Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/J6bCUGNmxHfhynHn1VHIbIbTjKc.roa
File: J6bCUGNmxHfhynHn1VHIbIbTjKc.roa (raw, json)
Hash identifier: 7wskg4KP/JUiAbAI7Y6My0HYe0OaUjaWJsRVUD5MdhI=
Subject key identifier: 27:A6:C2:50:63:66:C4:77:E1:CA:71:E7:D5:51:C8:6C:86:D3:8C:A7
Certificate issuer: /CN=a385c3cba312a078c4d0a712af5316dd1e41c466
Certificate serial: 018A01EE65D7284F69C9EDE360459F432DC7
Authority key identifier: A3:85:C3:CB:A3:12:A0:78:C4:D0:A7:12:AF:53:16:DD:1E:41:C4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4XDy6MSoHjE0KcSr1MW3R5BxGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/J6bCUGNmxHfhynHn1VHIbIbTjKc.roa
Signing time: Thu 17 Aug 2023 05:18:35 +0000
ROA not before: Thu 17 Aug 2023 05:18:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.252.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:01:ee:65:d7:28:4f:69:c9:ed:e3:60:45:9f:43:2d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a385c3cba312a078c4d0a712af5316dd1e41c466
Validity
Not Before: Aug 17 05:18:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27a6c2506366c477e1ca71e7d551c86c86d38ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:96:99:63:4c:e5:d0:ee:cd:00:8a:8a:2d:
79:12:c0:d9:d6:ee:13:ee:c5:1b:ac:d3:50:13:6f:
69:e7:8a:34:8a:e9:40:8f:4f:11:14:00:9a:7e:b9:
76:0f:e4:6f:1c:54:59:74:ac:a7:10:94:f0:37:82:
2f:aa:bd:d4:af:04:a7:bb:86:5f:a6:35:d6:04:09:
ff:30:52:16:cd:df:f6:2b:7a:2c:c1:cf:71:07:55:
2a:84:c7:c6:c3:b6:5d:d3:47:fd:4c:bd:2c:de:fb:
1f:3e:c1:94:77:1f:cd:e7:83:42:7b:62:08:ba:b1:
16:8b:ca:5e:9e:49:80:d9:5c:17:4b:7f:1e:2f:7c:
c2:c0:4e:5f:d1:b4:8d:2a:9e:e8:0f:aa:b2:20:3d:
1e:ad:a6:af:33:84:5d:0f:87:2b:e1:9a:8a:b3:de:
c0:4c:1e:dd:00:db:f1:9d:fc:12:5e:39:26:70:ae:
75:85:ed:c5:33:ba:eb:a1:ff:13:42:80:b9:20:52:
f1:ac:8b:11:c8:4d:48:26:e9:92:65:3c:45:f5:42:
e8:4d:97:2f:c8:b3:e3:61:01:6d:55:28:67:60:25:
40:f8:b3:70:c8:d4:89:c9:7c:4b:54:8e:bb:4c:ba:
a7:9a:c7:cb:31:3d:81:60:8d:5f:fa:bd:25:cd:db:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A6:C2:50:63:66:C4:77:E1:CA:71:E7:D5:51:C8:6C:86:D3:8C:A7
X509v3 Authority Key Identifier:
keyid:A3:85:C3:CB:A3:12:A0:78:C4:D0:A7:12:AF:53:16:DD:1E:41:C4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4XDy6MSoHjE0KcSr1MW3R5BxGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/J6bCUGNmxHfhynHn1VHIbIbTjKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/o4XDy6MSoHjE0KcSr1MW3R5BxGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e2:80:4b:a7:ed:30:27:32:80:e4:54:12:1d:72:47:1f:92:
9d:76:be:67:05:6d:5e:7e:24:36:b4:c8:0c:59:58:02:36:ff:
71:81:f1:d7:de:52:6f:a3:9b:fd:57:1a:9c:1f:01:43:32:a5:
71:17:ab:f6:9f:a0:3e:e8:94:8b:11:33:35:02:5d:8c:d7:98:
7a:ca:6e:7e:05:66:31:24:1c:b3:8c:b8:d9:26:f1:70:d9:e1:
2e:71:76:e7:25:af:79:a0:cf:00:9d:91:9c:d9:68:77:c2:6b:
96:d1:de:ec:9d:da:52:66:83:e3:16:64:fc:08:a7:c8:58:00:
eb:49:53:c8:34:f7:b0:bb:c3:08:c2:ec:2c:82:ba:09:40:9b:
ab:51:78:0a:15:8a:67:42:47:4e:90:79:6c:af:9f:01:c1:34:
f2:32:78:d7:a1:74:ec:f2:9b:30:d9:05:be:de:5d:bd:4b:91:
3b:48:3b:91:dc:8a:b7:d8:41:f7:ba:37:2b:5b:36:2e:7e:42:
13:49:12:cd:e4:4c:fc:4c:ad:e5:97:2f:55:4f:3e:ed:52:05:
5b:21:15:e4:e5:63:c0:59:6f:57:83:f1:10:ea:1b:5c:2b:3b:
5c:bd:a2:ef:9d:fe:16:78:47:6a:41:f6:51:24:4a:c3:a7:dd:
8f:72:ab:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoB7mXXKE9pye3jYEWfQy3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzODVjM2NiYTMxMmEwNzhjNGQwYTcxMmFmNTMxNmRkMWU0
MWM0NjYwHhcNMjMwODE3MDUxODM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2E2YzI1MDYzNjZjNDc3ZTFjYTcxZTdkNTUxYzg2Yzg2ZDM4Y2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCKWmWNM5dDuzQCKii15EsDZ1u4T
7sUbrNNQE29p54o0iulAj08RFACafrl2D+RvHFRZdKynEJTwN4Ivqr3UrwSnu4Zf
pjXWBAn/MFIWzd/2K3oswc9xB1UqhMfGw7Zd00f9TL0s3vsfPsGUdx/N54NCe2II
urEWi8penkmA2VwXS38eL3zCwE5f0bSNKp7oD6qyID0eraavM4RdD4cr4ZqKs97A
TB7dANvxnfwSXjkmcK51he3FM7rrof8TQoC5IFLxrIsRyE1IJumSZTxF9ULoTZcv
yLPjYQFtVShnYCVA+LNwyNSJyXxLVI67TLqnmsfLMT2BYI1f+r0lzdvY9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCemwlBjZsR34cpx59VRyGyG04ynMB8GA1UdIwQY
MBaAFKOFw8ujEqB4xNCnEq9TFt0eQcRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRYRHk2TVNvSGpFMEtjU3IxTVczUjVCeEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80YzhkZDAtYWY5Ni00NGUzLWIwZmUt
NGQ4OTM5N2Q5ODk4LzEvSjZiQ1VHTm14SGZoeW5IbjFWSEliSWJUaktjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80YzhkZDAtYWY5Ni00NGUzLWIwZmUtNGQ4OTM5N2Q5ODk4
LzEvbzRYRHk2TVNvSGpFMEtjU3IxTVczUjVCeEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufzUMA0G
CSqGSIb3DQEBCwUAA4IBAQCL4oBLp+0wJzKA5FQSHXJHH5Kddr5nBW1efiQ2tMgM
WVgCNv9xgfHX3lJvo5v9VxqcHwFDMqVxF6v2n6A+6JSLETM1Al2M15h6ym5+BWYx
JByzjLjZJvFw2eEucXbnJa95oM8AnZGc2Wh3wmuW0d7sndpSZoPjFmT8CKfIWADr
SVPINPewu8MIwuwsgroJQJurUXgKFYpnQkdOkHlsr58BwTTyMnjXoXTs8psw2QW+
3l29S5E7SDuR3Iq32EH3ujcrWzYufkITSRLN5Ez8TK3lly9VTz7tUgVbIRXk5WPA
WW9Xg/EQ6htcKztcvaLvnf4WeEdqQfZRJErDp92PcqvJ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:40 2025 by rpki-client