Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/iQLY3WLUa8YN66OnQnaKm9gkm2Y.roa
File: iQLY3WLUa8YN66OnQnaKm9gkm2Y.roa (raw, json)
Hash identifier: QGUhORyRqy3TH+hyhTdKazwKjduQQtUqV7WskzY9KQ4=
Subject key identifier: 89:02:D8:DD:62:D4:6B:C6:0D:EB:A3:A7:42:76:8A:9B:D8:24:9B:66
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 018210BE676964DC45F35CA07482B316558A
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/iQLY3WLUa8YN66OnQnaKm9gkm2Y.roa
Signing time: Mon 18 Jul 2022 09:58:09 +0000
ROA not before: Mon 18 Jul 2022 09:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 194.150.75.0/24 maxlen: 24
194.150.74.0/24 maxlen: 24
194.150.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:be:67:69:64:dc:45:f3:5c:a0:74:82:b3:16:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jul 18 09:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8902d8dd62d46bc60deba3a742768a9bd8249b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:d4:33:5f:23:c2:9e:28:b4:ed:f0:75:c2:
2e:cd:3a:5e:12:7e:08:a7:5c:54:6a:85:38:03:5b:
9c:a8:50:f7:b5:b0:09:29:90:ee:da:50:3b:c4:25:
cc:36:e0:9c:a9:b3:4d:2e:c0:f5:88:73:e1:8e:a5:
79:43:f2:4d:e3:21:90:e5:12:98:e1:70:d1:27:6c:
a9:61:59:2e:ba:83:5a:d4:70:ec:7c:3d:08:c9:62:
d2:34:60:64:d8:d8:e6:51:69:bc:58:05:fd:f4:0a:
20:b3:e5:12:fa:94:1a:d5:50:c4:51:f2:c8:9f:d3:
ac:d5:aa:51:29:e8:d6:5a:77:c1:52:03:c9:8b:5d:
ec:d1:1b:7f:d1:c2:51:60:90:e5:3e:83:f9:82:a1:
f3:37:fc:20:4a:4d:18:a3:a3:5a:cc:e2:df:fc:88:
eb:a7:53:e1:e9:61:ff:f9:92:e5:9c:21:6c:b8:85:
e1:a7:97:a7:f7:b0:50:a1:8f:11:59:2a:a6:97:92:
97:30:a6:d4:a4:bf:51:72:9d:13:1e:42:1d:d4:2f:
15:7c:a7:00:6d:6e:a2:2b:ac:20:30:b9:91:cb:fb:
82:f7:41:c5:ff:29:48:1f:66:11:32:53:45:35:84:
1c:03:fa:4a:8d:ad:51:dd:3d:61:e8:94:b0:00:b7:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:D8:DD:62:D4:6B:C6:0D:EB:A3:A7:42:76:8A:9B:D8:24:9B:66
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/iQLY3WLUa8YN66OnQnaKm9gkm2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.73.0-194.150.75.255
Signature Algorithm: sha256WithRSAEncryption
49:0d:b9:06:36:29:ab:a8:71:87:5f:96:f8:b0:b0:b0:a6:f3:
0e:be:51:8d:6f:c5:19:6d:a4:d3:07:db:a1:31:cf:77:7a:36:
e5:53:3e:a4:11:4b:3f:d4:d1:29:8a:00:c8:24:42:37:13:69:
0b:9f:4e:a5:c5:bb:f6:50:50:59:ea:15:c2:48:15:46:e4:d5:
ad:03:39:39:bf:50:ac:2a:cd:26:44:fd:0e:35:d4:63:1a:33:
f1:e5:5c:58:3f:36:d5:d2:a7:58:94:be:42:4a:41:2c:16:14:
bf:22:c9:78:77:7b:73:7b:77:95:1e:2e:49:f6:b4:fc:07:46:
93:33:a9:2f:3d:b7:52:4e:e3:41:52:f0:d0:3e:7e:8d:59:e1:
73:41:3e:bc:56:aa:e2:f2:8f:36:ff:1c:bf:b5:16:13:8a:30:
1f:89:97:ac:40:f3:da:52:c0:53:b3:2d:0d:62:d4:50:37:23:
ea:29:ac:5e:23:38:dc:8b:b1:98:74:9b:d4:0f:79:c5:80:6b:
b6:d1:e0:cc:c5:4f:a3:45:f6:03:96:35:34:eb:00:45:a2:92:
6b:b4:eb:bd:e0:0b:5a:3a:c1:4a:c6:e7:27:17:fe:51:b9:aa:
db:72:f9:ee:18:87:86:28:bd:44:a9:81:32:94:07:75:f0:ec:
51:2f:12:e6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYIQvmdpZNxF81ygdIKzFlWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAyNGIyYzI3YTY3ZGZmNWI2NTRlZmEwNmJmN2JmYzEy
MjI2MjUwHhcNMjIwNzE4MDk1ODA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTAyZDhkZDYyZDQ2YmM2MGRlYmEzYTc0Mjc2OGE5YmQ4MjQ5YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8nUM18jwp4otO3wdcIuzTpeEn4I
p1xUaoU4A1ucqFD3tbAJKZDu2lA7xCXMNuCcqbNNLsD1iHPhjqV5Q/JN4yGQ5RKY
4XDRJ2ypYVkuuoNa1HDsfD0IyWLSNGBk2NjmUWm8WAX99Aogs+US+pQa1VDEUfLI
n9Os1apRKejWWnfBUgPJi13s0Rt/0cJRYJDlPoP5gqHzN/wgSk0Yo6NazOLf/Ijr
p1Ph6WH/+ZLlnCFsuIXhp5en97BQoY8RWSqml5KXMKbUpL9Rcp0THkId1C8VfKcA
bW6iK6wgMLmRy/uC90HF/ylIH2YRMlNFNYQcA/pKja1R3T1h6JSwALfeRQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIkC2N1i1GvGDeujp0J2ipvYJJtmMB8GA1UdIwQY
MBaAFIpgJLLCemff9bZU76Br97/BIiYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEt
MDhlOGYwY2JiODQwLzEvaVFMWTNXTFVhOFlONjZPblFuYUttOWdrbTJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEtMDhlOGYwY2JiODQw
LzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADClkkD
BALClkgwDQYJKoZIhvcNAQELBQADggEBAEkNuQY2KauocYdflviwsLCm8w6+UY1v
xRltpNMH26Exz3d6NuVTPqQRSz/U0SmKAMgkQjcTaQufTqXFu/ZQUFnqFcJIFUbk
1a0DOTm/UKwqzSZE/Q411GMaM/HlXFg/NtXSp1iUvkJKQSwWFL8iyXh3e3N7d5Ue
Lkn2tPwHRpMzqS89t1JO40FS8NA+fo1Z4XNBPrxWquLyjzb/HL+1FhOKMB+Jl6xA
89pSwFOzLQ1i1FA3I+oprF4jONyLsZh0m9QPecWAa7bR4MzFT6NF9gOWNTTrAEWi
kmu0673gC1o6wUrG5ycX/lG5qtty+e4Yh4YovUSpgTKUB3Xw7FEvEuY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:39 2025 by rpki-client