Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Dvyh8slt0GhthdsGUd3QaM0fXkA.roa
File: Dvyh8slt0GhthdsGUd3QaM0fXkA.roa (raw, json)
Hash identifier: r3vo3FWTvwHopH8laEenTu+4YFKUeiwfnrrZyE9YVkA=
Subject key identifier: 0E:FC:A1:F2:C9:6D:D0:68:6D:85:DB:06:51:DD:D0:68:CD:1F:5E:40
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 0194236A06FEDD721101BC9E2555679FC96A
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Dvyh8slt0GhthdsGUd3QaM0fXkA.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 2.110.0.0/20 maxlen: 20
2.110.16.0/22 maxlen: 22
91.199.190.0/24 maxlen: 24
185.158.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:06:fe:dd:72:11:01:bc:9e:25:55:67:9f:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0efca1f2c96dd0686d85db0651ddd068cd1f5e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:d7:e5:12:34:66:4a:96:85:26:6f:43:7d:
9a:d4:bb:00:aa:21:d8:4c:a3:46:c3:10:0f:98:1f:
f4:22:c3:96:4a:ee:78:2c:2d:a1:95:56:01:a7:cd:
0f:63:7b:22:7a:55:d5:62:54:f2:19:1a:f2:c1:4f:
46:23:c0:4c:22:4a:e6:c4:6d:f0:4a:41:54:9f:1c:
31:b5:8d:4b:2c:e7:1a:48:eb:6f:d4:96:71:d5:79:
c9:b4:81:51:05:e1:05:02:9a:11:0c:9c:c4:b1:fc:
a3:72:1d:e2:fd:2c:6a:15:1e:58:b1:e0:e1:36:9a:
14:56:73:c5:57:b3:ec:28:13:0b:b1:0c:7f:5d:80:
22:b2:83:bf:4a:64:1c:02:98:fe:48:9c:77:dc:87:
d3:3a:dd:c8:24:80:11:37:dc:86:7a:22:b5:7a:e4:
3e:b4:8e:1a:ca:9a:06:0b:65:e8:33:89:09:81:16:
cb:41:2d:2c:3e:ed:7c:2e:0d:c0:f0:d0:17:28:2b:
56:10:8b:10:d6:cd:89:bf:8c:e7:5d:cf:ea:8b:a7:
fa:c4:9b:da:a1:d5:bd:63:ad:35:80:83:0e:1b:e8:
b3:7f:0c:c9:ff:55:b5:4d:e3:fb:1b:39:a6:ca:39:
f3:d4:cc:dc:68:7f:83:93:17:7f:a2:cb:ab:52:f6:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:A1:F2:C9:6D:D0:68:6D:85:DB:06:51:DD:D0:68:CD:1F:5E:40
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Dvyh8slt0GhthdsGUd3QaM0fXkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.110.0.0-2.110.19.255
91.199.190.0/24
185.158.163.0/24
Signature Algorithm: sha256WithRSAEncryption
22:35:dc:03:be:5e:8b:a4:ee:3b:cf:4b:46:c0:a1:f2:5e:1f:
77:56:53:90:cd:55:0a:cf:64:f8:06:6b:3d:bf:3f:eb:63:c3:
b5:bc:b8:38:cd:ef:4e:d0:bb:14:f4:bb:78:0d:a9:48:13:aa:
94:19:a1:3f:d6:53:b1:db:81:42:93:8e:52:9a:9f:c2:94:62:
39:13:29:2e:4b:ca:82:28:94:a9:72:22:f3:2b:43:83:98:22:
8c:ee:b3:e6:62:ed:77:7a:a8:12:89:ee:38:ed:f4:a6:89:a5:
2f:21:b9:1a:33:15:4e:15:fa:bf:1a:8d:1e:e0:6b:22:86:3a:
fd:56:f2:92:bd:2b:7d:cd:33:e7:4b:09:0f:9f:44:9d:d3:09:
e4:3c:e7:61:d5:bb:a0:16:f9:d7:27:e4:a9:c6:24:87:14:4d:
db:99:f7:4f:76:3b:56:fb:45:7e:d8:f0:57:7f:13:6a:4a:07:
42:e2:21:39:44:38:f0:f3:f0:20:6b:89:68:8f:e0:b3:ad:29:
34:69:8f:53:ab:73:d3:26:ac:bf:cd:e9:33:4e:d5:a4:f8:a8:
94:e9:78:d4:01:d9:fd:54:1a:0e:98:fc:23:fa:95:02:e0:26:
60:a8:af:b1:0d:a1:7e:c7:56:e0:37:58:f8:2e:3c:80:39:dc:
7b:c1:db:0b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQjagb+3XIRAbyeJVVnn8lqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm
ZGExMzUwHhcNMjUwMTAxMTk0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWZjYTFmMmM5NmRkMDY4NmQ4NWRiMDY1MWRkZDA2OGNkMWY1ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXrX5RI0ZkqWhSZvQ32a1LsAqiHY
TKNGwxAPmB/0IsOWSu54LC2hlVYBp80PY3sielXVYlTyGRrywU9GI8BMIkrmxG3w
SkFUnxwxtY1LLOcaSOtv1JZx1XnJtIFRBeEFApoRDJzEsfyjch3i/SxqFR5YseDh
NpoUVnPFV7PsKBMLsQx/XYAisoO/SmQcApj+SJx33IfTOt3IJIARN9yGeiK1euQ+
tI4aypoGC2XoM4kJgRbLQS0sPu18Lg3A8NAXKCtWEIsQ1s2Jv4znXc/qi6f6xJva
odW9Y601gIMOG+izfwzJ/1W1TeP7Gzmmyjnz1MzcaH+Dkxd/osurUvYjiwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA78ofLJbdBobYXbBlHd0GjNH15AMB8GA1UdIwQY
MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1
LTUyMWZhNDFkZmM5Ni8xL0R2eWg4c2x0MEdodGhkc0dVZDNRYU0wZlhrQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5
Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUHAQcBAf8EIzAhMB8EAgABMBkwCwMDAQJu
AwQCAm4QAwQAW8e+AwQAuZ6jMA0GCSqGSIb3DQEBCwUAA4IBAQAiNdwDvl6LpO47
z0tGwKHyXh93VlOQzVUKz2T4Bms9vz/rY8O1vLg4ze9O0LsU9Lt4DalIE6qUGaE/
1lOx24FCk45Smp/ClGI5EykuS8qCKJSpciLzK0ODmCKM7rPmYu13eqgSie447fSm
iaUvIbkaMxVOFfq/Go0e4Gsihjr9VvKSvSt9zTPnSwkPn0Sd0wnkPOdh1bugFvnX
J+SpxiSHFE3bmfdPdjtW+0V+2PBXfxNqSgdC4iE5RDjw8/Aga4loj+CzrSk0aY9T
q3PTJqy/zekzTtWk+KiU6XjUAdn9VBoOmPwj+pUC4CZgqK+xDaF+x1bgN1j4LjyA
Odx7wdsL
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:43 2025 by rpki-client