Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ka7B1o22nQ899fZrHQAwPaISuMc.roa
File: ka7B1o22nQ899fZrHQAwPaISuMc.roa (raw, json)
Hash identifier: YtdRj2DUEOEWo4MtM001iw/fwE9TLkR0g86JFagGliA=
Subject key identifier: 91:AE:C1:D6:8D:B6:9D:0F:3D:F5:F6:6B:1D:00:30:3D:A2:12:B8:C7
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 019424B3EEA0BCE81F3C7CE7F61D0248405F
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ka7B1o22nQ899fZrHQAwPaISuMc.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216172
IP address blocks: 185.30.108.0/24 maxlen: 24
185.30.109.0/24 maxlen: 24
185.30.110.0/24 maxlen: 24
185.30.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ee:a0:bc:e8:1f:3c:7c:e7:f6:1d:02:48:40:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91aec1d68db69d0f3df5f66b1d00303da212b8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:ac:5a:fd:eb:3d:b5:de:6e:32:de:e3:6f:
d7:be:ec:0d:ff:37:cf:0c:8d:9b:8f:86:b5:e4:8d:
1b:85:57:3f:7f:07:32:f6:3a:39:39:74:6e:f2:f4:
6e:d7:5a:ea:17:e0:35:57:cc:76:cd:5d:e5:ec:de:
2a:35:b2:33:43:9b:77:ce:df:95:7c:58:0c:3d:6e:
bb:38:86:8a:33:9b:fa:7b:71:2c:44:4a:1a:a9:1f:
23:fa:ec:fc:6a:7a:68:7e:2f:e8:69:73:7b:6b:0e:
80:b4:f9:d4:22:6f:18:4a:68:23:61:2f:36:bb:1a:
4c:49:de:01:d1:28:0c:23:fd:07:ff:76:44:fb:e4:
0f:bb:ef:88:f4:5b:62:79:72:d8:43:ce:a4:c3:b1:
37:4b:a9:1f:50:69:ba:2f:b7:23:5f:0d:61:10:f1:
c8:0d:e8:8f:81:5e:3c:65:b1:bf:dc:cb:f5:86:24:
15:3a:2d:3b:ad:d8:23:9b:c6:cb:8b:ff:18:d4:6d:
33:8f:fa:f7:3c:28:b3:b3:75:7b:37:c8:40:31:a2:
99:e4:89:67:d1:73:12:4d:d1:54:56:06:85:e3:62:
75:69:9b:60:29:dc:64:02:df:5d:cb:26:a9:64:01:
6c:98:6a:3c:ad:59:61:0e:34:5c:05:d3:57:33:a8:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:C1:D6:8D:B6:9D:0F:3D:F5:F6:6B:1D:00:30:3D:A2:12:B8:C7
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ka7B1o22nQ899fZrHQAwPaISuMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:80:ea:e2:f6:4d:96:19:53:ee:90:a8:e3:30:92:51:9f:b4:
6c:c6:de:13:6d:dd:5e:76:c7:4d:f4:14:8b:54:16:93:45:b9:
16:77:14:0c:fe:a7:6b:63:a7:90:12:47:e9:a2:34:d9:29:0b:
c6:e3:a2:9d:ff:5b:6d:d6:16:55:9d:b6:00:e9:a9:1a:f2:e9:
da:51:da:5c:c3:f4:d8:85:45:34:ff:e4:92:16:78:33:48:3b:
7b:a7:d8:c6:65:0e:b4:7c:cf:03:64:29:15:0c:f3:01:bf:28:
64:93:95:5f:2a:e4:a0:34:3c:0f:32:b2:f8:77:0a:8f:8e:df:
ab:3b:47:76:c7:8a:b5:02:b9:6b:a9:e8:86:cb:5a:3a:76:ab:
d5:12:aa:24:16:16:0a:87:0e:9f:c6:4c:f2:34:be:87:5d:62:
b7:27:aa:d1:04:d8:c0:47:fa:e3:dd:16:5a:c7:a8:f9:59:f1:
f2:e8:19:f9:47:c5:8b:64:d3:b9:01:05:2d:92:d2:b1:46:ad:
57:cc:80:d4:2b:15:92:39:3e:51:5d:33:90:04:fe:b9:26:76:
01:ff:f3:2d:77:a3:f6:6d:47:10:83:49:ac:ab:7a:ea:c1:63:
0b:f3:a8:5a:ac:46:bf:70:9a:05:e5:be:1b:07:f7:ff:be:fb:
42:5d:47:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks+6gvOgfPHzn9h0CSEBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGQ0ZmU3ODBmZTQ1MzMwNzgwZGViNmVjMzg0Y2I5NDkz
ZjJkZjIwHhcNMjUwMTAyMDE0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWFlYzFkNjhkYjY5ZDBmM2RmNWY2NmIxZDAwMzAzZGEyMTJiOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCsWv3rPbXebjLe42/XvuwN/zfP
DI2bj4a15I0bhVc/fwcy9jo5OXRu8vRu11rqF+A1V8x2zV3l7N4qNbIzQ5t3zt+V
fFgMPW67OIaKM5v6e3EsREoaqR8j+uz8anpofi/oaXN7aw6AtPnUIm8YSmgjYS82
uxpMSd4B0SgMI/0H/3ZE++QPu++I9FtieXLYQ86kw7E3S6kfUGm6L7cjXw1hEPHI
DeiPgV48ZbG/3Mv1hiQVOi07rdgjm8bLi/8Y1G0zj/r3PCizs3V7N8hAMaKZ5Iln
0XMSTdFUVgaF42J1aZtgKdxkAt9dyyapZAFsmGo8rVlhDjRcBdNXM6iFFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJGuwdaNtp0PPfX2ax0AMD2iErjHMB8GA1UdIwQY
MBaAFAVNT+eA/kUzB4Detuw4TLlJPy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlUxUDU0RC1SVE1IZ042MjdEaE11VWtfTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xZjNmMTEtNTQ5OS00YzdiLWIyZTQt
MDUxYjg5ODQ4NjZlLzEva2E3QjFvMjJuUTg5OWZackhRQXdQYUlTdU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xZjNmMTEtNTQ5OS00YzdiLWIyZTQtMDUxYjg5ODQ4NjZl
LzEvQlUxUDU0RC1SVE1IZ042MjdEaE11VWtfTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR5sMA0G
CSqGSIb3DQEBCwUAA4IBAQBMgOri9k2WGVPukKjjMJJRn7Rsxt4Tbd1edsdN9BSL
VBaTRbkWdxQM/qdrY6eQEkfpojTZKQvG46Kd/1tt1hZVnbYA6aka8unaUdpcw/TY
hUU0/+SSFngzSDt7p9jGZQ60fM8DZCkVDPMBvyhkk5VfKuSgNDwPMrL4dwqPjt+r
O0d2x4q1ArlrqeiGy1o6dqvVEqokFhYKhw6fxkzyNL6HXWK3J6rRBNjAR/rj3RZa
x6j5WfHy6Bn5R8WLZNO5AQUtktKxRq1XzIDUKxWSOT5RXTOQBP65JnYB//Mtd6P2
bUcQg0msq3rqwWML86harEa/cJoF5b4bB/f/vvtCXUce
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:38 2025 by rpki-client