Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/hJ9moXr_nRoAypQcte_aACD3kc0.roa
File: hJ9moXr_nRoAypQcte_aACD3kc0.roa (raw, json)
Hash identifier: IYCfRTEKUZXys9IgZCv1z785J8pegm+dV16VoLBatuA=
Subject key identifier: 84:9F:66:A1:7A:FF:9D:1A:00:CA:94:1C:B5:EF:DA:00:20:F7:91:CD
Certificate issuer: /CN=cde8a336d22567951212285234e038d584c73a82
Certificate serial: 0980F278
Authority key identifier: CD:E8:A3:36:D2:25:67:95:12:12:28:52:34:E0:38:D5:84:C7:3A:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeijNtIlZ5USEihSNOA41YTHOoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/hJ9moXr_nRoAypQcte_aACD3kc0.roa
Signing time: Sat 01 Jan 2022 02:54:51 +0000
ROA not before: Sat 01 Jan 2022 02:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51254
IP address blocks: 185.154.188.0/22 maxlen: 22
185.154.188.0/23 maxlen: 23
185.154.190.0/23 maxlen: 23
2a07:8ec0::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159445624 (0x980f278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde8a336d22567951212285234e038d584c73a82
Validity
Not Before: Jan 1 02:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=849f66a17aff9d1a00ca941cb5efda0020f791cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:fc:e3:4e:34:b7:c1:48:22:c4:21:d4:74:
44:bc:86:44:7e:da:ea:af:bb:19:46:e7:ec:16:f9:
2f:9a:46:9f:5c:df:03:61:47:2f:49:ec:4b:93:ca:
a4:02:5e:5a:fd:88:db:e2:20:da:2d:aa:68:5c:52:
72:e2:63:cb:1e:fe:c2:db:98:39:84:f6:b3:fb:e3:
d6:41:fe:2b:66:c6:7e:be:86:2b:ed:66:b7:12:fd:
41:21:7a:d3:85:8a:f5:79:32:26:a1:ff:39:fe:09:
9b:c2:5e:0f:42:85:86:e4:3e:17:fb:d3:43:a6:e9:
6f:6b:d7:76:df:3a:44:ee:2a:56:e7:d1:1b:69:1c:
8f:2d:6f:69:bc:a1:77:ff:a7:40:ff:11:25:a9:b9:
a8:75:35:65:66:1d:d4:89:78:d6:cb:58:00:76:cb:
4b:f5:4b:e1:8d:1e:6d:72:ab:58:a9:0b:7d:e7:4b:
68:ff:ee:fb:a3:4c:f5:04:79:cc:93:d7:a7:5e:f1:
0b:4b:9f:c0:ca:e3:4e:34:75:35:8d:4f:6e:7d:31:
f5:51:98:4e:21:ef:cf:f6:be:35:43:e9:a6:8c:b6:
36:70:37:c7:8a:82:ae:d8:0d:4b:e3:12:b1:cf:d0:
df:07:7a:91:23:4c:d4:ef:6b:50:04:b9:3e:0d:e8:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:66:A1:7A:FF:9D:1A:00:CA:94:1C:B5:EF:DA:00:20:F7:91:CD
X509v3 Authority Key Identifier:
keyid:CD:E8:A3:36:D2:25:67:95:12:12:28:52:34:E0:38:D5:84:C7:3A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeijNtIlZ5USEihSNOA41YTHOoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/hJ9moXr_nRoAypQcte_aACD3kc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/zeijNtIlZ5USEihSNOA41YTHOoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.188.0/22
IPv6:
2a07:8ec0::/36
Signature Algorithm: sha256WithRSAEncryption
47:d7:8d:2e:92:be:cb:e3:0f:0b:02:56:2a:23:ed:92:5b:01:
6b:b9:6a:aa:4f:1a:c8:06:11:32:28:36:86:c3:18:f3:a3:2d:
86:ab:f4:c2:f7:47:0a:e9:9c:f5:e9:27:17:05:55:c4:d3:35:
14:15:e7:91:56:2d:b9:cc:bc:f4:51:d9:2a:c1:38:95:cf:f7:
e9:45:5d:30:77:45:b0:8d:a1:24:be:19:79:2a:d5:af:55:14:
a8:69:cb:0f:33:70:64:28:1d:55:3d:6f:10:e7:f1:e2:9e:56:
27:3b:c0:04:1a:67:f0:20:12:f0:49:79:e9:1a:84:e6:b1:99:
8e:f0:57:c6:e5:b2:e9:fb:57:d2:1d:07:5d:fd:0b:86:c9:e7:
7c:f2:4e:83:02:7a:1d:c9:25:6d:25:4c:e1:03:ae:30:d7:99:
d7:9f:29:03:c9:21:e4:d5:f5:19:c5:7b:94:41:f8:aa:9a:1e:
ce:2b:5c:af:4b:b4:dd:9e:28:8b:da:28:e5:fa:e2:af:c0:9e:
ed:0d:f9:8c:57:66:f9:af:29:10:ea:28:32:59:30:86:00:8b:
4e:3c:ba:9c:61:e4:0f:c7:d6:fe:0f:cd:24:72:26:0d:7b:a2:
49:b5:aa:fa:06:77:0f:21:cf:4e:61:ca:54:a2:42:56:0d:82:
fa:68:a0:62
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIECYDyeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZGU4YTMzNmQyMjU2Nzk1MTIxMjI4NTIzNGUwMzhkNTg0YzczYTgyMB4XDTIyMDEw
MTAyNTQ1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ5ZjY2YTE3YWZm
OWQxYTAwY2E5NDFjYjVlZmRhMDAyMGY3OTFjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnH/ONONLfBSCLEIdR0RLyGRH7a6q+7GUbn7Bb5L5pGn1zf
A2FHL0nsS5PKpAJeWv2I2+Ig2i2qaFxScuJjyx7+wtuYOYT2s/vj1kH+K2bGfr6G
K+1mtxL9QSF604WK9XkyJqH/Of4Jm8JeD0KFhuQ+F/vTQ6bpb2vXdt86RO4qVufR
G2kcjy1vabyhd/+nQP8RJam5qHU1ZWYd1Il41stYAHbLS/VL4Y0ebXKrWKkLfedL
aP/u+6NM9QR5zJPXp17xC0ufwMrjTjR1NY1Pbn0x9VGYTiHvz/a+NUPppoy2NnA3
x4qCrtgNS+MSsc/Q3wd6kSNM1O9rUAS5Pg3oe/kCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBSEn2ahev+dGgDKlBy179oAIPeRzTAfBgNVHSMEGDAWgBTN6KM20iVnlRIS
KFI04DjVhMc6gjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3plaWpOdElsWjVVU0VpaFNOT0E0MVlUSE9vSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvYjY5NGFlLWVkMDItNDdhMy1iNzU5LTRlMmVlMjY4MjU4Ni8x
L2hKOW1vWHJfblJvQXlwUWN0ZV9hQUNEM2tjMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
YjY5NGFlLWVkMDItNDdhMy1iNzU5LTRlMmVlMjY4MjU4Ni8xL3plaWpOdElsWjVV
U0VpaFNOT0E0MVlUSE9vSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEArmavDAOBAIAAjAIAwYEKgeOwAAw
DQYJKoZIhvcNAQELBQADggEBAEfXjS6SvsvjDwsCVioj7ZJbAWu5aqpPGsgGETIo
NobDGPOjLYar9ML3RwrpnPXpJxcFVcTTNRQV55FWLbnMvPRR2SrBOJXP9+lFXTB3
RbCNoSS+GXkq1a9VFKhpyw8zcGQoHVU9bxDn8eKeVic7wAQaZ/AgEvBJeekahOax
mY7wV8blsun7V9IdB139C4bJ53zyToMCeh3JJW0lTOEDrjDXmdefKQPJIeTV9RnF
e5RB+KqaHs4rXK9LtN2eKIvaKOX64q/Anu0N+YxXZvmvKRDqKDJZMIYAi048upxh
5A/H1v4PzSRyJg17okm1qvoGdw8hz05hylSiQlYNgvpooGI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:42:31 2025 by rpki-client