Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/g1mm45j_OkLlur_SqI7WDyJYFdM.roa
File: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (raw, json)
Hash identifier: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=
Subject key identifier: 83:59:A6:E3:98:FF:3A:42:E5:BA:BF:D2:A8:8E:D6:0F:22:58:15:D3
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 0194258FB3CDC3AC15B004537DD058B34EC6
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/g1mm45j_OkLlur_SqI7WDyJYFdM.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44309
IP address blocks: 185.229.136.0/24 maxlen: 24
185.229.137.0/24 maxlen: 24
185.229.138.0/24 maxlen: 24
185.229.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b3:cd:c3:ac:15:b0:04:53:7d:d0:58:b3:4e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8359a6e398ff3a42e5babfd2a88ed60f225815d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:2b:5a:0a:f0:d8:26:75:e1:99:33:27:ee:
79:56:ab:75:34:83:6e:5c:93:58:be:9c:82:29:b8:
72:ac:a7:c3:25:be:54:57:34:58:f7:c8:c3:ac:06:
80:f5:eb:ec:44:7e:ca:59:7e:f5:e9:53:db:af:8a:
2b:0c:62:cd:28:17:3d:c9:aa:12:be:53:57:b0:99:
91:de:57:a8:04:b7:3f:f2:28:b2:6b:eb:29:ae:8f:
16:d7:07:cc:98:78:f0:66:2b:cd:46:db:d9:3b:11:
d0:22:80:24:25:84:5b:ef:96:10:52:54:91:6d:cf:
62:59:76:db:4f:e8:da:10:bb:16:69:3e:7e:37:a4:
a8:58:27:79:e4:fa:ab:74:f7:b0:3e:26:76:16:2d:
ae:5a:1c:85:64:83:45:ff:69:e6:0d:30:72:4d:5f:
ed:c5:9c:44:fc:e9:60:de:6f:de:fe:c5:bf:60:3d:
29:f7:37:44:92:13:40:40:2c:f6:61:b4:55:15:b0:
ee:d3:22:37:b5:dc:0c:37:91:29:ea:48:b6:a7:3a:
91:01:af:f9:95:b5:d7:6d:ca:52:f4:f5:f9:8c:d8:
52:4f:48:7d:18:a8:7e:5f:bd:af:2f:84:20:0a:9d:
7c:04:81:86:10:bb:b1:b4:7d:04:ba:68:cd:40:cd:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:59:A6:E3:98:FF:3A:42:E5:BA:BF:D2:A8:8E:D6:0F:22:58:15:D3
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/g1mm45j_OkLlur_SqI7WDyJYFdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.136.0/22
Signature Algorithm: sha256WithRSAEncryption
57:62:e6:d5:af:c4:c7:cc:f0:0d:de:d6:06:a9:05:15:f2:e9:
dc:40:c5:93:fe:29:d9:a7:92:69:8e:44:8c:ca:7b:f0:72:12:
4a:1c:33:b4:ba:93:1c:bb:3f:98:f0:0f:be:bb:42:b6:9c:c6:
67:cb:bc:78:19:93:8e:46:cd:15:34:e2:7e:85:07:00:e8:3f:
d4:15:1b:9b:eb:c0:40:d6:33:5c:96:ef:55:70:0b:9d:4e:e9:
73:31:a2:48:c5:ce:82:7b:8e:10:64:2f:eb:fe:7c:53:ef:97:
bd:8b:45:cc:3e:9b:a6:71:43:14:5f:65:c6:10:6b:47:c6:6c:
8e:fe:45:a3:9c:01:fd:86:ef:32:d9:56:11:1a:23:0e:25:f1:
8e:11:fd:36:35:3a:f3:3b:86:8d:6f:b8:02:88:be:bb:f2:16:
d6:4c:f0:ec:3c:59:8f:3c:3e:42:95:00:87:4a:49:c8:21:6d:
60:f2:61:ce:10:5d:c8:ff:cd:e6:29:22:c8:f2:34:d1:07:82:
b8:6d:f2:1b:1c:75:76:bb:9e:1d:52:f3:ce:ec:00:2b:4e:c1:
45:c0:dd:f7:a9:78:f8:9e:f5:40:e7:42:24:9a:35:74:8d:89:
28:ea:fe:7c:43:dc:05:0c:45:54:2d:70:a2:b1:23:5e:a7:77:
40:01:0c:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj7PNw6wVsARTfdBYs07GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODdiOWNmYzNlZTBjNDQ5NjVlYTIwOWMwNGZkOGU4ZjQ4
ZmE0MmYwHhcNMjUwMTAyMDU0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzU5YTZlMzk4ZmYzYTQyZTViYWJmZDJhODhlZDYwZjIyNTgxNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpYrWgrw2CZ14ZkzJ+55Vqt1NINu
XJNYvpyCKbhyrKfDJb5UVzRY98jDrAaA9evsRH7KWX716VPbr4orDGLNKBc9yaoS
vlNXsJmR3leoBLc/8iiya+spro8W1wfMmHjwZivNRtvZOxHQIoAkJYRb75YQUlSR
bc9iWXbbT+jaELsWaT5+N6SoWCd55PqrdPewPiZ2Fi2uWhyFZINF/2nmDTByTV/t
xZxE/Olg3m/e/sW/YD0p9zdEkhNAQCz2YbRVFbDu0yI3tdwMN5Ep6ki2pzqRAa/5
lbXXbcpS9PX5jNhST0h9GKh+X72vL4QgCp18BIGGELuxtH0EumjNQM0qNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINZpuOY/zpC5bq/0qiO1g8iWBXTMB8GA1UdIwQY
MBaAFLyHuc/D7gxEll6iCcBP2Oj0j6QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgt
NDVmYWJlM2Y5ZjMzLzEvZzFtbTQ1al9Pa0xsdXJfU3FJN1dEeUpZRmRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgtNDVmYWJlM2Y5ZjMz
LzEvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueWIMA0G
CSqGSIb3DQEBCwUAA4IBAQBXYubVr8THzPAN3tYGqQUV8uncQMWT/inZp5JpjkSM
ynvwchJKHDO0upMcuz+Y8A++u0K2nMZny7x4GZOORs0VNOJ+hQcA6D/UFRub68BA
1jNclu9VcAudTulzMaJIxc6Ce44QZC/r/nxT75e9i0XMPpumcUMUX2XGEGtHxmyO
/kWjnAH9hu8y2VYRGiMOJfGOEf02NTrzO4aNb7gCiL678hbWTPDsPFmPPD5ClQCH
SknIIW1g8mHOEF3I/83mKSLI8jTRB4K4bfIbHHV2u54dUvPO7AArTsFFwN33qXj4
nvVA50IkmjV0jYko6v58Q9wFDEVULXCisSNep3dAAQz4
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:22 2025 by rpki-client