Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/1-LN7XrIXGmm9wjvsbX1eN3XkH1A.roa
File: 1-LN7XrIXGmm9wjvsbX1eN3XkH1A.roa (raw, json)
Hash identifier: icbRuupK0kIfLqNAks/iRj4atF2l5To+7ft7bzigayI=
Subject key identifier: F8:B3:7B:5E:B2:17:1A:69:BD:C2:3B:EC:6D:7D:5E:37:75:E4:1F:50
Certificate issuer: /CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Certificate serial: 018964C0614207B35E338D3AC6CFB9D9757F
Authority key identifier: 42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/1-LN7XrIXGmm9wjvsbX1eN3XkH1A.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.209.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:61:42:07:b3:5e:33:8d:3a:c6:cf:b9:d9:75:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8b37b5eb2171a69bdc23bec6d7d5e3775e41f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:2b:94:11:bc:f7:e4:6f:29:eb:f7:13:0a:
1b:88:e8:61:53:49:f5:0d:6b:69:33:e3:5b:bd:57:
8d:12:39:6e:5a:3a:30:1a:23:59:b2:4e:10:46:fa:
13:06:a9:ff:18:7d:59:f1:bc:5f:98:2d:24:54:30:
cc:81:4f:b9:49:7a:c5:b7:91:5a:28:8d:de:5f:c9:
31:72:ad:bf:54:3b:2e:9e:4f:32:38:cd:88:d6:6b:
b7:86:5d:0e:a7:49:44:3d:91:6d:16:d0:a9:15:be:
e1:2f:18:64:67:7c:92:ac:61:85:13:e7:eb:0f:ad:
ef:d0:ce:de:b8:3f:6c:f8:0a:b2:23:3f:af:53:6c:
a7:38:86:6c:72:31:30:35:69:4f:b4:40:e0:9f:76:
eb:28:5a:ca:3d:a3:75:fa:f7:ac:1f:8a:8a:dc:25:
96:c4:0d:6b:de:35:5c:e1:1d:f6:1a:b3:b0:c4:10:
54:f0:94:01:f2:a8:b3:cb:b4:b6:30:c4:56:a5:a2:
af:2d:60:35:bf:89:12:dd:d4:4f:19:19:d3:e9:21:
f0:eb:0a:11:81:2c:b0:c7:5b:a0:f4:f3:07:e8:d0:
9a:c3:12:62:55:ff:f5:6b:7f:26:04:3a:78:ff:88:
37:cb:a7:62:f4:e6:80:2e:4c:04:8e:f7:06:67:06:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:7B:5E:B2:17:1A:69:BD:C2:3B:EC:6D:7D:5E:37:75:E4:1F:50
X509v3 Authority Key Identifier:
keyid:42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/1-LN7XrIXGmm9wjvsbX1eN3XkH1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:21:7d:50:fb:e5:0b:fe:96:c2:28:32:7e:11:39:e2:b4:d7:
c0:53:7a:7d:45:2a:78:0c:ea:ab:d2:04:ee:9f:ea:e2:76:ab:
4f:9f:bc:8a:a3:1b:dd:a7:bc:0f:e3:bf:fd:46:47:ef:7d:66:
0d:74:fc:9a:a1:c2:d0:9d:f3:e2:07:d1:6f:6f:02:d1:f0:0a:
90:9f:92:03:97:b6:64:58:e4:63:ff:79:3b:a7:b7:0e:8b:fc:
f0:d8:42:a5:96:da:f1:9e:71:f0:23:41:cc:e9:3d:02:9c:c3:
b1:b4:b2:35:00:5c:55:57:fd:bb:ec:2c:dc:f7:ea:bb:e4:8a:
44:f3:22:e8:58:7c:0d:e1:a7:e0:e2:66:8f:64:19:9c:39:44:
09:1e:dd:b6:d8:ab:c9:61:ed:7c:13:74:21:2b:a2:b0:fc:d1:
78:d7:2c:c4:a1:2a:96:76:f8:46:84:49:13:f9:62:96:c7:3d:
84:ce:3b:5a:6f:66:c2:c1:ca:3a:81:f2:e6:06:04:9c:db:0c:
fb:36:fd:58:a9:be:80:20:5e:d1:d5:51:ec:1e:b8:ca:c6:a6:
88:c0:39:e4:d6:a3:71:d2:66:3a:92:58:5f:47:5e:04:03:df:
6a:30:8b:63:c3:7d:60:e7:5b:1f:bb:7a:a5:07:f1:14:1a:1b:
41:3a:40:44
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYlkwGFCB7NeM406xs+52XV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2RjYTYzMTc0YzZmN2NlZDJiYTRmMzE5ZGNjMjlhNDg5
Mjg5ODUwHhcNMjMwNzE3MTY0NzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGIzN2I1ZWIyMTcxYTY5YmRjMjNiZWM2ZDdkNWUzNzc1ZTQxZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKQrlBG89+RvKev3EwobiOhhU0n1
DWtpM+NbvVeNEjluWjowGiNZsk4QRvoTBqn/GH1Z8bxfmC0kVDDMgU+5SXrFt5Fa
KI3eX8kxcq2/VDsunk8yOM2I1mu3hl0Op0lEPZFtFtCpFb7hLxhkZ3ySrGGFE+fr
D63v0M7euD9s+AqyIz+vU2ynOIZscjEwNWlPtEDgn3brKFrKPaN1+vesH4qK3CWW
xA1r3jVc4R32GrOwxBBU8JQB8qizy7S2MMRWpaKvLWA1v4kS3dRPGRnT6SHw6woR
gSywx1ug9PMH6NCawxJiVf/1a38mBDp4/4g3y6di9OaALkwEjvcGZwYc1QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPize16yFxppvcI77G19Xjd15B9QMB8GA1UdIwQY
MBaAFEJ9ymMXTG987Suk8xncwppIkomFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW4zS1l4ZE1iM3p0SzZUekdkekNta2lTaVlVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83MDc5OTItZDZkNi00NmVmLTlmN2Ut
NmViNWI2NGQ0NmM3LzEvMS1MTjdYcklYR21tOXdqdnNiWDFlTjNYa0gxQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjYvNzA3OTkyLWQ2ZDYtNDZlZi05ZjdlLTZlYjViNjRkNDZj
Ny8xL1FuM0tZeGRNYjN6dEs2VHpHZHpDbWtpU2lZVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnRMjAN
BgkqhkiG9w0BAQsFAAOCAQEAjyF9UPvlC/6WwigyfhE54rTXwFN6fUUqeAzqq9IE
7p/q4narT5+8iqMb3ae8D+O//UZH731mDXT8mqHC0J3z4gfRb28C0fAKkJ+SA5e2
ZFjkY/95O6e3Dov88NhCpZba8Z5x8CNBzOk9ApzDsbSyNQBcVVf9u+ws3Pfqu+SK
RPMi6Fh8DeGn4OJmj2QZnDlECR7dttiryWHtfBN0ISuisPzReNcsxKEqlnb4RoRJ
E/lilsc9hM47Wm9mwsHKOoHy5gYEnNsM+zb9WKm+gCBe0dVR7B64ysamiMA55Naj
cdJmOpJYX0deBAPfajCLY8N9YOdbH7t6pQfxFBobQTpARA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:58 2025 by rpki-client