Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/IljESqcp7TKATE6l4ji1F86mvCw.roa
File: IljESqcp7TKATE6l4ji1F86mvCw.roa (raw, json)
Hash identifier: laXPoIjJO3FRK8WP6Gx6U9UQM88anXeR9CUYfdnLKCM=
Subject key identifier: 22:58:C4:4A:A7:29:ED:32:80:4C:4E:A5:E2:38:B5:17:CE:A6:BC:2C
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 019420D60640CAE72E8BD1F8484C78D97F3E
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/IljESqcp7TKATE6l4ji1F86mvCw.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 85.92.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:06:40:ca:e7:2e:8b:d1:f8:48:4c:78:d9:7f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2258c44aa729ed32804c4ea5e238b517cea6bc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:3c:5f:5b:c2:d9:1d:d1:a1:52:0c:44:33:
03:82:77:cb:82:cf:23:3c:d3:f4:12:fa:e6:43:ff:
6d:ed:86:c0:36:4b:98:4c:4a:f9:00:77:01:5b:0d:
6a:1f:df:20:93:8f:e5:a1:0c:19:39:61:43:43:e1:
fd:d4:3f:ed:2a:64:c5:bf:4a:a5:e4:a2:6b:6c:a0:
b0:69:f1:06:a6:e0:73:ef:10:b7:d8:02:cc:d0:fc:
f1:de:f4:a6:63:59:09:52:e5:6c:4e:f3:65:5b:b1:
56:08:21:5f:22:88:7e:c1:62:5f:2e:5b:50:fb:83:
21:75:d7:9a:11:85:f7:b9:42:06:cb:a2:27:44:6e:
00:6c:01:c1:a2:b7:39:be:2d:95:0d:bd:98:e3:bf:
5a:de:18:58:67:7f:74:57:34:7e:24:42:26:9d:ad:
ea:ff:bb:25:ca:68:01:2e:75:89:be:17:0e:1b:fe:
44:99:d5:63:9e:de:7a:66:01:a4:f7:bf:c9:2e:c6:
f9:1c:ec:e0:70:4a:81:42:7e:26:62:b8:1f:b7:99:
d7:18:31:b5:38:3d:4d:a5:63:cf:c6:36:5d:a8:b4:
3d:79:75:36:81:90:4a:e8:24:d9:fb:8d:fa:7a:7d:
4d:86:b7:03:2c:04:6a:a3:e3:19:44:89:90:68:a1:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:58:C4:4A:A7:29:ED:32:80:4C:4E:A5:E2:38:B5:17:CE:A6:BC:2C
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/IljESqcp7TKATE6l4ji1F86mvCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.249.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b1:de:60:84:73:7b:99:7f:ee:46:07:88:53:6b:62:55:f5:
64:80:af:00:b8:50:2c:1f:f3:83:92:58:ab:57:5c:c1:e4:30:
c5:8d:69:80:70:d2:21:85:86:22:77:a2:e5:56:0f:4b:03:ee:
ca:f4:fe:75:01:b4:2f:d7:6c:a9:24:99:95:94:78:60:37:fc:
1d:ae:d1:23:01:4a:0a:c8:b6:03:0b:fb:33:fa:aa:68:96:f5:
70:63:eb:62:45:ab:97:96:8b:71:3f:15:ef:f2:d4:09:ac:41:
94:22:22:7a:e6:fa:b1:1c:8d:b1:2c:d1:9e:f4:c2:f4:43:2b:
79:c5:ec:33:fa:e6:2f:9f:b5:ae:f4:b4:f9:1f:3e:4b:40:b1:
01:04:db:aa:1f:84:e9:9c:c8:7a:b9:e0:07:3a:71:72:dd:a9:
fc:74:7a:b3:7a:b9:5d:da:1f:90:37:10:ab:44:c9:99:ac:46:
0b:1d:d7:d3:9a:c9:d9:73:74:b6:d6:0f:7e:58:67:6d:25:c9:
b7:97:78:b8:72:6b:d7:67:2f:d7:3a:96:98:a5:44:27:e9:e8:
a7:8d:30:f6:7f:16:b3:56:4e:0c:4c:f4:57:41:7b:52:32:25:
3d:ad:83:39:33:5e:60:8f:b8:33:0a:3b:23:e7:25:0c:17:3f:
b3:4e:a1:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1gZAyucui9H4SEx42X8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTViMDE0ZTU2OTE4NmZiODRhMjAyNDk1NGNjY2M5Yzkx
YjFlM2YwHhcNMjUwMTAxMDc0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjU4YzQ0YWE3MjllZDMyODA0YzRlYTVlMjM4YjUxN2NlYTZiYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Q8X1vC2R3RoVIMRDMDgnfLgs8j
PNP0EvrmQ/9t7YbANkuYTEr5AHcBWw1qH98gk4/loQwZOWFDQ+H91D/tKmTFv0ql
5KJrbKCwafEGpuBz7xC32ALM0Pzx3vSmY1kJUuVsTvNlW7FWCCFfIoh+wWJfLltQ
+4MhddeaEYX3uUIGy6InRG4AbAHBorc5vi2VDb2Y479a3hhYZ390VzR+JEImna3q
/7slymgBLnWJvhcOG/5EmdVjnt56ZgGk97/JLsb5HOzgcEqBQn4mYrgft5nXGDG1
OD1NpWPPxjZdqLQ9eXU2gZBK6CTZ+436en1NhrcDLARqo+MZRImQaKEzuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCJYxEqnKe0ygExOpeI4tRfOprwsMB8GA1UdIwQY
MBaAFOnlsBTlaRhvuEogJJVMzMnJGx4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2Qt
MmJiMWVmYzU3YTg2LzEvSWxqRVNxY3A3VEtBVEU2bDRqaTFGODZtdkN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2QtMmJiMWVmYzU3YTg2
LzEvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVz5MA0G
CSqGSIb3DQEBCwUAA4IBAQAtsd5ghHN7mX/uRgeIU2tiVfVkgK8AuFAsH/ODklir
V1zB5DDFjWmAcNIhhYYid6LlVg9LA+7K9P51AbQv12ypJJmVlHhgN/wdrtEjAUoK
yLYDC/sz+qpolvVwY+tiRauXlotxPxXv8tQJrEGUIiJ65vqxHI2xLNGe9ML0Qyt5
xewz+uYvn7Wu9LT5Hz5LQLEBBNuqH4TpnMh6ueAHOnFy3an8dHqzerld2h+QNxCr
RMmZrEYLHdfTmsnZc3S21g9+WGdtJcm3l3i4cmvXZy/XOpaYpUQn6einjTD2fxaz
Vk4MTPRXQXtSMiU9rYM5M15gj7gzCjsj5yUMFz+zTqGc
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:41 2025 by rpki-client