Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/h56nNbes2ivx0npJDLsxR_z62Zo.roa
File: h56nNbes2ivx0npJDLsxR_z62Zo.roa (raw, json)
Hash identifier: wxs3EMyvsXJWyJHCo0ZYi2lqFjVWRDaFII6/r1MtHp4=
Subject key identifier: 87:9E:A7:35:B7:AC:DA:2B:F1:D2:7A:49:0C:BB:31:47:FC:FA:D9:9A
Certificate issuer: /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial: 0194258E9F8C9EE0FAE632D49F6C6A6425F3
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/h56nNbes2ivx0npJDLsxR_z62Zo.roa
Signing time: Thu 02 Jan 2025 05:48:11 +0000
ROA not before: Thu 02 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12521
IP address blocks: 91.195.72.0/23 maxlen: 24
91.195.102.0/23 maxlen: 24
212.85.32.0/20 maxlen: 24
212.85.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:9f:8c:9e:e0:fa:e6:32:d4:9f:6c:6a:64:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Validity
Not Before: Jan 2 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=879ea735b7acda2bf1d27a490cbb3147fcfad99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:86:14:99:00:c6:09:10:a8:5e:29:77:40:
67:67:26:83:a5:a3:16:83:e7:7a:5e:a7:f0:21:fa:
e5:66:6b:30:d8:5f:ba:63:0c:50:28:bf:68:c8:35:
e1:ef:ef:02:6d:ed:26:fb:10:b9:d2:56:5b:99:ba:
78:5c:f1:32:c5:d6:a7:fa:26:52:bb:5f:e7:7a:c1:
c0:1a:ef:3b:fe:99:a4:b9:d6:16:22:5a:6f:e3:1c:
fd:ee:dd:57:b7:f1:c5:0f:8c:fe:6b:4c:b2:66:4b:
42:49:98:83:63:6e:1b:89:ce:22:89:be:d0:0c:58:
b0:89:98:ad:ac:7d:58:01:d1:cd:54:82:44:61:79:
43:13:a7:f5:c5:53:bb:6a:a0:d0:36:eb:07:d8:c3:
4f:6a:cd:13:ea:e1:53:3e:71:39:88:d8:3c:62:4a:
96:c1:af:27:9f:e1:7c:2e:e0:bb:ed:53:2c:cb:16:
66:d8:3c:0f:27:0a:39:9f:55:55:f8:d4:2d:2f:58:
b8:af:5a:41:34:79:b5:2d:b4:4a:0a:af:52:f9:37:
2e:ed:78:d8:96:0f:e9:bf:56:c4:4b:1b:e7:b0:ec:
4d:38:eb:3d:b8:18:00:2a:8a:cd:d9:ec:f0:94:8b:
00:1e:5b:0b:63:9c:df:2f:79:da:62:1f:27:93:d2:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9E:A7:35:B7:AC:DA:2B:F1:D2:7A:49:0C:BB:31:47:FC:FA:D9:9A
X509v3 Authority Key Identifier:
keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/h56nNbes2ivx0npJDLsxR_z62Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.72.0/23
91.195.102.0/23
212.85.32.0-212.85.55.255
Signature Algorithm: sha256WithRSAEncryption
09:10:d3:cd:7e:c2:ed:a9:74:c3:ea:0a:3b:68:14:14:31:e8:
c5:c8:e3:1b:07:95:39:3d:64:01:bb:df:ff:46:f9:fe:9a:c6:
a2:87:7c:67:83:ca:71:2f:51:9a:52:d1:36:7c:d1:7f:07:9d:
83:df:49:10:ee:8c:7a:5e:a0:2f:2c:05:e5:2b:7d:6e:08:36:
f7:01:5e:83:64:e1:15:9b:52:6f:52:9e:ce:f9:1b:d8:a6:1d:
e5:0b:90:c8:c4:46:37:39:ff:2b:03:4e:1e:bd:7a:4b:bc:a2:
c0:87:59:cb:71:c6:ba:a4:96:93:af:d4:07:d1:15:13:d0:8d:
8d:1f:b9:7a:e2:f5:dc:33:0e:22:d0:0b:4a:f3:da:8a:1d:53:
8d:0f:75:3a:aa:9f:26:99:a3:9f:3d:b6:d0:f9:ee:db:1d:d7:
48:e2:6a:46:a4:5b:0a:f7:b5:40:4e:bf:20:f5:91:d9:2d:39:
1c:32:84:69:b0:db:4f:00:72:26:46:5f:66:93:7b:99:95:dc:
5b:02:4b:03:df:4e:ba:1d:a8:8c:73:5f:2b:53:07:a5:f7:e7:
f7:33:6b:e1:d2:89:59:95:21:62:07:8b:5c:3d:75:4c:8d:ed:
2b:92:69:53:68:a1:6a:a4:e6:52:13:fb:6b:30:e8:c1:54:80:
bd:da:37:8a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQljp+MnuD65jLUn2xqZCXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NGRlMDkyZGMyZTRkNzJhYTdlNmE5NjBkMjFhZDRlNzk3
NThiM2MwHhcNMjUwMTAyMDU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzllYTczNWI3YWNkYTJiZjFkMjdhNDkwY2JiMzE0N2ZjZmFkOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYGGFJkAxgkQqF4pd0BnZyaDpaMW
g+d6XqfwIfrlZmsw2F+6YwxQKL9oyDXh7+8Cbe0m+xC50lZbmbp4XPEyxdan+iZS
u1/nesHAGu87/pmkudYWIlpv4xz97t1Xt/HFD4z+a0yyZktCSZiDY24bic4iib7Q
DFiwiZitrH1YAdHNVIJEYXlDE6f1xVO7aqDQNusH2MNPas0T6uFTPnE5iNg8YkqW
wa8nn+F8LuC77VMsyxZm2DwPJwo5n1VV+NQtL1i4r1pBNHm1LbRKCq9S+Tcu7XjY
lg/pv1bESxvnsOxNOOs9uBgAKorN2ezwlIsAHlsLY5zfL3naYh8nk9ITowIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIeepzW3rNor8dJ6SQy7MUf8+tmaMB8GA1UdIwQY
MBaAFKdN4JLcLk1yqn5qlg0hrU55dYs8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEt
ZjRhMjc1ZDZiNTg0LzEvaDU2bk5iZXMyaXZ4MG5wSkRMc3hSX3o2MlpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80Njk5NzQtMTE4NC00ODI0LTkxODEtZjRhMjc1ZDZiNTg0
LzEvcDAzZ2t0d3VUWEtxZm1xV0RTR3RUbmwxaXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBW8NIAwQB
W8NmMAwDBAXUVSADBAPUVTAwDQYJKoZIhvcNAQELBQADggEBAAkQ081+wu2pdMPq
CjtoFBQx6MXI4xsHlTk9ZAG73/9G+f6axqKHfGeDynEvUZpS0TZ80X8HnYPfSRDu
jHpeoC8sBeUrfW4INvcBXoNk4RWbUm9Sns75G9imHeULkMjERjc5/ysDTh69eku8
osCHWctxxrqklpOv1AfRFRPQjY0fuXri9dwzDiLQC0rz2oodU40PdTqqnyaZo589
ttD57tsd10jiakakWwr3tUBOvyD1kdktORwyhGmw208AciZGX2aTe5mV3FsCSwPf
TrodqIxzXytTB6X35/cza+HSiVmVIWIHi1w9dUyN7SuSaVNooWqk5lIT+2sw6MFU
gL3aN4o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:40 2025 by rpki-client