Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/108BiaBt5OdPpJMqalaqOeNV69I.roa
File: 108BiaBt5OdPpJMqalaqOeNV69I.roa (raw, json)
Hash identifier: cjOLOxh24OsIAnTQULMJay2aUelwjlre1sYAhylQyv4=
Subject key identifier: D7:4F:01:89:A0:6D:E4:E7:4F:A4:93:2A:6A:56:AA:39:E3:55:EB:D2
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 0195F6E6B60A2314337DCF4C71E95F859764
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/108BiaBt5OdPpJMqalaqOeNV69I.roa
Signing time: Wed 02 Apr 2025 14:27:49 +0000
ROA not before: Wed 02 Apr 2025 14:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 2a02:11f8:170::/48 maxlen: 48
2a02:11f8:171::/48 maxlen: 48
2a02:11f8:172::/48 maxlen: 48
2a02:11f8:173::/48 maxlen: 48
2a02:11f8:174::/48 maxlen: 48
2a02:11f8:175::/48 maxlen: 48
2a02:11f8:176::/48 maxlen: 48
2a02:11f8:177::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:e6:b6:0a:23:14:33:7d:cf:4c:71:e9:5f:85:97:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Apr 2 14:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d74f0189a06de4e74fa4932a6a56aa39e355ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:98:30:ef:02:14:e9:b2:ef:b8:ad:66:b0:
4e:45:e9:0b:e6:b5:45:2d:d0:3d:cf:38:0e:a3:b1:
29:bf:b2:37:2b:90:18:b8:50:e4:23:18:be:78:c0:
dd:29:b5:ba:19:1b:bc:47:f7:29:d7:fa:3e:60:b0:
2b:12:1b:23:6c:a8:74:b2:ac:0c:22:5f:23:79:21:
1e:15:a2:dc:b0:5d:03:6d:d2:c5:f5:a0:cc:7b:2e:
b9:b5:4a:96:df:89:51:a9:2d:88:d1:c6:3f:d0:3c:
de:79:d0:c0:43:48:6a:e3:b9:2b:ed:6d:fe:4e:f4:
73:90:95:d9:f8:66:03:cd:a4:e4:e8:0b:dd:0e:ca:
ad:c1:6b:83:d7:dc:66:c8:98:90:6f:43:5b:b9:30:
d5:72:0d:86:a5:07:ad:2d:2b:0f:c9:0b:37:af:1b:
07:93:ab:94:e9:98:4f:2a:da:21:0b:43:1d:fc:30:
77:64:9d:5f:fb:2d:d5:ac:d7:37:98:57:48:27:c6:
91:33:21:3a:c9:58:a4:01:0c:52:45:03:f1:6a:45:
ec:8a:ad:c7:d8:9e:4f:a3:7c:c0:79:d4:2a:ed:25:
0b:a5:cf:46:6d:92:7b:20:e3:3d:33:56:17:b4:c1:
aa:18:e3:0d:28:25:14:39:7e:31:64:7c:f3:18:b4:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4F:01:89:A0:6D:E4:E7:4F:A4:93:2A:6A:56:AA:39:E3:55:EB:D2
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/108BiaBt5OdPpJMqalaqOeNV69I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:11f8:170::/45
Signature Algorithm: sha256WithRSAEncryption
63:74:d2:5c:42:0d:76:61:69:d6:16:e9:78:67:b8:be:1f:6b:
e8:b8:d1:3c:7a:6a:47:a2:1c:7e:8e:82:f9:b8:6e:5f:36:e5:
93:d3:3c:69:0e:2e:4e:db:9b:b3:0f:9c:99:ed:3a:c9:31:d3:
82:e2:9d:ba:3b:17:ca:b5:4d:f8:26:a6:db:ca:73:2c:49:d4:
d6:73:16:ee:cf:63:0b:0c:8d:08:6a:1c:37:ae:e6:51:97:cb:
74:e0:dc:90:fa:10:cd:2c:1c:d0:d5:cb:c9:5b:75:5b:59:f8:
55:e7:e4:13:78:61:c7:8f:85:ef:04:2c:34:5e:66:17:ae:75:
ff:c6:6c:34:45:88:b2:81:3a:c0:4a:eb:5e:fb:83:e6:59:be:
25:aa:d1:bd:b6:8b:18:80:f0:98:73:58:60:7d:81:5a:93:14:
87:e0:26:64:f8:49:6d:f9:f3:eb:a3:02:d5:74:ad:40:13:10:
1f:50:b4:e2:aa:f6:26:b2:4b:a1:df:ef:cd:fd:9f:87:a7:3a:
9a:40:48:e0:69:c2:a6:fb:3b:d5:60:59:86:ff:54:55:74:a6:
66:50:51:ab:49:a0:ec:e7:9b:ad:e0:d0:c7:75:ad:21:6e:cf:
b8:98:cf:cd:c8:14:d0:62:6d:35:b8:cf:86:e0:bf:ab:dd:66:
3f:1b:f1:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZX25rYKIxQzfc9McelfhZdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjUwNDAyMTQyNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzRmMDE4OWEwNmRlNGU3NGZhNDkzMmE2YTU2YWEzOWUzNTVlYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbmYMO8CFOmy77itZrBORekL5rVF
LdA9zzgOo7Epv7I3K5AYuFDkIxi+eMDdKbW6GRu8R/cp1/o+YLArEhsjbKh0sqwM
Il8jeSEeFaLcsF0DbdLF9aDMey65tUqW34lRqS2I0cY/0DzeedDAQ0hq47kr7W3+
TvRzkJXZ+GYDzaTk6AvdDsqtwWuD19xmyJiQb0NbuTDVcg2GpQetLSsPyQs3rxsH
k6uU6ZhPKtohC0Md/DB3ZJ1f+y3VrNc3mFdIJ8aRMyE6yVikAQxSRQPxakXsiq3H
2J5Po3zAedQq7SULpc9GbZJ7IOM9M1YXtMGqGOMNKCUUOX4xZHzzGLQ0CwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNdPAYmgbeTnT6STKmpWqjnjVevSMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvMTA4QmlhQnQ1T2RQcEpNcWFsYXFPZU5WNjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKgIR+AFw
MA0GCSqGSIb3DQEBCwUAA4IBAQBjdNJcQg12YWnWFul4Z7i+H2vouNE8empHohx+
joL5uG5fNuWT0zxpDi5O25uzD5yZ7TrJMdOC4p26OxfKtU34JqbbynMsSdTWcxbu
z2MLDI0Iahw3ruZRl8t04NyQ+hDNLBzQ1cvJW3VbWfhV5+QTeGHHj4XvBCw0XmYX
rnX/xmw0RYiygTrASute+4PmWb4lqtG9tosYgPCYc1hgfYFakxSH4CZk+Elt+fPr
owLVdK1AExAfULTiqvYmskuh3+/N/Z+HpzqaQEjgacKm+zvVYFmG/1RVdKZmUFGr
SaDs55ut4NDHda0hbs+4mM/NyBTQYm01uM+G4L+r3WY/G/EU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:24 2025 by rpki-client on console.sobornost.net