Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/2lpdEuX0pmT8tr30UoYg53K17Z0.roa
File: 2lpdEuX0pmT8tr30UoYg53K17Z0.roa (raw, json)
Hash identifier: L800/MG7j3YwnU+h/ZNwGTuouEu6GfmWU0Y8mUf/uaY=
Subject key identifier: DA:5A:5D:12:E5:F4:A6:64:FC:B6:BD:F4:52:86:20:E7:72:B5:ED:9D
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 018CCA2B676809B7115109D28349BD364CE4
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/2lpdEuX0pmT8tr30UoYg53K17Z0.roa
Signing time: Tue 02 Jan 2024 12:34:51 +0000
ROA not before: Tue 02 Jan 2024 12:34:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211701
IP address blocks: 185.131.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:67:68:09:b7:11:51:09:d2:83:49:bd:36:4c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 2 12:34:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da5a5d12e5f4a664fcb6bdf4528620e772b5ed9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:98:b1:68:c8:8c:8a:d8:21:e9:98:e1:a4:
70:37:b8:a8:b7:3c:d3:ab:6f:21:1d:0d:d1:63:55:
0f:46:97:5a:ed:13:62:7c:8a:bc:fc:60:e6:d6:a4:
24:3e:cc:ff:c9:e2:b0:ff:16:5b:d3:03:89:8b:21:
4a:78:b5:29:bb:52:28:10:07:85:99:18:36:13:90:
c8:b0:48:09:5c:35:fc:45:f4:60:8a:8b:10:b1:12:
34:04:60:c7:87:fc:2e:04:5f:85:b0:44:8c:97:60:
c0:81:c2:10:38:2a:0e:57:ac:28:0d:da:4e:b7:f5:
75:e4:21:a9:c5:9a:73:ae:cf:f7:06:e1:ec:b0:44:
4e:2b:64:ba:da:97:f8:37:52:7e:52:b7:32:80:63:
cc:b2:dd:a0:06:9c:8f:15:6e:92:b9:d6:1f:38:d0:
ca:49:55:97:e4:03:3d:2f:76:9d:b8:c2:48:8f:20:
2e:74:ee:99:b9:0d:a8:9c:7f:38:12:40:a4:50:e5:
c0:ba:f1:dc:1a:21:38:6f:88:0e:57:f0:70:f9:7d:
2d:62:3b:97:80:7f:20:bf:31:c7:67:97:20:4d:76:
c9:2d:f7:ae:a4:db:6a:7a:34:fc:2d:b5:26:81:d5:
a3:bc:c3:e2:01:51:50:3e:54:b6:ed:33:03:22:e7:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5A:5D:12:E5:F4:A6:64:FC:B6:BD:F4:52:86:20:E7:72:B5:ED:9D
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/2lpdEuX0pmT8tr30UoYg53K17Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.223.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d3:df:34:70:d9:64:8a:a7:49:62:e3:0e:da:d7:78:57:18:
49:1a:69:48:0d:10:d7:e6:83:d3:99:17:bc:0b:84:39:6f:a8:
ab:a1:87:ef:73:31:54:e2:ad:45:68:98:7b:f6:0d:e3:b1:68:
30:3a:aa:9a:60:ba:80:05:59:31:03:7c:03:1e:39:ee:ef:d1:
78:a5:70:2c:96:07:37:cd:3f:9a:df:5a:8e:f3:5f:90:0a:e9:
9f:88:0d:40:a9:fc:6a:d5:60:c7:bf:0b:b4:86:f8:aa:d4:2e:
90:e2:95:d3:e9:fe:78:20:72:56:87:a1:1d:01:52:4d:f3:da:
9e:58:37:d5:4e:96:5c:24:0e:89:2d:1a:b5:2d:a1:7a:19:da:
28:33:6b:ed:06:57:fb:7a:5f:65:e8:ed:38:19:a3:79:71:e4:
17:b7:6b:56:e7:d3:4d:15:d8:63:15:04:1e:16:cb:d9:fd:c8:
11:5a:98:0e:ee:44:05:92:5b:f6:e5:47:28:a3:97:22:fe:a2:
79:8e:d3:85:48:71:af:f7:72:31:2a:07:fd:60:96:24:2f:ae:
44:cb:1e:cd:b8:a6:49:01:22:b4:67:2d:2b:1e:29:3d:2b:91:
12:dd:8f:7b:a9:0f:b3:6b:e8:4f:d7:0c:f8:5c:b5:95:2c:26:
6a:15:d8:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK2doCbcRUQnSg0m9NkzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1
NjI4ZjkwHhcNMjQwMTAyMTIzNDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTVhNWQxMmU1ZjRhNjY0ZmNiNmJkZjQ1Mjg2MjBlNzcyYjVlZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLCYsWjIjIrYIemY4aRwN7iotzzT
q28hHQ3RY1UPRpda7RNifIq8/GDm1qQkPsz/yeKw/xZb0wOJiyFKeLUpu1IoEAeF
mRg2E5DIsEgJXDX8RfRgiosQsRI0BGDHh/wuBF+FsESMl2DAgcIQOCoOV6woDdpO
t/V15CGpxZpzrs/3BuHssEROK2S62pf4N1J+UrcygGPMst2gBpyPFW6SudYfONDK
SVWX5AM9L3aduMJIjyAudO6ZuQ2onH84EkCkUOXAuvHcGiE4b4gOV/Bw+X0tYjuX
gH8gvzHHZ5cgTXbJLfeupNtqejT8LbUmgdWjvMPiAVFQPlS27TMDIue0KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNpaXRLl9KZk/La99FKGIOdyte2dMB8GA1UdIwQY
MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt
ZTQ0MTliNjQyMTJlLzEvMmxwZEV1WDBwbVQ4dHIzMFVvWWc1M0sxN1owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl
LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYPfMA0G
CSqGSIb3DQEBCwUAA4IBAQCX0980cNlkiqdJYuMO2td4VxhJGmlIDRDX5oPTmRe8
C4Q5b6iroYfvczFU4q1FaJh79g3jsWgwOqqaYLqABVkxA3wDHjnu79F4pXAslgc3
zT+a31qO81+QCumfiA1Aqfxq1WDHvwu0hviq1C6Q4pXT6f54IHJWh6EdAVJN89qe
WDfVTpZcJA6JLRq1LaF6GdooM2vtBlf7el9l6O04GaN5ceQXt2tW59NNFdhjFQQe
FsvZ/cgRWpgO7kQFklv25Ucoo5ci/qJ5jtOFSHGv93IxKgf9YJYkL65Eyx7NuKZJ
ASK0Zy0rHik9K5ES3Y97qQ+za+hP1wz4XLWVLCZqFdjY
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:14 2025 by rpki-client