Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/cvEKFsSTsStMmItt_2492mBbnFo.roa
File: cvEKFsSTsStMmItt_2492mBbnFo.roa (raw, json)
Hash identifier: /gDWOgEA4TF8vJ8vkcEBambiiNBw5mr+XGx4Ku2Xa3g=
Subject key identifier: 72:F1:0A:16:C4:93:B1:2B:4C:98:8B:6D:FF:6E:3D:DA:60:5B:9C:5A
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 019423D76EC9D1617F964B8E641A31D65EF2
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/cvEKFsSTsStMmItt_2492mBbnFo.roa
Signing time: Wed 01 Jan 2025 21:48:28 +0000
ROA not before: Wed 01 Jan 2025 21:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134176
IP address blocks: 185.171.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6e:c9:d1:61:7f:96:4b:8e:64:1a:31:d6:5e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Jan 1 21:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72f10a16c493b12b4c988b6dff6e3dda605b9c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:e6:ef:ee:64:91:77:6e:29:4e:af:fd:0d:
a3:6f:e8:c6:35:a3:e2:25:46:fb:72:59:e4:d8:43:
e4:a3:d4:91:35:5a:54:84:b3:4f:60:c2:26:ea:0a:
01:ed:14:84:0c:cf:76:ca:49:92:f1:14:cc:59:12:
e7:35:74:5e:dd:d3:be:2c:b6:3b:54:28:af:d2:b8:
3a:4e:79:3c:70:3d:49:f4:fd:e8:20:91:b0:e3:68:
d3:3c:56:32:23:27:6d:9e:7a:3b:d7:2b:ab:9b:35:
45:41:8f:26:7f:fa:f5:42:90:5d:c9:c7:7c:fb:1d:
c2:a2:4d:48:69:6c:d5:e5:6a:b2:85:06:41:90:3d:
e5:42:de:a2:5a:0d:01:d9:a1:3b:d6:ed:a4:c6:a9:
ca:65:a8:5b:76:a4:c9:f0:fa:87:51:cf:fc:2b:9a:
a9:a1:e3:aa:dc:ee:a0:9b:91:93:8f:15:19:bc:05:
86:bb:96:4d:cd:45:f5:9f:de:00:c4:8e:f6:92:3d:
bc:1b:6e:3d:11:10:43:f5:50:74:88:3a:ad:e2:3b:
50:b7:b0:d9:78:10:f2:4a:09:a1:76:b0:db:f6:c5:
df:82:ea:e8:0c:8b:58:0b:24:69:61:d1:d6:a0:cf:
f2:78:68:aa:64:0d:98:5f:36:c7:69:28:79:59:4e:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F1:0A:16:C4:93:B1:2B:4C:98:8B:6D:FF:6E:3D:DA:60:5B:9C:5A
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/cvEKFsSTsStMmItt_2492mBbnFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c7:82:e2:75:fd:ad:4b:85:8c:1f:d8:e7:1f:6c:db:98:a4:
11:09:6b:5b:ef:59:18:b1:26:c1:e9:7a:79:ac:cd:b5:9f:0e:
a7:c9:1f:3f:2a:92:84:ff:ee:b9:88:1e:73:9a:a9:cd:75:9d:
df:83:ab:89:79:d9:dc:76:01:7b:09:f2:48:31:62:82:19:0e:
42:7b:0c:3a:e8:59:62:4b:aa:77:d8:d5:4d:30:d8:0e:4a:d2:
33:b4:0f:12:b8:18:f2:48:ea:48:c9:7d:ce:87:7b:f0:9a:01:
c1:92:33:6d:ac:fa:9a:17:dc:b0:c2:35:06:91:d3:78:98:a7:
f4:de:10:d1:8b:4a:b7:54:71:5c:e2:de:b2:d7:cc:a9:9f:a6:
5e:7d:79:10:36:4a:8c:f7:d8:e6:79:ae:fc:84:61:2c:b2:02:
f2:f6:fd:8b:b5:9c:d9:90:ad:a3:8b:b2:60:d1:6b:2d:e5:ff:
2b:7d:d8:80:f9:5f:5b:5b:7d:b0:fe:89:2b:9b:19:30:60:37:
9b:f6:da:14:02:97:e9:ec:df:a1:52:72:5a:d8:e9:73:93:94:
b7:13:f7:7f:cd:54:0b:eb:44:ca:80:6f:51:78:75:78:3d:f2:
71:6c:57:fb:8a:74:a1:1a:84:78:4e:e5:d1:9e:15:f3:87:93:
95:ce:c1:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj127J0WF/lkuOZBox1l7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjM2ZTAyZjE1NTRmNzBkOTcxYTY1Njg0OWMwMWJkZmYx
MzhjZTgwHhcNMjUwMTAxMjE0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmYxMGExNmM0OTNiMTJiNGM5ODhiNmRmZjZlM2RkYTYwNWI5YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGXm7+5kkXduKU6v/Q2jb+jGNaPi
JUb7clnk2EPko9SRNVpUhLNPYMIm6goB7RSEDM92ykmS8RTMWRLnNXRe3dO+LLY7
VCiv0rg6Tnk8cD1J9P3oIJGw42jTPFYyIydtnno71yurmzVFQY8mf/r1QpBdycd8
+x3Cok1IaWzV5WqyhQZBkD3lQt6iWg0B2aE71u2kxqnKZahbdqTJ8PqHUc/8K5qp
oeOq3O6gm5GTjxUZvAWGu5ZNzUX1n94AxI72kj28G249ERBD9VB0iDqt4jtQt7DZ
eBDySgmhdrDb9sXfguroDItYCyRpYdHWoM/yeGiqZA2YXzbHaSh5WU7q2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLxChbEk7ErTJiLbf9uPdpgW5xaMB8GA1UdIwQY
MBaAFOJjbgLxVU9w2XGmVoScAb3/E4zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1OdUF2RlZUM0RaY2FaV2hKd0J2ZjhUak9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMzU1MTMtZWJkYi00NTUwLWE3ZDQt
MTJmOWY3MzNkYzRmLzEvY3ZFS0ZzU1RzU3RNbUl0dF8yNDkybUJibkZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMzU1MTMtZWJkYi00NTUwLWE3ZDQtMTJmOWY3MzNkYzRm
LzEvNG1OdUF2RlZUM0RaY2FaV2hKd0J2ZjhUak9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaugMA0G
CSqGSIb3DQEBCwUAA4IBAQA7x4Lidf2tS4WMH9jnH2zbmKQRCWtb71kYsSbB6Xp5
rM21nw6nyR8/KpKE/+65iB5zmqnNdZ3fg6uJedncdgF7CfJIMWKCGQ5Ceww66Fli
S6p32NVNMNgOStIztA8SuBjySOpIyX3Oh3vwmgHBkjNtrPqaF9ywwjUGkdN4mKf0
3hDRi0q3VHFc4t6y18ypn6ZefXkQNkqM99jmea78hGEssgLy9v2LtZzZkK2ji7Jg
0Wst5f8rfdiA+V9bW32w/okrmxkwYDeb9toUApfp7N+hUnJa2Olzk5S3E/d/zVQL
60TKgG9ReHV4PfJxbFf7inShGoR4TuXRnhXzh5OVzsFc
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:12:36 2025 by rpki-client