Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa
File: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (raw, json)
Hash identifier: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=
Subject key identifier: A1:85:E9:AA:14:ED:DC:66:D0:BD:9A:8D:75:8A:F7:11:64:39:BA:78
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019428254C127498212BEBA94920631BA9BF
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa
Signing time: Thu 02 Jan 2025 17:52:00 +0000
ROA not before: Thu 02 Jan 2025 17:52:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.52.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:4c:12:74:98:21:2b:eb:a9:49:20:63:1b:a9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jan 2 17:52:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a185e9aa14eddc66d0bd9a8d758af7116439ba78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:a3:7b:9f:9c:c0:fc:93:f3:a5:5a:9e:de:
c5:ea:1e:83:6a:b7:74:3b:be:25:3d:f7:71:9b:9a:
42:e2:79:86:6b:d1:bc:6a:ca:80:0a:45:94:76:6d:
14:21:c1:64:be:b9:30:20:2b:5d:eb:e6:24:82:30:
c2:d7:c2:6a:a0:00:d9:d3:e3:89:b2:68:07:3c:62:
ae:4d:92:64:53:4a:0f:e4:c6:e6:5e:4b:ab:dd:52:
1b:ad:e2:3b:89:a1:09:92:f0:2e:e6:57:53:0e:39:
5f:ae:fa:ec:7c:1e:b8:3c:a3:c6:9d:0a:8d:aa:a0:
f5:7e:31:32:8b:4e:f0:49:ca:9b:38:44:ec:e6:8c:
06:aa:78:21:6a:60:a2:06:2c:cf:79:9f:4f:71:17:
5a:07:91:06:91:f1:c8:08:bb:09:db:6a:53:c2:9c:
9a:1a:64:01:46:1f:3b:76:4c:53:d5:28:99:c6:87:
46:b7:c0:7d:1a:d2:01:08:70:e1:a5:6a:7f:db:04:
58:19:95:63:92:30:91:4c:d6:6d:8b:f6:94:c8:f2:
74:4f:e3:31:9d:09:55:0a:f8:ce:b9:0f:5a:30:98:
64:d7:5a:c3:0b:26:b3:88:b6:0a:8f:a9:97:0a:36:
2b:3e:98:e8:75:79:e5:2f:9b:8d:4f:4a:51:e0:74:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:E9:AA:14:ED:DC:66:D0:BD:9A:8D:75:8A:F7:11:64:39:BA:78
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:75:a5:8e:75:9d:d6:de:e2:22:92:fe:99:2d:a2:55:a5:15:
ec:ea:33:55:38:7f:d2:91:b2:5f:93:cf:3d:86:2b:0d:97:cd:
f7:11:24:92:83:3f:a2:5e:62:3e:12:29:b9:f4:69:71:31:41:
59:fc:af:f2:36:1a:3f:8d:5a:35:9f:5b:0b:7a:12:c0:b8:00:
bc:fd:de:2d:65:ae:13:a6:80:05:38:2a:a4:43:88:ad:b8:c4:
2e:17:40:5a:7d:32:50:aa:85:65:c3:9b:5e:aa:93:00:f0:eb:
f6:35:e5:92:6c:26:84:62:21:6e:8b:3f:07:64:3b:28:87:d5:
d5:83:81:b6:9c:73:5d:ae:32:1e:1b:1d:5c:f0:0e:c8:fb:3e:
7b:eb:1c:13:f2:bd:bf:99:07:d8:d3:24:97:1b:40:e3:15:1e:
60:1e:cd:a6:69:5a:25:6c:2e:0d:c2:30:ff:eb:c3:ae:f9:c7:
cb:09:f1:2a:73:8d:cc:7b:16:62:69:31:46:91:a7:7d:1c:ff:
88:a8:1a:e1:38:6a:1c:dc:10:aa:83:74:f5:ec:0c:9d:96:07:
6b:0a:ca:21:b1:0b:38:53:df:9d:86:c5:cd:8d:5d:72:25:f0:
7b:da:25:e3:e9:b4:59:05:3e:88:66:01:00:0f:59:93:a1:f2:
46:a1:20:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJUwSdJghK+upSSBjG6m/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4
OTE0YTIwHhcNMjUwMTAyMTc1MjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTg1ZTlhYTE0ZWRkYzY2ZDBiZDlhOGQ3NThhZjcxMTY0MzliYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKaje5+cwPyT86Vant7F6h6Dard0
O74lPfdxm5pC4nmGa9G8asqACkWUdm0UIcFkvrkwICtd6+YkgjDC18JqoADZ0+OJ
smgHPGKuTZJkU0oP5MbmXkur3VIbreI7iaEJkvAu5ldTDjlfrvrsfB64PKPGnQqN
qqD1fjEyi07wScqbOETs5owGqnghamCiBizPeZ9PcRdaB5EGkfHICLsJ22pTwpya
GmQBRh87dkxT1SiZxodGt8B9GtIBCHDhpWp/2wRYGZVjkjCRTNZti/aUyPJ0T+Mx
nQlVCvjOuQ9aMJhk11rDCyaziLYKj6mXCjYrPpjodXnlL5uNT0pR4HTwtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGF6aoU7dxm0L2ajXWK9xFkObp4MB8GA1UdIwQY
MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt
NGNlNGQ4ZmVhNmVmLzEvb1lYcHFoVHQzR2JRdlpxTmRZcjNFV1E1dW5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm
LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTTLMA0G
CSqGSIb3DQEBCwUAA4IBAQCcdaWOdZ3W3uIikv6ZLaJVpRXs6jNVOH/SkbJfk889
hisNl833ESSSgz+iXmI+Eim59GlxMUFZ/K/yNho/jVo1n1sLehLAuAC8/d4tZa4T
poAFOCqkQ4ituMQuF0BafTJQqoVlw5teqpMA8Ov2NeWSbCaEYiFuiz8HZDsoh9XV
g4G2nHNdrjIeGx1c8A7I+z576xwT8r2/mQfY0ySXG0DjFR5gHs2maVolbC4NwjD/
68Ou+cfLCfEqc43MexZiaTFGkad9HP+IqBrhOGoc3BCqg3T17AydlgdrCsohsQs4
U9+dhsXNjV1yJfB72iXj6bRZBT6IZgEAD1mTofJGoSDv
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:41 2025 by rpki-client