Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/d-RCvjq9NaFjHllnePjl84bNgnc.roa
File: d-RCvjq9NaFjHllnePjl84bNgnc.roa (raw, json)
Hash identifier: cNtfRKEERjWKxAHmQNKkc+hzs5VDYg+ityPqkdDelok=
Subject key identifier: 77:E4:42:BE:3A:BD:35:A1:63:1E:59:67:78:F8:E5:F3:86:CD:82:77
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 0FA2168B
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/d-RCvjq9NaFjHllnePjl84bNgnc.roa
Signing time: Sat 01 Jan 2022 02:53:56 +0000
ROA not before: Sat 01 Jan 2022 02:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16035
IP address blocks: 185.152.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262280843 (0xfa2168b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Jan 1 02:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77e442be3abd35a1631e596778f8e5f386cd8277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:67:ea:4a:37:f4:bf:c7:61:68:0f:18:7c:
56:81:62:63:0e:8e:4b:e8:b7:f4:4f:e0:9d:4a:2a:
b1:f4:06:02:b9:62:33:8c:e9:ec:3d:43:92:55:1c:
72:36:c9:2c:ba:bc:1a:0f:7b:bd:be:d3:53:55:2c:
e4:d4:d4:c8:63:22:82:dd:4f:75:ce:a4:ff:1d:1d:
0b:19:74:39:d1:49:2e:92:66:95:dd:e4:c8:67:59:
e1:72:fc:23:42:2d:35:c1:ad:d7:04:ab:ae:ec:eb:
3e:e6:2f:9b:e6:07:0e:49:eb:76:fb:d5:61:71:81:
18:11:8c:e4:d5:10:9e:8b:08:a2:9c:50:14:5e:56:
cb:4a:52:62:b3:13:f3:3c:d2:dd:a6:a8:f5:58:e0:
19:d9:04:9d:f8:7a:33:9f:5b:1e:0c:e0:08:7a:c3:
be:47:93:2f:cf:76:50:7b:e2:9b:e5:87:82:dd:cf:
00:e7:6d:af:72:cd:17:9d:3f:ab:89:81:30:d1:10:
35:9f:eb:37:1b:52:fc:5e:f4:46:68:62:2c:9f:25:
ff:82:37:5b:05:9e:92:c5:98:d2:67:4f:9a:dc:6e:
86:80:3d:16:52:77:21:c5:e4:28:09:3b:8c:5f:ad:
28:42:19:1d:39:1b:62:5f:f2:32:09:b8:e5:f4:87:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:42:BE:3A:BD:35:A1:63:1E:59:67:78:F8:E5:F3:86:CD:82:77
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/d-RCvjq9NaFjHllnePjl84bNgnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.156.0/22
Signature Algorithm: sha256WithRSAEncryption
22:54:27:c6:1e:28:91:db:34:66:0e:77:e1:1c:fb:5a:3c:9d:
82:3d:c4:2e:fd:79:9f:2e:60:17:ec:85:77:b3:07:59:21:40:
22:02:2d:b3:76:5f:c2:e2:5f:d8:12:3f:1c:be:1d:cb:1c:2b:
b9:ca:43:93:a9:9e:63:f5:9c:77:d5:40:1d:8c:67:28:cc:73:
5e:4d:76:c3:39:57:1c:52:fd:63:14:77:70:45:54:52:cc:49:
0d:2e:12:07:9c:69:51:88:75:ce:a2:a1:9b:b7:3e:53:cb:7e:
87:91:7d:69:00:13:6e:3c:79:51:49:c9:20:29:51:db:e5:34:
cb:88:ee:d5:4a:00:36:df:24:5d:e3:2a:e3:61:0d:1f:81:8b:
58:31:bb:68:6f:b3:2d:07:00:0b:f6:73:16:5e:f5:70:e3:25:
36:37:eb:be:60:7f:4b:dd:aa:f7:5e:43:8f:86:3b:1e:39:7d:
00:b9:8f:32:9e:ee:16:ae:87:bd:cd:b6:17:b7:8f:09:2e:7e:
1b:9d:d1:6a:e1:cd:10:3e:3e:cd:99:62:1d:6a:d1:f6:29:ea:
3f:8b:c5:62:a3:43:d4:9b:71:a6:c0:15:58:c0:33:d5:11:61:
f5:6a:cd:66:9a:01:7c:64:0c:82:3b:e8:9e:c0:7a:61:ff:49:
1a:40:ef:48
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED6IWizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGNiNTBlNzhhM2EzMWUzMzc1Y2YyYWFiODY1ZTg0NWZmMmU5OWMxMB4XDTIyMDEw
MTAyNTM1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdlNDQyYmUzYWJk
MzVhMTYzMWU1OTY3NzhmOGU1ZjM4NmNkODI3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPGNZ+pKN/S/x2FoDxh8VoFiYw6OS+i39E/gnUoqsfQGArli
M4zp7D1DklUccjbJLLq8Gg97vb7TU1Us5NTUyGMigt1Pdc6k/x0dCxl0OdFJLpJm
ld3kyGdZ4XL8I0ItNcGt1wSrruzrPuYvm+YHDknrdvvVYXGBGBGM5NUQnosIopxQ
FF5Wy0pSYrMT8zzS3aao9VjgGdkEnfh6M59bHgzgCHrDvkeTL892UHvim+WHgt3P
AOdtr3LNF50/q4mBMNEQNZ/rNxtS/F70RmhiLJ8l/4I3WwWeksWY0mdPmtxuhoA9
FlJ3IcXkKAk7jF+tKEIZHTkbYl/yMgm45fSH3F8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR35EK+Or01oWMeWWd4+OXzhs2CdzAfBgNVHSMEGDAWgBSky1Dnijox4zdc
8qq4ZehF/y6ZwTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BNdFE1NG82TWVNM1hQS3F1R1hvUmY4dW1jRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvYjFmMmUwLThhNjAtNGM4YS05MGRjLTRiZTc5NGQ2NDA2ZC8x
L2QtUkN2anE5TmFGakhsbG5lUGpsODRiTmduYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
YjFmMmUwLThhNjAtNGM4YS05MGRjLTRiZTc5NGQ2NDA2ZC8xL3BNdFE1NG82TWVN
M1hQS3F1R1hvUmY4dW1jRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmYnDANBgkqhkiG9w0BAQsFAAOC
AQEAIlQnxh4okds0Zg534Rz7Wjydgj3ELv15ny5gF+yFd7MHWSFAIgIts3ZfwuJf
2BI/HL4dyxwrucpDk6meY/Wcd9VAHYxnKMxzXk12wzlXHFL9YxR3cEVUUsxJDS4S
B5xpUYh1zqKhm7c+U8t+h5F9aQATbjx5UUnJIClR2+U0y4ju1UoANt8kXeMq42EN
H4GLWDG7aG+zLQcAC/ZzFl71cOMlNjfrvmB/S92q915Dj4Y7Hjl9ALmPMp7uFq6H
vc22F7ePCS5+G53RauHNED4+zZliHWrR9inqP4vFYqND1JtxpsAVWMAz1RFh9WrN
ZpoBfGQMgjvonsB6Yf9JGkDvSA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:45 2025 by rpki-client