Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/E4m1CzQ-EuF3Hc5mHM5f6mPC5eQ.roa
File: E4m1CzQ-EuF3Hc5mHM5f6mPC5eQ.roa (raw, json)
Hash identifier: gowTRbLyNdf/42ayzy0sQQZU9KBkEVzXjFvCn/3IDtc=
Subject key identifier: 13:89:B5:0B:34:3E:12:E1:77:1D:CE:66:1C:CE:5F:EA:63:C2:E5:E4
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 0194B9A7731F33FB542714B67AEB5C28390C
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/E4m1CzQ-EuF3Hc5mHM5f6mPC5eQ.roa
Signing time: Thu 30 Jan 2025 23:59:06 +0000
ROA not before: Thu 30 Jan 2025 23:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59771
IP address blocks: 185.205.24.0/22 maxlen: 24
185.205.24.0/24 maxlen: 24
185.205.25.0/24 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
2001:678:39c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:a7:73:1f:33:fb:54:27:14:b6:7a:eb:5c:28:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: Jan 30 23:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1389b50b343e12e1771dce661cce5fea63c2e5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:17:ea:34:6b:a2:45:f4:07:03:f9:13:e0:
56:d1:02:c1:3d:61:2e:19:e5:ca:47:52:87:93:e4:
87:23:d0:48:bd:e2:bd:08:cc:94:f0:a9:bb:56:8e:
f2:7c:48:8e:0c:fc:48:df:d4:2c:1b:45:ec:a3:5f:
2d:1e:0d:1a:d9:63:85:6b:c2:5a:18:81:ad:f1:e6:
ba:56:1a:19:97:9b:78:45:af:19:47:d8:61:37:9a:
c9:3b:2a:d3:a0:1e:a1:96:fb:ab:5e:ab:7f:78:cc:
47:d1:06:5e:b8:34:d1:aa:54:8a:8a:67:89:20:f1:
78:53:f3:3a:0a:34:ba:04:7b:68:2d:08:86:74:af:
6e:e7:d6:18:e7:fa:de:54:e9:e6:9b:a1:01:c1:68:
93:a9:5b:05:78:bc:2b:dd:0b:eb:e6:ea:8c:8c:53:
c5:95:88:83:ca:35:89:87:c1:d1:a9:f2:fa:05:2f:
e1:3a:42:59:62:db:be:47:63:13:f0:1d:63:8d:1f:
b4:5e:b6:9f:17:56:5c:9c:ad:e0:14:76:1e:f0:41:
14:8d:11:59:d1:f0:38:46:71:a8:a6:50:79:1a:ba:
53:b4:71:70:de:18:21:2c:35:10:46:3f:58:ed:a4:
38:98:a0:74:94:1e:f0:57:92:a9:d5:b0:11:10:bd:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:89:B5:0B:34:3E:12:E1:77:1D:CE:66:1C:CE:5F:EA:63:C2:E5:E4
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/E4m1CzQ-EuF3Hc5mHM5f6mPC5eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
193.105.119.0/24
195.85.224.0/24
IPv6:
2001:678:39c::/48
Signature Algorithm: sha256WithRSAEncryption
b6:04:1f:cb:c7:1b:5f:99:c4:5a:c4:0e:d0:f5:64:c8:30:60:
89:4a:75:46:35:51:4e:c4:85:f0:b2:b4:09:d2:29:3c:53:56:
e5:af:1c:e5:23:f0:40:5a:b9:e2:82:6a:bc:5c:d7:ac:98:54:
b0:a0:3a:b0:1f:76:25:e4:24:a7:f4:59:f8:f1:84:fe:12:29:
ed:82:69:43:59:70:91:76:3b:68:36:8f:02:1f:4f:53:fc:86:
83:fe:8d:45:e4:11:4a:30:0b:cd:08:24:99:ea:86:73:59:b0:
70:f1:3d:77:f2:24:16:61:be:a6:36:8e:cc:b9:6e:2b:a9:50:
8e:1d:59:90:35:33:4d:2f:ad:d0:bf:e2:90:cf:c8:cf:83:9f:
37:8d:ee:1b:ee:c8:a0:d2:07:98:94:f5:ae:f8:ce:38:f4:6b:
12:2d:e9:c0:01:03:2e:bb:a5:45:66:e8:3f:6f:f9:22:28:21:
2a:87:2a:ac:14:a1:f7:24:e7:bc:cb:84:d2:66:9f:53:92:86:
4c:fa:4b:d3:70:41:8d:a7:b6:bd:50:59:ce:86:f6:c1:71:3f:
64:64:bd:71:c9:49:b2:a5:25:d4:c2:47:1e:59:2d:37:29:e0:
87:27:44:f4:a2:6d:48:0d:31:15:5f:de:ca:6c:a1:64:2d:dc:
c0:84:bb:c9
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZS5p3MfM/tUJxS2eutcKDkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5
NDIyMGUwHhcNMjUwMTMwMjM1OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzg5YjUwYjM0M2UxMmUxNzcxZGNlNjYxY2NlNWZlYTYzYzJlNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsEX6jRrokX0BwP5E+BW0QLBPWEu
GeXKR1KHk+SHI9BIveK9CMyU8Km7Vo7yfEiODPxI39QsG0Xso18tHg0a2WOFa8Ja
GIGt8ea6VhoZl5t4Ra8ZR9hhN5rJOyrToB6hlvurXqt/eMxH0QZeuDTRqlSKimeJ
IPF4U/M6CjS6BHtoLQiGdK9u59YY5/reVOnmm6EBwWiTqVsFeLwr3Qvr5uqMjFPF
lYiDyjWJh8HRqfL6BS/hOkJZYtu+R2MT8B1jjR+0XrafF1ZcnK3gFHYe8EEUjRFZ
0fA4RnGoplB5GrpTtHFw3hghLDUQRj9Y7aQ4mKB0lB7wV5Kp1bAREL1NSwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFBOJtQs0PhLhdx3OZhzOX+pjwuXkMB8GA1UdIwQY
MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt
NDE4YWY5MGFjYjhhLzEvRTRtMUN6US1FdUYzSGM1bUhNNWY2bVBDNWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh
LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCuc0YAwQA
wWl3AwQAw1XgMA8EAgACMAkDBwAgAQZ4A5wwDQYJKoZIhvcNAQELBQADggEBALYE
H8vHG1+ZxFrEDtD1ZMgwYIlKdUY1UU7EhfCytAnSKTxTVuWvHOUj8EBaueKCarxc
16yYVLCgOrAfdiXkJKf0WfjxhP4SKe2CaUNZcJF2O2g2jwIfT1P8hoP+jUXkEUow
C80IJJnqhnNZsHDxPXfyJBZhvqY2jsy5biupUI4dWZA1M00vrdC/4pDPyM+DnzeN
7hvuyKDSB5iU9a74zjj0axIt6cABAy67pUVm6D9v+SIoISqHKqwUofck57zLhNJm
n1OShkz6S9NwQY2ntr1QWc6G9sFxP2RkvXHJSbKlJdTCRx5ZLTcp4IcnRPSibUgN
MRVf3spsoWQt3MCEu8k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:42 2025 by rpki-client