Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/RR12MExxr56-19XPnUGe1XiD0AQ.roa
File: RR12MExxr56-19XPnUGe1XiD0AQ.roa (raw, json)
Hash identifier: HQd2rYF6B5cFYSPgnAM+8VYXtxywZZ1cjcnIy5+NE3Q=
Subject key identifier: 45:1D:76:30:4C:71:AF:9E:BE:D7:D5:CF:9D:41:9E:D5:78:83:D0:04
Certificate issuer: /CN=0aa99e1cc74b4ca77b62cfa0939e79235d2ab9c1
Certificate serial: 018485C92A2EE97BAD0506D7F65274364769
Authority key identifier: 0A:A9:9E:1C:C7:4B:4C:A7:7B:62:CF:A0:93:9E:79:23:5D:2A:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqmeHMdLTKd7Ys-gk555I10qucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/RR12MExxr56-19XPnUGe1XiD0AQ.roa
Signing time: Thu 17 Nov 2022 13:31:04 +0000
ROA not before: Thu 17 Nov 2022 13:31:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202423
IP address blocks: 185.247.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:c9:2a:2e:e9:7b:ad:05:06:d7:f6:52:74:36:47:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa99e1cc74b4ca77b62cfa0939e79235d2ab9c1
Validity
Not Before: Nov 17 13:31:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=451d76304c71af9ebed7d5cf9d419ed57883d004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:b2:ba:63:88:8b:d5:66:d7:d6:90:61:dc:
67:d5:7b:e2:6e:92:01:a8:be:9d:d0:8b:58:b0:bd:
d5:e8:ff:d6:c1:34:62:34:e6:44:ff:96:32:c2:de:
65:c0:94:d0:3a:50:cc:61:66:70:88:91:f4:94:d4:
02:ae:46:89:96:b7:76:97:0e:73:02:88:a5:06:f6:
a9:eb:f4:37:21:91:c0:31:b9:71:94:1f:ce:c7:cb:
fb:98:f6:84:70:7e:aa:47:b9:f8:5b:42:24:4e:94:
29:b3:fb:21:61:16:fe:57:f2:28:f4:1f:31:fe:48:
f0:a8:84:5e:30:6f:39:fb:69:7b:fe:f4:9b:25:2c:
9d:ef:7a:01:b2:87:44:a2:26:2a:a1:f5:7f:0f:93:
b7:f8:c4:1d:ae:99:99:4f:3d:ae:ba:f9:54:bc:53:
9c:68:cb:65:d0:eb:25:5c:33:b0:b7:03:0b:9b:c4:
b8:59:24:51:8e:15:96:ac:af:3c:2f:fb:55:39:ed:
75:26:61:03:e3:21:1d:b9:b9:61:63:5d:32:60:ab:
28:27:6a:3a:91:2c:bd:06:83:6a:bc:9e:7e:06:66:
83:12:24:66:9e:79:63:20:67:2b:e9:fd:da:57:99:
60:f3:d7:ab:23:50:5f:c9:ca:32:00:67:dc:fd:b3:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:76:30:4C:71:AF:9E:BE:D7:D5:CF:9D:41:9E:D5:78:83:D0:04
X509v3 Authority Key Identifier:
keyid:0A:A9:9E:1C:C7:4B:4C:A7:7B:62:CF:A0:93:9E:79:23:5D:2A:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqmeHMdLTKd7Ys-gk555I10qucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/RR12MExxr56-19XPnUGe1XiD0AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/CqmeHMdLTKd7Ys-gk555I10qucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:a7:c0:32:82:54:10:68:af:32:3d:c9:2a:75:b0:74:7c:dc:
70:ec:65:ef:57:ab:9b:e9:2c:04:75:58:29:71:01:89:bf:a6:
a8:3f:a1:cc:03:26:2b:8e:20:d0:3e:ce:b9:fb:49:7e:79:69:
4b:4b:a8:93:81:9b:2e:44:38:93:c9:db:37:07:6c:8f:b6:aa:
96:04:54:f8:83:d5:90:14:71:30:b4:08:8a:59:0e:4c:12:44:
b1:92:c7:0e:eb:2a:68:bd:4c:a9:0a:65:a2:77:a2:48:00:9d:
8b:9c:8c:73:90:27:c2:c6:8c:41:f2:7e:ca:64:c6:37:63:f4:
65:cc:ce:b8:8b:10:1d:61:99:69:78:05:bc:0f:ac:1e:15:c3:
f3:dd:bf:f5:43:2a:d7:11:b7:fd:ab:d7:21:af:7e:0f:e3:ca:
3a:bc:04:2d:b9:82:4d:38:cb:c5:9c:6a:a8:8e:99:b8:e6:64:
d6:20:59:10:59:94:27:cf:45:1e:c0:c7:90:be:2c:1a:d6:d7:
88:a8:88:e9:f7:64:47:12:17:9c:1d:8a:ff:c9:65:4b:35:af:
d7:c4:cd:96:2f:27:7a:91:d6:5f:5a:05:23:df:ec:1f:bd:9a:
8f:9b:a3:c7:32:0c:cd:a5:b3:b6:94:f7:15:ab:56:fd:5f:fe:
89:ec:0a:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSFySou6XutBQbX9lJ0NkdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTk5ZTFjYzc0YjRjYTc3YjYyY2ZhMDkzOWU3OTIzNWQy
YWI5YzEwHhcNMjIxMTE3MTMzMTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTFkNzYzMDRjNzFhZjllYmVkN2Q1Y2Y5ZDQxOWVkNTc4ODNkMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosSyumOIi9Vm19aQYdxn1XvibpIB
qL6d0ItYsL3V6P/WwTRiNOZE/5Yywt5lwJTQOlDMYWZwiJH0lNQCrkaJlrd2lw5z
AoilBvap6/Q3IZHAMblxlB/Ox8v7mPaEcH6qR7n4W0IkTpQps/shYRb+V/Io9B8x
/kjwqIReMG85+2l7/vSbJSyd73oBsodEoiYqofV/D5O3+MQdrpmZTz2uuvlUvFOc
aMtl0OslXDOwtwMLm8S4WSRRjhWWrK88L/tVOe11JmED4yEdublhY10yYKsoJ2o6
kSy9BoNqvJ5+BmaDEiRmnnljIGcr6f3aV5lg89erI1BfycoyAGfc/bNIgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUddjBMca+evtfVz51BntV4g9AEMB8GA1UdIwQY
MBaAFAqpnhzHS0yne2LPoJOeeSNdKrnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FtZUhNZExUS2Q3WXMtZ2s1NTVJMTBxdWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wYmE2YTktMzc1ZC00ODViLWIwZWMt
NDI2NzZmMDlmMDk5LzEvUlIxMk1FeHhyNTYtMTlYUG5VR2UxWGlEMEFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wYmE2YTktMzc1ZC00ODViLWIwZWMtNDI2NzZmMDlmMDk5
LzEvQ3FtZUhNZExUS2Q3WXMtZ2s1NTVJMTBxdWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufe5MA0G
CSqGSIb3DQEBCwUAA4IBAQC3p8AyglQQaK8yPckqdbB0fNxw7GXvV6ub6SwEdVgp
cQGJv6aoP6HMAyYrjiDQPs65+0l+eWlLS6iTgZsuRDiTyds3B2yPtqqWBFT4g9WQ
FHEwtAiKWQ5MEkSxkscO6ypovUypCmWid6JIAJ2LnIxzkCfCxoxB8n7KZMY3Y/Rl
zM64ixAdYZlpeAW8D6weFcPz3b/1QyrXEbf9q9chr34P48o6vAQtuYJNOMvFnGqo
jpm45mTWIFkQWZQnz0UewMeQviwa1teIqIjp92RHEhecHYr/yWVLNa/XxM2WLyd6
kdZfWgUj3+wfvZqPm6PHMgzNpbO2lPcVq1b9X/6J7ArO
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:33 2025 by rpki-client