Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/9BZlV5u49Gak3QK5oEuLPOBSnn0.roa
File: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (raw, json)
Hash identifier: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=
Subject key identifier: F4:16:65:57:9B:B8:F4:66:A4:DD:02:B9:A0:4B:8B:3C:E0:52:9E:7D
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0194228D6350BF1DD73A01D142BDCDE82DBB
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/9BZlV5u49Gak3QK5oEuLPOBSnn0.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203443
IP address blocks: 185.126.164.0/23 maxlen: 23
185.126.166.0/23 maxlen: 23
185.127.68.0/23 maxlen: 23
185.127.70.0/23 maxlen: 23
185.127.76.0/23 maxlen: 23
185.127.78.0/23 maxlen: 23
185.132.12.0/23 maxlen: 23
185.132.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:63:50:bf:1d:d7:3a:01:d1:42:bd:cd:e8:2d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f41665579bb8f466a4dd02b9a04b8b3ce0529e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:74:cc:e8:b8:f0:e2:e4:48:d6:2b:a4:e1:
e1:f9:10:8a:0a:ce:a7:6f:ed:d8:8f:e3:81:2b:c4:
54:ea:67:2e:a6:24:98:bc:63:14:fe:9a:55:e2:6a:
5f:45:ad:20:e3:d4:b2:e1:ae:2c:fc:9d:49:6f:ec:
09:7f:09:0b:e3:33:ef:ce:dc:f2:81:b3:de:93:72:
25:cb:ba:5f:ed:a7:68:82:96:58:b3:c5:fe:7a:c7:
66:88:b7:97:28:85:c4:a8:4a:bc:b2:75:d8:fd:a9:
8c:f6:2c:6c:e3:bf:57:80:42:b3:60:8d:96:82:e5:
9f:df:8b:d0:69:72:7b:e7:08:a6:c4:15:7a:c1:40:
24:21:8e:70:29:71:3c:b6:7e:2e:ef:e1:a8:51:49:
5f:f9:c6:04:f5:df:f7:d8:9d:f9:b4:93:fd:0a:0c:
03:64:95:34:eb:00:f2:3f:6a:28:e2:1c:7a:7d:d9:
ee:ac:ba:90:ff:fe:2f:09:e4:88:43:4a:b3:e3:d0:
6b:33:44:4a:5c:11:ba:10:4d:ae:48:ef:73:50:1e:
26:82:f6:77:47:df:e9:ee:09:5c:e1:c5:5a:42:ff:
9e:d1:a2:25:f3:a6:3e:6a:3d:0e:90:d0:f1:ef:77:
e5:6d:d5:2f:93:13:ed:04:65:a1:74:6d:86:37:ee:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:65:57:9B:B8:F4:66:A4:DD:02:B9:A0:4B:8B:3C:E0:52:9E:7D
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/9BZlV5u49Gak3QK5oEuLPOBSnn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.164.0/22
185.127.68.0/22
185.127.76.0/22
185.132.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:6b:47:d8:11:06:bc:02:2a:8f:f9:85:90:f8:4a:c4:27:41:
ad:35:db:28:fd:d1:31:69:8f:86:a8:a1:76:3c:7e:82:a0:f8:
b2:09:c4:d8:c6:f6:93:cb:e8:54:ea:90:14:a4:a0:37:ba:e1:
23:44:81:65:de:6f:bc:2e:c8:c4:07:36:ca:12:88:70:0e:42:
67:7f:58:82:11:92:57:a2:0c:2f:5a:22:a3:4b:32:93:9f:bb:
3e:67:a8:73:d5:46:58:c3:fb:b0:af:b3:f6:ff:87:03:65:46:
a0:65:2c:fd:c6:9a:f7:56:f3:b7:7a:30:76:37:0b:b7:70:1c:
db:cc:fa:c6:73:58:69:33:7e:f7:6f:fd:3c:54:70:fb:b3:14:
2b:a6:6b:d1:ca:b6:77:e1:40:bb:fd:0d:c4:b8:ba:d0:11:e9:
bd:75:cc:08:5d:6a:44:58:cd:45:df:1c:f7:d2:80:9f:2e:c1:
13:22:04:30:2b:2f:f0:ea:87:e9:79:8c:18:ef:97:eb:d7:07:
4c:eb:66:b1:e8:f4:a5:7f:4a:c7:dd:d8:96:6e:01:33:30:59:
64:e6:35:d9:e1:ef:37:20:6e:1d:c8:e4:a8:f9:3e:50:17:b6:
10:92:11:1e:d5:b3:da:27:3d:8b:a6:dd:48:f3:f2:b2:f7:37:
3f:19:07:b5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQijWNQvx3XOgHRQr3N6C27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh
YTg1MjIwHhcNMjUwMTAxMTU0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDE2NjU1NzliYjhmNDY2YTRkZDAyYjlhMDRiOGIzY2UwNTI5ZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu150zOi48OLkSNYrpOHh+RCKCs6n
b+3Yj+OBK8RU6mcupiSYvGMU/ppV4mpfRa0g49Sy4a4s/J1Jb+wJfwkL4zPvztzy
gbPek3Ily7pf7adogpZYs8X+esdmiLeXKIXEqEq8snXY/amM9ixs479XgEKzYI2W
guWf34vQaXJ75wimxBV6wUAkIY5wKXE8tn4u7+GoUUlf+cYE9d/32J35tJP9CgwD
ZJU06wDyP2oo4hx6fdnurLqQ//4vCeSIQ0qz49BrM0RKXBG6EE2uSO9zUB4mgvZ3
R9/p7glc4cVaQv+e0aIl86Y+aj0OkNDx73flbdUvkxPtBGWhdG2GN+5kCQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPQWZVebuPRmpN0CuaBLizzgUp59MB8GA1UdIwQY
MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt
NzBhMWFmNTFkZmJlLzEvOUJabFY1dTQ5R2FrM1FLNW9FdUxQT0JTbm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl
LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuX6kAwQC
uX9EAwQCuX9MAwQCuYQMMA0GCSqGSIb3DQEBCwUAA4IBAQAqa0fYEQa8AiqP+YWQ
+ErEJ0GtNdso/dExaY+GqKF2PH6CoPiyCcTYxvaTy+hU6pAUpKA3uuEjRIFl3m+8
LsjEBzbKEohwDkJnf1iCEZJXogwvWiKjSzKTn7s+Z6hz1UZYw/uwr7P2/4cDZUag
ZSz9xpr3VvO3ejB2Nwu3cBzbzPrGc1hpM373b/08VHD7sxQrpmvRyrZ34UC7/Q3E
uLrQEem9dcwIXWpEWM1F3xz30oCfLsETIgQwKy/w6ofpeYwY75fr1wdM62ax6PSl
f0rH3diWbgEzMFlk5jXZ4e83IG4dyOSo+T5QF7YQkhEe1bPaJz2Lpt1I8/Ky9zc/
GQe1
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:46 2025 by rpki-client