Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nI7XY0-a0JXQTQKGe5ntvUAU-ws.roa
File: nI7XY0-a0JXQTQKGe5ntvUAU-ws.roa (raw, json)
Hash identifier: e4T081508o/3i9gpQHharO/sMRJPndiZMSpliNkCiZ4=
Subject key identifier: 9C:8E:D7:63:4F:9A:D0:95:D0:4D:02:86:7B:99:ED:BD:40:14:FB:0B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194F189662DC14218552992A5EE140CA8F0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nI7XY0-a0JXQTQKGe5ntvUAU-ws.roa
Signing time: Mon 10 Feb 2025 20:25:01 +0000
ROA not before: Mon 10 Feb 2025 20:25:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212598
IP address blocks: 185.254.236.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:89:66:2d:c1:42:18:55:29:92:a5:ee:14:0c:a8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 10 20:25:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c8ed7634f9ad095d04d02867b99edbd4014fb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:70:db:54:17:bc:6d:7d:24:e5:ed:4e:f9:
75:88:15:cc:d2:fc:b4:e9:a6:ec:b9:f7:44:57:65:
3f:8d:c1:fb:20:26:b9:7c:26:ae:08:9d:6c:cd:fc:
d6:d8:41:9c:0e:ef:e4:5f:2a:d6:5e:b6:37:43:ec:
a7:ce:6b:02:44:56:3e:5a:05:47:b5:62:3b:10:66:
8f:b6:a2:a5:05:6e:fd:1b:f0:ea:25:0b:82:1f:b9:
12:56:98:72:68:6b:bc:1d:c2:49:0f:ee:a4:79:cd:
11:65:04:db:19:5c:64:5d:d4:9b:90:4f:a9:54:c2:
ae:72:30:55:9f:a0:7e:c8:76:26:d2:0f:ac:a3:3c:
a1:3e:a0:b1:e7:dd:67:a0:84:40:21:c9:49:3f:1a:
cf:79:16:c2:9c:c8:d9:06:9d:7c:2d:d4:1c:3f:7c:
e7:b8:41:76:9e:08:f3:ac:30:6d:9c:38:3d:de:9d:
b8:be:79:be:25:cc:38:88:c2:ef:d9:3a:64:0c:40:
d1:c2:1a:48:b2:e8:ef:91:91:ef:e5:20:ef:42:4c:
5e:af:de:06:79:80:1d:3e:c3:5c:24:92:01:8f:4a:
83:ee:f7:c3:4d:3f:fa:04:b7:49:4a:3c:d5:c2:22:
2b:00:f4:8c:ee:f8:3e:80:01:3e:33:ea:9a:f2:eb:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8E:D7:63:4F:9A:D0:95:D0:4D:02:86:7B:99:ED:BD:40:14:FB:0B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nI7XY0-a0JXQTQKGe5ntvUAU-ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.236.0/24
185.254.239.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d0:22:c6:13:fc:8d:00:63:3a:e1:d7:f0:96:ef:c2:62:a3:
58:91:cc:77:22:a0:8c:0a:9c:b2:bf:91:dc:73:8e:2a:3a:2f:
4d:e2:fc:90:ae:18:de:33:91:d2:b0:0f:5f:dd:1b:33:8a:fe:
82:b5:17:e7:c3:55:be:b2:a2:dd:c9:e0:3d:0e:19:99:7c:83:
67:b5:a0:61:9d:0e:2b:74:87:e2:71:cc:ad:13:ca:1e:c4:72:
ee:ab:90:a2:7e:a0:b2:ba:d9:30:4b:52:50:31:4a:07:4a:8a:
1b:f3:67:b3:fe:8c:5f:ac:e3:b8:2a:73:cb:96:b5:ae:c7:df:
0b:1c:07:30:ce:e8:be:a2:fa:80:52:66:13:92:e8:af:6a:c4:
02:4f:ce:26:e7:e5:44:83:97:2b:42:1f:b7:c2:ec:c6:4e:f1:
2e:aa:ba:64:ba:81:97:e0:4a:d6:95:f0:03:9b:3b:d5:70:7d:
65:35:b2:f3:d0:c8:81:91:81:0f:47:97:9a:e9:e4:c2:c3:47:
9e:4f:3b:4f:ed:6b:82:e9:a3:ab:d6:56:0b:c7:6b:59:04:52:
a5:f8:94:70:eb:27:96:6a:76:40:03:59:11:80:0a:a3:b4:72:
97:28:d5:3e:5e:62:d8:6d:aa:53:d1:12:f3:ca:79:10:52:fe:
2d:f3:8e:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTxiWYtwUIYVSmSpe4UDKjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMjEwMjAyNTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzhlZDc2MzRmOWFkMDk1ZDA0ZDAyODY3Yjk5ZWRiZDQwMTRmYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L9w21QXvG19JOXtTvl1iBXM0vy0
6absufdEV2U/jcH7ICa5fCauCJ1szfzW2EGcDu/kXyrWXrY3Q+ynzmsCRFY+WgVH
tWI7EGaPtqKlBW79G/DqJQuCH7kSVphyaGu8HcJJD+6kec0RZQTbGVxkXdSbkE+p
VMKucjBVn6B+yHYm0g+sozyhPqCx591noIRAIclJPxrPeRbCnMjZBp18LdQcP3zn
uEF2ngjzrDBtnDg93p24vnm+Jcw4iMLv2TpkDEDRwhpIsujvkZHv5SDvQkxer94G
eYAdPsNcJJIBj0qD7vfDTT/6BLdJSjzVwiIrAPSM7vg+gAE+M+qa8uvAkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJyO12NPmtCV0E0ChnuZ7b1AFPsLMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvbkk3WFkwLWEwSlhRVFFLR2U1bnR2VUFVLXdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuf7sAwQA
uf7vMA0GCSqGSIb3DQEBCwUAA4IBAQBB0CLGE/yNAGM64dfwlu/CYqNYkcx3IqCM
Cpyyv5Hcc44qOi9N4vyQrhjeM5HSsA9f3Rsziv6CtRfnw1W+sqLdyeA9DhmZfINn
taBhnQ4rdIficcytE8oexHLuq5CifqCyutkwS1JQMUoHSoob82ez/oxfrOO4KnPL
lrWux98LHAcwzui+ovqAUmYTkuivasQCT84m5+VEg5crQh+3wuzGTvEuqrpkuoGX
4ErWlfADmzvVcH1lNbLz0MiBkYEPR5ea6eTCw0eeTztP7WuC6aOr1lYLx2tZBFKl
+JRw6yeWanZAA1kRgAqjtHKXKNU+XmLYbapT0RLzynkQUv4t844E
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:41 2025 by rpki-client