Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa
File: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (raw, json)
Hash identifier: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=
Subject key identifier: 0C:DB:87:EA:82:1F:77:43:D8:D9:45:4C:AF:85:8C:CF:17:7B:35:4D
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 0194266B6191934B304D73720D2671C0F59E
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa
Signing time: Thu 02 Jan 2025 09:49:19 +0000
ROA not before: Thu 02 Jan 2025 09:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 185.113.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:61:91:93:4b:30:4d:73:72:0d:26:71:c0:f5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cdb87ea821f7743d8d9454caf858ccf177b354d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:34:82:5f:87:ee:57:c9:8e:8c:4e:e0:96:
78:82:26:02:d0:3f:d8:b4:6b:a9:0c:c1:a8:b3:18:
b1:0a:40:30:fa:45:b8:e7:cc:35:9c:be:73:27:95:
31:d8:87:ae:68:bb:a5:12:9c:52:ae:1c:d4:33:74:
69:30:9b:37:e2:74:bf:14:32:a6:ed:4a:8d:b3:0d:
e9:83:47:71:9b:0f:fb:76:06:c8:84:a5:9a:0b:11:
17:9a:f6:76:58:8b:44:dc:fe:19:40:05:55:27:6b:
d2:b4:0c:d7:cb:14:76:6c:e4:01:c3:24:ca:f5:70:
a5:ec:3f:6e:81:24:3f:c8:fd:9e:33:22:48:fb:56:
66:78:81:db:6c:68:eb:94:34:7c:3d:7c:f1:d6:72:
55:ee:07:44:3d:d6:0d:36:02:d7:54:eb:a0:92:ab:
7f:1a:6a:9a:8a:46:c3:e1:a0:1b:13:72:3a:88:f6:
19:bf:68:f6:4a:cd:26:e9:d9:74:90:a0:96:f2:4b:
14:27:99:2c:08:9d:a0:64:15:97:14:b4:7a:40:ca:
d6:7e:50:44:89:7a:ac:73:90:5c:a4:6c:97:b2:d3:
1e:80:d6:14:5f:dc:b4:39:de:8d:38:96:b1:0f:0e:
53:5f:c5:c3:38:2e:03:5f:d4:28:eb:a9:14:6b:3e:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DB:87:EA:82:1F:77:43:D8:D9:45:4C:AF:85:8C:CF:17:7B:35:4D
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e3:23:91:99:75:18:26:90:04:0c:e6:1e:b8:e5:4d:7e:57:
b0:9f:b6:72:3c:aa:87:09:e5:f4:ba:22:ed:8a:b2:4e:2b:cf:
96:30:be:52:eb:9f:b0:57:75:b4:fe:5a:c5:77:dd:0d:6c:77:
ea:9e:09:c0:0b:1e:e2:5b:da:73:82:68:92:f8:d5:d1:db:b4:
6c:8b:9e:33:53:79:bb:2d:0c:c5:5d:89:43:0f:f0:8a:4d:ca:
eb:5d:17:02:6d:7a:98:57:50:41:9e:42:47:08:d1:bf:a4:00:
80:c7:52:b7:2f:29:06:9b:57:a4:3c:a9:61:5b:6b:50:76:ab:
a9:49:0e:41:51:83:f0:47:b4:08:a8:b3:66:0e:7a:c6:cb:a3:
5b:8c:a9:41:cc:69:93:7e:1b:a2:07:9b:7c:fe:84:0e:8f:2a:
b6:1a:d1:21:5c:52:bc:a6:55:23:48:72:53:be:72:6f:e3:d4:
d5:24:96:4e:a4:4b:b4:c3:3f:4b:2d:26:ca:90:f6:23:6a:67:
0d:cb:2a:0d:38:38:22:27:80:10:01:3d:b0:36:b1:6e:07:77:
09:b5:fd:18:be:1c:9b:a6:88:3a:78:14:23:d3:25:6c:6e:f2:
0b:14:6e:65:04:bd:9f:69:42:93:9c:b6:21:74:ed:52:90:f3:
70:81:9a:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma2GRk0swTXNyDSZxwPWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz
MjkwYTQwHhcNMjUwMTAyMDk0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2RiODdlYTgyMWY3NzQzZDhkOTQ1NGNhZjg1OGNjZjE3N2IzNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbQ0gl+H7lfJjoxO4JZ4giYC0D/Y
tGupDMGosxixCkAw+kW458w1nL5zJ5Ux2IeuaLulEpxSrhzUM3RpMJs34nS/FDKm
7UqNsw3pg0dxmw/7dgbIhKWaCxEXmvZ2WItE3P4ZQAVVJ2vStAzXyxR2bOQBwyTK
9XCl7D9ugSQ/yP2eMyJI+1ZmeIHbbGjrlDR8PXzx1nJV7gdEPdYNNgLXVOugkqt/
GmqaikbD4aAbE3I6iPYZv2j2Ss0m6dl0kKCW8ksUJ5ksCJ2gZBWXFLR6QMrWflBE
iXqsc5BcpGyXstMegNYUX9y0Od6NOJaxDw5TX8XDOC4DX9Qo66kUaz7sbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzbh+qCH3dD2NlFTK+FjM8XezVNMB8GA1UdIwQY
MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt
NzI0YjFhMDIxMmQ0LzEvRE51SDZvSWZkMFBZMlVWTXI0V016eGQ3TlUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0
LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXHvMA0G
CSqGSIb3DQEBCwUAA4IBAQAr4yORmXUYJpAEDOYeuOVNflewn7ZyPKqHCeX0uiLt
irJOK8+WML5S65+wV3W0/lrFd90NbHfqngnACx7iW9pzgmiS+NXR27Rsi54zU3m7
LQzFXYlDD/CKTcrrXRcCbXqYV1BBnkJHCNG/pACAx1K3LykGm1ekPKlhW2tQdqup
SQ5BUYPwR7QIqLNmDnrGy6NbjKlBzGmTfhuiB5t8/oQOjyq2GtEhXFK8plUjSHJT
vnJv49TVJJZOpEu0wz9LLSbKkPYjamcNyyoNODgiJ4AQAT2wNrFuB3cJtf0Yvhyb
pog6eBQj0yVsbvILFG5lBL2faUKTnLYhdO1SkPNwgZo8
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:02:01 2025 by rpki-client