Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ztD96C--wa9bXE-WZoSFeRNavZ4.roa
File: ztD96C--wa9bXE-WZoSFeRNavZ4.roa (raw, json)
Hash identifier: 1cucqn8LtiIur/hHuBrP6fOGGzmHoN4bWDvmHZJ2cLA=
Subject key identifier: CE:D0:FD:E8:2F:BE:C1:AF:5B:5C:4F:96:66:84:85:79:13:5A:BD:9E
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0193BF6D2B66F3C0DDEB16439F86155897D1
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ztD96C--wa9bXE-WZoSFeRNavZ4.roa
Signing time: Fri 13 Dec 2024 09:50:22 +0000
ROA not before: Fri 13 Dec 2024 09:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203191
IP address blocks: 185.143.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:6d:2b:66:f3:c0:dd:eb:16:43:9f:86:15:58:97:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Dec 13 09:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ced0fde82fbec1af5b5c4f9666848579135abd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:9d:91:5d:3a:32:fb:c7:58:8f:44:c2:23:
2b:51:f2:ee:d6:8a:fe:c3:28:8f:72:2e:eb:96:2e:
ae:1d:35:62:ad:54:16:1f:a8:c1:38:f7:ac:ac:b0:
3b:80:5b:2a:58:2b:2c:a2:9f:35:b4:14:db:f7:2b:
77:10:9d:4c:23:a2:f9:c8:17:52:97:dd:ca:35:fc:
fd:18:c3:bc:78:62:3b:d6:9f:a9:4c:3a:e1:88:46:
4e:bd:9a:3a:51:59:6c:41:fc:c7:cf:93:c7:29:f7:
e2:c6:59:21:63:31:53:f9:7f:c5:38:da:bc:9d:63:
9c:99:2b:37:84:55:54:6c:d4:a9:1e:1b:f6:f3:95:
5d:5e:4c:f4:d7:62:98:f4:29:5d:67:44:12:95:d5:
0b:f8:47:04:5b:2a:6a:79:3c:51:c4:28:b0:c1:7a:
bc:40:74:66:11:1a:ed:60:45:3b:48:fb:2a:d0:46:
9c:c3:ab:50:35:28:3e:e3:f1:4e:82:4a:65:ae:67:
95:06:6a:c1:87:9f:4f:17:de:45:6e:6c:c0:1a:11:
86:19:e8:24:8f:b4:24:a6:3b:92:3d:7f:f5:64:f3:
23:0b:4a:3f:58:3e:c2:27:e3:1e:b9:14:f5:02:f2:
b2:c0:fe:07:f3:a2:b5:54:c2:92:02:07:b8:87:b4:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D0:FD:E8:2F:BE:C1:AF:5B:5C:4F:96:66:84:85:79:13:5A:BD:9E
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ztD96C--wa9bXE-WZoSFeRNavZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.12.0/22
Signature Algorithm: sha256WithRSAEncryption
70:4b:37:a0:ea:4e:2c:59:66:df:0e:12:e3:c9:2d:26:17:08:
74:9a:5d:96:0e:cd:7b:8f:aa:2a:51:c5:1b:8b:84:10:a9:d6:
00:b2:ce:00:f0:a0:30:bf:0f:44:36:60:75:76:f1:4f:58:a3:
71:c2:fe:9b:25:a8:de:42:55:b8:2c:11:2b:a5:52:99:c4:81:
4f:89:b4:5d:03:7d:95:ec:11:81:82:17:5a:e9:7c:4a:0a:dd:
ea:2d:1a:2d:26:c7:f9:e7:37:33:f0:fa:26:98:3b:5d:f1:ac:
6f:4d:c9:e5:9c:00:47:4f:72:ba:87:79:52:8b:98:80:4a:b5:
80:da:3f:12:e1:f2:57:90:21:42:ef:95:a8:8b:92:d1:a4:de:
0c:dc:a9:87:39:a5:53:c3:7e:33:d0:97:ec:f0:5e:d1:28:7c:
73:85:30:27:e3:b0:e3:a0:4f:00:9a:9e:c7:56:f2:5d:d4:3d:
6a:42:ff:4a:fd:45:24:e0:fa:14:6f:c6:b4:f6:25:b9:41:ee:
29:ae:fc:96:11:53:4b:af:cc:52:65:c2:47:2b:51:5c:9d:df:
85:1e:0f:1e:13:23:7d:01:1f:d3:ca:78:9f:20:88:20:69:2a:
5b:50:22:e7:07:2a:a4:ab:60:bb:f2:9f:09:8a:fa:8b:71:d6:
20:42:ea:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO/bStm88Dd6xZDn4YVWJfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4
MDQ3MjgwHhcNMjQxMjEzMDk1MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWQwZmRlODJmYmVjMWFmNWI1YzRmOTY2Njg0ODU3OTEzNWFiZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lGdkV06MvvHWI9EwiMrUfLu1or+
wyiPci7rli6uHTVirVQWH6jBOPesrLA7gFsqWCssop81tBTb9yt3EJ1MI6L5yBdS
l93KNfz9GMO8eGI71p+pTDrhiEZOvZo6UVlsQfzHz5PHKffixlkhYzFT+X/FONq8
nWOcmSs3hFVUbNSpHhv285VdXkz012KY9CldZ0QSldUL+EcEWypqeTxRxCiwwXq8
QHRmERrtYEU7SPsq0Eacw6tQNSg+4/FOgkplrmeVBmrBh59PF95FbmzAGhGGGegk
j7QkpjuSPX/1ZPMjC0o/WD7CJ+MeuRT1AvKywP4H86K1VMKSAge4h7SvdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7Q/egvvsGvW1xPlmaEhXkTWr2eMB8GA1UdIwQY
MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt
ZGFiNmI4M2NmN2VjLzEvenREOTZDLS13YTliWEUtV1pvU0ZlUk5hdlo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj
LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY8MMA0G
CSqGSIb3DQEBCwUAA4IBAQBwSzeg6k4sWWbfDhLjyS0mFwh0ml2WDs17j6oqUcUb
i4QQqdYAss4A8KAwvw9ENmB1dvFPWKNxwv6bJajeQlW4LBErpVKZxIFPibRdA32V
7BGBghda6XxKCt3qLRotJsf55zcz8PommDtd8axvTcnlnABHT3K6h3lSi5iASrWA
2j8S4fJXkCFC75Woi5LRpN4M3KmHOaVTw34z0Jfs8F7RKHxzhTAn47DjoE8Amp7H
VvJd1D1qQv9K/UUk4PoUb8a09iW5Qe4prvyWEVNLr8xSZcJHK1Fcnd+FHg8eEyN9
AR/TynifIIggaSpbUCLnByqkq2C78p8JivqLcdYgQupQ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:55 2025 by rpki-client