Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa
File: iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa (raw, json)
Hash identifier: irtz9XTfXBHEHapv6cSGMQPMme8obAG5vt6M1vHm4qQ=
Subject key identifier: 89:8F:BB:4F:C8:7D:B7:D5:76:BA:B1:D3:98:88:06:C1:92:0E:1D:54
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 01942521A31FF132DD48304CE9D780E3702A
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 185.127.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a3:1f:f1:32:dd:48:30:4c:e9:d7:80:e3:70:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=898fbb4fc87db7d576bab1d3988806c1920e1d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:8c:3b:33:a4:f2:8f:2f:7c:2a:42:d9:71:
f4:f2:71:60:50:b0:0a:94:03:df:d0:90:7a:41:63:
c4:84:c3:7d:d0:7c:b2:e7:d6:7f:19:c6:28:a1:78:
98:f1:1c:84:67:19:06:5d:d5:53:c3:28:87:f3:7c:
5a:13:e6:e0:23:5e:d6:84:e5:f9:14:7f:70:ef:6a:
7f:86:25:2e:97:b8:c0:9d:25:af:e1:1e:c6:5d:50:
c7:15:f2:6e:78:6a:03:2d:be:35:b7:68:a6:5b:9c:
2c:7b:fa:13:35:e7:ca:f7:8c:d8:0b:73:00:26:76:
4c:8a:48:6a:ab:4a:0c:cb:2b:6b:a4:05:ed:5c:b2:
31:5d:79:79:2b:50:80:af:6c:00:82:bf:fc:45:4b:
69:55:07:b6:1d:3b:f6:e1:c7:26:3e:46:df:59:b5:
31:ec:83:4e:2b:9f:4f:a6:f9:d3:db:83:30:df:69:
f2:0a:31:9b:2f:c8:ff:ce:60:c1:9a:1b:bd:0e:6f:
43:f3:e1:9e:e3:a0:30:0d:58:94:b1:aa:54:2f:f7:
fb:f4:b2:d0:f3:0f:9e:79:14:51:17:98:49:41:1b:
16:88:bf:33:e2:db:2e:ec:a4:e3:b3:05:1e:c6:99:
20:9f:89:9a:6b:a9:e2:78:28:5e:59:51:f0:ba:d2:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:BB:4F:C8:7D:B7:D5:76:BA:B1:D3:98:88:06:C1:92:0E:1D:54
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a4:23:52:90:b7:dd:28:25:f7:53:3d:bd:f2:99:70:7e:78:
82:60:c8:71:30:da:c5:3a:80:94:a5:b4:dc:ad:a3:0b:1f:81:
73:8d:ba:24:43:2b:64:98:50:55:39:ea:ed:9b:df:61:9f:da:
f1:9b:13:de:cc:ab:50:af:f6:e0:2a:2f:22:cc:64:47:69:78:
8b:bd:81:e4:b0:88:5d:d0:c4:aa:cd:19:a3:fb:bb:1b:79:4d:
af:ce:49:63:b5:59:9c:92:f7:c1:52:77:e2:c0:b9:56:df:0b:
1a:2e:f5:7b:ae:7c:98:80:e6:82:13:a4:62:10:44:5a:5a:bb:
a0:66:a9:b0:0c:ab:7b:ea:24:b5:d2:81:13:0e:54:3b:72:4f:
2b:fc:3a:e6:f6:dc:b0:19:5c:77:9c:3f:c1:02:71:44:c4:96:
c2:33:41:45:10:0a:24:4b:ce:b1:40:4a:58:df:a6:f8:22:80:
fc:75:99:06:a1:b9:62:bc:87:b7:d4:da:68:5b:4e:03:d0:4a:
b9:fb:3b:1f:b6:5b:2d:1c:f9:d0:a5:aa:1f:1f:f8:1b:29:63:
23:0e:11:ce:aa:ee:e7:7e:4d:89:83:e3:4a:5e:e5:29:9a:f9:
7a:42:f5:56:4d:c8:94:4c:39:89:88:30:91:d2:b5:aa:48:10:
15:3e:e2:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIaMf8TLdSDBM6deA43AqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw
NDI3NGMwHhcNMjUwMTAyMDM0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OThmYmI0ZmM4N2RiN2Q1NzZiYWIxZDM5ODg4MDZjMTkyMGUxZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BKMOzOk8o8vfCpC2XH08nFgULAK
lAPf0JB6QWPEhMN90Hyy59Z/GcYooXiY8RyEZxkGXdVTwyiH83xaE+bgI17WhOX5
FH9w72p/hiUul7jAnSWv4R7GXVDHFfJueGoDLb41t2imW5wse/oTNefK94zYC3MA
JnZMikhqq0oMyytrpAXtXLIxXXl5K1CAr2wAgr/8RUtpVQe2HTv24ccmPkbfWbUx
7INOK59PpvnT24Mw32nyCjGbL8j/zmDBmhu9Dm9D8+Ge46AwDViUsapUL/f79LLQ
8w+eeRRRF5hJQRsWiL8z4tsu7KTjswUexpkgn4maa6nieCheWVHwutKCbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFImPu0/IfbfVdrqx05iIBsGSDh1UMB8GA1UdIwQY
MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt
N2ZlMzk1MWE3MzViLzEvaVktN1Q4aDl0OVYydXJIVG1JZ0d3WklPSFZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi
LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX8eMA0G
CSqGSIb3DQEBCwUAA4IBAQArpCNSkLfdKCX3Uz298plwfniCYMhxMNrFOoCUpbTc
raMLH4FzjbokQytkmFBVOertm99hn9rxmxPezKtQr/bgKi8izGRHaXiLvYHksIhd
0MSqzRmj+7sbeU2vzkljtVmckvfBUnfiwLlW3wsaLvV7rnyYgOaCE6RiEERaWrug
ZqmwDKt76iS10oETDlQ7ck8r/Drm9tywGVx3nD/BAnFExJbCM0FFEAokS86xQEpY
36b4IoD8dZkGoblivIe31NpoW04D0Eq5+zsftlstHPnQpaofH/gbKWMjDhHOqu7n
fk2Jg+NKXuUpmvl6QvVWTciUTDmJiDCR0rWqSBAVPuLu
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:52 2025 by rpki-client