Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/RqpmvtEuocHrmP7Ze69kHKJjV2o.roa
File: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (raw, json)
Hash identifier: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=
Subject key identifier: 46:AA:66:BE:D1:2E:A1:C1:EB:98:FE:D9:7B:AF:64:1C:A2:63:57:6A
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019428239C4E52A297F2FE09158209970494
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/RqpmvtEuocHrmP7Ze69kHKJjV2o.roa
Signing time: Thu 02 Jan 2025 17:50:09 +0000
ROA not before: Thu 02 Jan 2025 17:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42841
IP address blocks: 88.212.0.0/18 maxlen: 18
88.212.0.0/19 maxlen: 19
88.212.0.0/20 maxlen: 20
88.212.16.0/20 maxlen: 20
88.212.32.0/19 maxlen: 19
88.212.32.0/20 maxlen: 20
88.212.48.0/20 maxlen: 20
185.61.16.0/22 maxlen: 22
2a02:130::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9c:4e:52:a2:97:f2:fe:09:15:82:09:97:04:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46aa66bed12ea1c1eb98fed97baf641ca263576a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:5f:e4:db:7d:25:6d:38:cf:63:5c:77:96:
bc:6d:ae:e1:0e:b3:51:16:cf:65:15:b2:c8:ab:b6:
c5:dd:50:4c:a6:d0:92:52:66:2a:42:54:58:76:17:
27:58:26:6a:a8:f4:ba:57:bf:46:65:a3:56:f6:65:
eb:c6:e4:7a:be:ba:93:0d:01:09:ff:aa:b7:ea:f3:
5e:56:0a:f5:44:b6:1b:85:9e:47:84:e8:6c:a8:cd:
71:86:9c:c4:40:4b:e8:a9:5c:1d:38:cf:09:13:77:
f6:ae:dd:79:5e:a1:a2:d8:ac:0e:de:3f:49:e9:31:
b5:41:fe:69:8c:ac:17:40:55:cd:1a:db:de:d6:84:
df:8d:23:f9:10:04:b5:f3:59:7a:db:2f:f7:f6:9b:
1e:23:03:cc:c5:ff:35:64:92:51:99:90:74:36:5d:
df:ae:e2:d1:eb:9b:8f:1c:61:4e:ef:5f:0b:0e:fa:
54:86:ad:86:02:fe:19:3f:4a:3e:0b:01:d1:80:03:
a3:7c:a5:f3:65:28:12:ec:39:fa:25:12:b1:a2:9b:
43:55:48:4e:45:1c:ee:41:7d:06:ab:cc:ae:a4:9b:
28:13:98:75:a8:2c:0a:8d:2f:9c:ec:98:43:b6:e8:
0e:ad:5c:0c:ba:5f:df:03:9f:f1:2a:9e:99:cf:9c:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:66:BE:D1:2E:A1:C1:EB:98:FE:D9:7B:AF:64:1C:A2:63:57:6A
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/RqpmvtEuocHrmP7Ze69kHKJjV2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.212.0.0/18
185.61.16.0/22
IPv6:
2a02:130::/32
Signature Algorithm: sha256WithRSAEncryption
3c:20:5e:5a:a8:9a:87:9b:97:64:b6:2f:92:3f:f5:0f:33:7b:
90:19:16:87:5c:ce:8f:6a:35:35:c7:34:8a:e2:e1:3d:ac:d0:
9a:7f:f7:e6:7f:f0:24:92:1c:eb:f9:00:f1:c2:31:4f:ed:a5:
f7:1e:55:22:dc:9f:71:16:1b:25:28:4b:9c:b1:6c:98:9f:e8:
a2:4c:f0:fb:7f:4b:ce:b5:89:b1:c0:2a:fe:39:81:4f:c7:26:
32:52:4b:25:99:30:c8:23:aa:f4:93:a8:39:ac:fc:b8:04:be:
14:0a:f0:4f:ef:ec:91:6a:53:4e:b8:0b:e4:f1:a3:85:11:8b:
24:c9:b1:d4:a3:9d:94:d8:2c:15:0a:92:5b:a4:f3:a7:3a:5a:
e1:68:ff:50:b5:10:62:cd:ca:d1:d3:b4:8b:23:58:fe:23:df:
54:ec:f5:f2:7f:90:c1:0a:7a:59:ec:c7:5c:92:28:cc:5c:c6:
92:98:1f:01:91:7c:76:97:c2:a7:bf:b0:9b:59:88:07:ad:4d:
f6:e8:18:25:05:56:e9:21:cf:cb:09:0c:06:8a:2c:3a:c8:92:
65:01:04:ce:15:f8:ca:62:b8:1a:65:81:68:29:7c:33:c3:99:
66:5a:55:e8:12:37:80:22:21:c8:f5:cf:27:8e:05:01:00:c4:
64:0b:c6:1d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQoI5xOUqKX8v4JFYIJlwSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Njk1Yjk4ZTA4YTM3OGJmMGRjOTQ0ZDJmMWE2MGExZjY5
NTQ5ODEwHhcNMjUwMTAyMTc1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmFhNjZiZWQxMmVhMWMxZWI5OGZlZDk3YmFmNjQxY2EyNjM1NzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDlf5Nt9JW04z2Ncd5a8ba7hDrNR
Fs9lFbLIq7bF3VBMptCSUmYqQlRYdhcnWCZqqPS6V79GZaNW9mXrxuR6vrqTDQEJ
/6q36vNeVgr1RLYbhZ5HhOhsqM1xhpzEQEvoqVwdOM8JE3f2rt15XqGi2KwO3j9J
6TG1Qf5pjKwXQFXNGtve1oTfjSP5EAS181l62y/39pseIwPMxf81ZJJRmZB0Nl3f
ruLR65uPHGFO718LDvpUhq2GAv4ZP0o+CwHRgAOjfKXzZSgS7Dn6JRKxoptDVUhO
RRzuQX0Gq8yupJsoE5h1qCwKjS+c7JhDtugOrVwMul/fA5/xKp6Zz5yTFQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEaqZr7RLqHB65j+2XuvZByiY1dqMB8GA1UdIwQY
MBaAFLdpW5jgijeL8NyUTS8aYKH2lUmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmIt
Njg4NWFhODdjNGZkLzEvUnFwbXZ0RXVvY0hybVA3WmU2OWtIS0pqVjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmItNjg4NWFhODdjNGZk
LzEvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGWNQAAwQC
uT0QMA0EAgACMAcDBQAqAgEwMA0GCSqGSIb3DQEBCwUAA4IBAQA8IF5aqJqHm5dk
ti+SP/UPM3uQGRaHXM6PajU1xzSK4uE9rNCaf/fmf/Akkhzr+QDxwjFP7aX3HlUi
3J9xFhslKEucsWyYn+iiTPD7f0vOtYmxwCr+OYFPxyYyUkslmTDII6r0k6g5rPy4
BL4UCvBP7+yRalNOuAvk8aOFEYskybHUo52U2CwVCpJbpPOnOlrhaP9QtRBizcrR
07SLI1j+I99U7PXyf5DBCnpZ7MdckijMXMaSmB8BkXx2l8Knv7CbWYgHrU326Bgl
BVbpIc/LCQwGiiw6yJJlAQTOFfjKYrgaZYFoKXwzw5lmWlXoEjeAIiHI9c8njgUB
AMRkC8Yd
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:02 2025 by rpki-client