Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/IYDhFQ6tcOiloMeBctVTy2WAxiw.roa
File: IYDhFQ6tcOiloMeBctVTy2WAxiw.roa (raw, json)
Hash identifier: LurUtlBxh1EC3JkBJMpNqriBGLbOyvQPIKBmM5r/fIo=
Subject key identifier: 21:80:E1:15:0E:AD:70:E8:A5:A0:C7:81:72:D5:53:CB:65:80:C6:2C
Certificate issuer: /CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Certificate serial: 018CC86F6D0B74C5EAC90C0B0607AF15CEC3
Authority key identifier: 18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/IYDhFQ6tcOiloMeBctVTy2WAxiw.roa
Signing time: Tue 02 Jan 2024 04:29:54 +0000
ROA not before: Tue 02 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62200
IP address blocks: 82.202.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6d:0b:74:c5:ea:c9:0c:0b:06:07:af:15:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Validity
Not Before: Jan 2 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2180e1150ead70e8a5a0c78172d553cb6580c62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:e8:4f:50:6f:a9:5c:55:be:47:c3:b2:15:
73:8e:c5:f5:c6:da:84:a0:ed:84:f2:cd:3d:d8:f6:
01:0d:70:32:bf:8e:e2:ef:1f:ac:29:83:f4:b3:a4:
0f:8e:d4:58:9f:61:f8:24:d5:6e:40:a4:98:b0:02:
c5:16:d5:8c:9e:4e:19:14:0e:e2:22:4f:a7:42:11:
55:2f:ba:a6:f0:fe:bc:0b:0e:52:9e:8f:68:7d:cb:
a2:44:db:e6:ee:31:30:8c:9e:17:60:38:c9:8d:44:
d4:8b:78:e9:3e:6b:d9:d0:f7:1b:d5:b7:18:00:99:
1c:c4:67:d3:16:57:68:cb:ea:92:e4:82:b3:cd:1a:
a7:1e:9a:26:76:25:b9:f0:06:4f:bc:48:d8:25:b0:
83:bb:b3:aa:21:47:38:bc:78:34:23:64:66:c7:d4:
3d:0e:c8:85:cc:ec:48:e5:6b:70:e5:54:8d:7d:7f:
cd:33:2a:29:f8:d5:64:48:e0:70:c6:5e:ca:52:76:
05:1e:49:56:d0:e7:bd:e9:4b:97:32:f1:27:83:dc:
4d:d3:1c:7e:7b:fc:3c:2c:d3:80:eb:8c:12:56:28:
10:f8:78:bb:54:9e:b4:39:9b:26:4a:50:64:41:5a:
9f:c1:cd:10:97:83:38:88:1a:19:9f:fd:55:b2:8d:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:80:E1:15:0E:AD:70:E8:A5:A0:C7:81:72:D5:53:CB:65:80:C6:2C
X509v3 Authority Key Identifier:
keyid:18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/IYDhFQ6tcOiloMeBctVTy2WAxiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.164.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:cf:37:5e:61:70:ef:f9:0d:04:ac:00:5e:99:63:42:03:f1:
61:e9:4a:c5:fc:72:0e:ec:f5:1c:5a:5a:40:bf:96:f0:02:fd:
8c:15:34:68:ab:18:32:71:fd:fb:9c:15:30:44:cc:c7:9c:67:
49:65:d5:84:aa:f8:fc:e7:61:a5:9d:14:49:e8:5f:40:7e:cc:
a4:4d:1b:93:13:76:fe:4d:d7:70:54:0d:2a:25:75:c2:cc:05:
5e:ba:d7:6b:e0:d8:f7:b1:4c:62:4c:7d:6c:de:9e:4f:9a:16:
0f:e8:91:fb:a1:44:68:45:f6:2d:1b:b1:32:12:ac:90:be:87:
27:58:a9:1d:c2:0d:8b:08:67:d4:be:b0:10:1a:da:34:db:78:
6b:92:56:94:bf:92:28:d3:03:af:58:2e:de:c4:9b:b0:bb:22:
cb:db:30:92:26:9c:6e:7f:a2:36:55:1e:7b:21:5f:f9:79:77:
7c:ed:60:10:fc:b3:36:e6:f0:a3:e2:49:dd:54:b7:c7:aa:8c:
36:5e:cc:ba:c4:b1:fe:7f:ea:bd:3a:e9:29:b3:d1:e9:e2:ba:
01:d4:f0:6e:09:70:32:51:82:e8:a1:99:98:a5:86:38:3e:42:
6c:ca:36:fe:d1:70:b9:9e:2c:1d:96:89:b5:13:a6:5c:09:9a:
19:14:39:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb20LdMXqyQwLBgevFc7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWQ0NmI3YzlkMzIxYzliYTE4OWU2NmIxOTMzYzEzMjQx
OTdjZWMwHhcNMjQwMTAyMDQyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTgwZTExNTBlYWQ3MGU4YTVhMGM3ODE3MmQ1NTNjYjY1ODBjNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtToT1BvqVxVvkfDshVzjsX1xtqE
oO2E8s092PYBDXAyv47i7x+sKYP0s6QPjtRYn2H4JNVuQKSYsALFFtWMnk4ZFA7i
Ik+nQhFVL7qm8P68Cw5Sno9ofcuiRNvm7jEwjJ4XYDjJjUTUi3jpPmvZ0Pcb1bcY
AJkcxGfTFldoy+qS5IKzzRqnHpomdiW58AZPvEjYJbCDu7OqIUc4vHg0I2Rmx9Q9
DsiFzOxI5Wtw5VSNfX/NMyop+NVkSOBwxl7KUnYFHklW0Oe96UuXMvEng9xN0xx+
e/w8LNOA64wSVigQ+Hi7VJ60OZsmSlBkQVqfwc0Ql4M4iBoZn/1Vso1eqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGA4RUOrXDopaDHgXLVU8tlgMYsMB8GA1UdIwQY
MBaAFBhdRrfJ0yHJuhieZrGTPBMkGXzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0YxR3Q4blRJY202R0o1bXNaTThFeVFaZk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iY2FiYjktZmJkYi00MzExLWEyOWMt
YzE3ZGU1MGZkNWZiLzEvSVlEaEZRNnRjT2lsb01lQmN0VlR5MldBeGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iY2FiYjktZmJkYi00MzExLWEyOWMtYzE3ZGU1MGZkNWZi
LzEvR0YxR3Q4blRJY202R0o1bXNaTThFeVFaZk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsqkMA0G
CSqGSIb3DQEBCwUAA4IBAQDTzzdeYXDv+Q0ErABemWNCA/Fh6UrF/HIO7PUcWlpA
v5bwAv2MFTRoqxgycf37nBUwRMzHnGdJZdWEqvj852GlnRRJ6F9AfsykTRuTE3b+
TddwVA0qJXXCzAVeutdr4Nj3sUxiTH1s3p5PmhYP6JH7oURoRfYtG7EyEqyQvocn
WKkdwg2LCGfUvrAQGto023hrklaUv5Io0wOvWC7exJuwuyLL2zCSJpxuf6I2VR57
IV/5eXd87WAQ/LM25vCj4kndVLfHqow2Xsy6xLH+f+q9Oukps9Hp4roB1PBuCXAy
UYLooZmYpYY4PkJsyjb+0XC5niwdlom1E6ZcCZoZFDmi
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:20 2025 by rpki-client