Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/ahMDGxNyecqlZxcgrlYmGrrq9pU.roa
File: ahMDGxNyecqlZxcgrlYmGrrq9pU.roa (raw, json)
Hash identifier: h30GXSYF139afkSTNjFaEpPAUr9XbrAvQRMhITWnZY8=
Subject key identifier: 6A:13:03:1B:13:72:79:CA:A5:67:17:20:AE:56:26:1A:BA:EA:F6:95
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 0194221FE6A06A4799C765EA9C3D05777DBA
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/ahMDGxNyecqlZxcgrlYmGrrq9pU.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44108
IP address blocks: 185.179.148.0/24 maxlen: 24
185.179.149.0/24 maxlen: 24
185.231.164.0/22 maxlen: 22
185.231.164.0/23 maxlen: 23
185.231.164.0/24 maxlen: 24
185.231.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e6:a0:6a:47:99:c7:65:ea:9c:3d:05:77:7d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a13031b137279caa5671720ae56261abaeaf695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:e5:f8:16:0b:a3:51:76:3a:e4:35:da:59:
d2:a2:f3:d7:44:77:ac:99:97:e8:6f:7b:52:97:d6:
7f:17:44:0f:7e:3c:f2:40:f8:03:bc:be:1e:82:e8:
9d:74:56:22:2f:e3:5b:07:a3:b8:15:cb:5d:f0:76:
da:4c:3f:de:88:31:13:d8:7f:eb:24:cc:4b:1a:52:
9c:4c:d4:03:d2:8b:e9:89:09:1f:4d:6b:e0:6a:65:
f2:61:4e:50:3d:e6:fc:d4:99:a6:1d:83:25:1f:35:
1f:48:56:5f:3a:f6:6b:25:bc:0d:18:b3:cb:7f:8d:
4b:8b:31:ae:78:31:3c:dd:77:a9:c4:c2:83:ff:ee:
31:23:57:cc:51:8e:10:ad:d4:93:30:ca:f3:cf:de:
a3:b0:df:36:f9:c5:6b:d0:48:47:2a:32:18:81:98:
a0:0f:34:0e:dc:10:18:39:3c:2d:fa:fb:f0:22:f5:
c3:04:aa:27:ba:d9:e5:d7:cd:ad:44:f4:a3:67:61:
83:53:a7:5f:73:4e:77:88:73:d6:53:45:2f:f3:a7:
42:ae:7f:f2:5f:31:64:cd:50:c6:3c:b4:0a:18:b9:
47:01:b1:8a:98:7d:70:a3:49:94:dd:4e:2f:2a:dc:
79:79:8b:aa:a5:78:09:06:34:79:6b:e8:e7:ef:e7:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:13:03:1B:13:72:79:CA:A5:67:17:20:AE:56:26:1A:BA:EA:F6:95
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/ahMDGxNyecqlZxcgrlYmGrrq9pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.148.0/23
185.231.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:d4:18:5d:1b:db:89:9b:8e:0a:30:40:7c:dc:04:c3:fb:43:
72:6b:26:cf:2e:2d:62:0a:ff:e2:43:8f:a0:94:fd:e0:eb:46:
52:5b:ef:5f:ad:16:a9:23:56:0d:0b:6b:2d:09:0f:a0:fc:cf:
5a:93:a7:13:5c:22:28:3f:2d:c2:86:1d:63:9d:9e:1e:b4:c8:
50:67:2f:82:4f:67:5a:26:f0:2a:a2:db:39:bc:c0:66:4e:76:
f5:c0:5e:e4:3d:76:41:ae:91:b2:7c:50:d0:57:e7:cc:9a:12:
e4:4b:f7:ad:16:21:4e:d0:9a:c3:7f:2e:14:77:bd:b6:60:80:
e7:a8:a2:4c:f0:a6:f2:37:38:1a:0c:e4:39:c8:f0:92:b8:9f:
1d:c7:85:d4:d9:19:eb:87:5c:77:df:cc:fd:08:47:44:24:1f:
3e:08:26:03:c7:96:44:2a:cc:ed:a2:70:21:ac:0f:6e:02:05:
4e:d3:ef:44:d0:a5:12:3b:26:ab:80:70:6c:e1:ff:55:74:d7:
58:de:88:43:2c:32:f1:dd:ea:e2:e5:83:10:08:e7:a7:83:77:
71:c1:bf:e1:69:83:65:97:b6:52:5d:b8:b0:38:74:73:19:59:
c0:ab:1c:7c:4c:a5:f5:90:92:cd:a7:09:95:37:46:76:43:4d:
d4:8e:a6:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH+agakeZx2XqnD0Fd326MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTIwY2VjYmEyNTFjZDM3Y2RmM2M0ZDVhYjAzNjI1NTIy
YmJhYWMwHhcNMjUwMTAxMTM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTEzMDMxYjEzNzI3OWNhYTU2NzE3MjBhZTU2MjYxYWJhZWFmNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHXl+BYLo1F2OuQ12lnSovPXRHes
mZfob3tSl9Z/F0QPfjzyQPgDvL4eguiddFYiL+NbB6O4Fctd8HbaTD/eiDET2H/r
JMxLGlKcTNQD0ovpiQkfTWvgamXyYU5QPeb81JmmHYMlHzUfSFZfOvZrJbwNGLPL
f41LizGueDE83XepxMKD/+4xI1fMUY4QrdSTMMrzz96jsN82+cVr0EhHKjIYgZig
DzQO3BAYOTwt+vvwIvXDBKonutnl182tRPSjZ2GDU6dfc053iHPWU0Uv86dCrn/y
XzFkzVDGPLQKGLlHAbGKmH1wo0mU3U4vKtx5eYuqpXgJBjR5a+jn7+eESwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGoTAxsTcnnKpWcXIK5WJhq66vaVMB8GA1UdIwQY
MBaAFMBSDOy6JRzTfN88TVqwNiVSK7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYt
NzQxOGI5MmFhMjA5LzEvYWhNREd4TnllY3FsWnhjZ3JsWW1HcnJxOXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYtNzQxOGI5MmFhMjA5
LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBubOUAwQC
ueekMA0GCSqGSIb3DQEBCwUAA4IBAQAu1BhdG9uJm44KMEB83ATD+0NyaybPLi1i
Cv/iQ4+glP3g60ZSW+9frRapI1YNC2stCQ+g/M9ak6cTXCIoPy3Chh1jnZ4etMhQ
Zy+CT2daJvAqots5vMBmTnb1wF7kPXZBrpGyfFDQV+fMmhLkS/etFiFO0JrDfy4U
d722YIDnqKJM8KbyNzgaDOQ5yPCSuJ8dx4XU2Rnrh1x338z9CEdEJB8+CCYDx5ZE
KsztonAhrA9uAgVO0+9E0KUSOyargHBs4f9VdNdY3ohDLDLx3eri5YMQCOeng3dx
wb/haYNll7ZSXbiwOHRzGVnAqxx8TKX1kJLNpwmVN0Z2Q03UjqZH
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:38 2025 by rpki-client