Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/pK_RWKvtbpfARxQqcIN51CNOVR4.roa
File: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (raw, json)
Hash identifier: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=
Subject key identifier: A4:AF:D1:58:AB:ED:6E:97:C0:47:14:2A:70:83:79:D4:23:4E:55:1E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019422FB4240A67205CB5971EFF059B4739C
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/pK_RWKvtbpfARxQqcIN51CNOVR4.roa
Signing time: Wed 01 Jan 2025 17:47:59 +0000
ROA not before: Wed 01 Jan 2025 17:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12302
IP address blocks: 185.190.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:42:40:a6:72:05:cb:59:71:ef:f0:59:b4:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jan 1 17:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4afd158abed6e97c047142a708379d4234e551e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:6b:8c:8a:7e:a4:ff:5f:b4:65:9d:ca:9f:
a8:d2:96:0a:46:1b:92:f0:bf:49:09:18:c1:06:db:
55:6b:48:d3:8d:14:24:09:7f:70:0d:e0:cb:e2:d3:
9c:cb:a6:04:df:b2:bf:a9:b8:43:63:c2:d9:fe:45:
3a:5d:b3:10:ca:94:70:80:1f:30:a4:90:cf:ed:11:
73:c4:a8:f8:07:2b:f2:83:67:c9:08:47:b9:fa:05:
03:46:0f:c2:e7:54:85:8c:3a:df:fe:df:1d:3f:a0:
58:b1:5a:32:e6:3e:5e:4d:3b:9b:9e:73:0f:93:0b:
78:9c:34:0b:f2:e1:2e:2e:0b:29:61:3c:ba:8e:de:
2c:e3:d6:ab:d2:7b:13:a7:62:f6:76:88:ce:17:57:
96:28:78:c5:54:de:a7:e7:9c:34:69:00:e0:21:7a:
ed:7c:e2:da:16:27:cf:6e:ee:88:17:fb:54:45:f1:
49:bb:12:da:39:7b:70:01:ad:3f:5e:8a:93:ee:05:
ac:9e:c2:77:4d:4f:6f:3d:b2:5b:88:73:b7:cb:25:
05:41:5b:0e:ac:9d:c0:e9:ab:a1:35:82:af:77:a9:
e8:3d:8a:3b:d6:d9:3b:1b:1b:06:80:29:0a:4a:eb:
5e:cc:5f:4b:ff:b3:1f:e4:bb:6e:05:8a:26:46:f7:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:D1:58:AB:ED:6E:97:C0:47:14:2A:70:83:79:D4:23:4E:55:1E
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/pK_RWKvtbpfARxQqcIN51CNOVR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:49:db:47:b1:2d:61:15:8a:c8:be:30:a1:f1:46:48:a1:5b:
42:37:3b:f0:18:17:27:86:06:1d:b7:42:a2:3a:eb:79:bd:26:
64:68:b6:af:6d:c1:00:13:e2:8f:f1:eb:af:fc:a5:e8:02:0a:
63:a5:37:b8:96:e6:79:f0:79:a1:54:0d:6b:f5:b1:64:35:20:
7d:12:f1:9b:ee:57:ba:25:d4:f6:de:b7:12:9b:7b:7c:40:bc:
08:02:41:b6:25:47:d4:0e:31:9f:c1:1b:9f:1e:af:73:5b:42:
81:be:a3:43:65:72:03:dd:df:53:2a:eb:15:cd:37:da:04:e9:
55:3d:62:04:8b:a7:c8:d0:2c:7f:c5:dd:27:93:5b:97:63:5c:
ed:dc:65:3d:2e:ff:87:ca:15:e4:05:e6:47:cc:80:c5:16:10:
79:11:2e:cd:58:dc:dc:a3:04:82:89:b0:12:2f:78:1e:f7:86:
cd:85:de:39:b6:7b:21:81:87:c2:93:ab:d4:94:1a:6c:ee:19:
7c:9b:bd:b0:7f:0d:53:96:94:40:e7:65:a1:b3:ad:6f:fb:3c:
a2:29:55:c3:ec:31:f6:e9:58:3b:eb:72:cd:b3:ec:2d:6c:83:
29:da:9f:b0:ce:89:5a:2e:02:9c:a9:c9:aa:95:29:db:aa:6d:
8a:b2:1e:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+0JApnIFy1lx7/BZtHOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDEwYjg4ZWIyNGY2MjYyZDkzMTUzNjhhNWQwMWUxZTA4
NjBjNGUwHhcNMjUwMTAxMTc0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGFmZDE1OGFiZWQ2ZTk3YzA0NzE0MmE3MDgzNzlkNDIzNGU1NTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06prjIp+pP9ftGWdyp+o0pYKRhuS
8L9JCRjBBttVa0jTjRQkCX9wDeDL4tOcy6YE37K/qbhDY8LZ/kU6XbMQypRwgB8w
pJDP7RFzxKj4Byvyg2fJCEe5+gUDRg/C51SFjDrf/t8dP6BYsVoy5j5eTTubnnMP
kwt4nDQL8uEuLgspYTy6jt4s49ar0nsTp2L2dojOF1eWKHjFVN6n55w0aQDgIXrt
fOLaFifPbu6IF/tURfFJuxLaOXtwAa0/XoqT7gWsnsJ3TU9vPbJbiHO3yyUFQVsO
rJ3A6auhNYKvd6noPYo71tk7GxsGgCkKSutezF9L/7Mf5LtuBYomRvff/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKSv0Vir7W6XwEcUKnCDedQjTlUeMB8GA1UdIwQY
MBaAFEHRC4jrJPYmLZMVNopdAeHghgxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAt
ZWY5NzAwNmM0NTBiLzEvcEtfUldLdnRicGZBUnhRcWNJTjUxQ05PVlI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAtZWY5NzAwNmM0NTBi
LzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub7UMA0G
CSqGSIb3DQEBCwUAA4IBAQBqSdtHsS1hFYrIvjCh8UZIoVtCNzvwGBcnhgYdt0Ki
Out5vSZkaLavbcEAE+KP8euv/KXoAgpjpTe4luZ58HmhVA1r9bFkNSB9EvGb7le6
JdT23rcSm3t8QLwIAkG2JUfUDjGfwRufHq9zW0KBvqNDZXID3d9TKusVzTfaBOlV
PWIEi6fI0Cx/xd0nk1uXY1zt3GU9Lv+HyhXkBeZHzIDFFhB5ES7NWNzcowSCibAS
L3ge94bNhd45tnshgYfCk6vUlBps7hl8m72wfw1TlpRA52Whs61v+zyiKVXD7DH2
6Vg763LNs+wtbIMp2p+wzolaLgKcqcmqlSnbqm2Ksh5R
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:32:12 2025 by rpki-client