Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/lJcW7NVuBpZ8lsJHaEE8hxnfB3o.roa
File: lJcW7NVuBpZ8lsJHaEE8hxnfB3o.roa (raw, json)
Hash identifier: ipEpz1qmUlAkOrZIzC/h7h5MUxnSm6BxIlJjFSVd9kk=
Subject key identifier: 94:97:16:EC:D5:6E:06:96:7C:96:C2:47:68:41:3C:87:19:DF:07:7A
Certificate issuer: /CN=bca5e8ced539520a461dc8272ef97c807c97afd6
Certificate serial: 01856CAF36940857EC327BAE6BB9963FA56F
Authority key identifier: BC:A5:E8:CE:D5:39:52:0A:46:1D:C8:27:2E:F9:7C:80:7C:97:AF:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKXoztU5UgpGHcgnLvl8gHyXr9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/lJcW7NVuBpZ8lsJHaEE8hxnfB3o.roa
Signing time: Sun 01 Jan 2023 09:35:00 +0000
ROA not before: Sun 01 Jan 2023 09:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.184.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:36:94:08:57:ec:32:7b:ae:6b:b9:96:3f:a5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca5e8ced539520a461dc8272ef97c807c97afd6
Validity
Not Before: Jan 1 09:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=949716ecd56e06967c96c24768413c8719df077a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:ae:33:fa:7b:7c:66:c6:37:ee:83:50:78:
47:11:16:4e:68:0c:2b:e0:d4:f7:20:30:bf:61:93:
48:60:ef:44:a7:dd:ab:ee:37:57:67:73:95:4e:11:
15:f0:95:80:fd:f9:00:c6:35:6b:9d:c1:17:cf:f4:
a4:31:2e:65:ee:95:d4:68:97:f6:fb:b2:79:1f:52:
51:d4:85:92:4e:c9:69:61:0f:81:42:4c:ec:92:d1:
3c:15:78:ca:2a:6b:9f:df:38:27:e7:5e:4d:63:f6:
74:f8:d2:45:1a:1e:ab:8b:af:91:0d:6d:f7:90:55:
3b:f5:5e:94:96:91:5c:fa:ee:11:b8:a5:9f:7f:ae:
d0:9b:51:86:14:d7:ed:a0:a3:53:9e:31:94:dd:e2:
5d:5d:e0:d4:51:c8:38:c5:4d:ef:78:15:58:07:1b:
12:c2:68:23:63:0b:da:24:ed:9d:e2:f2:9e:d2:c2:
59:26:a9:3f:73:8f:f9:0b:71:6b:92:4d:ca:ac:2e:
32:72:4b:73:2a:80:21:aa:15:73:61:57:8a:4d:33:
2f:ec:d6:c0:54:6a:b6:18:bc:d7:80:ce:3d:ff:13:
23:0f:1f:48:ba:3b:cd:3a:34:fd:e4:85:8e:48:ed:
d0:c4:a3:4c:c4:ae:ba:d8:2a:d9:64:83:99:f6:97:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:16:EC:D5:6E:06:96:7C:96:C2:47:68:41:3C:87:19:DF:07:7A
X509v3 Authority Key Identifier:
keyid:BC:A5:E8:CE:D5:39:52:0A:46:1D:C8:27:2E:F9:7C:80:7C:97:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKXoztU5UgpGHcgnLvl8gHyXr9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/lJcW7NVuBpZ8lsJHaEE8hxnfB3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e5665-996c-4748-b27d-c920b000f4e6/1/vKXoztU5UgpGHcgnLvl8gHyXr9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.219.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a8:88:ae:eb:99:0b:1a:58:8f:3b:68:1a:d2:2b:97:b9:2d:
0d:96:4b:f9:a2:26:cb:57:01:a4:c9:db:ec:59:7f:25:c3:3a:
1a:e1:ad:5c:be:2a:fd:ad:6a:4b:00:fe:5b:04:07:0f:8c:b5:
e2:18:cf:48:ef:da:c5:58:f1:42:c3:35:e7:58:54:2e:97:80:
c0:f5:9f:25:12:d8:04:fd:2b:a8:e6:eb:e9:d6:bc:36:1a:1a:
28:03:75:e2:6b:4e:40:76:c4:eb:18:91:4e:c2:e4:cc:6e:40:
1b:f1:60:09:e3:ed:52:68:01:b2:08:c0:de:5c:c0:85:3c:cf:
78:b6:ae:5b:7f:3b:d9:d3:4d:fd:47:20:f4:25:66:03:03:de:
a8:79:63:7e:b1:9d:d4:0b:b8:56:46:31:2c:ec:10:bb:fc:cf:
67:3a:ed:9b:d7:a8:80:b9:4d:89:a6:0e:86:c0:3b:b0:d1:d6:
94:71:67:3a:65:41:13:7e:df:e7:36:ae:3a:f2:89:93:4f:1d:
1c:ee:6d:b2:8f:5c:2e:f1:d5:80:93:4b:74:bc:2e:aa:02:6d:
23:2f:74:33:c5:f3:b1:4c:3c:01:1c:a8:68:25:46:13:3b:2c:
6e:d8:91:74:2f:5d:50:b1:00:99:fe:56:20:28:5a:d1:b9:46:
d3:87:72:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsrzaUCFfsMnuua7mWP6VvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTVlOGNlZDUzOTUyMGE0NjFkYzgyNzJlZjk3YzgwN2M5
N2FmZDYwHhcNMjMwMTAxMDkzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDk3MTZlY2Q1NmUwNjk2N2M5NmMyNDc2ODQxM2M4NzE5ZGYwNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeyuM/p7fGbGN+6DUHhHERZOaAwr
4NT3IDC/YZNIYO9Ep92r7jdXZ3OVThEV8JWA/fkAxjVrncEXz/SkMS5l7pXUaJf2
+7J5H1JR1IWSTslpYQ+BQkzsktE8FXjKKmuf3zgn515NY/Z0+NJFGh6ri6+RDW33
kFU79V6UlpFc+u4RuKWff67Qm1GGFNftoKNTnjGU3eJdXeDUUcg4xU3veBVYBxsS
wmgjYwvaJO2d4vKe0sJZJqk/c4/5C3Frkk3KrC4ycktzKoAhqhVzYVeKTTMv7NbA
VGq2GLzXgM49/xMjDx9IujvNOjT95IWOSO3QxKNMxK662CrZZIOZ9pf5dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJSXFuzVbgaWfJbCR2hBPIcZ3wd6MB8GA1UdIwQY
MBaAFLyl6M7VOVIKRh3IJy75fIB8l6/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktYb3p0VTVVZ3BHSGNnbkx2bDhnSHlYcjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZTU2NjUtOTk2Yy00NzQ4LWIyN2Qt
YzkyMGIwMDBmNGU2LzEvbEpjVzdOVnVCcFo4bHNKSGFFRThoeG5mQjNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZTU2NjUtOTk2Yy00NzQ4LWIyN2QtYzkyMGIwMDBmNGU2
LzEvdktYb3p0VTVVZ3BHSGNnbkx2bDhnSHlYcjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubjbMA0G
CSqGSIb3DQEBCwUAA4IBAQA1qIiu65kLGliPO2ga0iuXuS0Nlkv5oibLVwGkydvs
WX8lwzoa4a1cvir9rWpLAP5bBAcPjLXiGM9I79rFWPFCwzXnWFQul4DA9Z8lEtgE
/Suo5uvp1rw2GhooA3Xia05AdsTrGJFOwuTMbkAb8WAJ4+1SaAGyCMDeXMCFPM94
tq5bfzvZ0039RyD0JWYDA96oeWN+sZ3UC7hWRjEs7BC7/M9nOu2b16iAuU2Jpg6G
wDuw0daUcWc6ZUETft/nNq468omTTx0c7m2yj1wu8dWAk0t0vC6qAm0jL3QzxfOx
TDwBHKhoJUYTOyxu2JF0L11QsQCZ/lYgKFrRuUbTh3KN
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:37 2025 by rpki-client