Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/Fot2zKl_a30-M-DuB_AJl5qo8p8.roa
File: Fot2zKl_a30-M-DuB_AJl5qo8p8.roa (raw, json)
Hash identifier: 90S5BtlExhgi3CNe4X23M3PBRHSJ28TIBFt7wR88sUM=
Subject key identifier: 16:8B:76:CC:A9:7F:6B:7D:3E:33:E0:EE:07:F0:09:97:9A:A8:F2:9F
Certificate issuer: /CN=47f843cce09c295d2d86d93541169bc1a0f5a2b9
Certificate serial: 05C15CAB
Authority key identifier: 47:F8:43:CC:E0:9C:29:5D:2D:86:D9:35:41:16:9B:C1:A0:F5:A2:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hDzOCcKV0thtk1QRabwaD1ork.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/Fot2zKl_a30-M-DuB_AJl5qo8p8.roa
Signing time: Wed 19 Jan 2022 09:15:31 +0000
ROA not before: Wed 19 Jan 2022 09:15:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207641
IP address blocks: 185.88.9.0/24 maxlen: 24
2a0f:ff40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96558251 (0x5c15cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f843cce09c295d2d86d93541169bc1a0f5a2b9
Validity
Not Before: Jan 19 09:15:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=168b76cca97f6b7d3e33e0ee07f009979aa8f29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:4d:4f:cf:bc:83:36:3f:67:1c:38:bd:c5:
d9:65:0f:af:b6:65:1e:47:c4:28:29:da:ca:55:00:
38:b4:aa:55:de:1e:b6:b5:3b:34:b0:27:8d:fb:48:
da:6e:e4:a3:01:86:7c:2d:84:8d:eb:41:ad:79:5c:
a5:22:64:2d:8f:10:75:17:d9:f7:5c:aa:35:ee:9a:
83:a0:b8:ea:75:9d:c4:bc:8d:9f:e3:29:74:51:cd:
a9:04:cd:48:4b:ce:49:e4:13:e5:05:3d:27:78:96:
6b:81:91:8e:eb:fb:0f:bb:c7:a1:67:fd:cf:4f:b1:
56:0f:f8:91:af:28:b7:c9:0d:01:d5:d9:09:a2:6f:
08:3d:e8:eb:ca:25:ae:b5:39:ef:59:1b:85:4e:b8:
6f:e5:a0:45:f5:8b:5e:32:71:d9:fc:9f:94:81:8d:
d3:10:96:d0:f2:ef:c2:60:4d:d6:37:44:57:48:d6:
99:80:67:76:76:34:e9:1f:10:a5:61:1f:e0:5e:a2:
3a:5c:dd:09:71:39:8a:8e:9c:2a:b4:ea:5c:f6:33:
25:24:c3:dc:4f:2c:c5:2f:4f:87:42:2f:77:c3:4d:
c2:09:a4:34:13:25:37:a3:f6:91:8e:3b:58:6e:2f:
c5:00:de:6a:c6:6f:43:49:e7:f3:5f:5d:56:47:3d:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:76:CC:A9:7F:6B:7D:3E:33:E0:EE:07:F0:09:97:9A:A8:F2:9F
X509v3 Authority Key Identifier:
keyid:47:F8:43:CC:E0:9C:29:5D:2D:86:D9:35:41:16:9B:C1:A0:F5:A2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hDzOCcKV0thtk1QRabwaD1ork.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/Fot2zKl_a30-M-DuB_AJl5qo8p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/R_hDzOCcKV0thtk1QRabwaD1ork.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.9.0/24
IPv6:
2a0f:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
59:82:96:d2:c3:b0:63:05:4e:5a:9b:f2:82:78:fc:c5:a9:5d:
53:fb:e4:76:ac:ba:50:d5:cf:23:e5:f4:c5:f1:73:ef:5d:4a:
7a:08:a2:da:dc:f4:53:b3:e3:0b:37:9d:56:07:e8:f4:a8:b1:
b8:14:95:ed:c4:1d:88:a3:d0:50:12:20:a3:77:9e:e3:90:1a:
eb:47:cc:8b:41:41:f4:7a:ba:b0:5a:10:9b:d3:f4:e9:88:45:
db:66:23:37:ed:6c:8e:5c:a7:c3:97:72:5a:c5:3c:f5:ef:64:
2c:1a:a2:75:2d:e9:f7:85:9f:ec:b6:25:29:af:3b:1c:7a:17:
15:ad:f9:e6:b0:68:93:28:df:40:14:23:a6:6b:a6:6b:22:3f:
79:74:60:85:2a:dc:26:58:10:90:2e:8a:4b:aa:9f:33:33:58:
0d:de:f0:7b:2a:b0:c2:0a:dd:1a:5a:0b:a5:13:70:73:51:17:
c2:28:92:6f:a9:ba:a9:01:fb:e6:6a:a8:3e:44:a4:dc:5d:a1:
4a:04:6b:f4:53:4e:90:8f:40:2a:96:d8:5c:02:22:60:95:31:
2b:12:6e:95:92:ce:a5:59:99:4c:1d:5f:a0:74:af:f0:71:55:
8c:ef:33:09:16:6a:d8:8f:a0:cb:4b:c7:8e:ea:f0:bc:de:7d:
71:14:bb:06
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBcFcqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
N2Y4NDNjY2UwOWMyOTVkMmQ4NmQ5MzU0MTE2OWJjMWEwZjVhMmI5MB4XDTIyMDEx
OTA5MTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTY4Yjc2Y2NhOTdm
NmI3ZDNlMzNlMGVlMDdmMDA5OTc5YWE4ZjI5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN8yTU/PvIM2P2ccOL3F2WUPr7ZlHkfEKCnaylUAOLSqVd4e
trU7NLAnjftI2m7kowGGfC2EjetBrXlcpSJkLY8QdRfZ91yqNe6ag6C46nWdxLyN
n+MpdFHNqQTNSEvOSeQT5QU9J3iWa4GRjuv7D7vHoWf9z0+xVg/4ka8ot8kNAdXZ
CaJvCD3o68olrrU571kbhU64b+WgRfWLXjJx2fyflIGN0xCW0PLvwmBN1jdEV0jW
mYBndnY06R8QpWEf4F6iOlzdCXE5io6cKrTqXPYzJSTD3E8sxS9Ph0Ivd8NNwgmk
NBMlN6P2kY47WG4vxQDeasZvQ0nn819dVkc9B1sCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQWi3bMqX9rfT4z4O4H8AmXmqjynzAfBgNVHSMEGDAWgBRH+EPM4JwpXS2G
2TVBFpvBoPWiuTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JfaER6T0NjS1YwdGh0azFRUmFid2FEMW9yay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvMzZmN2FiLTU2NmItNDlhNS1hMTM3LThmMTUzZDM3YTlhMy8x
L0ZvdDJ6S2xfYTMwLU0tRHVCX0FKbDVxbzhwOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
MzZmN2FiLTU2NmItNDlhNS1hMTM3LThmMTUzZDM3YTlhMy8xL1JfaER6T0NjS1Yw
dGh0azFRUmFid2FEMW9yay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALlYCTANBAIAAjAHAwUDKg//QDAN
BgkqhkiG9w0BAQsFAAOCAQEAWYKW0sOwYwVOWpvygnj8xaldU/vkdqy6UNXPI+X0
xfFz711Kegii2tz0U7PjCzedVgfo9KixuBSV7cQdiKPQUBIgo3ee45Aa60fMi0FB
9Hq6sFoQm9P06YhF22YjN+1sjlynw5dyWsU89e9kLBqidS3p94Wf7LYlKa87HHoX
Fa355rBokyjfQBQjpmumayI/eXRghSrcJlgQkC6KS6qfMzNYDd7weyqwwgrdGloL
pRNwc1EXwiiSb6m6qQH75mqoPkSk3F2hSgRr9FNOkI9AKpbYXAIiYJUxKxJulZLO
pVmZTB1foHSv8HFVjO8zCRZq2I+gy0vHjurwvN59cRS7Bg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:39 2025 by rpki-client