Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/1-ONPXz6oB55i6ncobLGXQOhvmv8.roa
File: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (raw, json)
Hash identifier: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=
Subject key identifier: F8:E3:4F:5F:3E:A8:07:9E:62:EA:77:28:6C:B1:97:40:E8:6F:9A:FF
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 019427484B1ECF42F22EA8D1518AC2D2EB27
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/1-ONPXz6oB55i6ncobLGXQOhvmv8.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206980
IP address blocks: 185.169.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4b:1e:cf:42:f2:2e:a8:d1:51:8a:c2:d2:eb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8e34f5f3ea8079e62ea77286cb19740e86f9aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:fb:97:9a:b3:f9:c5:65:cc:ef:9a:c0:89:
d0:ac:66:13:c1:5c:96:50:8c:43:5e:df:a1:1b:b3:
2d:71:b3:0f:9d:fa:38:6e:1b:0e:7a:21:be:21:1f:
15:49:51:45:f4:6d:dd:f1:41:60:64:2a:fd:af:d8:
d4:e8:fc:35:47:4d:62:dc:81:92:17:2b:57:2b:b1:
52:bb:fb:59:ca:a0:62:11:9c:a1:4b:08:9b:83:d6:
7e:b1:60:16:d4:64:c7:dd:11:18:6b:4c:6f:f7:f4:
b8:9c:3a:a8:e1:8a:e8:ad:0f:b0:12:5d:27:ef:cc:
03:ac:65:a9:eb:a9:ec:e6:c1:77:a3:e2:82:e2:e0:
82:5f:83:17:7f:bf:59:cd:e7:08:82:93:4b:8a:ee:
49:a5:28:45:09:99:38:d0:d6:4f:8f:ba:c7:83:4f:
ee:8b:50:8a:f1:68:55:4d:c1:f8:55:11:f9:a2:e4:
c8:a8:86:e6:e4:32:e3:44:c9:64:e7:4b:82:fb:c8:
c6:7f:9c:50:ac:4c:55:9e:0b:a4:bd:b9:87:d7:5f:
8d:ec:ff:8b:df:1e:14:a3:73:2f:b6:c3:53:f7:03:
58:d4:bd:ff:88:72:1a:22:0a:0b:42:31:f6:18:e5:
5f:ea:bb:4c:bc:c1:5d:70:7e:97:6e:7a:e9:3e:92:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E3:4F:5F:3E:A8:07:9E:62:EA:77:28:6C:B1:97:40:E8:6F:9A:FF
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/1-ONPXz6oB55i6ncobLGXQOhvmv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.133.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d2:7a:ea:7e:3a:46:e4:48:7a:76:c4:b6:aa:0f:33:dd:3e:
33:1d:a0:98:fc:a2:e0:aa:07:08:b8:6e:30:0d:02:69:c3:46:
36:48:6f:ea:a9:8f:2d:f3:3f:6d:b6:98:a7:10:43:a4:50:fe:
4f:80:15:48:4d:c3:ad:52:20:42:95:03:04:1b:f1:ba:29:9a:
38:7c:37:cf:59:0d:5f:0d:3f:d9:4a:db:31:87:83:c7:43:e2:
10:9a:d6:40:49:f2:1f:43:db:4b:94:ca:e5:a3:f0:be:eb:d8:
f0:2c:d9:39:9a:2d:63:34:b0:37:92:05:64:a3:fe:70:0d:2e:
e6:e7:d0:55:b7:aa:83:30:e8:b7:01:3b:65:32:1d:5f:9c:22:
09:5a:a3:79:32:34:ce:1e:ee:4c:48:9c:04:78:0d:81:20:05:
ec:b2:1f:41:3f:54:64:f8:e9:d4:38:dd:97:b1:4d:ff:da:a7:
15:3d:1a:09:65:e3:6a:e2:5c:f5:e3:35:7d:dd:5d:d0:b3:bf:
e2:d9:d6:f6:44:09:ba:3b:4a:07:fe:0c:b3:be:6e:5f:eb:c0:
20:53:3d:29:14:80:86:8c:e2:1a:de:69:ec:c3:a0:5e:90:ca:
05:ad:ba:5b:45:c1:37:10:1d:a9:05:2b:25:bb:15:f5:e5:cb:
04:e1:9d:fb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnSEsez0LyLqjRUYrC0usnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj
Y2ZlNzUwHhcNMjUwMTAyMTM1MDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGUzNGY1ZjNlYTgwNzllNjJlYTc3Mjg2Y2IxOTc0MGU4NmY5YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgn7l5qz+cVlzO+awInQrGYTwVyW
UIxDXt+hG7MtcbMPnfo4bhsOeiG+IR8VSVFF9G3d8UFgZCr9r9jU6Pw1R01i3IGS
FytXK7FSu/tZyqBiEZyhSwibg9Z+sWAW1GTH3REYa0xv9/S4nDqo4YrorQ+wEl0n
78wDrGWp66ns5sF3o+KC4uCCX4MXf79ZzecIgpNLiu5JpShFCZk40NZPj7rHg0/u
i1CK8WhVTcH4VRH5ouTIqIbm5DLjRMlk50uC+8jGf5xQrExVngukvbmH11+N7P+L
3x4Uo3MvtsNT9wNY1L3/iHIaIgoLQjH2GOVf6rtMvMFdcH6XbnrpPpKHvwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjjT18+qAeeYup3KGyxl0Dob5r/MB8GA1UdIwQY
MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt
ZDQxZmY4NTg2MThhLzEvMS1PTlBYejZvQjU1aTZuY29iTEdYUU9odm12OC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNWE5YjQ1LTQ4ZGQtNGQ4ZS1iYWQyLWQ0MWZmODU4NjE4
YS8xL08tTHZDWENLbEZuYVYxbnhSdmFhWFJuTV9uVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmphTAN
BgkqhkiG9w0BAQsFAAOCAQEAYNJ66n46RuRIenbEtqoPM90+Mx2gmPyi4KoHCLhu
MA0CacNGNkhv6qmPLfM/bbaYpxBDpFD+T4AVSE3DrVIgQpUDBBvxuimaOHw3z1kN
Xw0/2UrbMYeDx0PiEJrWQEnyH0PbS5TK5aPwvuvY8CzZOZotYzSwN5IFZKP+cA0u
5ufQVbeqgzDotwE7ZTIdX5wiCVqjeTI0zh7uTEicBHgNgSAF7LIfQT9UZPjp1Djd
l7FN/9qnFT0aCWXjauJc9eM1fd1d0LO/4tnW9kQJujtKB/4Ms75uX+vAIFM9KRSA
hoziGt5p7MOgXpDKBa26W0XBNxAdqQUrJbsV9eXLBOGd+w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:06 2025 by rpki-client