Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/IgurgAZqMyXZW_Q9kx83TkpAvtY.roa
File: IgurgAZqMyXZW_Q9kx83TkpAvtY.roa (raw, json)
Hash identifier: S2jpYnrIhuuDh4c7AwFLs0DidvN0vHIICnCQLX4nXq4=
Subject key identifier: 22:0B:AB:80:06:6A:33:25:D9:5B:F4:3D:93:1F:37:4E:4A:40:BE:D6
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01947ABE68CDA2931D8733A311AE53F0B135
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/IgurgAZqMyXZW_Q9kx83TkpAvtY.roa
Signing time: Sat 18 Jan 2025 18:48:06 +0000
ROA not before: Sat 18 Jan 2025 18:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152586
IP address blocks: 185.121.26.0/23 maxlen: 32
185.187.155.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:be:68:cd:a2:93:1d:87:33:a3:11:ae:53:f0:b1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 18 18:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=220bab80066a3325d95bf43d931f374e4a40bed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:5b:43:9b:8b:03:9c:12:14:a8:c9:2e:d5:
99:d7:85:fd:4e:46:57:33:ca:c7:ff:28:63:fa:b8:
85:17:0f:eb:4a:c1:c7:b0:f8:64:a0:d4:79:83:d7:
79:31:d3:aa:8e:42:5c:c8:26:65:15:f6:8e:eb:e3:
cb:c5:63:0b:1b:f6:9c:7d:c0:d1:f6:0e:21:92:de:
64:ed:97:c3:4a:51:40:e1:10:02:ca:a6:7e:41:e1:
de:d3:a2:82:b5:74:b6:22:ce:a7:85:55:5f:0c:27:
ed:8f:8a:2d:ec:9c:42:5f:c0:c6:af:77:7c:15:05:
50:e5:46:a3:ec:aa:40:30:a5:99:ad:f0:d0:f0:59:
6d:fc:dc:ca:f2:b5:d7:2f:95:63:c6:85:d1:2c:c9:
b4:a4:da:38:8d:a3:a4:d4:6e:1f:aa:6b:e4:77:be:
1a:c2:8e:99:6e:bf:39:b8:66:5f:21:8f:c4:a9:04:
bc:50:dd:a9:2e:bf:ed:7f:c6:35:34:7b:7c:2b:26:
f8:45:3f:3b:1b:44:cf:b5:41:86:3a:8f:dd:08:5e:
57:a0:53:5a:7b:eb:fa:f7:aa:f8:c9:19:09:fa:e0:
12:43:19:5f:b9:1c:df:25:7c:6f:ce:f5:be:f0:77:
6d:f9:da:0c:ac:62:4b:9d:e0:41:de:f8:7c:a5:c9:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:AB:80:06:6A:33:25:D9:5B:F4:3D:93:1F:37:4E:4A:40:BE:D6
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/IgurgAZqMyXZW_Q9kx83TkpAvtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.26.0/23
185.187.155.0/24
Signature Algorithm: sha256WithRSAEncryption
69:45:e0:13:43:c2:20:00:24:08:6b:51:12:11:9f:8a:ca:61:
8f:09:75:26:c4:a7:43:f8:86:b5:0a:17:a4:d5:c2:f4:ba:c6:
ef:03:0f:e0:d7:be:96:22:b4:5b:cd:d0:33:6d:ec:31:33:83:
93:4f:a9:3f:5b:dd:7e:e3:92:af:ae:9b:f2:d1:4e:53:33:c0:
64:c3:e8:9e:93:fc:05:66:ab:9f:6b:09:d3:58:c3:e7:ef:4e:
03:e2:2e:49:a5:d7:f4:fe:5a:8d:ee:99:e7:c0:b9:30:e5:b8:
74:55:9a:f3:3f:13:5d:56:c6:02:6b:c1:08:2d:de:54:be:24:
aa:10:fb:dc:99:47:72:5a:b4:5f:34:7f:1a:00:4a:55:e5:5c:
1f:12:ee:29:f1:2d:d9:ce:65:75:5b:7f:28:f6:9d:b0:cc:56:
dd:f4:4d:1a:06:64:72:8d:67:10:81:23:b0:82:53:d1:d7:9f:
42:5c:e3:8e:f4:aa:8b:b5:09:4b:67:97:95:ad:3b:52:31:f6:
21:db:41:a3:96:6e:f7:62:76:8e:7e:3c:ed:15:23:04:82:71:
eb:9c:6b:ef:4d:3a:e0:55:f1:7c:34:f7:0b:59:9b:e5:ef:42:
87:6f:f9:00:f7:2a:74:48:14:53:69:95:94:01:c5:a6:4c:57:
44:21:a3:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZR6vmjNopMdhzOjEa5T8LE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjUwMTE4MTg0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjBiYWI4MDA2NmEzMzI1ZDk1YmY0M2Q5MzFmMzc0ZTRhNDBiZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFhbQ5uLA5wSFKjJLtWZ14X9TkZX
M8rH/yhj+riFFw/rSsHHsPhkoNR5g9d5MdOqjkJcyCZlFfaO6+PLxWMLG/acfcDR
9g4hkt5k7ZfDSlFA4RACyqZ+QeHe06KCtXS2Is6nhVVfDCftj4ot7JxCX8DGr3d8
FQVQ5Uaj7KpAMKWZrfDQ8Flt/NzK8rXXL5VjxoXRLMm0pNo4jaOk1G4fqmvkd74a
wo6Zbr85uGZfIY/EqQS8UN2pLr/tf8Y1NHt8Kyb4RT87G0TPtUGGOo/dCF5XoFNa
e+v696r4yRkJ+uASQxlfuRzfJXxvzvW+8Hdt+doMrGJLneBB3vh8pclFFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCILq4AGajMl2Vv0PZMfN05KQL7WMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvSWd1cmdBWnFNeVhaV19ROWt4ODNUa3BBdnRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXkaAwQA
ububMA0GCSqGSIb3DQEBCwUAA4IBAQBpReATQ8IgACQIa1ESEZ+KymGPCXUmxKdD
+Ia1Chek1cL0usbvAw/g176WIrRbzdAzbewxM4OTT6k/W91+45Kvrpvy0U5TM8Bk
w+iek/wFZqufawnTWMPn704D4i5Jpdf0/lqN7pnnwLkw5bh0VZrzPxNdVsYCa8EI
Ld5UviSqEPvcmUdyWrRfNH8aAEpV5VwfEu4p8S3ZzmV1W38o9p2wzFbd9E0aBmRy
jWcQgSOwglPR159CXOOO9KqLtQlLZ5eVrTtSMfYh20Gjlm73YnaOfjztFSMEgnHr
nGvvTTrgVfF8NPcLWZvl70KHb/kA9yp0SBRTaZWUAcWmTFdEIaM1
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:08 2025 by rpki-client