Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/P05t-254IWXoRfvJ8I88nflXaUg.roa
File: P05t-254IWXoRfvJ8I88nflXaUg.roa (raw, json)
Hash identifier: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=
Subject key identifier: 3F:4E:6D:FB:6E:78:21:65:E8:45:FB:C9:F0:8F:3C:9D:F9:57:69:48
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 019424B26DE21C07A964FAC29164EDE60FB4
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/P05t-254IWXoRfvJ8I88nflXaUg.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199361
IP address blocks: 185.20.76.0/23 maxlen: 24
185.77.232.0/22 maxlen: 24
2a00:49e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6d:e2:1c:07:a9:64:fa:c2:91:64:ed:e6:0f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f4e6dfb6e782165e845fbc9f08f3c9df9576948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:81:2c:cb:27:ee:0e:fb:23:a7:26:cd:02:
0f:c6:fb:99:e5:57:65:10:3a:68:4f:97:f6:71:44:
4f:da:72:b9:62:9d:a8:5e:0e:55:10:53:dd:f4:01:
e0:f1:57:03:77:57:8a:47:ab:9d:0a:e7:e2:4f:9e:
43:3d:3c:76:3a:97:9e:37:a6:3f:12:cc:e5:d5:e5:
8d:2e:d4:6c:c6:fe:e6:7b:67:f4:b6:5a:5c:00:a0:
62:a4:cf:95:0c:5c:4f:c8:af:04:54:df:7e:89:13:
23:7b:b3:df:9f:b3:df:fa:fd:0a:ee:d8:fe:e0:fe:
96:15:08:db:cd:03:9d:31:c2:79:09:40:e8:8f:e9:
14:ff:11:07:59:e5:44:76:fa:0e:55:8f:e0:8c:c8:
53:e7:b7:7c:af:be:77:88:e8:42:9d:17:85:eb:ec:
23:bf:03:34:5d:d2:05:d2:61:94:53:a9:02:51:ed:
4d:79:49:3a:b6:fd:70:9a:8c:01:25:ca:ef:c2:d8:
9c:fa:f3:f6:a1:17:72:32:02:24:96:dd:72:89:ab:
b1:2a:aa:a1:c7:a2:f6:e1:27:71:f2:5e:40:e3:5f:
b7:fb:a8:49:6e:45:94:32:0f:67:a5:db:43:3d:8c:
11:89:c6:b2:f5:59:7d:c7:c7:44:93:d0:23:e3:fa:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:6D:FB:6E:78:21:65:E8:45:FB:C9:F0:8F:3C:9D:F9:57:69:48
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/P05t-254IWXoRfvJ8I88nflXaUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.76.0/23
185.77.232.0/22
IPv6:
2a00:49e0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:09:ed:c0:84:12:06:07:9f:56:ca:11:00:75:8d:ee:f0:2b:
12:82:c9:32:2b:12:5b:c9:56:4f:ac:89:06:d6:3b:a3:6a:ae:
fc:59:ab:cb:8f:df:e7:9d:1c:59:4f:36:4e:42:77:fa:ab:7c:
00:15:55:bf:8e:84:df:fe:29:14:e4:d8:de:a9:e0:fe:0f:f2:
d2:e0:c1:72:c1:e2:f3:77:31:3a:8a:24:6a:4f:4c:5b:73:8b:
16:bb:9e:07:d3:5c:3c:b8:5b:7f:aa:fa:1e:0d:9e:55:82:ac:
f5:c4:a7:9b:2a:2c:3b:dd:6b:3c:eb:cf:a5:66:b5:91:9d:a2:
05:aa:cc:55:a1:ef:ff:84:c3:cc:c4:47:93:6c:9b:72:d3:be:
e5:79:90:b6:de:06:5c:43:8c:b7:d5:e3:91:03:9d:5f:a8:6c:
91:c3:4d:a9:3e:e8:a7:3e:71:ef:3d:07:05:70:3a:63:1f:2d:
69:7b:7d:32:fe:11:db:78:e5:2b:34:b6:64:04:7b:a4:24:ae:
44:32:88:b6:8e:54:d3:66:17:77:ac:64:a3:f2:70:97:27:66:
cf:f6:2c:99:e2:e0:dd:59:84:91:0c:54:93:ed:d6:41:63:6c:
54:bb:f9:a5:99:c3:ad:23:22:ed:3e:7d:7b:9a:68:2d:68:a1:
8c:75:fe:64
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQksm3iHAepZPrCkWTt5g+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4
OThlY2IwHhcNMjUwMTAyMDE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjRlNmRmYjZlNzgyMTY1ZTg0NWZiYzlmMDhmM2M5ZGY5NTc2OTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8GBLMsn7g77I6cmzQIPxvuZ5Vdl
EDpoT5f2cURP2nK5Yp2oXg5VEFPd9AHg8VcDd1eKR6udCufiT55DPTx2OpeeN6Y/
Eszl1eWNLtRsxv7me2f0tlpcAKBipM+VDFxPyK8EVN9+iRMje7Pfn7Pf+v0K7tj+
4P6WFQjbzQOdMcJ5CUDoj+kU/xEHWeVEdvoOVY/gjMhT57d8r753iOhCnReF6+wj
vwM0XdIF0mGUU6kCUe1NeUk6tv1wmowBJcrvwtic+vP2oRdyMgIklt1yiauxKqqh
x6L24Sdx8l5A41+3+6hJbkWUMg9npdtDPYwRicay9Vl9x8dEk9Aj4/og3wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFD9ObftueCFl6EX7yfCPPJ35V2lIMB8GA1UdIwQY
MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt
MzFkMjQ1ZjNiM2I4LzEvUDA1dC0yNTRJV1hvUmZ2SjhJODhuZmxYYVVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4
LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuRRMAwQC
uU3oMA0EAgACMAcDBQAqAEngMA0GCSqGSIb3DQEBCwUAA4IBAQCMCe3AhBIGB59W
yhEAdY3u8CsSgskyKxJbyVZPrIkG1jujaq78WavLj9/nnRxZTzZOQnf6q3wAFVW/
joTf/ikU5NjeqeD+D/LS4MFyweLzdzE6iiRqT0xbc4sWu54H01w8uFt/qvoeDZ5V
gqz1xKebKiw73Ws868+lZrWRnaIFqsxVoe//hMPMxEeTbJty077leZC23gZcQ4y3
1eORA51fqGyRw02pPuinPnHvPQcFcDpjHy1pe30y/hHbeOUrNLZkBHukJK5EMoi2
jlTTZhd3rGSj8nCXJ2bP9iyZ4uDdWYSRDFST7dZBY2xUu/mlmcOtIyLtPn17mmgt
aKGMdf5k
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:24 2025 by rpki-client