Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/UyMSzhYCoyIv-Z-RWQ0FyyqBdmg.roa
File: UyMSzhYCoyIv-Z-RWQ0FyyqBdmg.roa (raw, json)
Hash identifier: 2A2ajEPDxijC/XTi8wtmJY4/n4ZoZiwiXE/zRByiGqY=
Subject key identifier: 53:23:12:CE:16:02:A3:22:2F:F9:9F:91:59:0D:05:CB:2A:81:76:68
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 019499BD48FA5E11A6FDFBA11627EA3CFC70
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/UyMSzhYCoyIv-Z-RWQ0FyyqBdmg.roa
Signing time: Fri 24 Jan 2025 19:15:06 +0000
ROA not before: Fri 24 Jan 2025 19:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 185.84.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:bd:48:fa:5e:11:a6:fd:fb:a1:16:27:ea:3c:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Jan 24 19:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=532312ce1602a3222ff99f91590d05cb2a817668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:7d:9e:a6:d4:da:53:5a:35:88:a3:9e:7e:
73:2f:e8:bf:22:e7:57:1b:f3:b7:ba:94:19:67:4b:
71:f7:00:f7:dd:2f:ee:46:21:50:1f:4f:e5:62:31:
e3:02:f7:41:98:0d:4f:33:9c:ee:a6:6a:9c:ec:70:
4b:10:64:b5:7e:34:b8:77:ef:c9:73:d6:dc:6b:3e:
c7:a7:a7:97:38:43:c7:9f:94:73:f1:64:da:a4:90:
98:b9:95:a2:7e:62:75:7a:66:50:84:ed:46:04:74:
f4:d2:da:68:26:8d:25:36:3a:d1:f7:6c:17:d3:b7:
bf:6c:26:e7:b8:fa:e5:44:4f:51:e8:21:9f:be:81:
14:82:20:d9:3b:7d:55:3b:af:3d:2c:7a:7e:7b:ee:
53:e5:fa:06:0e:e7:93:be:e0:8c:50:04:da:f5:de:
d0:c6:8f:5c:ff:c7:4a:4d:48:59:7e:3d:7d:ab:f9:
9e:09:14:a9:fb:c7:51:0f:ac:05:9a:4d:ed:9c:51:
a7:c1:39:b1:ad:f0:ea:a5:3e:11:b3:3f:50:3a:4e:
a6:13:22:1a:d8:1d:b9:eb:13:f4:da:2e:3e:e3:fd:
ed:41:c3:28:c9:ae:64:d3:7f:a8:1e:0d:fe:94:a1:
8d:a5:1a:4f:66:7e:73:ec:34:26:7b:d3:6f:a6:b3:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:12:CE:16:02:A3:22:2F:F9:9F:91:59:0D:05:CB:2A:81:76:68
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/UyMSzhYCoyIv-Z-RWQ0FyyqBdmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.156.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f8:28:3e:f3:06:b4:27:12:18:d7:9d:89:33:17:38:95:47:
af:47:5d:03:d9:a8:c1:0f:b6:38:cd:24:fe:06:a8:39:a3:35:
97:67:9a:d0:28:1f:2a:ab:11:e9:09:68:00:3e:15:17:2d:ba:
d9:20:ca:7a:2a:ea:f5:93:c5:81:e3:ae:8e:62:14:d7:7e:67:
eb:ef:c1:57:5f:7b:55:a3:0e:d6:60:ac:a7:4a:07:23:09:82:
88:c6:02:cb:52:05:be:8a:e7:57:eb:07:ba:35:db:b4:36:d9:
9d:f1:47:bd:26:75:d5:a0:c6:dd:70:e5:f1:6f:06:28:a8:2b:
4e:be:c6:5e:07:22:e2:2c:41:70:50:ba:b3:bf:cf:9a:8f:4b:
25:8d:2d:3b:2b:77:46:f8:26:ef:b2:d8:59:c1:2c:b0:ca:3a:
7f:5d:3c:1d:f2:1c:5b:e8:21:34:40:eb:d7:53:9f:d4:83:46:
4e:40:fc:95:38:00:8c:0d:c0:86:b3:b3:ca:ae:2b:7f:b2:53:
9a:64:49:42:3e:6a:6e:17:8e:c5:8e:32:5e:90:c4:9d:a6:ca:
62:08:14:14:32:e4:2b:f2:7e:fc:d2:fe:c6:89:cd:2e:f5:8f:
74:12:d3:b0:ab:67:e8:c3:df:2b:7f:4a:f7:e4:0c:23:5e:4f:
ee:2d:f8:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSZvUj6XhGm/fuhFifqPPxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx
ZDFlM2EwHhcNMjUwMTI0MTkxNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzIzMTJjZTE2MDJhMzIyMmZmOTlmOTE1OTBkMDVjYjJhODE3NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yF9nqbU2lNaNYijnn5zL+i/IudX
G/O3upQZZ0tx9wD33S/uRiFQH0/lYjHjAvdBmA1PM5zupmqc7HBLEGS1fjS4d+/J
c9bcaz7Hp6eXOEPHn5Rz8WTapJCYuZWifmJ1emZQhO1GBHT00tpoJo0lNjrR92wX
07e/bCbnuPrlRE9R6CGfvoEUgiDZO31VO689LHp+e+5T5foGDueTvuCMUATa9d7Q
xo9c/8dKTUhZfj19q/meCRSp+8dRD6wFmk3tnFGnwTmxrfDqpT4Rsz9QOk6mEyIa
2B256xP02i4+4/3tQcMoya5k03+oHg3+lKGNpRpPZn5z7DQme9NvprPLPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMjEs4WAqMiL/mfkVkNBcsqgXZoMB8GA1UdIwQY
MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt
YWJmMGI1OTQ2NDZmLzEvVXlNU3poWUNveUl2LVotUldRMEZ5eXFCZG1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm
LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVScMA0G
CSqGSIb3DQEBCwUAA4IBAQCH+Cg+8wa0JxIY152JMxc4lUevR10D2ajBD7Y4zST+
Bqg5ozWXZ5rQKB8qqxHpCWgAPhUXLbrZIMp6Kur1k8WB466OYhTXfmfr78FXX3tV
ow7WYKynSgcjCYKIxgLLUgW+iudX6we6Ndu0Ntmd8Ue9JnXVoMbdcOXxbwYoqCtO
vsZeByLiLEFwULqzv8+aj0sljS07K3dG+CbvsthZwSywyjp/XTwd8hxb6CE0QOvX
U5/Ug0ZOQPyVOACMDcCGs7PKrit/slOaZElCPmpuF47FjjJekMSdpspiCBQUMuQr
8n780v7Gic0u9Y90EtOwq2fow98rf0r35AwjXk/uLfhD
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:56:20 2025 by rpki-client