Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/OFHbm1CnBcjt16kKiNnWON1nehg.roa
File: OFHbm1CnBcjt16kKiNnWON1nehg.roa (raw, json)
Hash identifier: F95te0vG+4YA9BqcJQwPT2GKCPzPsVCZGpkUfvkm9rU=
Subject key identifier: 38:51:DB:9B:50:A7:05:C8:ED:D7:A9:0A:88:D9:D6:38:DD:67:7A:18
Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial: 019426513D5448DF82BE0DB0CB5A25F74C10
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/OFHbm1CnBcjt16kKiNnWON1nehg.roa
Signing time: Thu 02 Jan 2025 09:20:45 +0000
ROA not before: Thu 02 Jan 2025 09:20:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21215
IP address blocks: 94.127.0.0/21 maxlen: 24
176.109.136.0/21 maxlen: 24
185.13.8.0/22 maxlen: 24
185.18.12.0/22 maxlen: 24
213.244.208.0/20 maxlen: 24
217.26.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:51:3d:54:48:df:82:be:0d:b0:cb:5a:25:f7:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
Validity
Not Before: Jan 2 09:20:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3851db9b50a705c8edd7a90a88d9d638dd677a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:90:f3:9b:e6:ff:ee:a8:df:41:2b:30:82:
ae:39:0b:dd:66:96:e9:61:86:e8:7d:12:a3:9d:dd:
8e:89:09:08:2a:27:42:89:b6:99:18:eb:f5:9d:8d:
80:55:a2:fd:e0:95:3b:39:bb:c8:a7:15:bc:74:c0:
4e:d9:47:6b:d1:50:a5:ee:94:8f:52:8c:4d:12:3e:
03:90:6e:6d:61:28:df:7f:89:c6:7c:df:f2:85:2a:
e3:42:cb:83:47:ca:42:d1:dd:5c:26:f5:77:7d:51:
1d:85:84:87:9c:84:41:c4:cf:67:95:d8:70:da:ca:
0e:ce:fa:93:35:6a:bd:c9:41:94:95:fe:83:b0:66:
7f:35:93:b8:74:79:43:6b:4a:04:2e:04:f4:f3:3f:
32:29:e9:b3:55:d0:a2:5c:b5:a4:db:02:da:53:1e:
61:04:e8:f7:3f:5e:a3:01:7b:17:1d:b0:23:2a:87:
d9:cf:00:02:60:9a:7d:6b:3d:66:bb:42:1c:53:5d:
66:f2:a3:57:27:4f:3d:b3:76:cd:e5:81:e6:6d:9c:
6d:ef:a6:a9:22:5c:8f:52:5e:9c:be:a1:c5:84:d9:
ae:31:8b:fa:31:d9:78:ac:4e:3d:4d:23:ac:32:88:
75:92:b9:1d:8a:04:13:62:e9:51:75:03:61:4e:d6:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:51:DB:9B:50:A7:05:C8:ED:D7:A9:0A:88:D9:D6:38:DD:67:7A:18
X509v3 Authority Key Identifier:
keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/OFHbm1CnBcjt16kKiNnWON1nehg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.0.0/21
176.109.136.0/21
185.13.8.0/22
185.18.12.0/22
213.244.208.0/20
217.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:3e:c3:8b:17:2e:99:8c:8f:fd:51:38:0c:03:47:1f:a0:7c:
c0:b0:90:8a:dd:c0:31:67:ab:cc:4a:d3:67:e0:75:3f:d2:b9:
04:82:4a:d2:24:51:19:af:59:12:f8:2c:ed:83:8d:b0:58:58:
43:12:a3:10:9f:9c:bc:c4:e3:27:b2:e5:cb:7c:58:db:69:aa:
68:58:15:09:3c:51:2e:45:73:e8:bb:03:c4:00:d8:63:15:c9:
3f:65:c9:98:d0:5d:28:16:d8:4c:94:ca:a8:c8:9a:26:22:a0:
aa:0c:9f:11:ea:22:dd:2c:85:47:26:6c:dc:15:c1:b1:d4:1f:
99:32:8f:74:00:0c:da:07:f0:3c:6e:fc:8c:29:25:db:1c:5e:
b8:38:87:07:eb:39:13:ec:69:d5:66:83:3e:c5:d2:cc:3e:f0:
a7:69:48:f5:94:6a:d7:a9:b8:00:4a:cf:1f:c3:f3:2f:6a:be:
a4:84:79:de:45:b1:9e:fe:e7:45:49:69:75:64:f9:90:2f:36:
ba:09:ad:13:8b:8f:4d:d3:5d:76:f0:e1:69:f2:c6:99:d4:8c:
ed:8d:06:a6:0a:63:60:bf:f6:b4:aa:55:41:b3:9b:59:c0:cd:
c8:ba:20:f0:26:dd:e9:b0:30:f6:6c:68:33:6c:db:2e:f2:a9:
0b:73:45:86
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQmUT1USN+Cvg2wy1ol90wQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjYzNGRjNzRmNjAzN2JhNDczMTFkMTI3NDIwZTc2ZjI5
NmJlNTQwHhcNMjUwMTAyMDkyMDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODUxZGI5YjUwYTcwNWM4ZWRkN2E5MGE4OGQ5ZDYzOGRkNjc3YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaaQ85vm/+6o30ErMIKuOQvdZpbp
YYbofRKjnd2OiQkIKidCibaZGOv1nY2AVaL94JU7ObvIpxW8dMBO2Udr0VCl7pSP
UoxNEj4DkG5tYSjff4nGfN/yhSrjQsuDR8pC0d1cJvV3fVEdhYSHnIRBxM9nldhw
2soOzvqTNWq9yUGUlf6DsGZ/NZO4dHlDa0oELgT08z8yKemzVdCiXLWk2wLaUx5h
BOj3P16jAXsXHbAjKofZzwACYJp9az1mu0IcU11m8qNXJ089s3bN5YHmbZxt76ap
IlyPUl6cvqHFhNmuMYv6Mdl4rE49TSOsMoh1krkdigQTYulRdQNhTtb/GwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDhR25tQpwXI7depCojZ1jjdZ3oYMB8GA1UdIwQY
MBaAFBq2NNx09gN7pHMR0SdCDnbylr5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2It
ZDg3OWY3ZTcwOWQ2LzEvT0ZIYm0xQ25CY2p0MTZrS2lObldPTjFuZWhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2ItZDg3OWY3ZTcwOWQ2
LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDXn8AAwQD
sG2IAwQCuQ0IAwQCuRIMAwQE1fTQAwQD2RrQMA0GCSqGSIb3DQEBCwUAA4IBAQCK
PsOLFy6ZjI/9UTgMA0cfoHzAsJCK3cAxZ6vMStNn4HU/0rkEgkrSJFEZr1kS+Czt
g42wWFhDEqMQn5y8xOMnsuXLfFjbaapoWBUJPFEuRXPouwPEANhjFck/ZcmY0F0o
FthMlMqoyJomIqCqDJ8R6iLdLIVHJmzcFcGx1B+ZMo90AAzaB/A8bvyMKSXbHF64
OIcH6zkT7GnVZoM+xdLMPvCnaUj1lGrXqbgASs8fw/Mvar6khHneRbGe/udFSWl1
ZPmQLza6Ca0Ti49N01128OFp8saZ1IztjQamCmNgv/a0qlVBs5tZwM3IuiDwJt3p
sDD2bGgzbNsu8qkLc0WG
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:09 2025 by rpki-client