Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/D-8I37IpFt647IpwDAQkzyf-qZ8.roa
File: D-8I37IpFt647IpwDAQkzyf-qZ8.roa (raw, json)
Hash identifier: JWCRTzyeWC1L1Jhya1GT0RuRWYmLxtl+EIqH53s8tzo=
Subject key identifier: 0F:EF:08:DF:B2:29:16:DE:B8:EC:8A:70:0C:04:24:CF:27:FE:A9:9F
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01856C2ED0481472E2DB2EC088A19B9B2066
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/D-8I37IpFt647IpwDAQkzyf-qZ8.roa
Signing time: Sun 01 Jan 2023 07:14:45 +0000
ROA not before: Sun 01 Jan 2023 07:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.184.92.0/23 maxlen: 24
193.37.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d0:48:14:72:e2:db:2e:c0:88:a1:9b:9b:20:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Jan 1 07:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fef08dfb22916deb8ec8a700c0424cf27fea99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:16:27:4e:56:7a:11:a5:65:6a:14:21:b6:
86:f4:bb:6e:fb:81:ab:35:98:d3:24:d3:28:13:86:
85:91:d5:cc:69:e5:19:d5:7b:82:05:de:ec:ab:e5:
3a:20:eb:a9:ea:94:09:77:6f:4d:9f:2a:9d:cf:de:
61:85:a5:d0:bf:48:79:86:0c:e6:13:f0:97:1e:98:
03:f5:75:ae:96:57:8d:68:d4:ec:8b:97:07:c4:8d:
4f:94:1a:6d:7b:2c:b5:1e:86:4b:c5:d2:32:4c:ed:
48:53:3e:3b:53:a1:9f:b3:15:cb:f2:b9:e9:bf:33:
f6:f1:1f:a6:6a:8e:81:88:d5:b2:f0:3b:d9:5a:41:
a9:9b:a1:c7:47:b6:ee:d7:ec:8e:a3:e4:ff:f9:c9:
87:d7:ff:10:17:48:6f:3d:18:81:66:ba:ad:a6:e1:
b0:5a:06:be:55:0c:cd:49:ef:fb:45:7d:22:32:93:
f1:b4:3b:f5:56:fc:01:0f:47:6e:4b:9c:22:e1:aa:
66:4d:d6:1c:5a:3f:be:64:0e:c7:38:16:61:90:3a:
bb:0b:21:16:b0:8a:f7:15:6e:61:fe:ec:ce:d8:c6:
f0:02:e3:62:31:89:a7:35:4a:7b:de:31:8f:e0:4f:
e7:f5:87:7a:4b:f1:89:8c:82:a3:d5:22:00:3e:d6:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:08:DF:B2:29:16:DE:B8:EC:8A:70:0C:04:24:CF:27:FE:A9:9F
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/D-8I37IpFt647IpwDAQkzyf-qZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.236.0/24
195.184.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:23:99:57:57:3d:d6:d5:30:b8:b5:22:a0:31:4e:ef:0d:14:
02:57:3d:4e:45:8d:5a:61:9e:7f:6b:1e:2d:ab:6d:50:dd:28:
ae:7b:6f:66:3a:82:a9:3e:8d:48:56:96:c6:e1:e7:f6:c6:99:
83:cd:d4:7a:28:8b:1d:da:ff:e7:6e:1c:ce:7e:f7:b4:c2:a4:
a3:dc:d7:cd:4a:89:ee:7d:05:b8:15:c8:fa:1c:4d:f4:80:c4:
9b:56:db:ea:7d:da:f1:15:f8:8f:b4:20:e9:e1:92:b3:49:30:
cb:a3:36:22:5b:8d:22:dc:ab:49:84:fb:b4:b3:e9:19:ac:96:
b3:d9:74:1f:ed:6b:52:79:38:6f:1e:a7:9c:7a:c5:71:a1:de:
06:62:7a:8e:42:e7:80:10:a7:75:82:55:f4:0e:32:35:73:65:
0b:f0:1f:0b:38:04:e5:66:a0:5f:4d:46:fc:22:f7:fa:50:30:
d4:c9:18:42:5e:18:9c:9d:4e:8a:6c:ac:35:84:68:9b:cc:98:
6c:44:26:f5:59:40:92:20:21:a9:cf:5d:5b:6c:27:69:d4:ea:
bc:90:19:7a:19:bc:2a:ee:3b:73:da:26:6b:71:23:af:28:12:
f3:5f:bd:c3:ac:34:4b:ad:5a:cc:7d:0c:41:2b:1d:f6:f5:c1:
4c:7c:96:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsLtBIFHLi2y7AiKGbmyBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTBiODczY2MxYTc4ZDQzYmI3MDMxOWZmYTU0OTUwNTc5
MDFhNjQwHhcNMjMwMTAxMDcxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVmMDhkZmIyMjkxNmRlYjhlYzhhNzAwYzA0MjRjZjI3ZmVhOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8EWJ05WehGlZWoUIbaG9Ltu+4Gr
NZjTJNMoE4aFkdXMaeUZ1XuCBd7sq+U6IOup6pQJd29Nnyqdz95hhaXQv0h5hgzm
E/CXHpgD9XWulleNaNTsi5cHxI1PlBpteyy1HoZLxdIyTO1IUz47U6GfsxXL8rnp
vzP28R+mao6BiNWy8DvZWkGpm6HHR7bu1+yOo+T/+cmH1/8QF0hvPRiBZrqtpuGw
Wga+VQzNSe/7RX0iMpPxtDv1VvwBD0duS5wi4apmTdYcWj++ZA7HOBZhkDq7CyEW
sIr3FW5h/uzO2MbwAuNiMYmnNUp73jGP4E/n9Yd6S/GJjIKj1SIAPtav4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA/vCN+yKRbeuOyKcAwEJM8n/qmfMB8GA1UdIwQY
MBaAFHHguHPMGnjUO7cDGf+lSVBXkBpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUt
ZTBjYTRkMTY2ZjFmLzEvRC04STM3SXBGdDY0N0lwd0RBUWt6eWYtcVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUtZTBjYTRkMTY2ZjFm
LzEvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSXsAwQB
w7hcMA0GCSqGSIb3DQEBCwUAA4IBAQB+I5lXVz3W1TC4tSKgMU7vDRQCVz1ORY1a
YZ5/ax4tq21Q3Siue29mOoKpPo1IVpbG4ef2xpmDzdR6KIsd2v/nbhzOfve0wqSj
3NfNSonufQW4Fcj6HE30gMSbVtvqfdrxFfiPtCDp4ZKzSTDLozYiW40i3KtJhPu0
s+kZrJaz2XQf7WtSeThvHqecesVxod4GYnqOQueAEKd1glX0DjI1c2UL8B8LOATl
ZqBfTUb8Ivf6UDDUyRhCXhicnU6KbKw1hGibzJhsRCb1WUCSICGpz11bbCdp1Oq8
kBl6Gbwq7jtz2iZrcSOvKBLzX73DrDRLrVrMfQxBKx329cFMfJak
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:53 2025 by rpki-client