Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/pusRxy9QftUa2YYJz6wip986r9U.roa
File: pusRxy9QftUa2YYJz6wip986r9U.roa (raw, json)
Hash identifier: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=
Subject key identifier: A6:EB:11:C7:2F:50:7E:D5:1A:D9:86:09:CF:AC:22:A7:DF:3A:AF:D5
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019425223714E329CC8926544C0327D1EA43
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/pusRxy9QftUa2YYJz6wip986r9U.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.68.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:37:14:e3:29:cc:89:26:54:4c:03:27:d1:ea:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6eb11c72f507ed51ad98609cfac22a7df3aafd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:92:80:1b:b2:f0:18:49:3f:a0:aa:11:16:
bd:7c:c3:ea:7c:8f:04:66:70:be:22:d4:8c:8c:b0:
43:7a:9b:84:c5:81:63:81:85:a8:78:78:c0:2f:c0:
5e:0b:90:ac:63:a8:23:ed:83:b4:c5:6d:8d:97:63:
d1:78:7d:99:2d:5a:a7:78:ac:7d:37:6a:a0:64:3e:
b0:49:fd:ac:2f:cc:6c:9a:27:1e:21:70:1e:e9:25:
1f:0a:e5:f9:9d:60:05:d8:2e:c6:30:22:aa:3e:1f:
40:2d:3d:e5:58:4d:0c:41:58:68:00:05:23:98:68:
b4:fb:2a:81:41:45:d7:20:13:f6:85:23:2e:74:82:
0d:56:6a:b7:2d:5c:29:07:b4:da:c3:3f:a1:f0:b7:
43:cc:32:00:1a:07:83:99:35:fd:a5:7a:0e:b7:f9:
7c:58:df:91:10:90:a0:c8:70:1a:40:81:6e:e8:b3:
c5:af:02:9a:e1:c7:69:41:50:d7:4b:2b:0e:ff:04:
17:c0:b8:d9:31:48:f3:e2:a1:9d:fd:40:98:d6:db:
a8:be:7a:d4:d0:cd:dc:fe:c4:d9:cc:ec:56:fe:8b:
2e:68:44:d3:76:18:40:c6:f0:9c:ad:d2:85:0b:2c:
a7:73:aa:c1:97:8e:6c:57:10:62:9b:d4:be:2a:cd:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EB:11:C7:2F:50:7E:D5:1A:D9:86:09:CF:AC:22:A7:DF:3A:AF:D5
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/pusRxy9QftUa2YYJz6wip986r9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.136.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:19:e1:8a:da:bc:e0:dd:d9:2a:6f:27:08:99:4b:43:e8:85:
1d:94:9c:7d:6f:80:69:33:67:93:b5:08:ac:77:37:23:c1:8a:
f8:a1:38:3b:5a:df:46:7a:b9:68:0e:64:2c:40:5e:d9:df:ac:
0c:8d:77:41:71:e4:4b:d3:65:5c:bf:1d:bd:3d:4c:5f:89:4b:
61:4c:b8:81:77:0b:5a:35:83:20:c2:2c:ae:78:1b:dc:a4:df:
69:dd:03:3d:f8:35:5b:c5:94:b9:0b:13:72:75:1a:8d:8f:5b:
0c:e9:c4:4d:45:cf:d1:a7:94:f1:74:6a:67:25:4b:f6:84:f7:
12:3c:d1:d5:b3:38:51:c6:ce:72:f2:38:40:1c:5c:a3:f1:28:
bb:89:c9:38:23:67:1e:0f:a4:46:d1:d1:ae:5c:9d:05:08:a4:
dd:60:4b:4d:d6:56:92:e0:dd:73:7d:f1:76:2a:8e:88:2d:0d:
3f:2c:da:e1:71:93:20:bb:94:b4:40:55:aa:a3:93:a4:bc:0e:
83:0c:10:8f:60:02:f0:b5:67:4a:10:ae:24:fc:b6:46:d5:25:
a3:f5:64:34:ba:68:5d:29:a1:f2:e5:1f:df:f4:6b:d8:0a:03:
33:aa:57:ae:bc:0e:c9:44:c7:b6:fa:4b:51:bb:d3:f3:e6:a2:
8b:c0:8e:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIjcU4ynMiSZUTAMn0epDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTcxZDg4YjUzOTY1YTdkMDgxZjNiMWQ4Mjg5Y2JjMjg3
NzViODgwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmViMTFjNzJmNTA3ZWQ1MWFkOTg2MDljZmFjMjJhN2RmM2FhZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc+SgBuy8BhJP6CqERa9fMPqfI8E
ZnC+ItSMjLBDepuExYFjgYWoeHjAL8BeC5CsY6gj7YO0xW2Nl2PReH2ZLVqneKx9
N2qgZD6wSf2sL8xsmiceIXAe6SUfCuX5nWAF2C7GMCKqPh9ALT3lWE0MQVhoAAUj
mGi0+yqBQUXXIBP2hSMudIINVmq3LVwpB7Tawz+h8LdDzDIAGgeDmTX9pXoOt/l8
WN+REJCgyHAaQIFu6LPFrwKa4cdpQVDXSysO/wQXwLjZMUjz4qGd/UCY1tuovnrU
0M3c/sTZzOxW/osuaETTdhhAxvCcrdKFCyync6rBl45sVxBim9S+Ks00jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKbrEccvUH7VGtmGCc+sIqffOq/VMB8GA1UdIwQY
MBaAFJVXHYi1OWWn0IHzsdgonLwod1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYt
YWE2MjI5Njk4NDYxLzEvcHVzUnh5OVFmdFVhMllZSno2d2lwOTg2cjlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYtYWE2MjI5Njk4NDYx
LzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUSIMA0G
CSqGSIb3DQEBCwUAA4IBAQC9GeGK2rzg3dkqbycImUtD6IUdlJx9b4BpM2eTtQis
dzcjwYr4oTg7Wt9GerloDmQsQF7Z36wMjXdBceRL02Vcvx29PUxfiUthTLiBdwta
NYMgwiyueBvcpN9p3QM9+DVbxZS5CxNydRqNj1sM6cRNRc/Rp5TxdGpnJUv2hPcS
PNHVszhRxs5y8jhAHFyj8Si7ick4I2ceD6RG0dGuXJ0FCKTdYEtN1laS4N1zffF2
Ko6ILQ0/LNrhcZMgu5S0QFWqo5OkvA6DDBCPYALwtWdKEK4k/LZG1SWj9WQ0umhd
KaHy5R/f9GvYCgMzqleuvA7JRMe2+ktRu9Pz5qKLwI7Y
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:55 2025 by rpki-client