Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/XfifpGZjTCn7GZsDe_LAkokOJfk.roa
File: XfifpGZjTCn7GZsDe_LAkokOJfk.roa (raw, json)
Hash identifier: OO0tfh+RP2fsJylEDEKFf2nymGaEh2pRX6fnBF/I76Y=
Subject key identifier: 5D:F8:9F:A4:66:63:4C:29:FB:19:9B:03:7B:F2:C0:92:89:0E:25:F9
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 01856C7832D723E65519CA8D17FDCA338996
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/XfifpGZjTCn7GZsDe_LAkokOJfk.roa
Signing time: Sun 01 Jan 2023 08:34:54 +0000
ROA not before: Sun 01 Jan 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1241
IP address blocks: 185.117.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:32:d7:23:e6:55:19:ca:8d:17:fd:ca:33:89:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Jan 1 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5df89fa466634c29fb199b037bf2c092890e25f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:64:b2:42:77:47:c8:3b:bd:7c:7e:06:eb:
9b:88:5f:58:18:b6:0a:01:b7:7c:f6:af:96:5c:a7:
7a:ee:40:db:d8:96:d2:c0:3b:e9:6c:c3:d1:af:4a:
6a:7a:4f:7c:6a:3a:72:a0:d3:2a:fa:77:e5:14:66:
56:6c:6a:17:98:94:3e:b8:f3:35:3b:92:0c:54:98:
df:47:7d:75:f2:6b:0f:8d:d5:7f:f7:b9:a6:13:64:
b8:27:22:33:7c:15:ca:7e:86:3c:cb:3d:40:b7:e8:
3e:2b:80:10:ee:52:69:89:7e:13:75:78:69:96:09:
f3:88:57:cb:b8:0f:24:58:74:51:e2:cd:93:b7:a4:
ce:9b:13:d6:66:dc:87:af:a2:61:42:32:e7:4a:2e:
60:c4:23:3a:f6:76:91:da:f4:ee:26:e8:a6:dc:2c:
d9:0f:7e:d2:e3:a0:73:91:cd:08:fe:88:30:e5:71:
80:9a:dc:36:69:a0:7f:ea:58:0b:ad:14:09:c1:4c:
5c:26:41:96:ca:ab:be:e0:3f:7b:db:27:e9:80:9f:
57:bb:89:6c:47:2d:2f:51:ef:1b:d4:c3:96:26:73:
74:f0:c3:83:98:4d:36:35:08:d0:b6:75:70:b0:c7:
ef:ff:c5:7e:30:84:3d:53:c1:73:59:79:f1:dd:dd:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F8:9F:A4:66:63:4C:29:FB:19:9B:03:7B:F2:C0:92:89:0E:25:F9
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/XfifpGZjTCn7GZsDe_LAkokOJfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:33:dd:6c:6f:0c:70:26:50:26:70:d8:9c:c6:57:d2:fe:dd:
8a:46:58:8b:81:d8:e5:2f:c4:b9:16:be:f8:2c:69:1d:81:e7:
2c:63:5a:2c:a3:02:1f:6f:80:42:22:78:71:1e:9e:dc:72:74:
b1:a7:4b:d8:e9:15:5a:47:e4:cd:e5:79:79:b7:a8:3b:c4:7f:
1a:ab:2b:21:3a:89:42:63:c6:ab:88:2d:24:62:50:7b:49:4d:
e3:b6:d1:88:64:45:33:d8:e1:88:bf:2b:d2:df:f3:e1:01:43:
1b:0d:76:09:2e:dc:03:59:2c:fc:42:8b:fb:79:c9:39:83:22:
d6:15:0a:76:af:7c:8a:4f:b4:ea:84:8f:b6:5e:e5:69:c8:bc:
91:60:a3:9d:2f:2c:cd:34:4b:4e:06:eb:82:31:f6:f6:43:8a:
c5:b6:6d:d1:9f:68:23:0d:0a:29:d6:81:f2:a4:2d:28:e5:2c:
4a:42:00:9c:75:ee:bd:04:fd:ff:6b:9f:44:9c:be:13:45:21:
d5:51:37:cf:db:a3:07:4c:a8:d1:b1:4a:52:2f:12:82:af:ef:
3d:48:9d:44:4c:dc:e3:95:12:95:07:3c:7a:70:0c:4f:a7:9f:
e3:0d:45:14:cd:71:53:83:e8:53:b2:51:cc:ab:c9:01:ad:44:
03:b7:d6:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseDLXI+ZVGcqNF/3KM4mWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw
MzllZDgwHhcNMjMwMTAxMDgzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGY4OWZhNDY2NjM0YzI5ZmIxOTliMDM3YmYyYzA5Mjg5MGUyNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhtkskJ3R8g7vXx+BuubiF9YGLYK
Abd89q+WXKd67kDb2JbSwDvpbMPRr0pqek98ajpyoNMq+nflFGZWbGoXmJQ+uPM1
O5IMVJjfR3118msPjdV/97mmE2S4JyIzfBXKfoY8yz1At+g+K4AQ7lJpiX4TdXhp
lgnziFfLuA8kWHRR4s2Tt6TOmxPWZtyHr6JhQjLnSi5gxCM69naR2vTuJuim3CzZ
D37S46Bzkc0I/ogw5XGAmtw2aaB/6lgLrRQJwUxcJkGWyqu+4D972yfpgJ9Xu4ls
Ry0vUe8b1MOWJnN08MODmE02NQjQtnVwsMfv/8V+MIQ9U8FzWXnx3d3iQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF34n6RmY0wp+xmbA3vywJKJDiX5MB8GA1UdIwQY
MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt
ZmQyOTE1ZDRjZDVhLzEvWGZpZnBHWmpUQ243R1pzRGVfTEFrb2tPSmZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh
LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXXlMA0G
CSqGSIb3DQEBCwUAA4IBAQA7M91sbwxwJlAmcNicxlfS/t2KRliLgdjlL8S5Fr74
LGkdgecsY1osowIfb4BCInhxHp7ccnSxp0vY6RVaR+TN5Xl5t6g7xH8aqyshOolC
Y8ariC0kYlB7SU3jttGIZEUz2OGIvyvS3/PhAUMbDXYJLtwDWSz8Qov7eck5gyLW
FQp2r3yKT7TqhI+2XuVpyLyRYKOdLyzNNEtOBuuCMfb2Q4rFtm3Rn2gjDQop1oHy
pC0o5SxKQgCcde69BP3/a59EnL4TRSHVUTfP26MHTKjRsUpSLxKCr+89SJ1ETNzj
lRKVBzx6cAxPp5/jDUUUzXFTg+hTslHMq8kBrUQDt9bX
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:15 2025 by rpki-client