Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/159ekJmBdzbPKpbON9hMEymGJuU.roa
File: 159ekJmBdzbPKpbON9hMEymGJuU.roa (raw, json)
Hash identifier: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=
Subject key identifier: D7:9F:5E:90:99:81:77:36:CF:2A:96:CE:37:D8:4C:13:29:86:26:E5
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0194236A00B35D40B1A2CEFEBF670F96F55D
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/159ekJmBdzbPKpbON9hMEymGJuU.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51913
IP address blocks: 185.157.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:00:b3:5d:40:b1:a2:ce:fe:bf:67:0f:96:f5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d79f5e9099817736cf2a96ce37d84c13298626e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:26:aa:87:15:bf:d4:af:a7:e3:6a:19:ab:19:
fb:d0:b7:07:21:53:e1:f9:b4:0f:ab:80:b0:e4:05:
77:de:07:3a:30:6a:18:fd:25:97:99:a9:ab:c3:27:
4e:c3:45:4d:d1:1b:43:b3:53:b6:da:33:50:df:66:
36:41:c9:e0:41:d2:78:dd:0b:aa:16:1e:d9:e7:d7:
2c:dc:ed:d3:ea:ee:c5:45:22:77:b5:9f:f7:12:02:
7d:f2:a4:b2:e4:f7:be:50:ac:0d:2c:ac:fc:71:3f:
61:8b:46:84:bd:db:50:15:a7:8a:26:ab:cc:51:e5:
33:20:7e:2c:ae:5b:33:74:43:0f:99:86:d1:25:3d:
b0:dd:8a:47:18:2e:97:75:69:68:3d:3a:94:7b:18:
f3:04:a8:28:46:58:fc:78:a8:9c:24:fa:18:1a:dc:
1f:ac:d1:b9:ad:10:84:35:1a:ab:71:b7:01:6f:0a:
67:24:73:f9:d1:18:64:fe:c6:57:a7:55:e2:ab:6a:
69:13:f4:96:c3:86:ab:1b:62:9e:c1:bd:e8:8a:18:
98:a0:0c:c3:4b:7a:04:57:57:a1:2d:6c:47:88:4b:
dd:d0:30:eb:5e:f7:60:14:b0:af:e0:84:15:3e:24:
b6:92:c3:0a:89:24:7c:58:d8:48:4c:fd:7b:3a:ac:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9F:5E:90:99:81:77:36:CF:2A:96:CE:37:D8:4C:13:29:86:26:E5
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/159ekJmBdzbPKpbON9hMEymGJuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.88.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:9c:00:35:0f:91:7c:f8:45:01:a0:53:8e:9c:93:17:4a:ac:
f9:e5:95:44:e6:1a:e5:a5:4e:9e:67:c3:5c:3e:4c:1c:bb:fa:
fa:58:91:6d:14:fa:98:b9:ef:51:5c:f8:24:6a:37:00:de:35:
4a:56:2e:d9:71:97:23:98:e0:1a:ef:93:15:aa:6a:2c:4a:3c:
ab:9f:dd:95:a7:38:52:6c:0b:78:93:ec:91:d8:76:87:f3:8a:
55:cb:36:76:7f:cc:23:2e:81:91:3a:20:02:32:0b:9d:45:2e:
8d:eb:fd:5d:ff:3d:9e:5c:66:26:cc:41:c1:83:db:e4:56:b1:
8c:ea:cd:de:e6:f9:f8:e9:bc:fd:c4:ff:fa:6c:90:e1:31:dc:
f5:6a:9c:c1:94:2f:f7:60:89:af:dd:9e:0c:a8:fe:13:fb:38:
8a:ef:30:a7:f2:b0:17:28:89:9f:e1:ae:dc:92:28:d5:7c:d2:
cc:42:61:11:2d:59:fa:2e:90:87:76:1a:9d:5d:5f:ed:c8:2f:
63:d0:6f:0a:53:5c:43:bd:76:d6:a4:72:50:3e:49:9b:a8:da:
be:9d:83:ae:5d:4d:53:ef:9b:b2:81:86:45:5c:b4:e3:0a:86:
b7:e6:71:fb:2b:7c:b0:12:6d:26:c4:99:c6:40:e1:64:58:e1:
95:20:6f:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjagCzXUCxos7+v2cPlvVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4
MDQ3MjgwHhcNMjUwMTAxMTk0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzlmNWU5MDk5ODE3NzM2Y2YyYTk2Y2UzN2Q4NGMxMzI5ODYyNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CaqhxW/1K+n42oZqxn70LcHIVPh
+bQPq4Cw5AV33gc6MGoY/SWXmamrwydOw0VN0RtDs1O22jNQ32Y2QcngQdJ43Quq
Fh7Z59cs3O3T6u7FRSJ3tZ/3EgJ98qSy5Pe+UKwNLKz8cT9hi0aEvdtQFaeKJqvM
UeUzIH4srlszdEMPmYbRJT2w3YpHGC6XdWloPTqUexjzBKgoRlj8eKicJPoYGtwf
rNG5rRCENRqrcbcBbwpnJHP50Rhk/sZXp1Xiq2ppE/SWw4arG2Kewb3oihiYoAzD
S3oEV1ehLWxHiEvd0DDrXvdgFLCv4IQVPiS2ksMKiSR8WNhITP17Oqw6/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNefXpCZgXc2zyqWzjfYTBMphiblMB8GA1UdIwQY
MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt
ZGFiNmI4M2NmN2VjLzEvMTU5ZWtKbUJkemJQS3BiT045aE1FeW1HSnVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj
LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ1YMA0G
CSqGSIb3DQEBCwUAA4IBAQAanAA1D5F8+EUBoFOOnJMXSqz55ZVE5hrlpU6eZ8Nc
Pkwcu/r6WJFtFPqYue9RXPgkajcA3jVKVi7ZcZcjmOAa75MVqmosSjyrn92VpzhS
bAt4k+yR2HaH84pVyzZ2f8wjLoGROiACMgudRS6N6/1d/z2eXGYmzEHBg9vkVrGM
6s3e5vn46bz9xP/6bJDhMdz1apzBlC/3YImv3Z4MqP4T+ziK7zCn8rAXKImf4a7c
kijVfNLMQmERLVn6LpCHdhqdXV/tyC9j0G8KU1xDvXbWpHJQPkmbqNq+nYOuXU1T
75uygYZFXLTjCoa35nH7K3ywEm0mxJnGQOFkWOGVIG+H
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:13 2025 by rpki-client