Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/i8h6g-qaGe_scOz8YlJsRltrX74.roa
File: i8h6g-qaGe_scOz8YlJsRltrX74.roa (raw, json)
Hash identifier: TDX8i6mVgb50+tUSNFoIPmOcyGY5hvp534YiU4MiXSM=
Subject key identifier: 8B:C8:7A:83:EA:9A:19:EF:EC:70:EC:FC:62:52:6C:46:5B:6B:5F:BE
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F48D77DCBDCDBD6C1FD13C1BA398
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/i8h6g-qaGe_scOz8YlJsRltrX74.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151797
IP address blocks: 149.126.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f4:8d:77:dc:bd:cd:bd:6c:1f:d1:3c:1b:a3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bc87a83ea9a19efec70ecfc62526c465b6b5fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:74:6e:d4:6a:9c:e1:9b:5a:e3:52:9d:fd:
9e:1c:c1:38:05:91:8e:ca:7e:9d:e6:ed:da:1b:79:
46:2f:95:e4:7a:dd:8a:6d:e6:32:bb:3e:f4:cb:71:
27:2a:a3:2b:b9:58:ad:8b:29:1e:f3:20:7f:06:c1:
07:2c:9c:46:ec:23:ea:e7:78:f4:94:f7:4f:26:74:
16:8f:30:b9:8e:9c:c2:e0:33:70:b6:e2:d7:0b:07:
ca:de:91:3d:78:b8:a5:c9:6f:e8:32:0d:2b:fc:07:
ae:68:75:ce:ed:12:08:01:6a:83:46:ab:6f:9b:64:
57:b9:b1:c6:42:0f:09:bb:cc:73:eb:e7:1c:c9:48:
be:c7:68:d2:45:c8:d5:9b:bd:11:11:3c:ab:14:28:
53:9a:68:65:44:3f:b6:c9:81:d9:3d:7f:63:59:41:
72:66:0a:93:cf:c3:5d:ff:13:a1:d7:f5:c5:18:d7:
67:02:7d:7f:34:af:a9:6d:6f:6b:9d:b3:17:96:90:
43:50:b8:c4:d2:fc:d2:04:21:d3:40:12:f2:ea:12:
60:52:bc:d4:0d:21:50:c1:a8:f5:b8:a7:3e:fb:45:
58:9c:c1:f7:ca:1a:69:3a:d1:7e:24:56:db:1e:7e:
96:0e:03:e0:48:5a:25:81:5a:ed:5d:0f:aa:58:57:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C8:7A:83:EA:9A:19:EF:EC:70:EC:FC:62:52:6C:46:5B:6B:5F:BE
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/i8h6g-qaGe_scOz8YlJsRltrX74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.232.0/22
Signature Algorithm: sha256WithRSAEncryption
72:aa:f7:6b:a5:e0:27:41:d2:7d:65:5f:79:5c:81:17:71:6b:
33:ed:3a:d1:78:d1:87:e9:bf:a8:ae:87:1b:6f:a2:49:a3:db:
d4:62:28:ad:af:bd:47:b8:65:38:11:30:9a:f7:d4:9a:3f:17:
3e:d5:7f:a8:7c:40:0c:b0:20:c8:cd:09:66:ea:56:83:26:40:
ca:89:49:ba:97:56:cd:2a:e5:3c:70:2a:ca:da:df:49:9f:2b:
5d:d9:ef:f9:72:2d:47:de:61:3a:a3:1f:54:9d:e6:e5:85:f9:
76:8c:f9:02:0c:4d:cf:c0:e2:2d:d2:e2:00:9a:b7:f5:47:81:
2e:b1:67:30:51:d6:3b:e5:bb:d6:82:27:30:c3:12:91:ee:10:
19:f7:e9:d5:b0:75:42:63:e7:0d:f9:44:21:fc:d4:22:a7:80:
d8:4a:64:cf:c5:55:b4:f8:3b:88:42:7c:67:87:72:52:48:60:
34:53:07:53:18:51:39:49:cc:e0:0b:0f:d7:e2:e2:fc:cc:ad:
3e:21:1f:75:67:1d:d2:11:bd:83:71:54:13:2e:ca:46:d3:e8:
3d:c6:a1:13:7b:b3:da:69:46:3d:b7:93:9a:9e:05:ae:29:0e:
28:1d:a8:bd:96:84:a3:bc:d8:bd:a8:8d:4f:55:ce:79:ea:56:
5c:25:98:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjafSNd9y9zb1sH9E8G6OYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwMTAxMTk0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmM4N2E4M2VhOWExOWVmZWM3MGVjZmM2MjUyNmM0NjViNmI1ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApah0btRqnOGbWuNSnf2eHME4BZGO
yn6d5u3aG3lGL5Xket2KbeYyuz70y3EnKqMruVitiyke8yB/BsEHLJxG7CPq53j0
lPdPJnQWjzC5jpzC4DNwtuLXCwfK3pE9eLilyW/oMg0r/AeuaHXO7RIIAWqDRqtv
m2RXubHGQg8Ju8xz6+ccyUi+x2jSRcjVm70RETyrFChTmmhlRD+2yYHZPX9jWUFy
ZgqTz8Nd/xOh1/XFGNdnAn1/NK+pbW9rnbMXlpBDULjE0vzSBCHTQBLy6hJgUrzU
DSFQwaj1uKc++0VYnMH3yhppOtF+JFbbHn6WDgPgSFolgVrtXQ+qWFfrvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIvIeoPqmhnv7HDs/GJSbEZba1++MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvaThoNmctcWFHZV9zY096OFlsSnNSbHRyWDc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClX7oMA0G
CSqGSIb3DQEBCwUAA4IBAQByqvdrpeAnQdJ9ZV95XIEXcWsz7TrReNGH6b+orocb
b6JJo9vUYiitr71HuGU4ETCa99SaPxc+1X+ofEAMsCDIzQlm6laDJkDKiUm6l1bN
KuU8cCrK2t9Jnytd2e/5ci1H3mE6ox9Uneblhfl2jPkCDE3PwOIt0uIAmrf1R4Eu
sWcwUdY75bvWgicwwxKR7hAZ9+nVsHVCY+cN+UQh/NQip4DYSmTPxVW0+DuIQnxn
h3JSSGA0UwdTGFE5SczgCw/X4uL8zK0+IR91Zx3SEb2DcVQTLspG0+g9xqETe7Pa
aUY9t5OangWuKQ4oHai9loSjvNi9qI1PVc556lZcJZhJ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:48 2025 by rpki-client