Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ibnlISxDMVvR7u9Qdp9TBXN8us0.roa
File: ibnlISxDMVvR7u9Qdp9TBXN8us0.roa (raw, json)
Hash identifier: 0RKVyAKS5mtjS06abZ9xA2T/HEXCh1WgxFDwdqcIilY=
Subject key identifier: 89:B9:E5:21:2C:43:31:5B:D1:EE:EF:50:76:9F:53:05:73:7C:BA:CD
Certificate issuer: /CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Certificate serial: 017961E9
Authority key identifier: CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ibnlISxDMVvR7u9Qdp9TBXN8us0.roa
Signing time: Thu 12 May 2022 09:04:04 +0000
ROA not before: Thu 12 May 2022 09:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 185.161.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24732137 (0x17961e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Validity
Not Before: May 12 09:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89b9e5212c43315bd1eeef50769f5305737cbacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:7f:37:a1:9e:87:d2:ae:76:a6:22:d9:7f:
79:55:8e:52:95:79:b9:3f:a8:c6:d9:fb:3e:dc:31:
fd:9f:3b:75:97:73:c5:21:62:c0:7a:66:63:24:05:
e7:80:28:3d:b1:ce:3a:89:71:b7:a6:fa:55:5c:94:
cf:a6:00:57:65:3d:05:87:90:0b:99:b2:38:f1:2e:
ee:e1:b6:a9:45:1b:d9:7d:ca:b8:95:70:a8:04:7a:
cb:1f:b8:20:8d:74:a2:55:2c:5b:17:bc:bf:03:cb:
92:6c:37:88:73:b4:89:00:22:f2:50:9c:68:eb:d0:
eb:86:39:85:4b:45:84:f3:02:26:ff:1f:2d:e5:3d:
eb:c4:91:14:10:63:3c:28:53:c9:94:40:b0:80:1c:
42:72:c9:af:ab:ce:c9:39:33:c6:26:66:9b:a8:f0:
12:8b:ee:0b:07:c3:b3:54:a9:72:a8:d3:aa:1a:4b:
a0:4b:a0:41:fc:4d:57:9d:82:9f:71:0e:16:2e:4f:
42:bc:2d:80:f1:00:6f:b6:3f:8d:57:8d:5b:d0:0f:
8a:7b:7c:ac:33:26:2a:ab:b8:b0:bb:d6:5d:d2:e3:
01:0c:9c:80:07:02:1d:92:7c:72:6c:e7:cf:e4:46:
5d:fe:ae:37:f7:4d:c6:95:ae:a3:58:c9:c7:de:d6:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B9:E5:21:2C:43:31:5B:D1:EE:EF:50:76:9F:53:05:73:7C:BA:CD
X509v3 Authority Key Identifier:
keyid:CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ibnlISxDMVvR7u9Qdp9TBXN8us0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.78.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bf:18:d8:f8:09:46:a4:52:24:00:ea:38:90:01:ed:23:3e:
5e:4b:11:83:63:31:5b:a1:fc:86:41:94:4a:c2:73:a1:5b:92:
b2:f8:f2:9f:fa:a3:de:57:17:0f:e6:8f:f0:3b:55:f8:dc:a3:
f5:8e:c3:35:d2:da:d1:2c:ad:76:e0:47:9f:67:48:c3:1f:86:
97:0b:a0:e9:5c:77:c9:09:93:11:1e:5d:52:79:f0:37:20:7a:
35:32:0f:60:f1:5d:cd:b5:f0:12:30:b0:4c:aa:34:3b:38:08:
c4:0f:45:d1:e1:d2:05:50:24:af:4e:10:f6:0d:b4:5b:f7:cc:
e2:a2:80:64:4a:e0:be:ae:49:87:02:2f:23:0d:ef:3e:95:4f:
49:8a:5f:b2:18:7d:77:c5:d2:a0:96:27:73:3d:c0:e8:6a:08:
5b:a5:22:11:a9:2a:7b:d6:e0:9d:98:01:28:00:a9:83:df:c4:
6f:4e:d9:ca:ef:9a:23:47:ec:8d:4b:a3:ef:ea:b0:ae:84:33:
39:db:21:86:01:44:54:69:39:0b:d1:9c:e4:46:f8:57:e2:8f:
f0:52:d8:ac:e2:df:79:49:49:3f:c2:bd:4f:b8:a5:9d:04:8f:
2e:73:7e:87:dd:da:b7:97:8c:cb:d4:ad:f1:fa:72:53:7c:79:
68:50:72:c5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAXlh6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YTAxZmU4MmYxZmM0YWI3YmY4MTNhZWVjOTFlMGE0OWMxNzI4ODhjMB4XDTIyMDUx
MjA5MDQwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODliOWU1MjEyYzQz
MzE1YmQxZWVlZjUwNzY5ZjUzMDU3MzdjYmFjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5JfzehnofSrnamItl/eVWOUpV5uT+oxtn7Ptwx/Z87dZdz
xSFiwHpmYyQF54AoPbHOOolxt6b6VVyUz6YAV2U9BYeQC5myOPEu7uG2qUUb2X3K
uJVwqAR6yx+4II10olUsWxe8vwPLkmw3iHO0iQAi8lCcaOvQ64Y5hUtFhPMCJv8f
LeU968SRFBBjPChTyZRAsIAcQnLJr6vOyTkzxiZmm6jwEovuCwfDs1SpcqjTqhpL
oEugQfxNV52Cn3EOFi5PQrwtgPEAb7Y/jVeNW9APint8rDMmKqu4sLvWXdLjAQyc
gAcCHZJ8cmznz+RGXf6uN/dNxpWuo1jJx97WTxMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSJueUhLEMxW9Hu71B2n1MFc3y6zTAfBgNVHSMEGDAWgBTKAf6C8fxKt7+B
Ou7JHgpJwXKIjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lnSC1ndkg4U3JlX2dUcnV5UjRLU2NGeWlJdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzEvNjcyN2NhLTJjNTktNDM2Ni1iN2JjLTk3ZTM4NjIxNjUzNS8x
L2libmxJU3hETVZ2Ujd1OVFkcDlUQlhOOHVzMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEv
NjcyN2NhLTJjNTktNDM2Ni1iN2JjLTk3ZTM4NjIxNjUzNS8xL3lnSC1ndkg4U3Jl
X2dUcnV5UjRLU2NGeWlJdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmhTjANBgkqhkiG9w0BAQsFAAOC
AQEASL8Y2PgJRqRSJADqOJAB7SM+XksRg2MxW6H8hkGUSsJzoVuSsvjyn/qj3lcX
D+aP8DtV+Nyj9Y7DNdLa0SytduBHn2dIwx+Glwug6Vx3yQmTER5dUnnwNyB6NTIP
YPFdzbXwEjCwTKo0OzgIxA9F0eHSBVAkr04Q9g20W/fM4qKAZErgvq5JhwIvIw3v
PpVPSYpfshh9d8XSoJYncz3A6GoIW6UiEakqe9bgnZgBKACpg9/Eb07Zyu+aI0fs
jUuj7+qwroQzOdshhgFEVGk5C9Gc5Eb4V+KP8FLYrOLfeUlJP8K9T7ilnQSPLnN+
h93at5eMy9St8fpyU3x5aFByxQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 10:08:22 2025 by rpki-client