc0/47W5zy/65BftX/TKCFig2cgI6LAvAzpeGqwLtp5CVoBoxM2v/bXN31ecXaTP
IvPQMltX56TnSPEmr9Jyz7ke1Cztsyts1QkF7vEXKLU+oJIp9pqyK/tc3ltx5XxE
uboX7ZeS1PEDzzY05GogJcMmDyjm/KVep4FgguFlL6fUnipKASDCNjwkahUmF7t7
lzQcLJ5Cu2lB2MjWjYgSFLeL4a8zcCW4ZIwXXh+VoA0t39EZgMa1xd58HruubAW9
adIS2ykUUVxq60WHw0gGFL9sIhn5LPhLqdMbZoS+1oIVBYOG8+gXmvIYcQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKJg9+T2aVcqr5BeDnZxY9PCcTBXMB8GA1UdIwQY
MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt
NzU4Y2E0ZDQ4YmMyLzEvb21EMzVQWnBWeXF2a0Y0T2RuRmowOEp4TUZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy
LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueuMMA0E
AgACMAcDBQMqDWSAMA0GCSqGSIb3DQEBCwUAA4IBAQADqdyzJZEOjpN3BCrbVYEe
laYR/r1c0qu6kWz1oXDU7huuWbGiEnXHjr3tg8UkpCjMSkoYGC17kqP47lEJ+vxW
IoNDTh1CqARg8X0uP7Ipc7AKmIhFAiEPO0yJ2J61AsJl6Z1gTGu3B35Mf1oJPmVF
b4DvbGZcB7oHYwuGeMHcUWiizOKhZyevwOCfTBkq3i6cnSxTXxQsh/0L+JhTEsyZ
inLdYDLRedVlYmGB6tHgXoh4S/QnKnQ7KJKgMRJYiJ+k3GZSJU9pfD7G61ObUsaW
NUY+ldiLmoDENvAAY6X+AyCbEvZqRJ7p06WgD82FeXZAd/JaD0IFpYmnLB5Jj5E4
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:37 2025 by rpki-client