Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/24dfd6-19ba-48f1-90a3-c055c1f932e7/1/k6wibsH8h_gx3H6Khd0yBGdXALA.roa
File: k6wibsH8h_gx3H6Khd0yBGdXALA.roa (raw, json)
Hash identifier: UlQrRRs78+VsQCMOUGZc75UZKub4FvhvV30o9o8JL1g=
Subject key identifier: 93:AC:22:6E:C1:FC:87:F8:31:DC:7E:8A:85:DD:32:04:67:57:00:B0
Certificate issuer: /CN=37858d106021992deb4e0851c47a038909a4ff57
Certificate serial: 0B79B944
Authority key identifier: 37:85:8D:10:60:21:99:2D:EB:4E:08:51:C4:7A:03:89:09:A4:FF:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4WNEGAhmS3rTghRxHoDiQmk_1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/24dfd6-19ba-48f1-90a3-c055c1f932e7/1/k6wibsH8h_gx3H6Khd0yBGdXALA.roa
Signing time: Sat 01 Jan 2022 01:56:54 +0000
ROA not before: Sat 01 Jan 2022 01:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.121.28.0/22 maxlen: 24
185.254.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192526660 (0xb79b944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37858d106021992deb4e0851c47a038909a4ff57
Validity
Not Before: Jan 1 01:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93ac226ec1fc87f831dc7e8a85dd3204675700b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:03:bc:43:e9:a4:b7:83:26:3e:84:53:35:
29:c0:2c:20:3f:91:d7:08:f9:e4:21:da:03:59:89:
89:42:77:8d:ca:cd:f9:75:6f:5f:62:91:68:f0:11:
2e:8b:a5:fe:2e:c8:53:b4:57:54:a8:f8:f6:ac:a8:
1c:6a:b1:54:f8:aa:ee:b2:93:69:a5:fe:ae:0c:74:
6a:49:f5:59:57:aa:5b:b6:d7:49:e4:36:98:82:dc:
fb:97:74:26:ec:bc:ed:d3:9d:d8:2d:d7:3e:67:94:
eb:30:29:d2:e4:ef:93:fa:ee:43:ba:2b:e8:92:25:
76:3a:66:ef:13:d3:d7:64:c4:fc:6d:30:0c:fc:1e:
b4:a0:13:01:3e:b9:de:65:e6:ea:a6:65:7a:58:fb:
a5:33:62:44:e0:db:6b:6d:e8:4f:8f:23:97:f3:15:
e2:78:15:d5:ee:b9:5f:4e:2e:8b:04:29:80:1c:2e:
31:04:57:5f:59:51:6d:7c:57:0b:26:7b:ef:f3:8d:
df:6f:fe:ca:30:01:58:e8:87:0c:f3:1f:3e:98:48:
15:0e:c2:38:f1:7b:4d:15:6d:36:e1:a6:4b:95:a2:
9f:15:3e:83:04:a1:bd:06:94:2d:4b:4a:f4:fb:33:
9f:ba:be:ca:e0:aa:31:27:47:c5:f8:94:91:67:fa:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AC:22:6E:C1:FC:87:F8:31:DC:7E:8A:85:DD:32:04:67:57:00:B0
X509v3 Authority Key Identifier:
keyid:37:85:8D:10:60:21:99:2D:EB:4E:08:51:C4:7A:03:89:09:A4:FF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4WNEGAhmS3rTghRxHoDiQmk_1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/24dfd6-19ba-48f1-90a3-c055c1f932e7/1/k6wibsH8h_gx3H6Khd0yBGdXALA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/24dfd6-19ba-48f1-90a3-c055c1f932e7/1/N4WNEGAhmS3rTghRxHoDiQmk_1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.28.0/22
185.254.132.0/22
Signature Algorithm: sha256WithRSAEncryption
98:9d:9a:e5:b7:90:28:95:16:39:55:9a:28:59:8a:86:3e:83:
4b:22:c5:74:c6:a7:4c:6a:5a:d6:13:e9:36:d7:b8:38:f7:09:
f8:b4:10:c3:34:35:48:27:09:8c:5a:1e:0e:70:ac:ac:a3:ab:
ce:f6:86:fa:1d:b5:fa:70:ac:b3:8a:ca:c7:1b:0e:4b:99:9b:
b9:0f:0f:bd:4f:50:ec:98:1d:c3:99:17:0c:8f:c1:ba:92:f9:
33:a5:19:b4:65:86:30:50:c1:75:3b:72:5c:c4:0d:ea:59:35:
02:62:ce:78:db:cf:0a:33:00:74:ce:8f:57:fc:4d:05:a4:84:
2a:8a:0b:10:9d:7d:70:9b:c5:70:46:ec:f8:79:b2:50:4b:af:
40:23:c3:27:ca:d9:e0:ec:55:8b:a0:d5:98:17:3d:3c:19:f6:
e1:ba:06:57:51:d9:23:4b:39:d2:23:02:bd:ec:e8:15:38:21:
42:47:82:cc:04:f2:40:ee:32:42:d8:25:16:9f:54:d3:1f:52:
3c:a3:b4:56:36:98:cb:88:03:dd:e7:16:65:51:01:2d:7f:a7:
21:25:39:be:cc:0a:ad:6a:0e:6a:a2:b3:13:dd:53:db:96:1c:
93:0e:ed:ee:cb:2d:1e:95:73:dc:72:6a:90:13:24:25:62:6f:
9f:da:06:ab
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEC3m5RDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
Nzg1OGQxMDYwMjE5OTJkZWI0ZTA4NTFjNDdhMDM4OTA5YTRmZjU3MB4XDTIyMDEw
MTAxNTY1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTNhYzIyNmVjMWZj
ODdmODMxZGM3ZThhODVkZDMyMDQ2NzU3MDBiMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKcJA7xD6aS3gyY+hFM1KcAsID+R1wj55CHaA1mJiUJ3jcrN
+XVvX2KRaPARLoul/i7IU7RXVKj49qyoHGqxVPiq7rKTaaX+rgx0akn1WVeqW7bX
SeQ2mILc+5d0Juy87dOd2C3XPmeU6zAp0uTvk/ruQ7or6JIldjpm7xPT12TE/G0w
DPwetKATAT653mXm6qZlelj7pTNiRODba23oT48jl/MV4ngV1e65X04uiwQpgBwu
MQRXX1lRbXxXCyZ77/ON32/+yjABWOiHDPMfPphIFQ7COPF7TRVtNuGmS5WinxU+
gwShvQaULUtK9Pszn7q+yuCqMSdHxfiUkWf6WmsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSTrCJuwfyH+DHcfoqF3TIEZ1cAsDAfBgNVHSMEGDAWgBQ3hY0QYCGZLetO
CFHEegOJCaT/VzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L040V05FR0FobVMzclRnaFJ4SG9EaVFta18xYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTQvMjRkZmQ2LTE5YmEtNDhmMS05MGEzLWMwNTVjMWY5MzJlNy8x
L2s2d2lic0g4aF9neDNINktoZDB5QkdkWEFMQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQv
MjRkZmQ2LTE5YmEtNDhmMS05MGEzLWMwNTVjMWY5MzJlNy8xL040V05FR0FobVMz
clRnaFJ4SG9EaVFta18xYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArl5HAMEArn+hDANBgkqhkiG9w0B
AQsFAAOCAQEAmJ2a5beQKJUWOVWaKFmKhj6DSyLFdManTGpa1hPpNte4OPcJ+LQQ
wzQ1SCcJjFoeDnCsrKOrzvaG+h21+nCss4rKxxsOS5mbuQ8PvU9Q7Jgdw5kXDI/B
upL5M6UZtGWGMFDBdTtyXMQN6lk1AmLOeNvPCjMAdM6PV/xNBaSEKooLEJ19cJvF
cEbs+HmyUEuvQCPDJ8rZ4OxVi6DVmBc9PBn24boGV1HZI0s50iMCvezoFTghQkeC
zATyQO4yQtglFp9U0x9SPKO0VjaYy4gD3ecWZVEBLX+nISU5vswKrWoOaqKzE91T
25Yckw7t7sstHpVz3HJqkBMkJWJvn9oGqw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:55 2025 by rpki-client