Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ctERoijjRCNgTOhPFDF7hW1Naf8.roa
File: ctERoijjRCNgTOhPFDF7hW1Naf8.roa (raw, json)
Hash identifier: GbSLH9srsGuep9CwiZh28mn1I9/CFbfGSUD4FvnKSeM=
Subject key identifier: 72:D1:11:A2:28:E3:44:23:60:4C:E8:4F:14:31:7B:85:6D:4D:69:FF
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D782DB94DE821A06F627DFEFD909F6
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ctERoijjRCNgTOhPFDF7hW1Naf8.roa
Signing time: Wed 01 Jan 2025 21:48:33 +0000
ROA not before: Wed 01 Jan 2025 21:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47570
IP address blocks: 80.232.163.0/24 maxlen: 24
94.100.0.0/20 maxlen: 24
94.100.2.0/24 maxlen: 24
94.100.6.0/24 maxlen: 24
94.100.7.0/24 maxlen: 24
94.100.8.0/24 maxlen: 24
94.100.9.0/24 maxlen: 24
94.100.11.0/24 maxlen: 24
94.100.12.0/24 maxlen: 24
94.100.13.0/24 maxlen: 24
94.100.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:82:db:94:de:82:1a:06:f6:27:df:ef:d9:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72d111a228e34423604ce84f14317b856d4d69ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:0b:51:7d:c1:bf:06:fa:d7:95:0a:89:60:
fe:11:a8:a3:23:89:17:fd:1e:c4:c2:c9:56:ca:68:
00:c9:37:71:b1:a9:2a:bc:75:f4:22:1c:52:e8:4a:
99:e6:5b:0c:56:4f:50:f2:08:e6:4c:73:db:9f:38:
b7:ec:aa:87:f7:61:33:5d:1c:cb:e3:11:3c:09:18:
3d:c8:3c:fc:95:23:39:05:43:7b:61:3e:70:4e:78:
37:d8:c0:6c:ae:9b:58:b9:87:8d:53:77:e7:c2:84:
82:89:4d:69:8e:6f:db:9c:9b:a2:bc:e6:73:eb:cf:
c2:35:7c:a1:f3:f0:41:0e:46:54:5e:07:fe:84:db:
b3:bf:49:2f:dd:df:0b:a3:3b:5f:cb:ce:cd:29:b2:
a4:27:0d:7f:4d:62:71:5f:58:b6:cb:e9:d9:df:d4:
b1:e7:ad:43:2c:2f:6f:c3:e1:79:2d:0b:29:52:92:
39:04:14:b9:3d:3a:89:cc:13:fd:54:17:39:46:cf:
e0:85:eb:60:7f:5a:33:84:da:1a:1b:72:6a:71:bd:
ae:41:29:8f:d4:cd:78:d4:9d:c9:a2:ae:d2:e9:1e:
4d:49:c8:7e:63:3a:0c:63:19:c7:b1:e9:86:4d:80:
06:52:6d:04:7b:42:62:4f:4a:fd:6f:4f:ef:d5:f2:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:11:A2:28:E3:44:23:60:4C:E8:4F:14:31:7B:85:6D:4D:69:FF
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ctERoijjRCNgTOhPFDF7hW1Naf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.163.0/24
94.100.0.0/20
Signature Algorithm: sha256WithRSAEncryption
33:10:e3:05:17:84:44:bd:fc:c8:53:53:85:8d:cd:4a:00:a3:
9f:bd:2a:76:5e:d4:52:12:5b:4a:23:45:0d:e5:c4:33:a2:e4:
68:a1:e8:1e:8a:f2:8c:8b:87:6a:7c:b8:29:0a:bf:dd:38:ae:
ca:7a:dd:c3:63:40:68:f3:05:3e:60:bc:54:e8:37:46:5f:cb:
1e:8e:01:69:3f:35:fa:a1:77:b5:da:4d:f7:67:25:fb:a5:ba:
c2:e6:7a:46:ce:39:88:cd:2e:b2:65:db:8e:55:58:fa:78:e3:
01:de:b6:a7:4e:57:7c:7d:30:ca:4a:35:6e:af:17:6e:d0:e3:
33:a3:a1:f6:3f:8c:ee:3d:84:fd:52:e7:bc:88:e3:05:e4:57:
0c:68:46:7f:a6:13:bc:58:80:41:73:85:57:80:3c:5a:bf:3b:
aa:91:0d:b1:12:f5:7c:07:8a:84:dc:dd:f3:65:bc:52:4c:38:
b2:c1:e3:31:fb:ff:f2:c5:21:0e:5b:ff:8d:2e:85:30:31:2f:
cf:b5:27:99:3b:3e:1c:1e:49:fc:76:53:d0:36:38:35:18:6b:
4d:6c:29:2a:54:53:94:87:43:37:b6:d8:d8:44:72:a0:d2:fa:
72:cc:22:81:80:a7:60:82:18:74:27:10:9a:46:1c:39:07:d3:
e6:45:c9:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj14LblN6CGgb2J9/v2Qn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjUwMTAxMjE0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmQxMTFhMjI4ZTM0NDIzNjA0Y2U4NGYxNDMxN2I4NTZkNGQ2OWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu0LUX3Bvwb615UKiWD+EaijI4kX
/R7EwslWymgAyTdxsakqvHX0IhxS6EqZ5lsMVk9Q8gjmTHPbnzi37KqH92EzXRzL
4xE8CRg9yDz8lSM5BUN7YT5wTng32MBsrptYuYeNU3fnwoSCiU1pjm/bnJuivOZz
68/CNXyh8/BBDkZUXgf+hNuzv0kv3d8Loztfy87NKbKkJw1/TWJxX1i2y+nZ39Sx
561DLC9vw+F5LQspUpI5BBS5PTqJzBP9VBc5Rs/ghetgf1ozhNoaG3Jqcb2uQSmP
1M141J3Joq7S6R5NSch+YzoMYxnHsemGTYAGUm0Ee0JiT0r9b0/v1fJIdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHLREaIo40QjYEzoTxQxe4VtTWn/MB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvY3RFUm9pampSQ05nVE9oUEZERjdoVzFOYWY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUOijAwQE
XmQAMA0GCSqGSIb3DQEBCwUAA4IBAQAzEOMFF4REvfzIU1OFjc1KAKOfvSp2XtRS
EltKI0UN5cQzouRooegeivKMi4dqfLgpCr/dOK7Ket3DY0Bo8wU+YLxU6DdGX8se
jgFpPzX6oXe12k33ZyX7pbrC5npGzjmIzS6yZduOVVj6eOMB3ranTld8fTDKSjVu
rxdu0OMzo6H2P4zuPYT9Uue8iOMF5FcMaEZ/phO8WIBBc4VXgDxavzuqkQ2xEvV8
B4qE3N3zZbxSTDiyweMx+//yxSEOW/+NLoUwMS/PtSeZOz4cHkn8dlPQNjg1GGtN
bCkqVFOUh0M3ttjYRHKg0vpyzCKBgKdgghh0JxCaRhw5B9PmRcms
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:01 2025 by rpki-client