Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/oycqR76Bjf7qno3anV7JfzPWPvs.roa
File: oycqR76Bjf7qno3anV7JfzPWPvs.roa (raw, json)
Hash identifier: /8bYsUu2fyo4NfAsatKvD7BcUmMFAFcwA/6gm37Z/8U=
Subject key identifier: A3:27:2A:47:BE:81:8D:FE:EA:9E:8D:DA:9D:5E:C9:7F:33:D6:3E:FB
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019422FBBD5CD8607D4057D130FF8C9AF10D
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/oycqR76Bjf7qno3anV7JfzPWPvs.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43949
IP address blocks: 2.58.180.0/22 maxlen: 22
168.168.0.0/21 maxlen: 21
168.168.8.0/22 maxlen: 22
168.168.12.0/23 maxlen: 23
168.168.14.0/24 maxlen: 24
168.168.15.0/24 maxlen: 24
168.168.32.0/22 maxlen: 22
168.168.80.0/20 maxlen: 20
168.168.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bd:5c:d8:60:7d:40:57:d1:30:ff:8c:9a:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3272a47be818dfeea9e8dda9d5ec97f33d63efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:69:89:46:33:65:6c:9f:a9:5a:ee:a6:41:
41:13:20:6b:1b:b2:e6:fb:8c:b4:be:73:8a:cf:b6:
54:9d:0a:20:49:80:fa:d3:72:9f:97:8f:d7:43:0e:
1b:fa:34:c2:1d:c5:b3:ab:9d:89:5d:1d:34:1f:92:
68:b9:7b:f1:08:89:67:aa:12:77:ad:c5:66:2f:1b:
c9:a7:af:5a:c9:eb:0b:81:92:58:42:26:fc:42:b5:
8f:de:28:d4:c7:44:07:d1:2b:06:f7:9f:bc:25:cd:
42:67:b7:08:59:2b:15:7a:fb:19:08:b0:44:c2:31:
c1:cd:2d:1d:b6:16:77:f9:c3:0c:08:e1:07:01:46:
0b:5f:df:60:65:84:89:e8:8e:b3:ba:9f:83:c4:e0:
42:37:e9:6f:77:be:e3:64:f7:e7:66:5f:9f:2e:27:
3e:6d:1d:f0:a0:8e:f1:f0:89:b4:3d:6c:c6:cd:38:
ec:d6:7d:af:af:47:56:51:dc:46:f7:ed:66:74:78:
95:b1:46:3a:19:b2:43:9c:9d:a3:15:f3:b2:06:90:
b6:07:f0:0a:89:11:8a:a4:0e:cc:aa:75:5c:22:8d:
dc:77:23:56:48:3c:65:66:67:4e:3f:2f:9f:0f:1f:
0a:39:f0:c9:56:0d:a8:8a:3d:d4:da:f2:27:fe:66:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:2A:47:BE:81:8D:FE:EA:9E:8D:DA:9D:5E:C9:7F:33:D6:3E:FB
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/oycqR76Bjf7qno3anV7JfzPWPvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.180.0/22
168.168.0.0/20
168.168.32.0/22
168.168.80.0-168.168.127.255
Signature Algorithm: sha256WithRSAEncryption
3b:27:ba:22:a8:90:1d:d9:9a:05:76:1c:b6:f1:5a:fd:cd:05:
2b:cf:00:6e:54:d6:73:89:5d:49:14:0a:f9:1f:3e:de:ad:59:
b7:50:68:7d:70:11:2d:c0:a4:e3:69:de:79:5e:d2:72:80:e2:
5f:d3:2d:9f:59:ef:c2:77:c3:59:a2:4f:2e:81:a1:79:93:68:
61:5d:38:4b:74:48:d0:d5:90:3f:c9:4b:be:2f:87:00:f8:cd:
c2:b0:97:51:b3:84:f4:d4:14:ec:ef:34:bf:23:11:5a:66:1b:
a3:72:4f:3d:a6:d7:7a:30:c8:03:b4:de:e6:cf:1e:cc:3b:87:
01:cf:08:9b:8b:54:ec:44:98:20:a5:5b:4b:a7:51:2c:f8:ec:
de:0e:d4:5f:9c:35:6b:25:57:1e:e7:bc:02:3f:2b:91:19:55:
bc:75:35:2a:43:19:49:e7:bd:af:73:5c:7c:f6:4b:01:f1:49:
bb:0f:35:37:d5:26:68:f3:cf:de:31:c0:6a:c5:74:9f:15:6f:
70:71:12:5d:cb:59:4d:01:0f:50:4b:53:51:56:41:3b:61:e7:
f2:59:1a:55:18:3b:b7:fc:10:51:c0:7b:61:aa:ac:e2:59:f1:
02:40:be:10:8a:f6:10:83:51:f8:bd:7a:f6:a1:42:50:37:18:
23:ac:2f:0b
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQi+71c2GB9QFfRMP+MmvENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTJjZjMzOTBjYWE1ODc5ZTc1OTcyOWNkOTAwOGM2ZWNh
NTVhMjcwHhcNMjUwMTAxMTc0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzI3MmE0N2JlODE4ZGZlZWE5ZThkZGE5ZDVlYzk3ZjMzZDYzZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ytpiUYzZWyfqVrupkFBEyBrG7Lm
+4y0vnOKz7ZUnQogSYD603Kfl4/XQw4b+jTCHcWzq52JXR00H5JouXvxCIlnqhJ3
rcVmLxvJp69ayesLgZJYQib8QrWP3ijUx0QH0SsG95+8Jc1CZ7cIWSsVevsZCLBE
wjHBzS0dthZ3+cMMCOEHAUYLX99gZYSJ6I6zup+DxOBCN+lvd77jZPfnZl+fLic+
bR3woI7x8Im0PWzGzTjs1n2vr0dWUdxG9+1mdHiVsUY6GbJDnJ2jFfOyBpC2B/AK
iRGKpA7MqnVcIo3cdyNWSDxlZmdOPy+fDx8KOfDJVg2oij3U2vIn/mafEwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFKMnKke+gY3+6p6N2p1eyX8z1j77MB8GA1UdIwQY
MBaAFGuSzzOQyqWHnnWXKc2QCMbspVonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTIt
MmEwNjIyMzYyM2UwLzEvb3ljcVI3NkJqZjdxbm8zYW5WN0pmelBXUHZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTItMmEwNjIyMzYyM2Uw
LzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCAjq0AwQE
qKgAAwQCqKggMAwDBASoqFADBAeoqAAwDQYJKoZIhvcNAQELBQADggEBADsnuiKo
kB3ZmgV2HLbxWv3NBSvPAG5U1nOJXUkUCvkfPt6tWbdQaH1wES3ApONp3nle0nKA
4l/TLZ9Z78J3w1miTy6BoXmTaGFdOEt0SNDVkD/JS74vhwD4zcKwl1GzhPTUFOzv
NL8jEVpmG6NyTz2m13owyAO03ubPHsw7hwHPCJuLVOxEmCClW0unUSz47N4O1F+c
NWslVx7nvAI/K5EZVbx1NSpDGUnnva9zXHz2SwHxSbsPNTfVJmjzz94xwGrFdJ8V
b3BxEl3LWU0BD1BLU1FWQTth5/JZGlUYO7f8EFHAe2GqrOJZ8QJAvhCK9hCDUfi9
evahQlA3GCOsLws=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:50 2025 by rpki-client