Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/IaizFfBRPTpK4T-fraxs6klsLCU.roa
File: IaizFfBRPTpK4T-fraxs6klsLCU.roa (raw, json)
Hash identifier: EHWP3Y6bTBtnSaOYUeenIFWmza4QO2idpY5G9qG7oVQ=
Subject key identifier: 21:A8:B3:15:F0:51:3D:3A:4A:E1:3F:9F:AD:AC:6C:EA:49:6C:2C:25
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 01856D8AE2F184788752A1D50DAF89E9E5D7
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/IaizFfBRPTpK4T-fraxs6klsLCU.roa
Signing time: Sun 01 Jan 2023 13:34:56 +0000
ROA not before: Sun 01 Jan 2023 13:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60591
IP address blocks: 85.209.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e2:f1:84:78:87:52:a1:d5:0d:af:89:e9:e5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jan 1 13:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21a8b315f0513d3a4ae13f9fadac6cea496c2c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:e9:28:93:18:33:fe:a1:e1:5d:f9:ce:c0:
29:20:b3:a6:4e:8a:6c:bc:41:ea:bc:6a:39:33:a5:
b8:f5:59:b6:22:ab:cb:64:5b:54:f3:f5:bd:97:76:
4f:85:64:fb:ee:b2:d2:b8:2b:78:59:55:f3:52:74:
32:78:91:36:5a:3e:f4:4a:e9:fb:4e:fb:08:fe:27:
cd:be:7a:14:af:82:76:42:45:0d:8c:a9:bd:b2:e8:
17:f2:12:02:01:11:4b:ce:5a:1e:08:45:aa:d8:6b:
cf:76:cd:42:33:56:ae:f7:d0:cd:f3:07:1f:26:a9:
61:61:a9:7c:b5:f5:00:6b:c5:dd:21:01:3e:67:b1:
f5:59:99:b9:41:b8:f5:31:cb:ba:ba:4d:26:2c:73:
83:3d:8b:04:6e:2b:3f:7f:55:25:9e:17:60:ce:0f:
a3:b3:aa:70:3e:6f:48:7d:54:0c:30:a4:42:69:1d:
64:e5:2c:4b:9b:d3:49:e3:33:21:58:5e:90:c0:50:
24:b7:02:10:7f:72:82:67:33:0d:6e:fd:be:1d:fa:
c2:22:57:75:41:85:a4:9e:47:da:be:f3:06:a2:cc:
ce:12:94:79:56:51:ba:7b:ae:2c:fa:b9:8f:9e:75:
a0:d5:a7:cb:06:db:86:3a:55:2b:55:3d:f3:32:13:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A8:B3:15:F0:51:3D:3A:4A:E1:3F:9F:AD:AC:6C:EA:49:6C:2C:25
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/IaizFfBRPTpK4T-fraxs6klsLCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f3:0b:99:22:1b:7d:f9:87:ff:1f:6c:9a:6f:6b:88:e1:10:
55:c8:8b:f4:03:3b:e9:bb:bb:c9:21:28:05:4e:90:a8:5b:58:
7c:06:92:48:16:d5:99:35:47:d0:87:57:9d:9c:98:3a:6f:fc:
27:79:1e:14:9b:98:a8:bb:fd:5a:53:0a:f9:14:80:d2:c1:cc:
3e:8b:37:9a:12:52:b6:46:29:86:fa:58:70:91:7e:40:1d:53:
42:bb:a7:2d:f6:16:04:37:43:37:fc:55:cf:a3:2e:42:10:0a:
8c:66:5d:0c:a4:f1:b0:89:6f:3a:20:c6:30:7e:06:46:95:93:
27:e0:ca:6e:d4:73:12:02:7a:ec:8a:93:0c:34:c1:e9:c0:b2:
69:e2:77:d8:a1:01:d9:0b:33:4e:bb:b0:6a:cb:4f:7b:5f:1e:
8e:48:33:83:10:7e:67:14:5d:cd:39:be:18:fe:b1:21:eb:3b:
ca:7d:cc:e7:85:32:d0:c5:d8:9d:4f:49:ba:3d:06:2f:46:3d:
0e:df:6d:c7:c7:07:ca:a3:be:b9:13:1c:75:cc:04:e7:71:f1:
0b:36:57:09:fe:20:22:95:42:f8:11:45:e8:92:77:ae:39:27:
d3:ec:66:e8:b6:48:31:24:77:59:50:f5:e3:0f:da:4f:1b:85:
77:d1:6e:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtiuLxhHiHUqHVDa+J6eXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzQ5MTM2MmIyZTM4NjE5N2I5YTA3NDYxMjQyODhiYzBi
Y2YwMzEwHhcNMjMwMTAxMTMzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWE4YjMxNWYwNTEzZDNhNGFlMTNmOWZhZGFjNmNlYTQ5NmMyYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApITpKJMYM/6h4V35zsApILOmTops
vEHqvGo5M6W49Vm2IqvLZFtU8/W9l3ZPhWT77rLSuCt4WVXzUnQyeJE2Wj70Sun7
TvsI/ifNvnoUr4J2QkUNjKm9sugX8hICARFLzloeCEWq2GvPds1CM1au99DN8wcf
JqlhYal8tfUAa8XdIQE+Z7H1WZm5Qbj1Mcu6uk0mLHODPYsEbis/f1Ulnhdgzg+j
s6pwPm9IfVQMMKRCaR1k5SxLm9NJ4zMhWF6QwFAktwIQf3KCZzMNbv2+HfrCIld1
QYWknkfavvMGoszOEpR5VlG6e64s+rmPnnWg1afLBtuGOlUrVT3zMhPXnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGosxXwUT06SuE/n62sbOpJbCwlMB8GA1UdIwQY
MBaAFEXEkTYrLjhhl7mgdGEkKIvAvPAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NmMxODEtNGY1Yy00NWZjLWJhYWMt
MWY5YTE5YzM3ZTA4LzEvSWFpekZmQlJQVHBLNFQtZnJheHM2a2xzTENVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84NmMxODEtNGY1Yy00NWZjLWJhYWMtMWY5YTE5YzM3ZTA4
LzEvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdGUMA0G
CSqGSIb3DQEBCwUAA4IBAQAt8wuZIht9+Yf/H2yab2uI4RBVyIv0Azvpu7vJISgF
TpCoW1h8BpJIFtWZNUfQh1ednJg6b/wneR4Um5iou/1aUwr5FIDSwcw+izeaElK2
RimG+lhwkX5AHVNCu6ct9hYEN0M3/FXPoy5CEAqMZl0MpPGwiW86IMYwfgZGlZMn
4Mpu1HMSAnrsipMMNMHpwLJp4nfYoQHZCzNOu7Bqy097Xx6OSDODEH5nFF3NOb4Y
/rEh6zvKfcznhTLQxdidT0m6PQYvRj0O323HxwfKo765Exx1zATncfELNlcJ/iAi
lUL4EUXokneuOSfT7GbotkgxJHdZUPXjD9pPG4V30W6a
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:18 2025 by rpki-client