Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/pxqHr4sai6w4MscZayNHP7SOQ7U.roa
File: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (raw, json)
Hash identifier: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=
Subject key identifier: A7:1A:87:AF:8B:1A:8B:AC:38:32:C7:19:6B:23:47:3F:B4:8E:43:B5
Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial: 0194228DABACF09608F5DDDEBB2B56845D72
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/pxqHr4sai6w4MscZayNHP7SOQ7U.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206606
IP address blocks: 185.177.160.0/22 maxlen: 22
2a0a:3e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ab:ac:f0:96:08:f5:dd:de:bb:2b:56:84:5d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a71a87af8b1a8bac3832c7196b23473fb48e43b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:24:88:ba:33:81:56:4f:ac:c6:f5:11:5c:
d5:f9:0d:2e:fa:b6:b0:59:0a:6c:7a:43:20:f2:a4:
d7:fc:20:7f:1e:ac:fc:3e:64:07:32:77:53:a8:03:
96:a2:43:39:cc:7b:0d:f9:c7:03:90:b7:4b:79:48:
ec:8e:18:eb:da:f6:e0:ca:08:2f:ea:af:77:a4:91:
81:08:26:33:33:b9:56:8f:09:69:4e:a0:c7:40:fe:
d8:df:17:45:29:39:b3:ea:a9:ed:30:b2:4d:03:54:
8c:fc:38:0b:53:c6:ac:fa:37:9a:6e:1a:88:92:73:
57:ac:eb:00:94:7d:d4:f9:7d:e5:18:a4:d3:03:e8:
b4:c4:ba:00:34:a9:43:41:12:2b:d9:23:6d:b0:71:
29:2b:69:d4:a7:24:c9:78:25:25:89:fa:8b:51:56:
9d:9f:c4:f3:0a:d7:41:8c:77:72:a0:49:99:b7:3f:
1c:fe:92:87:b4:2c:94:f7:e8:db:76:a4:6f:03:a6:
41:74:75:88:69:1e:64:69:24:6e:5d:3f:65:2a:63:
b9:6c:e0:90:db:13:c9:f8:be:d7:23:d5:96:c0:c4:
63:8e:e8:d9:06:00:be:66:d5:8a:fa:44:52:56:9e:
26:40:e5:31:06:6f:72:7e:b2:56:19:68:2b:2b:7c:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:87:AF:8B:1A:8B:AC:38:32:C7:19:6B:23:47:3F:B4:8E:43:B5
X509v3 Authority Key Identifier:
keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/pxqHr4sai6w4MscZayNHP7SOQ7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.160.0/22
IPv6:
2a0a:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
4a:88:5a:63:36:d6:4c:bf:a6:ae:f4:d6:2f:2a:85:7f:b7:2c:
cb:9c:2c:60:f4:c6:32:a8:4e:35:a9:68:fe:99:d1:9d:30:0e:
e6:41:e0:22:62:5e:76:99:f8:ee:17:44:7b:c9:00:b4:a3:50:
c4:93:cd:2e:0d:9c:1d:6f:0f:b6:bc:46:c6:76:fb:24:48:5f:
ec:22:8f:b2:a1:87:c7:3f:38:7a:15:b0:6c:3d:af:53:5f:96:
20:36:c0:a7:af:89:05:e1:24:22:cd:de:8c:b6:6d:47:c4:71:
05:74:84:54:6e:19:87:45:18:0f:a0:0e:82:42:2b:c2:11:4c:
43:9c:ba:49:43:03:5c:59:17:23:f2:fa:26:33:c9:75:8a:cb:
35:35:36:a7:89:56:f0:fa:24:be:71:cf:a1:b0:e2:87:3e:43:
46:c1:ae:a8:85:b3:d0:e4:94:40:89:cd:7d:55:1b:85:13:82:
19:dd:cf:fc:ed:dd:75:a2:7e:3b:f1:9c:40:52:65:ff:3a:25:
9e:7a:e8:26:95:67:56:98:6d:9a:c5:67:3e:cc:1f:8c:de:63:
43:d7:db:3c:29:83:01:e6:ba:70:83:c3:fd:65:0b:26:89:53:
22:7a:4e:58:d2:09:28:4c:f5:73:cd:16:14:17:5f:3a:d3:76:
24:d1:92:fe
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijaus8JYI9d3euytWhF1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiY2VlNGQ5NTIzZjE1MjkxYzU3Njc1ZmQyNmRjOTUwYTdj
ZDU1NTAwHhcNMjUwMTAxMTU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzFhODdhZjhiMWE4YmFjMzgzMmM3MTk2YjIzNDczZmI0OGU0M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8YkiLozgVZPrMb1EVzV+Q0u+raw
WQpsekMg8qTX/CB/Hqz8PmQHMndTqAOWokM5zHsN+ccDkLdLeUjsjhjr2vbgyggv
6q93pJGBCCYzM7lWjwlpTqDHQP7Y3xdFKTmz6qntMLJNA1SM/DgLU8as+jeabhqI
knNXrOsAlH3U+X3lGKTTA+i0xLoANKlDQRIr2SNtsHEpK2nUpyTJeCUlifqLUVad
n8TzCtdBjHdyoEmZtz8c/pKHtCyU9+jbdqRvA6ZBdHWIaR5kaSRuXT9lKmO5bOCQ
2xPJ+L7XI9WWwMRjjujZBgC+ZtWK+kRSVp4mQOUxBm9yfrJWGWgrK3yMVwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKcah6+LGousODLHGWsjRz+0jkO1MB8GA1UdIwQY
MBaAFCvO5NlSPxUpHFdnX9JtyVCnzVVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzg3azJWSV9GU2tjVjJkZjBtM0pVS2ZOVlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84YmJjMjctMjA4OC00Y2M5LWI4ZDMt
YTAzMTY5ZDY4YTE5LzEvcHhxSHI0c2FpNnc0TXNjWmF5TkhQN1NPUTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84YmJjMjctMjA4OC00Y2M5LWI4ZDMtYTAzMTY5ZDY4YTE5
LzEvSzg3azJWSV9GU2tjVjJkZjBtM0pVS2ZOVlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubGgMA0E
AgACMAcDBQMqCj6AMA0GCSqGSIb3DQEBCwUAA4IBAQBKiFpjNtZMv6au9NYvKoV/
tyzLnCxg9MYyqE41qWj+mdGdMA7mQeAiYl52mfjuF0R7yQC0o1DEk80uDZwdbw+2
vEbGdvskSF/sIo+yoYfHPzh6FbBsPa9TX5YgNsCnr4kF4SQizd6Mtm1HxHEFdIRU
bhmHRRgPoA6CQivCEUxDnLpJQwNcWRcj8vomM8l1iss1NTaniVbw+iS+cc+hsOKH
PkNGwa6ohbPQ5JRAic19VRuFE4IZ3c/87d11on478ZxAUmX/OiWeeugmlWdWmG2a
xWc+zB+M3mND19s8KYMB5rpwg8P9ZQsmiVMiek5Y0gkoTPVzzRYUF18603Yk0ZL+
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:49 2025 by rpki-client