Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/ovq9SHaGHSZtUyimJkIoTGn8INk.roa
File: ovq9SHaGHSZtUyimJkIoTGn8INk.roa (raw, json)
Hash identifier: CXb3LyRj5VuCMLVlACtqxz/81TDLV0/hwVMMXGdNbNo=
Subject key identifier: A2:FA:BD:48:76:86:1D:26:6D:53:28:A6:26:42:28:4C:69:FC:20:D9
Certificate issuer: /CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Certificate serial: 018CC9BCD8F28423AE4BDB6F24EDC2888D41
Authority key identifier: C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/ovq9SHaGHSZtUyimJkIoTGn8INk.roa
Signing time: Tue 02 Jan 2024 10:34:05 +0000
ROA not before: Tue 02 Jan 2024 10:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207626
IP address blocks: 185.92.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d8:f2:84:23:ae:4b:db:6f:24:ed:c2:88:8d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Validity
Not Before: Jan 2 10:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2fabd4876861d266d5328a62642284c69fc20d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:fe:22:98:2c:55:36:af:d0:70:1c:35:63:
f2:dd:30:b6:b0:53:94:37:94:a1:e8:38:95:b5:7f:
a2:0c:90:1a:7f:15:b1:16:7c:4e:93:09:bf:1b:e7:
59:6e:9e:90:be:a2:95:59:58:a6:4c:0e:36:1e:77:
95:11:88:7a:67:89:ee:5f:2a:2f:0f:fe:cf:bf:b2:
0f:fa:b0:b5:30:ff:48:66:00:2a:5c:41:d0:b6:88:
cf:43:60:96:62:fe:28:07:68:e0:f4:dc:ee:8a:47:
3a:6b:e5:8c:e3:da:6a:a3:d4:69:be:09:8c:b0:82:
c9:25:44:17:f6:a8:02:7b:db:5f:47:35:2b:6e:29:
ca:5e:64:b0:75:04:a1:a5:77:7a:9a:71:20:32:53:
84:db:e4:4d:91:99:56:e5:e2:a3:d7:fa:3e:7d:f0:
0d:86:41:f7:3b:c7:d4:04:b5:ba:b7:2a:c2:0e:72:
82:f4:bb:40:95:21:1f:6f:5d:3d:43:76:a9:ac:33:
fb:87:80:6a:54:5c:29:ca:c5:1c:48:38:0d:b8:39:
bb:83:44:15:25:e6:4d:48:bb:db:5b:0a:a5:25:3b:
4a:3a:08:2a:de:89:ef:28:be:cc:ef:ae:08:d3:b6:
61:e9:05:55:54:55:48:81:cc:e4:4b:e5:a1:ce:4d:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FA:BD:48:76:86:1D:26:6D:53:28:A6:26:42:28:4C:69:FC:20:D9
X509v3 Authority Key Identifier:
keyid:C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/ovq9SHaGHSZtUyimJkIoTGn8INk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:10:82:9b:55:7c:d9:16:d7:6b:43:ba:eb:cd:0a:0b:37:a2:
04:9f:4e:40:23:d7:4d:73:e2:78:10:45:93:1d:66:1d:42:cd:
f0:40:d6:0b:b6:f8:bb:af:53:40:90:86:12:8b:c8:31:33:bc:
ae:01:cc:99:ba:f6:f7:ae:f8:b4:32:07:23:d7:a3:ec:8c:c9:
5c:d7:81:eb:fa:4a:79:70:a9:3e:2e:f6:91:f8:6d:cb:e2:d3:
ae:aa:a3:44:af:9e:2f:42:dd:fc:a5:23:bd:40:bc:0d:48:3c:
6a:44:c0:13:47:82:42:59:76:39:ea:63:fb:19:5c:b5:56:f8:
0b:d0:78:54:7c:d7:f3:98:af:fc:88:44:83:74:5a:9f:6c:c1:
f9:a9:54:3d:d1:6c:3e:d6:86:14:6b:9e:5d:f8:30:8e:53:78:
16:0d:66:a7:2f:5a:b4:3a:81:df:76:15:f3:6e:d7:87:7c:2b:
cf:ca:06:95:22:94:bb:ba:78:f8:3e:6c:10:31:01:d6:0e:30:
a5:81:c4:5a:7a:1e:da:e6:cd:25:96:91:2c:68:4f:98:0c:fa:
33:17:a2:42:81:53:24:6c:60:4f:b9:6b:c0:3d:f0:75:ae:34:
41:bd:65:98:ba:66:6a:5a:11:77:e2:90:36:65:54:46:cb:e9:
20:33:0f:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvNjyhCOuS9tvJO3CiI1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YTYyN2U2YTY3ZjdiNjk3ZDhmYmFmMmM5YjA3NWU3Yzcy
ZWFiMGIwHhcNMjQwMTAyMTAzNDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmZhYmQ0ODc2ODYxZDI2NmQ1MzI4YTYyNjQyMjg0YzY5ZmMyMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndP+IpgsVTav0HAcNWPy3TC2sFOU
N5Sh6DiVtX+iDJAafxWxFnxOkwm/G+dZbp6QvqKVWVimTA42HneVEYh6Z4nuXyov
D/7Pv7IP+rC1MP9IZgAqXEHQtojPQ2CWYv4oB2jg9Nzuikc6a+WM49pqo9RpvgmM
sILJJUQX9qgCe9tfRzUrbinKXmSwdQShpXd6mnEgMlOE2+RNkZlW5eKj1/o+ffAN
hkH3O8fUBLW6tyrCDnKC9LtAlSEfb109Q3aprDP7h4BqVFwpysUcSDgNuDm7g0QV
JeZNSLvbWwqlJTtKOggq3onvKL7M764I07Zh6QVVVFVIgczkS+Whzk1nJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKL6vUh2hh0mbVMopiZCKExp/CDZMB8GA1UdIwQY
MBaAFMimJ+amf3tpfY+68smwdefHLqsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUtZbjVxWl9lMmw5ajdyeXliQjE1OGN1cXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZDA1ZDUtMzczYS00NWZmLTg0YmEt
NDA0YzAwYWRlYzkxLzEvb3ZxOVNIYUdIU1p0VXlpbUprSW9UR244SU5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZDA1ZDUtMzczYS00NWZmLTg0YmEtNDA0YzAwYWRlYzkx
LzEveUtZbjVxWl9lMmw5ajdyeXliQjE1OGN1cXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVzQMA0G
CSqGSIb3DQEBCwUAA4IBAQAtEIKbVXzZFtdrQ7rrzQoLN6IEn05AI9dNc+J4EEWT
HWYdQs3wQNYLtvi7r1NAkIYSi8gxM7yuAcyZuvb3rvi0Mgcj16PsjMlc14Hr+kp5
cKk+LvaR+G3L4tOuqqNEr54vQt38pSO9QLwNSDxqRMATR4JCWXY56mP7GVy1VvgL
0HhUfNfzmK/8iESDdFqfbMH5qVQ90Ww+1oYUa55d+DCOU3gWDWanL1q0OoHfdhXz
bteHfCvPygaVIpS7unj4PmwQMQHWDjClgcRaeh7a5s0llpEsaE+YDPozF6JCgVMk
bGBPuWvAPfB1rjRBvWWYumZqWhF34pA2ZVRGy+kgMw+Q
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:08 2025 by rpki-client