Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iCLw8RIiSqOym7ZoMaqRRfESDrY.roa
File: iCLw8RIiSqOym7ZoMaqRRfESDrY.roa (raw, json)
Hash identifier: NUpT/nfSwkXpCmZKiEmftqeM0tB0nII8kUks+AYv2Fo=
Subject key identifier: 88:22:F0:F1:12:22:4A:A3:B2:9B:B6:68:31:AA:91:45:F1:12:0E:B6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BCAD98545229C1BFFB402B5B79543
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iCLw8RIiSqOym7ZoMaqRRfESDrY.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 37.140.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ca:d9:85:45:22:9c:1b:ff:b4:02:b5:b7:95:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8822f0f112224aa3b29bb66831aa9145f1120eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:f7:19:ed:9b:5b:e9:77:be:16:07:86:1c:
af:40:71:83:28:56:ec:c6:85:98:01:05:db:40:c1:
9d:69:79:25:e1:6c:63:fb:83:19:e4:5b:5e:1c:f2:
13:09:24:6f:3f:7f:b4:cd:f1:34:6c:d4:ea:2f:16:
ba:97:6d:6d:8c:cd:6a:a5:b3:f0:cd:d5:f7:03:c5:
a5:e2:50:1f:7c:2b:6c:1f:8d:59:c0:57:c7:ef:66:
3a:7c:a4:93:92:29:67:34:6b:fc:50:04:2d:fc:ce:
62:94:f4:69:18:93:ef:4a:c1:34:43:48:3c:0b:b1:
37:81:28:85:fe:84:7c:ad:d5:44:94:e1:2d:0f:8a:
f6:e6:ef:39:8e:da:b4:d0:8a:a4:4c:fc:5f:ec:bc:
d0:68:bf:9a:ff:64:57:30:f5:3d:9b:4d:53:3e:4e:
e0:42:fa:96:ce:06:75:27:11:a1:92:07:32:84:4b:
fd:2e:f0:1d:9c:7b:8f:c5:29:11:08:38:31:14:9b:
b7:4a:2d:76:56:a3:7a:95:22:b1:b4:e0:d5:64:0f:
e7:0c:55:5b:ec:15:e4:f3:24:27:d7:8f:1d:1a:51:
d0:22:7e:a7:d0:6e:e0:13:83:52:10:d8:ed:a8:bd:
44:b8:95:ca:83:23:cd:c0:fd:9e:7e:a9:73:c1:52:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:22:F0:F1:12:22:4A:A3:B2:9B:B6:68:31:AA:91:45:F1:12:0E:B6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/iCLw8RIiSqOym7ZoMaqRRfESDrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cd:71:4c:14:54:df:eb:f5:1b:47:6c:24:5f:36:0a:85:c3:
3c:86:04:b9:c6:90:22:33:cf:09:cb:e8:3c:9f:5d:62:26:df:
f7:2d:03:2e:1e:23:ee:da:aa:32:c8:44:15:99:bb:2d:c0:86:
3b:73:e1:63:d8:1c:8e:4d:1b:8a:8f:06:e1:c2:3d:0f:42:d3:
cb:b9:61:45:9a:7b:5c:68:7c:74:59:43:d5:fc:4b:a2:7c:80:
bb:00:39:89:23:d0:e9:57:e8:ec:cc:21:be:4a:b0:f5:4a:4e:
d9:d3:5f:91:d9:40:9d:ff:1e:ce:0d:fd:7e:74:76:5f:2b:df:
5d:ed:c4:0d:e6:d4:39:e4:00:e0:1d:2a:21:4c:27:c3:b0:b3:
dc:0f:c7:21:44:78:5c:01:14:2e:11:a4:a5:30:37:da:00:52:
73:d8:56:b9:39:c1:ec:4c:57:31:91:51:cc:d0:35:aa:32:bc:
30:8a:1b:a8:31:1e:47:30:9b:98:5b:e0:05:4c:6e:ea:5c:b2:
68:5b:02:03:d7:27:e8:29:6e:9f:9f:d5:34:9c:6d:a0:9e:36:
dd:ed:00:3f:4d:4f:97:65:33:9b:2a:e8:0e:b6:7d:b3:a7:80:
be:66:1f:54:39:c5:03:25:ab:26:7f:fa:cd:f8:d4:a2:c1:2b:
d5:87:29:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8rZhUUinBv/tAK1t5VDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwMTAyMDk0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODIyZjBmMTEyMjI0YWEzYjI5YmI2NjgzMWFhOTE0NWYxMTIwZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7n3Ge2bW+l3vhYHhhyvQHGDKFbs
xoWYAQXbQMGdaXkl4Wxj+4MZ5FteHPITCSRvP3+0zfE0bNTqLxa6l21tjM1qpbPw
zdX3A8Wl4lAffCtsH41ZwFfH72Y6fKSTkilnNGv8UAQt/M5ilPRpGJPvSsE0Q0g8
C7E3gSiF/oR8rdVElOEtD4r25u85jtq00IqkTPxf7LzQaL+a/2RXMPU9m01TPk7g
QvqWzgZ1JxGhkgcyhEv9LvAdnHuPxSkRCDgxFJu3Si12VqN6lSKxtODVZA/nDFVb
7BXk8yQn148dGlHQIn6n0G7gE4NSENjtqL1EuJXKgyPNwP2efqlzwVIkPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIgi8PESIkqjspu2aDGqkUXxEg62MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvaUNMdzhSSWlTcU95bTdab01hcVJSZkVTRHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYz6MA0G
CSqGSIb3DQEBCwUAA4IBAQBvzXFMFFTf6/UbR2wkXzYKhcM8hgS5xpAiM88Jy+g8
n11iJt/3LQMuHiPu2qoyyEQVmbstwIY7c+Fj2ByOTRuKjwbhwj0PQtPLuWFFmntc
aHx0WUPV/EuifIC7ADmJI9DpV+jszCG+SrD1Sk7Z01+R2UCd/x7ODf1+dHZfK99d
7cQN5tQ55ADgHSohTCfDsLPcD8chRHhcARQuEaSlMDfaAFJz2Fa5OcHsTFcxkVHM
0DWqMrwwihuoMR5HMJuYW+AFTG7qXLJoWwID1yfoKW6fn9U0nG2gnjbd7QA/TU+X
ZTObKugOtn2zp4C+Zh9UOcUDJasmf/rN+NSiwSvVhylo
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:52 2025 by rpki-client