Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa
File: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (raw, json)
Hash identifier: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=
Subject key identifier: DE:84:A5:AD:3F:C3:52:11:6F:40:9E:B3:7E:CF:02:AD:9C:CB:B4:DD
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 019421B23F8F67E5C1F0834B06E646E39247
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47331
IP address blocks: 78.160.0.0/11 maxlen: 24
81.212.0.0/14 maxlen: 24
85.96.0.0/12 maxlen: 24
88.224.0.0/11 maxlen: 24
95.0.0.0/12 maxlen: 24
212.156.0.0/16 maxlen: 24
212.174.0.0/15 maxlen: 24
2a01:358::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3f:8f:67:e5:c1:f0:83:4b:06:e6:46:e3:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de84a5ad3fc352116f409eb37ecf02ad9ccbb4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:36:73:93:3f:47:62:aa:60:d1:24:14:a9:e9:
5d:a3:b1:ba:f6:2c:96:c5:f0:02:09:b2:28:69:5c:
6f:7c:41:7a:88:be:62:5f:43:fc:ec:b3:45:73:90:
d4:44:8d:a6:f0:78:88:86:91:f1:89:7e:ad:d1:f4:
11:9a:b5:04:26:04:c2:d4:02:ae:ae:2a:8f:05:5c:
c0:10:50:47:5e:a9:83:35:49:d8:1f:55:f0:b0:40:
8d:af:ac:65:b3:1b:6f:39:7a:24:07:66:5b:5e:01:
63:2c:e2:8a:e6:2f:9e:67:f9:15:ba:92:9a:e5:ba:
29:fd:55:be:f3:97:68:5e:b5:0d:38:c4:c5:31:24:
fb:ab:ae:a9:a8:a4:8c:d8:f2:57:06:51:30:f1:0c:
a1:6c:c5:77:73:39:5f:9b:07:71:fa:9a:d0:1e:bc:
bb:d0:c6:49:f6:7d:86:75:c2:09:8d:6e:75:47:ac:
a3:50:b1:bc:53:09:b9:2b:1a:9f:e6:85:03:cb:57:
ae:8e:26:16:85:52:ff:3c:0d:54:89:47:92:30:d5:
92:49:4d:6c:97:06:91:a7:f9:99:9a:0f:ca:a2:a7:
1a:4e:f3:50:26:13:50:f7:d9:d9:09:2f:6f:7a:0e:
29:79:07:12:da:1d:c5:9a:60:b0:7c:34:d2:a8:dc:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:84:A5:AD:3F:C3:52:11:6F:40:9E:B3:7E:CF:02:AD:9C:CB:B4:DD
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.160.0.0/11
81.212.0.0/14
85.96.0.0/12
88.224.0.0/11
95.0.0.0/12
212.156.0.0/16
212.174.0.0/15
IPv6:
2a01:358::/29
Signature Algorithm: sha256WithRSAEncryption
26:42:46:28:1c:25:02:3b:2a:95:83:df:21:68:32:d6:6a:a1:
cb:cc:7b:fd:8d:3e:2c:ec:3a:37:6e:14:7b:ff:6d:46:62:32:
65:65:56:f4:49:a7:4d:b9:d1:4d:4d:61:26:e5:47:5c:86:75:
d2:e1:a8:de:ba:5e:f4:29:25:0c:b0:68:c8:16:c8:12:de:34:
72:d7:cd:a9:c9:34:04:bf:de:7c:0c:4b:89:74:78:a1:ae:75:
9f:16:57:06:3a:bb:af:fd:70:7f:44:5a:7b:49:02:cd:28:68:
4f:09:4f:85:1a:02:6f:2b:72:f7:fe:e8:f8:a4:8c:95:e4:79:
9c:b8:e2:87:e8:b0:87:e8:53:13:96:62:9d:01:79:df:bd:fd:
55:1a:b2:b0:aa:88:e5:83:c5:d9:f9:41:b6:a4:9e:34:4a:04:
d9:87:ab:e8:b5:84:e6:1c:a1:65:bb:4d:88:52:91:41:a5:03:
a4:49:0c:a4:42:94:57:05:e0:29:1b:26:ec:24:1d:2d:45:19:
65:10:7f:6a:3f:09:4a:78:34:ef:1c:34:7e:06:2d:38:e2:39:
45:2a:c6:81:a1:c7:2a:10:7f:c3:df:69:ba:b6:42:02:5d:4c:
d0:f2:7d:17:c4:d2:19:90:e7:4b:63:e2:3b:98:bd:a5:5b:5a:
9b:f9:1d:f1
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZQhsj+PZ+XB8INLBuZG45JHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWYxMWJiOGE4ZDQ4MGEwMzEzZTFmMjE4YTY2YmRmNGU5
NWY2MjcwHhcNMjUwMTAxMTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTg0YTVhZDNmYzM1MjExNmY0MDllYjM3ZWNmMDJhZDljY2JiNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TZzkz9HYqpg0SQUqeldo7G69iyW
xfACCbIoaVxvfEF6iL5iX0P87LNFc5DURI2m8HiIhpHxiX6t0fQRmrUEJgTC1AKu
riqPBVzAEFBHXqmDNUnYH1XwsECNr6xlsxtvOXokB2ZbXgFjLOKK5i+eZ/kVupKa
5bop/VW+85doXrUNOMTFMST7q66pqKSM2PJXBlEw8QyhbMV3czlfmwdx+prQHry7
0MZJ9n2GdcIJjW51R6yjULG8Uwm5Kxqf5oUDy1eujiYWhVL/PA1UiUeSMNWSSU1s
lwaRp/mZmg/KoqcaTvNQJhNQ99nZCS9veg4peQcS2h3FmmCwfDTSqNw2AQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFN6Epa0/w1IRb0Ces37PAq2cy7TdMB8GA1UdIwQY
MBaAFD3vEbuKjUgKAxPh8hima99OlfYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYt
YjQ5NDY2NDcyNGFkLzEvM29TbHJUX0RVaEZ2UUo2emZzOENyWnpMdE4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYtYjQ5NDY2NDcyNGFk
LzEvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjApBAIAATAjAwMFTqADAwJR
1AMDBFVgAwMFWOADAwRfAAMDANScAwMB1K4wDQQCAAIwBwMFAyoBA1gwDQYJKoZI
hvcNAQELBQADggEBACZCRigcJQI7KpWD3yFoMtZqocvMe/2NPizsOjduFHv/bUZi
MmVlVvRJp0250U1NYSblR1yGddLhqN66XvQpJQywaMgWyBLeNHLXzanJNAS/3nwM
S4l0eKGudZ8WVwY6u6/9cH9EWntJAs0oaE8JT4UaAm8rcvf+6PikjJXkeZy44ofo
sIfoUxOWYp0Bed+9/VUasrCqiOWDxdn5QbaknjRKBNmHq+i1hOYcoWW7TYhSkUGl
A6RJDKRClFcF4CkbJuwkHS1FGWUQf2o/CUp4NO8cNH4GLTjiOUUqxoGhxyoQf8Pf
abq2QgJdTNDyfRfE0hmQ50tj4juYvaVbWpv5HfE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:23 2025 by rpki-client