Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/1-R-zMb-3pdwESyL3I1-CmVw43A4.roa
File: 1-R-zMb-3pdwESyL3I1-CmVw43A4.roa (raw, json)
Hash identifier: RlKVD9k2U4sAivASwU1aQke6ZVSPRB67hzjoAipR29w=
Subject key identifier: F9:1F:B3:31:BF:B7:A5:DC:04:4B:22:F7:23:5F:82:99:5C:38:DC:0E
Certificate issuer: /CN=1b9f214c8802f95a84ba6a7fcad04612cc5b5785
Certificate serial: 031C1193
Authority key identifier: 1B:9F:21:4C:88:02:F9:5A:84:BA:6A:7F:CA:D0:46:12:CC:5B:57:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hTIgC-VqEump_ytBGEsxbV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/1-R-zMb-3pdwESyL3I1-CmVw43A4.roa
Signing time: Sat 01 Jan 2022 08:55:31 +0000
ROA not before: Sat 01 Jan 2022 08:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40987
IP address blocks: 185.223.44.0/24 maxlen: 24
185.223.45.0/24 maxlen: 24
185.223.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52171155 (0x31c1193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f214c8802f95a84ba6a7fcad04612cc5b5785
Validity
Not Before: Jan 1 08:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f91fb331bfb7a5dc044b22f7235f82995c38dc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:18:46:70:cd:b6:b7:cf:58:c2:d0:33:02:
6a:a0:29:c0:89:13:fa:c8:57:f9:97:c4:74:ec:9c:
09:97:a9:ba:ab:19:b9:86:cb:d4:4e:ea:9f:c9:1b:
67:57:6b:0a:61:94:13:cf:1d:7d:0a:cb:79:7a:3b:
e6:56:1e:d4:a4:95:aa:c6:1c:d6:4a:dd:24:1f:a8:
7e:4d:43:7c:b2:53:41:a1:20:34:05:d8:9c:b5:f7:
84:e7:14:f6:9e:51:67:12:e3:e5:93:07:89:c9:7c:
ba:c3:64:c6:98:f1:bf:77:2d:1b:30:b9:cc:0f:2b:
d2:d7:74:8b:09:ef:37:36:a6:93:95:5e:8b:b8:7a:
7b:48:26:b6:6b:2e:d4:87:0c:4c:47:cf:c8:0e:52:
42:10:38:74:f7:ab:bc:77:45:da:ae:8b:95:74:12:
93:6c:1e:2c:25:38:4b:0c:82:27:85:68:35:1f:3a:
56:8d:1d:0f:28:2a:fc:f5:b9:1d:af:e4:96:ab:9b:
59:cf:ab:ff:7c:4b:fa:9e:7b:7f:4c:9b:be:69:b0:
49:63:90:3b:b7:f2:7b:72:ea:0f:43:7f:78:57:7d:
cf:d6:33:e8:69:f2:97:d0:15:70:d9:fe:c9:66:94:
5b:13:3b:19:bd:8d:1c:ad:1c:52:a4:ba:69:01:84:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:B3:31:BF:B7:A5:DC:04:4B:22:F7:23:5F:82:99:5C:38:DC:0E
X509v3 Authority Key Identifier:
keyid:1B:9F:21:4C:88:02:F9:5A:84:BA:6A:7F:CA:D0:46:12:CC:5B:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hTIgC-VqEump_ytBGEsxbV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/1-R-zMb-3pdwESyL3I1-CmVw43A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/G58hTIgC-VqEump_ytBGEsxbV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.44.0-185.223.46.255
Signature Algorithm: sha256WithRSAEncryption
2d:13:de:76:6e:c9:86:29:44:02:b2:27:3c:2e:8a:de:c6:d3:
a4:6c:ab:59:67:80:64:6f:ee:4f:57:92:b4:06:6e:5d:24:93:
cd:e3:d4:ef:a5:59:4b:01:51:af:5a:cb:a7:d3:e2:2b:1f:15:
82:6f:e7:ac:27:ac:6d:e1:86:94:52:40:4d:76:7c:c0:c2:63:
98:5c:5d:89:ec:2f:ac:6f:1b:63:80:b2:f0:1e:cb:bf:e4:74:
62:e6:1f:0f:c2:c5:9e:24:2b:35:c3:7d:7e:c7:52:6a:60:df:
8d:c3:de:95:2a:80:31:71:5a:24:84:9c:83:b8:e2:3e:21:75:
59:10:e2:b3:ce:28:dd:67:4c:58:76:82:c6:65:99:40:10:de:
40:55:03:51:a6:75:f4:08:ea:d5:f5:d9:d5:31:ef:9b:e0:89:
af:7c:dd:bb:bb:2d:2b:75:ef:de:e0:5e:27:aa:b7:95:71:15:
8c:ec:5a:bf:ec:73:c2:7c:20:31:df:46:be:ed:54:59:d2:da:
5f:f8:d1:aa:88:b6:fc:67:36:a2:66:b2:e9:d8:57:4d:3c:f4:
b4:f8:d9:c8:8a:e5:d4:be:24:e5:df:a9:ae:6f:7c:8b:bd:7e:
3a:98:d3:20:5a:e2:c1:91:6d:45:7d:91:83:b3:db:94:dd:44:
9e:ba:47:1a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIEAxwRkzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjlmMjE0Yzg4MDJmOTVhODRiYTZhN2ZjYWQwNDYxMmNjNWI1Nzg1MB4XDTIyMDEw
MTA4NTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjkxZmIzMzFiZmI3
YTVkYzA0NGIyMmY3MjM1ZjgyOTk1YzM4ZGMwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALyaGEZwzba3z1jC0DMCaqApwIkT+shX+ZfEdOycCZepuqsZ
uYbL1E7qn8kbZ1drCmGUE88dfQrLeXo75lYe1KSVqsYc1krdJB+ofk1DfLJTQaEg
NAXYnLX3hOcU9p5RZxLj5ZMHicl8usNkxpjxv3ctGzC5zA8r0td0iwnvNzamk5Ve
i7h6e0gmtmsu1IcMTEfPyA5SQhA4dPervHdF2q6LlXQSk2weLCU4SwyCJ4VoNR86
Vo0dDygq/PW5Ha/klqubWc+r/3xL+p57f0ybvmmwSWOQO7fye3LqD0N/eFd9z9Yz
6Gnyl9AVcNn+yWaUWxM7Gb2NHK0cUqS6aQGEjC8CAwEAAaOCAhIwggIOMB0GA1Ud
DgQWBBT5H7Mxv7el3ARLIvcjX4KZXDjcDjAfBgNVHSMEGDAWgBQbnyFMiAL5WoS6
an/K0EYSzFtXhTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0c1OGhUSWdDLVZxRXVtcF95dEJHRXN4YlY0VS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvNTY2NzFkLTFiMGUtNDgxYi1hZWEzLTVhMDk5NjViNzExZC8x
LzEtUi16TWItM3Bkd0VTeUwzSTEtQ21WdzQzQTQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4
LzU2NjcxZC0xYjBlLTQ4MWItYWVhMy01YTA5OTY1YjcxMWQvMS9HNThoVElnQy1W
cUV1bXBfeXRCR0VzeGJWNFUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEArnfLAMEALnfLjANBgkqhkiG
9w0BAQsFAAOCAQEALRPedm7JhilEArInPC6K3sbTpGyrWWeAZG/uT1eStAZuXSST
zePU76VZSwFRr1rLp9PiKx8Vgm/nrCesbeGGlFJATXZ8wMJjmFxdiewvrG8bY4Cy
8B7Lv+R0YuYfD8LFniQrNcN9fsdSamDfjcPelSqAMXFaJIScg7jiPiF1WRDis84o
3WdMWHaCxmWZQBDeQFUDUaZ19Ajq1fXZ1THvm+CJr3zdu7stK3Xv3uBeJ6q3lXEV
jOxav+xzwnwgMd9Gvu1UWdLaX/jRqoi2/Gc2omay6dhXTTz0tPjZyIrl1L4k5d+p
rm98i71+OpjTIFriwZFtRX2Rg7PblN1EnrpHGg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:52 2025 by rpki-client