Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/p85mwjNpw2DPiEwmt3DneLuJKMU.roa
File: p85mwjNpw2DPiEwmt3DneLuJKMU.roa (raw, json)
Hash identifier: 9txQiYeTXR7ltBlHFbZo2A2VUj0ra3QUmGnLHYSLM/Q=
Subject key identifier: A7:CE:66:C2:33:69:C3:60:CF:88:4C:26:B7:70:E7:78:BB:89:28:C5
Certificate issuer: /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial: 01942748241C5001AC60DB191170278C47DD
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/p85mwjNpw2DPiEwmt3DneLuJKMU.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203812
IP address blocks: 185.122.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:24:1c:50:01:ac:60:db:19:11:70:27:8c:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ce66c23369c360cf884c26b770e778bb8928c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:e4:a9:9b:d0:a3:5a:2b:0a:9c:45:5b:da:
2a:f7:28:db:eb:a7:0f:6a:c4:3b:d7:a1:fd:91:e8:
a0:5a:50:41:86:eb:27:30:7d:22:2f:db:65:8e:60:
70:88:b9:b4:67:2f:8c:a1:67:0f:11:40:58:f3:a9:
11:e5:cf:a3:3a:90:d3:50:13:b0:28:9e:4b:71:92:
c6:8d:ab:74:49:67:e8:12:ce:73:d3:ce:ac:94:c4:
5f:f6:57:67:e3:aa:07:7a:3d:6d:fa:4a:43:70:60:
36:27:2d:e5:50:a0:a9:9f:2e:6b:bf:3c:e7:8c:3e:
3c:8e:b0:9a:57:dd:9e:c2:cf:1a:09:6e:ed:50:a8:
ca:a4:c5:ea:9e:90:f2:59:d6:e7:12:51:98:43:20:
8c:dd:ee:90:b8:4c:0c:8a:a5:85:5a:d5:35:f5:8f:
be:07:ee:41:c9:57:9a:45:13:72:d3:e2:f5:be:0b:
50:b6:83:8a:11:e2:a0:93:c1:6c:51:44:b3:e9:b7:
fc:91:04:e0:4b:a5:4d:d2:6f:38:5e:26:15:3c:b3:
5d:f2:f6:ba:05:6c:94:ae:78:64:51:b4:18:2c:ca:
e9:a6:2d:7b:bf:ad:7f:09:b0:21:32:dc:33:cf:60:
14:86:d8:44:6b:7e:84:88:0f:3d:bc:11:5b:dd:f3:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:66:C2:33:69:C3:60:CF:88:4C:26:B7:70:E7:78:BB:89:28:C5
X509v3 Authority Key Identifier:
keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/p85mwjNpw2DPiEwmt3DneLuJKMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:77:2c:79:02:91:c1:4e:22:7d:58:02:06:db:27:e5:ec:89:
5b:9e:04:ec:31:bc:80:67:3c:66:8c:86:54:1b:e2:71:a9:1b:
74:d3:ce:0e:3e:d5:97:f5:c2:52:1f:01:93:38:c2:15:ab:70:
ab:6d:c6:01:c4:b9:8b:e3:ef:c9:3a:1f:19:4d:0f:b6:e8:26:
42:10:6c:7b:f1:48:61:69:a3:b0:9b:ab:34:0f:af:0b:7b:ba:
06:05:f2:39:d2:ac:1c:cc:bd:b3:32:d8:04:eb:51:4a:6a:e8:
9f:3a:29:f5:1e:33:7e:03:6a:8c:ce:45:8c:54:8a:00:eb:78:
91:59:44:7f:33:dc:d1:4d:ac:0c:62:b0:95:e0:f3:01:67:59:
9e:0b:d7:20:a5:40:6a:6a:7b:b5:9c:72:40:8d:fb:5a:d2:26:
89:7c:e7:2f:89:9e:1c:0f:df:75:56:b4:6c:8e:74:5d:92:c1:
e6:1b:d7:c7:b8:de:00:cb:b3:c3:a3:cf:79:fc:b8:58:94:1a:
d9:76:00:a5:6c:71:ee:17:4f:ba:a8:e8:85:5d:4f:77:97:8c:
76:0c:65:90:f7:b4:50:29:64:6f:6b:d3:fa:1a:2a:9a:d0:64:
95:31:bc:27:ca:69:cb:16:5b:a2:f2:bc:99:b5:de:67:6e:60:
6b:be:7a:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSCQcUAGsYNsZEXAnjEfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmMwM2Y2YzVhMjg0ZmEwMGRiYjVhYTYwOWM1MTViN2M1
ODk5NjkwHhcNMjUwMTAyMTM1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2NlNjZjMjMzNjljMzYwY2Y4ODRjMjZiNzcwZTc3OGJiODkyOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSHkqZvQo1orCpxFW9oq9yjb66cP
asQ716H9keigWlBBhusnMH0iL9tljmBwiLm0Zy+MoWcPEUBY86kR5c+jOpDTUBOw
KJ5LcZLGjat0SWfoEs5z086slMRf9ldn46oHej1t+kpDcGA2Jy3lUKCpny5rvzzn
jD48jrCaV92ews8aCW7tUKjKpMXqnpDyWdbnElGYQyCM3e6QuEwMiqWFWtU19Y++
B+5ByVeaRRNy0+L1vgtQtoOKEeKgk8FsUUSz6bf8kQTgS6VN0m84XiYVPLNd8va6
BWyUrnhkUbQYLMrppi17v61/CbAhMtwzz2AUhthEa36EiA89vBFb3fNAHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKfOZsIzacNgz4hMJrdw53i7iSjFMB8GA1UdIwQY
MBaAFJu8A/bFooT6ANu1qmCcUVt8WJlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd3RDlzV2loUG9BMjdXcVlKeFJXM3hZbVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS84OTQ0ZjQtZjM0Mi00MjU0LWI1YTct
OWQ3ZTVhZjRkZmM1LzEvcDg1bXdqTnB3MkRQaUV3bXQzRG5lTHVKS01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS84OTQ0ZjQtZjM0Mi00MjU0LWI1YTctOWQ3ZTVhZjRkZmM1
LzEvbTd3RDlzV2loUG9BMjdXcVlKeFJXM3hZbVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXrWMA0G
CSqGSIb3DQEBCwUAA4IBAQCndyx5ApHBTiJ9WAIG2yfl7IlbngTsMbyAZzxmjIZU
G+JxqRt0084OPtWX9cJSHwGTOMIVq3CrbcYBxLmL4+/JOh8ZTQ+26CZCEGx78Uhh
aaOwm6s0D68Le7oGBfI50qwczL2zMtgE61FKauifOin1HjN+A2qMzkWMVIoA63iR
WUR/M9zRTawMYrCV4PMBZ1meC9cgpUBqanu1nHJAjfta0iaJfOcviZ4cD991VrRs
jnRdksHmG9fHuN4Ay7PDo895/LhYlBrZdgClbHHuF0+6qOiFXU93l4x2DGWQ97RQ
KWRva9P6Giqa0GSVMbwnymnLFlui8ryZtd5nbmBrvnpJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:11 2025 by rpki-client