Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/itE9wE1JCUjzPQMC17zph5bag1o.roa
File: itE9wE1JCUjzPQMC17zph5bag1o.roa (raw, json)
Hash identifier: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=
Subject key identifier: 8A:D1:3D:C0:4D:49:09:48:F3:3D:03:02:D7:BC:E9:87:96:DA:83:5A
Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial: 019425223C772057C23AA3F20E23EC6E425A
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/itE9wE1JCUjzPQMC17zph5bag1o.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49278
IP address blocks: 144.84.0.0/16 maxlen: 16
144.84.0.0/18 maxlen: 18
144.84.128.0/18 maxlen: 18
144.84.192.0/18 maxlen: 18
158.112.0.0/16 maxlen: 16
158.112.0.0/18 maxlen: 18
158.112.20.0/22 maxlen: 22
158.112.24.0/21 maxlen: 21
158.112.32.0/22 maxlen: 22
158.112.64.0/18 maxlen: 18
158.112.66.0/23 maxlen: 23
158.112.71.0/24 maxlen: 24
158.112.84.0/22 maxlen: 22
158.112.88.0/24 maxlen: 24
158.112.93.0/24 maxlen: 24
158.112.96.0/21 maxlen: 21
158.112.128.0/18 maxlen: 18
158.112.164.0/23 maxlen: 23
158.112.192.0/18 maxlen: 18
158.112.208.0/23 maxlen: 23
158.112.255.0/24 maxlen: 24
185.155.24.0/23 maxlen: 23
185.155.26.0/23 maxlen: 23
2a02:27b8:1::/48 maxlen: 48
2a02:27b8:1111::/48 maxlen: 48
2a02:27b8:1112::/48 maxlen: 48
2a02:27b8:2000::/48 maxlen: 48
2a02:27b8:2002::/48 maxlen: 48
2a02:27b8:2003::/48 maxlen: 48
2a02:27b8:2004::/48 maxlen: 48
2a02:27b8:4000::/48 maxlen: 48
2a02:27ba:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3c:77:20:57:c2:3a:a3:f2:0e:23:ec:6e:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad13dc04d490948f33d0302d7bce98796da835a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:30:d8:b5:77:2c:b4:24:74:74:dc:0d:52:
c9:a1:81:f1:33:65:4a:9d:3c:c3:a1:ca:54:6c:6b:
80:ad:c1:f3:c1:b7:9f:79:2d:a7:40:51:9d:5a:22:
28:7b:42:c3:30:9b:12:b6:3b:51:89:49:bb:4d:b2:
25:3f:87:81:c5:d8:ea:1b:e3:af:74:cf:ec:b0:db:
bd:c9:dc:16:d2:ae:50:d4:74:54:26:7f:a7:07:cc:
91:16:da:26:9a:f8:4b:d6:bd:0d:ea:25:7a:53:18:
e8:96:2b:96:78:7b:d2:af:62:b2:89:43:d0:9a:7d:
4a:18:96:82:d9:77:87:9a:9b:de:e1:d4:c0:bc:7f:
80:ea:cd:cf:e8:67:e1:8c:77:53:52:34:31:be:7d:
bb:aa:01:b5:b7:71:8f:89:b8:a0:91:a4:2e:6d:6c:
12:04:3c:2f:8d:24:ca:9a:5f:7b:be:4f:79:8b:e9:
8d:54:42:f5:a6:fc:40:95:86:13:f0:ec:d5:46:5a:
59:05:7b:d2:dd:5b:23:67:ba:80:2b:1b:1d:62:cb:
f7:c1:f5:bf:e2:f8:b3:6d:b4:ac:8b:d6:c2:c2:9a:
7a:67:71:27:f3:d2:f0:7f:ed:e2:eb:9a:41:12:8c:
60:c4:f0:b0:53:6d:63:3e:e9:ea:b1:ac:3e:82:f5:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:3D:C0:4D:49:09:48:F3:3D:03:02:D7:BC:E9:87:96:DA:83:5A
X509v3 Authority Key Identifier:
keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/itE9wE1JCUjzPQMC17zph5bag1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.84.0.0/16
158.112.0.0/16
185.155.24.0/22
IPv6:
2a02:27b8:1::/48
2a02:27b8:1111::-2a02:27b8:1112:ffff:ffff:ffff:ffff:ffff
2a02:27b8:2000::/48
2a02:27b8:2002::-2a02:27b8:2004:ffff:ffff:ffff:ffff:ffff
2a02:27b8:4000::/48
2a02:27ba:4000::/34
Signature Algorithm: sha256WithRSAEncryption
2b:99:70:82:d9:28:16:7b:7f:2d:23:c7:b9:7e:49:3a:9c:55:
a0:d7:98:36:32:5f:2c:c7:c2:44:4f:a3:2a:e7:ad:ce:40:b4:
77:4b:e3:e5:fb:1e:68:ba:03:aa:58:8f:cb:31:bf:ae:78:ce:
42:0b:c6:ae:65:6f:34:52:c3:3e:c0:f9:07:c1:01:e2:30:06:
61:e9:ba:eb:97:b7:63:17:b9:9c:c5:52:d2:d6:eb:3e:db:83:
53:1a:03:4d:d7:cb:2c:97:2e:ac:ce:f4:60:ed:75:66:ce:2f:
d3:0f:3b:75:a7:a5:f1:b6:79:4a:13:61:f8:e2:72:5c:52:88:
b9:19:41:80:9d:d3:f4:e8:c8:d9:d2:19:2b:6a:ef:0a:5e:5c:
34:74:18:33:a9:c4:d4:2f:5e:46:d5:fb:2f:3b:0e:b0:0e:5b:
6e:e1:86:e1:82:ad:db:48:96:db:20:9e:76:af:65:63:2e:bb:
ec:dc:9f:e2:ed:59:5f:90:6e:54:bb:5b:db:24:7f:9c:4b:fb:
40:02:fb:e7:ff:83:55:78:2b:64:dc:c5:23:d4:f3:db:fa:57:
54:eb:96:77:ea:0a:3d:86:ca:64:6f:34:1b:5c:19:9b:9a:26:
d0:53:a5:93:cd:f0:67:e8:84:55:92:da:d9:52:d1:c8:2c:cb:
77:89:56:a7
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAZQlIjx3IFfCOqPyDiPsbkJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjM1YWUzNmYyZGY0ZjY4ZDNlNTcyYTMxM2UxYTE4YWEy
MGI3NTcwHhcNMjUwMTAyMDM0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQxM2RjMDRkNDkwOTQ4ZjMzZDAzMDJkN2JjZTk4Nzk2ZGE4MzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU0w2LV3LLQkdHTcDVLJoYHxM2VK
nTzDocpUbGuArcHzwbefeS2nQFGdWiIoe0LDMJsStjtRiUm7TbIlP4eBxdjqG+Ov
dM/ssNu9ydwW0q5Q1HRUJn+nB8yRFtommvhL1r0N6iV6UxjoliuWeHvSr2KyiUPQ
mn1KGJaC2XeHmpve4dTAvH+A6s3P6GfhjHdTUjQxvn27qgG1t3GPibigkaQubWwS
BDwvjSTKml97vk95i+mNVEL1pvxAlYYT8OzVRlpZBXvS3VsjZ7qAKxsdYsv3wfW/
4vizbbSsi9bCwpp6Z3En89Lwf+3i65pBEoxgxPCwU21jPunqsaw+gvWTowIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFIrRPcBNSQlI8z0DAte86YeW2oNaMB8GA1UdIwQY
MBaAFHNjWuNvLfT2jT5XKjE+GhiqILdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEt
NWJhZTM3NWNmODVhLzEvaXRFOXdFMUpDVWp6UFFNQzE3enBoNWJhZzFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEtNWJhZTM3NWNmODVh
LzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazAWBAIAATAQAwMAkFQDAwCe
cAMEArmbGDBRBAIAAjBLAwcAKgInuAABMBIDBwAqAie4EREDBwAqAie4ERIDBwAq
Aie4IAAwEgMHASoCJ7ggAgMHACoCJ7ggBAMHACoCJ7hAAAMGBioCJ7pAMA0GCSqG
SIb3DQEBCwUAA4IBAQArmXCC2SgWe38tI8e5fkk6nFWg15g2Ml8sx8JET6Mq563O
QLR3S+Pl+x5ougOqWI/LMb+ueM5CC8auZW80UsM+wPkHwQHiMAZh6brrl7djF7mc
xVLS1us+24NTGgNN18ssly6szvRg7XVmzi/TDzt1p6XxtnlKE2H44nJcUoi5GUGA
ndP06MjZ0hkrau8KXlw0dBgzqcTUL15G1fsvOw6wDltu4Ybhgq3bSJbbIJ52r2Vj
Lrvs3J/i7VlfkG5Uu1vbJH+cS/tAAvvn/4NVeCtk3MUj1PPb+ldU65Z36go9hspk
bzQbXBmbmibQU6WTzfBn6IRVktrZUtHILMt3iVan
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:46 2025 by rpki-client