Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aEvXrl6fJbhRpsvfGhvbVw32tSY.roa
File: aEvXrl6fJbhRpsvfGhvbVw32tSY.roa (raw, json)
Hash identifier: 9mhhdbe54gpT9b4aMYBkI9NV6akZ4KbIIgiqihOYRgY=
Subject key identifier: 68:4B:D7:AE:5E:9F:25:B8:51:A6:CB:DF:1A:1B:DB:57:0D:F6:B5:26
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01848B8234B81FF8E62B7F49A047540C950F
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aEvXrl6fJbhRpsvfGhvbVw32tSY.roa
Signing time: Fri 18 Nov 2022 16:11:16 +0000
ROA not before: Fri 18 Nov 2022 16:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203104
IP address blocks: 194.209.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:82:34:b8:1f:f8:e6:2b:7f:49:a0:47:54:0c:95:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Nov 18 16:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=684bd7ae5e9f25b851a6cbdf1a1bdb570df6b526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9c:3e:de:c3:87:8b:85:91:4a:b4:96:87:04:
94:c1:82:a4:6b:b2:f7:09:46:3c:bc:23:a5:a8:81:
f5:cf:40:74:1c:70:14:2e:70:ba:d0:d5:ab:09:f6:
5f:e4:ac:11:7c:7f:47:d4:d3:32:89:f4:ec:c5:77:
c8:1e:ff:f4:ed:0b:12:f7:f5:8e:9e:f4:60:02:27:
78:08:8d:ca:06:0a:20:00:ca:45:a3:54:20:c2:ad:
7c:91:d6:24:cb:ce:1b:6c:82:bb:b3:a6:70:de:0f:
54:9f:44:7e:69:4e:c8:e8:8a:c4:b6:72:df:06:e3:
8d:59:4a:1a:5d:6f:44:45:91:28:7b:4b:22:b8:7f:
eb:f5:2e:03:0b:c8:e7:17:70:3a:9c:8b:99:24:6c:
1d:eb:d2:03:c2:d1:47:2a:e5:62:bc:3f:da:99:44:
fa:09:5d:e1:e0:91:62:06:c8:53:be:ce:2b:ee:3f:
ed:f4:2a:0c:82:0f:8c:28:84:f7:7e:e2:dc:3f:b2:
79:04:57:22:b8:41:a1:2e:07:03:b7:45:c0:31:39:
ce:1d:f0:1b:16:57:fb:99:11:a9:3c:a4:d9:0e:e8:
f8:99:2e:ca:32:0f:6a:15:fd:c2:2f:97:b4:cc:10:
65:c4:07:90:1f:a9:dd:4b:de:6c:b3:aa:ec:43:04:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:D7:AE:5E:9F:25:B8:51:A6:CB:DF:1A:1B:DB:57:0D:F6:B5:26
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/aEvXrl6fJbhRpsvfGhvbVw32tSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
71:17:59:4c:64:76:e6:0d:02:c2:18:e2:76:10:ef:d7:6c:ef:
47:2c:72:08:d5:48:df:03:21:77:d8:8c:22:cf:7f:0e:7f:20:
f6:ba:86:c8:d3:41:c1:e6:1d:49:8c:33:f0:3c:2d:ec:39:2d:
d8:6d:10:88:98:58:d1:6a:85:46:d9:bb:0b:6c:af:e1:ab:8b:
40:84:35:7a:0c:1f:b2:c6:bd:23:3b:5c:ee:00:49:14:3b:a8:
96:33:2e:b4:68:16:6e:8f:6c:0b:ba:eb:95:15:b0:78:c7:7d:
3a:16:e4:e8:69:ca:85:9d:60:e8:d8:15:a7:93:f9:f3:f0:87:
4b:20:0e:3f:df:bc:4a:9f:db:eb:54:c2:bf:72:f3:e1:d6:63:
ce:6b:f8:87:f8:9a:92:e3:f7:08:5d:14:5c:a6:1b:13:f1:4f:
fc:a6:f5:08:26:78:47:0a:75:91:00:94:5b:a6:95:95:71:6f:
81:1e:e4:ba:60:8e:19:7a:cc:c0:30:20:08:c0:c4:ed:73:c0:
d1:af:d2:24:13:a1:db:41:a5:19:4a:1b:c6:c9:fb:80:87:64:
ce:f4:9e:ff:ec:50:e2:32:ad:e0:1d:b5:c7:83:82:3c:6e:fc:
9d:0f:a6:86:74:09:d2:62:c3:27:b2:9c:cf:89:54:c8:ca:43:
8d:5c:61:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSLgjS4H/jmK39JoEdUDJUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjIxMTE4MTYxMTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODRiZDdhZTVlOWYyNWI4NTFhNmNiZGYxYTFiZGI1NzBkZjZiNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZw+3sOHi4WRSrSWhwSUwYKka7L3
CUY8vCOlqIH1z0B0HHAULnC60NWrCfZf5KwRfH9H1NMyifTsxXfIHv/07QsS9/WO
nvRgAid4CI3KBgogAMpFo1Qgwq18kdYky84bbIK7s6Zw3g9Un0R+aU7I6IrEtnLf
BuONWUoaXW9ERZEoe0siuH/r9S4DC8jnF3A6nIuZJGwd69IDwtFHKuVivD/amUT6
CV3h4JFiBshTvs4r7j/t9CoMgg+MKIT3fuLcP7J5BFciuEGhLgcDt0XAMTnOHfAb
Flf7mRGpPKTZDuj4mS7KMg9qFf3CL5e0zBBlxAeQH6ndS95ss6rsQwTbkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhL165enyW4UabL3xob21cN9rUmMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvYUV2WHJsNmZKYmhScHN2ZkdodmJWdzMydFNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtGRMA0G
CSqGSIb3DQEBCwUAA4IBAQBxF1lMZHbmDQLCGOJ2EO/XbO9HLHII1UjfAyF32Iwi
z38OfyD2uobI00HB5h1JjDPwPC3sOS3YbRCImFjRaoVG2bsLbK/hq4tAhDV6DB+y
xr0jO1zuAEkUO6iWMy60aBZuj2wLuuuVFbB4x306FuToacqFnWDo2BWnk/nz8IdL
IA4/37xKn9vrVMK/cvPh1mPOa/iH+JqS4/cIXRRcphsT8U/8pvUIJnhHCnWRAJRb
ppWVcW+BHuS6YI4ZeszAMCAIwMTtc8DRr9IkE6HbQaUZShvGyfuAh2TO9J7/7FDi
Mq3gHbXHg4I8bvydD6aGdAnSYsMnspzPiVTIykONXGF3
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:31:21 2025 by rpki-client