Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/1IglzTgNxvlQxtZzdqvHXP8KoF8.roa
File: 1IglzTgNxvlQxtZzdqvHXP8KoF8.roa (raw, json)
Hash identifier: ONhCC/oPBTKCApZ6GbcEqvO3nMk4C52NzJJDkv5+JsI=
Subject key identifier: D4:88:25:CD:38:0D:C6:F9:50:C6:D6:73:76:AB:C7:5C:FF:0A:A0:5F
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 01954BDB53714E3AB4209B67C3EBED9AF828
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/1IglzTgNxvlQxtZzdqvHXP8KoF8.roa
Signing time: Fri 28 Feb 2025 09:20:19 +0000
ROA not before: Fri 28 Feb 2025 09:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.91.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:db:53:71:4e:3a:b4:20:9b:67:c3:eb:ed:9a:f8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Feb 28 09:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d48825cd380dc6f950c6d67376abc75cff0aa05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:62:42:b0:1d:ca:67:7a:e8:ae:e4:a8:7e:
6c:7d:52:24:e0:91:36:e1:74:3c:43:ad:fb:47:ac:
9c:25:e0:37:52:09:fb:a3:65:69:d4:1d:f1:5d:ea:
25:84:25:d2:6a:71:65:94:17:2c:a7:64:16:d6:16:
b8:07:89:d1:4f:77:e6:7f:1e:eb:e4:ed:41:f3:27:
16:02:7f:5d:02:04:70:a9:72:62:4d:d0:61:82:91:
03:a8:dc:b9:3c:b6:a2:5e:80:3b:8b:12:5c:6a:9c:
8b:a2:4a:a6:8c:c9:a8:ba:20:c4:61:a1:ab:24:53:
de:34:8f:56:75:c3:5b:2e:e4:79:bf:cc:64:9a:92:
16:34:cb:3f:32:af:95:30:b0:4c:82:00:1d:08:e9:
cc:55:52:26:a0:e1:c3:69:52:0e:3a:fa:37:53:d1:
a3:61:47:33:95:98:95:9d:51:94:3c:e2:52:a4:0d:
a9:54:e6:53:7f:4d:0a:43:d2:d1:5a:04:a6:b2:f4:
a0:e2:d1:79:ef:2f:75:bd:f4:40:9b:01:84:61:47:
d9:ba:ba:e1:6b:ba:21:fe:99:8a:fd:36:b8:54:72:
8d:c3:05:57:78:26:fe:83:9a:c2:a1:ae:48:7b:91:
a6:b1:fb:bf:c9:d1:7c:9e:01:1d:65:14:d9:18:e3:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:25:CD:38:0D:C6:F9:50:C6:D6:73:76:AB:C7:5C:FF:0A:A0:5F
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/1IglzTgNxvlQxtZzdqvHXP8KoF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:a5:ae:6f:59:cd:e3:80:68:62:16:52:2d:f2:30:09:c2:a7:
81:16:b4:da:31:29:d3:50:3a:68:51:ca:e9:72:2d:fe:53:cf:
a1:de:9e:2e:68:e7:8d:5e:14:92:ba:71:bd:d2:cf:b3:d9:dc:
71:2a:83:5d:c1:63:16:2c:d0:62:01:4b:76:3d:15:6c:d0:d4:
95:36:83:d4:4a:65:20:6f:9b:02:52:25:a2:e2:bb:ae:e2:46:
2f:eb:37:e9:21:fe:23:24:11:01:69:2a:1e:c8:93:96:d4:e3:
08:29:94:41:33:b5:64:f2:05:5b:77:3f:c9:73:10:f0:aa:78:
ab:9d:c6:1f:07:81:ab:65:28:b3:cc:e1:fe:2e:66:0b:51:41:
ee:b4:e4:fe:64:b6:09:4d:a7:ec:45:b5:5c:99:55:b2:29:5f:
64:c2:33:fc:0c:58:8e:0e:9e:50:51:7f:55:44:6d:8e:66:92:
7d:64:af:f2:e5:f6:a2:46:e7:1c:01:d5:64:3c:93:c1:98:af:
c8:df:97:f1:4c:cc:fb:aa:23:f9:3a:2d:e5:ae:85:71:de:7b:
2c:c3:53:a2:04:eb:35:66:e0:a8:35:ff:32:4e:58:7f:07:56:
78:8d:a8:9d:8e:d8:e2:83:00:e4:f4:43:e1:8e:ec:e5:c3:02:
39:c6:94:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVL21NxTjq0IJtnw+vtmvgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNzNmMjM4ZDk2Y2Y2N2E1ZWZjMGMzNzQ3NmZkMzA2MDI5
YWY1NTIwHhcNMjUwMjI4MDkyMDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDg4MjVjZDM4MGRjNmY5NTBjNmQ2NzM3NmFiYzc1Y2ZmMGFhMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDhiQrAdymd66K7kqH5sfVIk4JE2
4XQ8Q637R6ycJeA3Ugn7o2Vp1B3xXeolhCXSanFllBcsp2QW1ha4B4nRT3fmfx7r
5O1B8ycWAn9dAgRwqXJiTdBhgpEDqNy5PLaiXoA7ixJcapyLokqmjMmouiDEYaGr
JFPeNI9WdcNbLuR5v8xkmpIWNMs/Mq+VMLBMggAdCOnMVVImoOHDaVIOOvo3U9Gj
YUczlZiVnVGUPOJSpA2pVOZTf00KQ9LRWgSmsvSg4tF57y91vfRAmwGEYUfZurrh
a7oh/pmK/Ta4VHKNwwVXeCb+g5rCoa5Ie5Gmsfu/ydF8ngEdZRTZGONQjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNSIJc04Dcb5UMbWc3arx1z/CqBfMB8GA1UdIwQY
MBaAFM1z8jjZbPZ6XvwMN0dv0wYCmvVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelhQeU9ObHM5bnBlX0F3M1IyX1RCZ0thOVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84NzEyNjgtYmNjMS00NzIyLWIxNGIt
ZGQwMjgxMTkwM2RmLzEvMUlnbHpUZ054dmxReHRaemRxdkhYUDhLb0Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84NzEyNjgtYmNjMS00NzIyLWIxNGItZGQwMjgxMTkwM2Rm
LzEvelhQeU9ObHM5bnBlX0F3M1IyX1RCZ0thOVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVtwMA0G
CSqGSIb3DQEBCwUAA4IBAQDLpa5vWc3jgGhiFlIt8jAJwqeBFrTaMSnTUDpoUcrp
ci3+U8+h3p4uaOeNXhSSunG90s+z2dxxKoNdwWMWLNBiAUt2PRVs0NSVNoPUSmUg
b5sCUiWi4ruu4kYv6zfpIf4jJBEBaSoeyJOW1OMIKZRBM7Vk8gVbdz/JcxDwqnir
ncYfB4GrZSizzOH+LmYLUUHutOT+ZLYJTafsRbVcmVWyKV9kwjP8DFiODp5QUX9V
RG2OZpJ9ZK/y5faiRuccAdVkPJPBmK/I35fxTMz7qiP5Oi3lroVx3nssw1OiBOs1
ZuCoNf8yTlh/B1Z4jaidjtjigwDk9EPhjuzlwwI5xpSQ
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:40:49 2025 by rpki-client