Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IomsGuzU9wlW_IdpC1WWcR6lktQ.roa
File: IomsGuzU9wlW_IdpC1WWcR6lktQ.roa (raw, json)
Hash identifier: W9epcbybxCAHplBTileglhmNjCDr2efM5pprgxf/dlI=
Subject key identifier: 22:89:AC:1A:EC:D4:F7:09:56:FC:87:69:0B:55:96:71:1E:A5:92:D4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472CAC0EF94DDE4E8B3E2EFA159A10
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IomsGuzU9wlW_IdpC1WWcR6lktQ.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 185.254.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2c:ac:0e:f9:4d:de:4e:8b:3e:2e:fa:15:9a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2289ac1aecd4f70956fc87690b5596711ea592d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:81:3e:43:75:4f:4d:03:1e:71:cb:fb:a3:b0:
05:c6:71:df:db:82:62:16:99:60:4b:c7:93:70:a5:
38:39:de:32:31:3b:f1:bb:78:bd:f5:4f:e2:93:50:
2c:4a:1b:8c:0b:76:d8:6b:ac:b8:e2:2e:0c:db:6c:
02:38:89:e8:e0:ff:14:94:46:08:56:a6:ce:e2:db:
2c:e4:bd:74:c0:96:e0:a2:f4:0f:fc:1b:93:ce:b3:
cc:df:93:8c:0b:98:8f:28:f9:87:bf:37:ef:c8:95:
3f:5a:87:f1:84:30:63:fc:67:f1:ef:df:ad:95:ff:
41:71:95:70:43:dc:71:b3:0a:a1:93:aa:ad:99:06:
67:13:f7:43:e1:82:31:d6:2a:e9:c2:5e:a6:73:10:
bd:b8:3d:41:7b:dc:c4:49:f9:c3:71:c8:d7:01:5f:
4b:b4:b0:2a:58:0d:75:69:cb:b5:94:b2:dc:13:c4:
b0:45:52:71:a8:6c:7b:2e:e9:8f:fd:fe:3e:8c:c1:
1c:a9:82:d0:9c:f6:e5:bc:e0:89:ee:2a:26:b6:f9:
29:60:b1:d9:14:bd:9c:df:24:5e:90:af:fe:d8:bf:
67:76:4c:d1:13:98:cb:b6:9c:02:a2:4c:5f:f5:be:
16:43:8e:ac:ea:21:39:fb:6c:ad:5c:f7:ef:16:32:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:AC:1A:EC:D4:F7:09:56:FC:87:69:0B:55:96:71:1E:A5:92:D4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IomsGuzU9wlW_IdpC1WWcR6lktQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:eb:66:cc:cc:0f:75:3f:d1:e1:32:bd:a7:74:2e:bd:64:92:
b8:a0:be:ba:17:28:dc:6c:bb:7f:cb:e6:ca:e0:a7:1b:d2:cd:
da:bb:55:8e:f0:2f:33:48:44:da:4a:c4:b4:a4:f7:df:05:d7:
2e:cd:1a:cb:4b:8b:30:32:75:b7:97:d6:72:99:73:b5:b5:2d:
04:56:8f:73:79:05:db:6d:20:55:74:3b:61:0b:38:11:46:b4:
68:65:3b:ce:28:02:19:00:dd:75:20:24:2d:de:a6:34:08:75:
04:37:d1:29:cc:c0:e5:f8:bb:07:6f:f9:8d:cb:ec:71:ad:44:
63:15:37:37:5c:b5:4b:5d:61:81:64:d3:52:d0:59:3e:2d:7a:
dd:6c:83:1c:03:13:56:92:67:84:64:40:ae:af:69:e2:1b:3e:
c6:74:61:03:a3:e8:09:b9:cb:ab:ce:7b:4f:ce:9a:78:92:95:
91:8e:ae:80:ef:dd:ae:8f:fd:4a:4f:5b:af:9c:93:5b:1c:0a:
fe:81:96:1a:e8:d5:d0:e4:7d:a4:42:8f:39:e0:77:72:23:16:
25:06:bd:55:2f:4f:ac:9a:ee:aa:81:5c:7a:4e:56:d4:e6:ad:
c2:27:f6:e4:81:37:87:d1:68:09:f3:21:59:29:bd:c0:19:b0:
04:61:74:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRyysDvlN3k6LPi76FZoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMTAyMTM0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjg5YWMxYWVjZDRmNzA5NTZmYzg3NjkwYjU1OTY3MTFlYTU5MmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IE+Q3VPTQMeccv7o7AFxnHf24Ji
FplgS8eTcKU4Od4yMTvxu3i99U/ik1AsShuMC3bYa6y44i4M22wCOIno4P8UlEYI
VqbO4tss5L10wJbgovQP/BuTzrPM35OMC5iPKPmHvzfvyJU/WofxhDBj/Gfx79+t
lf9BcZVwQ9xxswqhk6qtmQZnE/dD4YIx1irpwl6mcxC9uD1Be9zESfnDccjXAV9L
tLAqWA11acu1lLLcE8SwRVJxqGx7LumP/f4+jMEcqYLQnPblvOCJ7iomtvkpYLHZ
FL2c3yRekK/+2L9ndkzRE5jLtpwCokxf9b4WQ46s6iE5+2ytXPfvFjI8qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKJrBrs1PcJVvyHaQtVlnEepZLUMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvSW9tc0d1elU5d2xXX0lkcEMxV1djUjZsa3RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4fMA0G
CSqGSIb3DQEBCwUAA4IBAQCz62bMzA91P9HhMr2ndC69ZJK4oL66FyjcbLt/y+bK
4Kcb0s3au1WO8C8zSETaSsS0pPffBdcuzRrLS4swMnW3l9ZymXO1tS0EVo9zeQXb
bSBVdDthCzgRRrRoZTvOKAIZAN11ICQt3qY0CHUEN9EpzMDl+LsHb/mNy+xxrURj
FTc3XLVLXWGBZNNS0Fk+LXrdbIMcAxNWkmeEZECur2niGz7GdGEDo+gJucurzntP
zpp4kpWRjq6A792uj/1KT1uvnJNbHAr+gZYa6NXQ5H2kQo854HdyIxYlBr1VL0+s
mu6qgVx6TlbU5q3CJ/bkgTeH0WgJ8yFZKb3AGbAEYXTe
-----END CERTIFICATE-----
Generated at Thu Apr 10 20:50:55 2025 by rpki-client