Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/j6TG3JcPAHQ9c-LiOcQfpSnx2QM.roa
File: j6TG3JcPAHQ9c-LiOcQfpSnx2QM.roa (raw, json)
Hash identifier: 4DP1e8Dqqoj61RYtupgU/GXI0BGv2diQ6Tgxfb/AQwg=
Subject key identifier: 8F:A4:C6:DC:97:0F:00:74:3D:73:E2:E2:39:C4:1F:A5:29:F1:D9:03
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0193BA3394CE51EF019D4BCDB8BCFC268E04
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/j6TG3JcPAHQ9c-LiOcQfpSnx2QM.roa
Signing time: Thu 12 Dec 2024 09:29:22 +0000
ROA not before: Thu 12 Dec 2024 09:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.213.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:33:94:ce:51:ef:01:9d:4b:cd:b8:bc:fc:26:8e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Dec 12 09:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fa4c6dc970f00743d73e2e239c41fa529f1d903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:78:39:17:8e:81:da:d9:20:5f:0b:66:09:
eb:62:1f:ef:18:66:92:c3:4e:27:2c:17:1f:5f:3a:
62:5c:6a:74:a3:f5:35:ca:85:41:65:54:7c:b1:c6:
fd:d2:c9:2f:17:9d:59:f4:4a:a3:2b:a3:cf:ca:27:
0b:15:b1:1b:03:fe:d2:4b:9c:a9:14:7b:65:e8:94:
36:d1:7f:e8:27:57:ab:f7:69:6a:50:2b:57:90:06:
c1:14:80:3b:6c:fe:db:61:d9:14:5c:88:00:1f:88:
96:8a:8c:93:28:d5:ae:82:79:f8:f3:60:68:51:a1:
7b:a5:4c:0f:e8:55:2b:dc:4d:e6:86:41:7c:33:f6:
e0:c8:f7:b7:39:34:30:99:ab:d2:fe:7a:28:67:3f:
34:cc:53:52:6f:20:29:51:cc:ea:37:2e:79:57:41:
6e:54:d2:b2:13:44:1a:f1:4b:b6:31:70:c9:84:19:
a2:91:b1:c8:da:97:82:8b:ea:19:19:4e:01:16:bb:
08:ba:8f:df:af:e3:82:04:e7:bc:de:59:90:27:81:
2c:f4:f4:12:c0:31:9c:a7:8e:bb:db:ca:fe:1e:5b:
40:ad:f7:8a:4b:97:e7:a8:83:8c:c7:a2:9e:65:73:
70:92:e1:42:c7:9b:73:48:04:ac:85:44:a6:24:ff:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:C6:DC:97:0F:00:74:3D:73:E2:E2:39:C4:1F:A5:29:F1:D9:03
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/j6TG3JcPAHQ9c-LiOcQfpSnx2QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.193.0/24
Signature Algorithm: sha256WithRSAEncryption
96:32:c5:e6:81:0b:c4:0e:fd:b0:61:43:59:cc:94:53:11:6f:
70:c1:b5:c7:04:46:0b:4b:97:37:d1:a5:8c:bd:80:4b:cb:c3:
5c:d0:99:3d:d9:93:65:f9:2d:cd:de:8f:0d:29:0b:e9:76:35:
d9:b3:77:77:88:0f:1b:84:8e:f4:78:ef:e0:16:3c:4b:8e:26:
ee:b5:fe:f2:c9:b0:9b:71:34:a4:f5:15:ee:67:de:ae:1e:d3:
29:de:16:8c:f3:4c:97:a4:e2:90:b1:0e:87:f3:4d:bd:7f:76:
97:1e:f1:a3:ba:3f:f5:5a:06:34:01:f6:bd:b8:93:e6:fa:7b:
53:34:65:12:2b:4a:0e:ec:e4:8a:4a:4e:4f:bf:e7:31:e7:45:
e9:2d:94:96:fe:17:f8:32:fa:5d:cd:15:d9:9d:ec:b7:20:df:
8c:d5:98:8f:31:c6:78:f1:3c:b4:5d:de:5a:e1:24:78:a8:bd:
43:78:75:74:20:8f:33:e1:16:12:94:25:c0:b0:0c:fc:92:8a:
71:83:a6:04:b2:18:79:99:39:2f:9d:01:37:c9:da:48:da:d1:
ee:ec:10:f4:1d:99:17:05:2e:60:8a:62:93:0a:4b:65:b3:8b:
fb:f7:05:60:92:29:72:bd:c0:fb:ed:1b:ae:73:95:17:3d:bb:
ba:39:f8:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO6M5TOUe8BnUvNuLz8Jo4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjQxMjEyMDkyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmE0YzZkYzk3MGYwMDc0M2Q3M2UyZTIzOWM0MWZhNTI5ZjFkOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sh4OReOgdrZIF8LZgnrYh/vGGaS
w04nLBcfXzpiXGp0o/U1yoVBZVR8scb90skvF51Z9EqjK6PPyicLFbEbA/7SS5yp
FHtl6JQ20X/oJ1er92lqUCtXkAbBFIA7bP7bYdkUXIgAH4iWioyTKNWugnn482Bo
UaF7pUwP6FUr3E3mhkF8M/bgyPe3OTQwmavS/nooZz80zFNSbyApUczqNy55V0Fu
VNKyE0Qa8Uu2MXDJhBmikbHI2peCi+oZGU4BFrsIuo/fr+OCBOe83lmQJ4Es9PQS
wDGcp46728r+HltArfeKS5fnqIOMx6KeZXNwkuFCx5tzSASshUSmJP+7JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+kxtyXDwB0PXPi4jnEH6Up8dkDMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvajZURzNKY1BBSFE5Yy1MaU9jUWZwU254MlFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudXBMA0G
CSqGSIb3DQEBCwUAA4IBAQCWMsXmgQvEDv2wYUNZzJRTEW9wwbXHBEYLS5c30aWM
vYBLy8Nc0Jk92ZNl+S3N3o8NKQvpdjXZs3d3iA8bhI70eO/gFjxLjibutf7yybCb
cTSk9RXuZ96uHtMp3haM80yXpOKQsQ6H8029f3aXHvGjuj/1WgY0Afa9uJPm+ntT
NGUSK0oO7OSKSk5Pv+cx50XpLZSW/hf4MvpdzRXZney3IN+M1ZiPMcZ48Ty0Xd5a
4SR4qL1DeHV0II8z4RYSlCXAsAz8kopxg6YEshh5mTkvnQE3ydpI2tHu7BD0HZkX
BS5gimKTCktls4v79wVgkilyvcD77Ruuc5UXPbu6Ofhr
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:08:51 2025 by rpki-client