Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa
File: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (raw, json)
Hash identifier: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=
Subject key identifier: BF:C7:37:5B:0F:C4:8A:18:BE:2E:FC:83:39:5B:D7:04:9C:28:F4:5F
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019421B25CE4AEE5091881AA10A78A4B1C3C
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59649
IP address blocks: 185.72.16.0/24 maxlen: 24
2a03:3da0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5c:e4:ae:e5:09:18:81:aa:10:a7:8a:4b:1c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfc7375b0fc48a18be2efc83395bd7049c28f45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:fa:60:b6:43:61:32:d4:53:4e:0c:fc:20:
2b:30:4b:38:0b:6b:a3:5e:24:09:86:ee:04:45:9c:
5e:8d:40:d3:49:8c:55:c4:53:ae:d5:e8:8a:42:bc:
65:3b:bc:20:ee:cf:43:ef:d9:d1:4f:8a:72:db:16:
ea:e2:4f:34:26:87:78:c4:da:a2:ad:60:7e:d9:e8:
6d:9d:c6:ba:4e:0e:d4:d6:9f:68:9a:ba:c4:1c:ed:
51:5e:8f:8f:bb:a2:c8:1e:27:b9:9f:9a:84:0a:78:
2c:a9:c3:cc:cc:94:51:03:0c:a4:2f:85:41:c8:33:
a2:12:b8:73:5f:c2:9b:f1:28:32:a9:f6:c3:82:68:
d6:56:22:5b:bb:a5:89:cf:dc:87:02:3e:13:f3:95:
11:e5:c8:45:c8:0f:9e:68:2a:52:6f:2b:ba:b9:ac:
3a:14:cb:d7:70:6a:75:4f:dd:c7:b1:e4:88:dd:2d:
8a:ee:e4:07:f8:cc:2c:8c:3f:a3:85:2a:23:09:7f:
9b:8f:13:db:36:d0:48:bb:17:76:77:98:0e:af:87:
b9:42:6c:e6:e0:3e:5c:1c:83:b4:4f:cf:77:11:02:
c3:da:b9:9d:91:b7:2e:32:8f:ee:0d:1a:ce:e4:9a:
e4:8a:65:bc:ad:0f:eb:d1:aa:34:65:a6:94:2f:a5:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C7:37:5B:0F:C4:8A:18:BE:2E:FC:83:39:5B:D7:04:9C:28:F4:5F
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.16.0/24
IPv6:
2a03:3da0::/48
Signature Algorithm: sha256WithRSAEncryption
50:a5:0b:9f:40:26:c2:61:34:4f:16:67:6e:37:5c:72:f0:53:
a8:9d:ba:bb:78:04:10:58:af:1e:fd:e6:bc:67:2c:be:2a:4f:
7c:e8:8b:18:34:e2:32:5f:72:b9:10:06:e9:a2:28:ae:60:a2:
09:85:bc:db:31:a8:a4:e4:23:9c:cc:73:a3:26:df:23:06:81:
c9:5a:8b:c2:8e:1b:f2:f0:f9:db:b9:8d:d3:f5:92:7d:8e:75:
9c:eb:39:44:bc:17:b3:94:98:43:2b:09:8a:79:c7:4d:57:6c:
d8:33:a1:28:de:eb:22:c2:56:5f:dd:0e:ec:2a:41:8d:d3:89:
eb:1a:49:2b:7f:46:f2:cb:a7:40:69:79:fd:df:83:b6:b8:0e:
ba:f4:bf:de:a9:ea:00:b5:69:70:ef:78:b2:2b:cd:6a:d7:00:
cf:f9:95:61:d9:c1:fb:64:4c:58:e6:92:8b:66:5d:ff:f4:35:
60:86:28:0d:12:9d:01:13:b2:26:2e:10:57:f5:c7:be:60:96:
89:f1:54:f7:76:9e:64:be:b3:66:53:08:ed:61:96:70:66:98:
66:cb:15:bc:67:d2:25:f7:a9:de:5e:d3:af:1b:f9:af:a7:e4:
8c:64:9e:c2:a8:58:d3:77:c6:e0:b1:51:08:85:cb:64:ad:17:
77:6f:72:5e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhslzkruUJGIGqEKeKSxw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFkYTMyNzYyYTZmOWMxMjZkNjNiYTcwNWQ2MmMwNTBi
ODQ4NGUwHhcNMjUwMTAxMTE0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmM3Mzc1YjBmYzQ4YTE4YmUyZWZjODMzOTViZDcwNDljMjhmNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lr6YLZDYTLUU04M/CArMEs4C2uj
XiQJhu4ERZxejUDTSYxVxFOu1eiKQrxlO7wg7s9D79nRT4py2xbq4k80Jod4xNqi
rWB+2ehtnca6Tg7U1p9omrrEHO1RXo+Pu6LIHie5n5qECngsqcPMzJRRAwykL4VB
yDOiErhzX8Kb8SgyqfbDgmjWViJbu6WJz9yHAj4T85UR5chFyA+eaCpSbyu6uaw6
FMvXcGp1T93HseSI3S2K7uQH+MwsjD+jhSojCX+bjxPbNtBIuxd2d5gOr4e5Qmzm
4D5cHIO0T893EQLD2rmdkbcuMo/uDRrO5JrkimW8rQ/r0ao0ZaaUL6XD2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL/HN1sPxIoYvi78gzlb1wScKPRfMB8GA1UdIwQY
MBaAFN5R2jJ2Km+cEm1junBdYsBQuEhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTkt
Y2RmYTYwMTIyNjkwLzEvdjhjM1d3X0VpaGktTHZ5RE9WdlhCSndvOUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTktY2RmYTYwMTIyNjkw
LzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuUgQMA8E
AgACMAkDBwAqAz2gAAAwDQYJKoZIhvcNAQELBQADggEBAFClC59AJsJhNE8WZ243
XHLwU6idurt4BBBYrx795rxnLL4qT3zoixg04jJfcrkQBumiKK5gogmFvNsxqKTk
I5zMc6Mm3yMGgclai8KOG/Lw+du5jdP1kn2OdZzrOUS8F7OUmEMrCYp5x01XbNgz
oSje6yLCVl/dDuwqQY3TiesaSSt/RvLLp0Bpef3fg7a4Drr0v96p6gC1aXDveLIr
zWrXAM/5lWHZwftkTFjmkotmXf/0NWCGKA0SnQETsiYuEFf1x75glonxVPd2nmS+
s2ZTCO1hlnBmmGbLFbxn0iX3qd5e068b+a+n5IxknsKoWNN3xuCxUQiFy2StF3dv
cl4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:12 2025 by rpki-client