Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/eVVRdq2Ai30M0AfUoG7NHIjrnCQ.roa
File: eVVRdq2Ai30M0AfUoG7NHIjrnCQ.roa (raw, json)
Hash identifier: hUbRxz9LXomf9ZKrD4Qvg3Hyx8gJPXjDcb4gJjJx0VM=
Subject key identifier: 79:55:51:76:AD:80:8B:7D:0C:D0:07:D4:A0:6E:CD:1C:88:EB:9C:24
Certificate issuer: /CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Certificate serial: 01856E6FD354D90F42F025A859CF19D161E2
Authority key identifier: C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/eVVRdq2Ai30M0AfUoG7NHIjrnCQ.roa
Signing time: Sun 01 Jan 2023 17:45:00 +0000
ROA not before: Sun 01 Jan 2023 17:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.92.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:d3:54:d9:0f:42:f0:25:a8:59:cf:19:d1:61:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Validity
Not Before: Jan 1 17:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79555176ad808b7d0cd007d4a06ecd1c88eb9c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:ac:b0:a7:cf:08:88:80:2a:6e:e5:40:64:
bd:d5:73:73:21:f6:9f:30:6f:b8:cd:02:7f:33:c0:
b6:6d:46:6a:7f:26:d8:0f:98:63:49:11:77:05:75:
87:f2:12:e4:9b:32:a0:60:35:42:ab:53:44:a0:7a:
73:61:37:87:f3:3f:4a:8e:f9:f7:bb:a2:67:9e:10:
9d:a1:46:1b:8e:a0:93:f0:f1:8f:0b:6d:f5:b3:10:
b7:e7:71:0e:cb:11:7a:ac:10:4e:c0:ef:22:50:53:
47:a7:09:6b:c4:58:24:1a:70:e6:60:70:55:2d:01:
91:67:e8:b1:72:66:c4:26:a1:61:b6:1e:52:df:82:
46:01:22:85:37:f9:d3:fc:cb:eb:63:22:37:4a:b7:
ec:67:f3:73:6e:7a:f7:70:10:10:17:3a:68:11:0c:
f5:25:3f:cf:ac:7e:ca:4f:b3:95:23:c6:81:c0:b0:
c7:23:b2:af:f8:db:d7:14:be:7f:f9:4a:e9:4a:e6:
35:47:e8:0c:ca:e2:91:59:9d:60:92:b9:0b:5d:40:
d4:83:88:6c:46:cd:ff:1b:2f:27:6c:03:01:e4:6f:
df:f8:37:df:34:f5:02:57:8c:b6:f4:66:01:c5:d9:
6e:2c:8c:be:f7:08:53:17:44:1e:e1:11:09:03:00:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:51:76:AD:80:8B:7D:0C:D0:07:D4:A0:6E:CD:1C:88:EB:9C:24
X509v3 Authority Key Identifier:
keyid:C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/eVVRdq2Ai30M0AfUoG7NHIjrnCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
56:52:bc:41:69:40:9f:e3:07:eb:02:e5:a3:c4:31:89:ed:59:
01:47:62:af:f7:36:16:e7:2c:31:ed:8c:0a:1c:65:6d:ca:85:
f5:55:3b:97:e0:52:1f:34:99:c3:77:a5:b6:70:db:ec:49:ac:
95:4b:d0:6a:65:96:41:b5:dc:c1:84:19:f7:c4:1b:22:78:af:
77:86:48:2b:ac:a5:cf:7d:a6:62:b8:44:b8:09:df:1c:03:96:
c7:c9:d9:38:8b:a8:e2:70:67:8e:6d:7c:49:ba:2d:cd:80:bc:
55:fb:d8:de:92:43:b3:5d:af:a3:89:e0:29:a4:ce:d0:8c:cf:
5b:f0:4a:61:37:1c:00:a7:64:f3:c6:e7:31:fc:a9:89:9b:19:
0b:4e:59:83:83:c2:4a:ee:b3:c7:50:ba:af:51:a1:d0:0c:d5:
2d:4f:f4:a1:8a:ec:ee:ab:79:97:d8:27:09:ac:f4:9d:2d:89:
75:db:58:39:40:a5:76:a6:29:54:eb:82:a8:d9:5c:56:1b:ef:
10:13:27:2a:58:bd:88:26:b8:0e:60:44:49:31:f0:e0:6c:cf:
04:63:7b:e8:65:1b:bb:36:7e:47:69:7b:59:16:49:99:df:1a:
e0:64:5b:1c:e6:1f:95:09:d0:83:7c:ee:c0:50:85:a2:f8:74:
09:a4:50:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVub9NU2Q9C8CWoWc8Z0WHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YTYyN2U2YTY3ZjdiNjk3ZDhmYmFmMmM5YjA3NWU3Yzcy
ZWFiMGIwHhcNMjMwMTAxMTc0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTU1NTE3NmFkODA4YjdkMGNkMDA3ZDRhMDZlY2QxYzg4ZWI5YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwyssKfPCIiAKm7lQGS91XNzIfaf
MG+4zQJ/M8C2bUZqfybYD5hjSRF3BXWH8hLkmzKgYDVCq1NEoHpzYTeH8z9Kjvn3
u6JnnhCdoUYbjqCT8PGPC231sxC353EOyxF6rBBOwO8iUFNHpwlrxFgkGnDmYHBV
LQGRZ+ixcmbEJqFhth5S34JGASKFN/nT/MvrYyI3SrfsZ/Nzbnr3cBAQFzpoEQz1
JT/PrH7KT7OVI8aBwLDHI7Kv+NvXFL5/+UrpSuY1R+gMyuKRWZ1gkrkLXUDUg4hs
Rs3/Gy8nbAMB5G/f+DffNPUCV4y29GYBxdluLIy+9whTF0Qe4REJAwBUdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlVUXatgIt9DNAH1KBuzRyI65wkMB8GA1UdIwQY
MBaAFMimJ+amf3tpfY+68smwdefHLqsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUtZbjVxWl9lMmw5ajdyeXliQjE1OGN1cXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZDA1ZDUtMzczYS00NWZmLTg0YmEt
NDA0YzAwYWRlYzkxLzEvZVZWUmRxMkFpMzBNMEFmVW9HN05ISWpybkNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZDA1ZDUtMzczYS00NWZmLTg0YmEtNDA0YzAwYWRlYzkx
LzEveUtZbjVxWl9lMmw5ajdyeXliQjE1OGN1cXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVzQMA0G
CSqGSIb3DQEBCwUAA4IBAQBWUrxBaUCf4wfrAuWjxDGJ7VkBR2Kv9zYW5ywx7YwK
HGVtyoX1VTuX4FIfNJnDd6W2cNvsSayVS9BqZZZBtdzBhBn3xBsieK93hkgrrKXP
faZiuES4Cd8cA5bHydk4i6jicGeObXxJui3NgLxV+9jekkOzXa+jieAppM7QjM9b
8EphNxwAp2Tzxucx/KmJmxkLTlmDg8JK7rPHULqvUaHQDNUtT/Shiuzuq3mX2CcJ
rPSdLYl121g5QKV2pilU64Ko2VxWG+8QEycqWL2IJrgOYERJMfDgbM8EY3voZRu7
Nn5HaXtZFkmZ3xrgZFsc5h+VCdCDfO7AUIWi+HQJpFAj
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:55 2025 by rpki-client