Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/eIL2Vhc_JBbf85Fao8Ds4yOOopc.roa
File: eIL2Vhc_JBbf85Fao8Ds4yOOopc.roa (raw, json)
Hash identifier: JFMGy1rBcVsHPJ9lq7mVFsLXOKO4qRE6OfGIsa0jBVE=
Subject key identifier: 78:82:F6:56:17:3F:24:16:DF:F3:91:5A:A3:C0:EC:E3:23:8E:A2:97
Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial: 0194214442C09ABD0677834C56840C1C77D1
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/eIL2Vhc_JBbf85Fao8Ds4yOOopc.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31293
IP address blocks: 185.118.241.0/24 maxlen: 24
185.118.242.0/24 maxlen: 24
185.118.243.0/24 maxlen: 24
194.150.116.0/22 maxlen: 22
194.150.116.0/24 maxlen: 24
194.150.117.0/24 maxlen: 24
194.150.118.0/24 maxlen: 24
2a06:9680::/29 maxlen: 48
2a06:9682::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:42:c0:9a:bd:06:77:83:4c:56:84:0c:1c:77:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7882f656173f2416dff3915aa3c0ece3238ea297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:46:28:37:e5:10:38:dc:50:33:27:80:35:
eb:51:78:46:32:9d:de:3a:e8:00:5f:80:8e:7c:7d:
14:f7:c7:8c:fc:86:5c:f7:e8:da:82:8e:13:f1:54:
5c:b4:ba:7f:5e:fb:6c:97:05:87:59:fe:07:57:55:
74:39:cf:36:22:33:04:1c:06:41:eb:bb:c2:a4:b6:
16:96:f1:bd:b9:58:6d:11:99:a3:d9:ed:48:21:22:
96:74:a2:f8:09:a0:b2:e3:df:6e:cd:42:1d:d6:7c:
5f:00:74:d2:9d:a6:f9:f4:57:cc:38:74:65:16:91:
1b:24:74:aa:7a:c6:80:6a:34:50:79:72:f3:7f:64:
26:73:cf:20:40:2e:a7:7c:63:e8:25:5c:76:d5:1b:
0f:7e:22:10:83:03:4d:ea:d3:05:2e:be:ac:4e:6c:
4e:21:bb:de:f7:db:73:09:80:e6:a7:a1:53:5b:f2:
9b:00:cd:d8:50:ba:0f:b1:68:fc:70:f3:0f:da:18:
74:8c:98:03:7e:cb:a3:a1:b0:88:3f:53:fe:bf:df:
8d:85:a5:aa:a2:ff:9c:58:03:70:44:1a:6b:c6:9d:
76:7f:77:24:fa:8c:b6:a5:9a:34:cf:07:00:41:31:
9d:7b:20:a8:1c:53:5b:b9:c2:4d:4b:44:f5:e0:be:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:82:F6:56:17:3F:24:16:DF:F3:91:5A:A3:C0:EC:E3:23:8E:A2:97
X509v3 Authority Key Identifier:
keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/eIL2Vhc_JBbf85Fao8Ds4yOOopc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.241.0-185.118.243.255
194.150.116.0/22
IPv6:
2a06:9680::/29
Signature Algorithm: sha256WithRSAEncryption
5e:72:01:0f:58:e2:bf:ce:d7:42:7e:2f:de:51:ca:ad:0b:39:
37:d3:18:60:52:d5:ce:e4:cd:da:57:b9:7c:7d:14:38:de:f9:
62:32:22:8a:cc:9a:15:ed:65:61:6a:3b:bf:b7:91:45:13:2a:
de:f3:78:e5:02:82:f2:77:22:c2:62:70:c6:f2:75:63:19:ba:
4c:09:0f:94:6a:85:4b:6c:eb:48:95:cc:25:f1:bd:eb:df:f6:
a3:a6:f0:db:8b:da:02:d0:82:06:a6:ce:5c:1f:59:93:c9:d8:
de:51:3b:b1:28:ca:eb:38:14:1e:7e:07:0b:09:91:ba:66:6b:
8e:28:d0:9b:15:c6:87:0c:ae:57:d0:ea:fc:db:19:bf:7c:d0:
64:aa:b2:ea:5a:64:c4:a0:43:19:a2:42:80:17:51:17:25:7e:
ba:6b:c4:ed:70:cc:06:32:56:d1:23:83:58:dc:a8:69:1c:fc:
b4:42:d8:31:75:b2:85:68:fd:14:89:d7:45:e9:e0:24:94:8b:
00:71:be:ab:02:83:3b:e5:dd:28:c6:0d:2b:52:c2:12:bc:37:
f1:e7:c8:5b:85:29:cf:9d:80:23:75:80:26:38:ba:03:df:78:
1c:62:ba:63:b8:f6:a0:67:31:70:35:f9:a7:83:27:0a:d5:2f:
07:54:55:f3
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQhRELAmr0Gd4NMVoQMHHfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi
OTdiYTYwHhcNMjUwMTAxMDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODgyZjY1NjE3M2YyNDE2ZGZmMzkxNWFhM2MwZWNlMzIzOGVhMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvBGKDflEDjcUDMngDXrUXhGMp3e
OugAX4COfH0U98eM/IZc9+jago4T8VRctLp/XvtslwWHWf4HV1V0Oc82IjMEHAZB
67vCpLYWlvG9uVhtEZmj2e1IISKWdKL4CaCy499uzUId1nxfAHTSnab59FfMOHRl
FpEbJHSqesaAajRQeXLzf2Qmc88gQC6nfGPoJVx21RsPfiIQgwNN6tMFLr6sTmxO
Ibve99tzCYDmp6FTW/KbAM3YULoPsWj8cPMP2hh0jJgDfsujobCIP1P+v9+NhaWq
ov+cWANwRBprxp12f3ck+oy2pZo0zwcAQTGdeyCoHFNbucJNS0T14L7opwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFHiC9lYXPyQW3/ORWqPA7OMjjqKXMB8GA1UdIwQY
MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt
MTIwMjVjNTRmNDg0LzEvZUlMMlZoY19KQmJmODVGYW84RHM0eU9Pb3BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0
LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAC5dvED
BAK5dvADBALClnQwDQQCAAIwBwMFAyoGloAwDQYJKoZIhvcNAQELBQADggEBAF5y
AQ9Y4r/O10J+L95Ryq0LOTfTGGBS1c7kzdpXuXx9FDje+WIyIorMmhXtZWFqO7+3
kUUTKt7zeOUCgvJ3IsJicMbydWMZukwJD5RqhUts60iVzCXxvevf9qOm8NuL2gLQ
ggamzlwfWZPJ2N5RO7Eoyus4FB5+BwsJkbpma44o0JsVxocMrlfQ6vzbGb980GSq
supaZMSgQxmiQoAXURclfrprxO1wzAYyVtEjg1jcqGkc/LRC2DF1soVo/RSJ10Xp
4CSUiwBxvqsCgzvl3SjGDStSwhK8N/HnyFuFKc+dgCN1gCY4ugPfeBxiumO49qBn
MXA1+aeDJwrVLwdUVfM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:26 2025 by rpki-client