Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/pAqvaj9xsRAXQAMsXpgTuEPCJGQ.roa
File: pAqvaj9xsRAXQAMsXpgTuEPCJGQ.roa (raw, json)
Hash identifier: 2uN6aW+/BJnP7fWnLFIrO74Bgqf6OD8AhXS0W6jiTTY=
Subject key identifier: A4:0A:AF:6A:3F:71:B1:10:17:40:03:2C:5E:98:13:B8:43:C2:24:64
Certificate issuer: /CN=6a9a54dfdb2aadd1f1efa90be1f02d8b214c6a3e
Certificate serial: 018B4C8AF0FC36F63EDC1D9FE586208BDC37
Authority key identifier: 6A:9A:54:DF:DB:2A:AD:D1:F1:EF:A9:0B:E1:F0:2D:8B:21:4C:6A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/appU39sqrdHx76kL4fAtiyFMaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/pAqvaj9xsRAXQAMsXpgTuEPCJGQ.roa
Signing time: Fri 20 Oct 2023 10:04:15 +0000
ROA not before: Fri 20 Oct 2023 10:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.16.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:8a:f0:fc:36:f6:3e:dc:1d:9f:e5:86:20:8b:dc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9a54dfdb2aadd1f1efa90be1f02d8b214c6a3e
Validity
Not Before: Oct 20 10:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a40aaf6a3f71b1101740032c5e9813b843c22464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:7f:2d:22:52:3d:67:d0:93:2a:f6:fc:5b:
cf:3b:d1:37:cf:94:10:16:8c:2d:94:01:ab:96:0e:
03:4f:09:70:12:91:ef:18:e4:5c:a8:25:9a:14:1e:
88:bb:f0:d2:f5:04:5e:74:d4:9b:e4:a6:17:07:25:
ce:58:66:5c:71:16:ee:b6:ab:37:f2:eb:3f:2d:1d:
e6:e9:06:f6:41:68:2a:e4:9e:65:07:63:01:c0:7e:
29:f6:06:8f:a6:d3:67:48:7a:a0:b9:fe:36:b8:6f:
24:b0:10:27:3b:f1:98:61:44:0d:63:ab:af:82:a3:
a8:81:aa:54:1e:4c:87:ac:0c:d0:76:02:27:ed:65:
a5:3a:38:5e:52:a9:f8:43:c4:60:ca:04:02:c6:c3:
43:4f:ad:cc:2b:16:10:bb:c9:cb:9d:7a:e3:92:e3:
20:16:3e:19:37:e8:2e:66:24:70:5e:01:1b:6e:4c:
48:ab:29:4d:b0:10:56:5e:30:36:03:16:ba:94:af:
17:57:f8:16:ef:93:6d:41:66:ff:72:4a:e6:a9:e1:
52:b1:41:5c:bf:7f:14:ec:2d:0f:62:4b:b0:2b:9d:
c1:c0:a3:83:d2:39:cb:fe:d9:fc:a6:9b:5e:dd:96:
58:18:95:7a:db:66:a1:9c:d7:73:ee:7e:3b:48:a7:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:AF:6A:3F:71:B1:10:17:40:03:2C:5E:98:13:B8:43:C2:24:64
X509v3 Authority Key Identifier:
keyid:6A:9A:54:DF:DB:2A:AD:D1:F1:EF:A9:0B:E1:F0:2D:8B:21:4C:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/appU39sqrdHx76kL4fAtiyFMaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/pAqvaj9xsRAXQAMsXpgTuEPCJGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1560f1-bcc2-411a-8565-ec4a8af5a98e/1/appU39sqrdHx76kL4fAtiyFMaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:14:4e:32:cc:50:5e:25:ba:ff:7a:41:9d:6e:e4:bd:01:84:
f5:69:05:a0:60:4d:9c:e5:45:04:e5:54:69:64:0a:d5:d7:6c:
6b:da:16:47:84:66:3d:9f:de:57:16:86:63:c7:22:c8:68:e7:
4c:d8:58:1d:84:d2:29:4d:e0:e0:ca:87:9b:1e:6e:40:f8:44:
34:7b:73:ec:ba:dd:d5:8f:49:c9:5f:8a:db:55:73:b5:40:dc:
c5:c0:69:53:5a:48:02:f1:95:2a:75:f3:7b:b3:59:10:dc:83:
3f:51:d6:21:1d:64:1e:97:f8:0f:fa:04:97:f5:96:02:dd:16:
60:26:15:43:07:52:95:49:cd:80:93:9d:a8:4a:d1:35:e0:94:
d0:ae:65:fb:72:3d:71:90:07:24:a2:3f:bc:1c:0f:51:05:9b:
87:5c:f1:f0:32:d4:07:c2:d3:87:8c:bc:7a:45:14:78:98:6f:
aa:54:e2:38:c2:64:76:d0:a2:95:29:86:36:34:56:79:44:08:
c9:03:23:e8:56:05:20:81:05:64:cb:3d:51:41:b7:1f:f1:74:
c1:73:36:fc:42:79:eb:32:7b:27:d5:d3:09:59:54:a4:6b:b7:
61:e4:e8:29:6e:20:14:11:6f:06:fa:15:e4:de:55:6b:93:c3:
82:4c:40:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtMivD8NvY+3B2f5YYgi9w3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWE1NGRmZGIyYWFkZDFmMWVmYTkwYmUxZjAyZDhiMjE0
YzZhM2UwHhcNMjMxMDIwMTAwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDBhYWY2YTNmNzFiMTEwMTc0MDAzMmM1ZTk4MTNiODQzYzIyNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDd/LSJSPWfQkyr2/FvPO9E3z5QQ
FowtlAGrlg4DTwlwEpHvGORcqCWaFB6Iu/DS9QRedNSb5KYXByXOWGZccRbutqs3
8us/LR3m6Qb2QWgq5J5lB2MBwH4p9gaPptNnSHqguf42uG8ksBAnO/GYYUQNY6uv
gqOogapUHkyHrAzQdgIn7WWlOjheUqn4Q8RgygQCxsNDT63MKxYQu8nLnXrjkuMg
Fj4ZN+guZiRwXgEbbkxIqylNsBBWXjA2Axa6lK8XV/gW75NtQWb/ckrmqeFSsUFc
v38U7C0PYkuwK53BwKOD0jnL/tn8ppte3ZZYGJV622ahnNdz7n47SKcuAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQKr2o/cbEQF0ADLF6YE7hDwiRkMB8GA1UdIwQY
MBaAFGqaVN/bKq3R8e+pC+HwLYshTGo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBwVTM5c3FyZEh4NzZrTDRmQXRpeUZNYWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xNTYwZjEtYmNjMi00MTFhLTg1NjUt
ZWM0YThhZjVhOThlLzEvcEFxdmFqOXhzUkFYUUFNc1hwZ1R1RVBDSkdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xNTYwZjEtYmNjMi00MTFhLTg1NjUtZWM0YThhZjVhOThl
LzEvYXBwVTM5c3FyZEh4NzZrTDRmQXRpeUZNYWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRDnMA0G
CSqGSIb3DQEBCwUAA4IBAQB/FE4yzFBeJbr/ekGdbuS9AYT1aQWgYE2c5UUE5VRp
ZArV12xr2hZHhGY9n95XFoZjxyLIaOdM2FgdhNIpTeDgyoebHm5A+EQ0e3Psut3V
j0nJX4rbVXO1QNzFwGlTWkgC8ZUqdfN7s1kQ3IM/UdYhHWQel/gP+gSX9ZYC3RZg
JhVDB1KVSc2Ak52oStE14JTQrmX7cj1xkAckoj+8HA9RBZuHXPHwMtQHwtOHjLx6
RRR4mG+qVOI4wmR20KKVKYY2NFZ5RAjJAyPoVgUggQVkyz1RQbcf8XTBczb8Qnnr
Mnsn1dMJWVSka7dh5OgpbiAUEW8G+hXk3lVrk8OCTEAy
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:39 2025 by rpki-client