Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/iTultMRR3bbFP0U6_38J1kFwcfM.roa
File: iTultMRR3bbFP0U6_38J1kFwcfM.roa (raw, json)
Hash identifier: +q/SsdJivbZdVPkmSN0YjMAIgMNk4T3gKc/hcYUt5Oo=
Subject key identifier: 89:3B:A5:B4:C4:51:DD:B6:C5:3F:45:3A:FF:7F:09:D6:41:70:71:F3
Certificate issuer: /CN=737f9e60b386f68dca02cd82076b7c0066d2d230
Certificate serial: 01856FA71B2AD544BB9B3AA6D6B760B7E21A
Authority key identifier: 73:7F:9E:60:B3:86:F6:8D:CA:02:CD:82:07:6B:7C:00:66:D2:D2:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3-eYLOG9o3KAs2CB2t8AGbS0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/iTultMRR3bbFP0U6_38J1kFwcfM.roa
Signing time: Sun 01 Jan 2023 23:25:00 +0000
ROA not before: Sun 01 Jan 2023 23:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207080
IP address blocks: 185.230.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:1b:2a:d5:44:bb:9b:3a:a6:d6:b7:60:b7:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737f9e60b386f68dca02cd82076b7c0066d2d230
Validity
Not Before: Jan 1 23:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=893ba5b4c451ddb6c53f453aff7f09d6417071f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:f2:c7:b4:44:b5:d2:0e:63:ef:a5:ea:6c:
72:6c:1e:e0:ea:be:87:13:d0:ab:74:68:81:31:a0:
36:99:ae:70:e6:97:cb:8c:f8:f8:88:41:d5:d5:d0:
0c:ef:a4:c3:32:a5:f0:a4:87:78:09:60:c8:d9:e3:
fd:32:70:60:6c:e2:fd:8d:eb:2d:e9:49:3e:d7:d5:
a4:16:b7:6f:18:d4:b9:3c:b7:9a:87:2d:9a:8b:fa:
f9:5d:c4:7c:90:a6:99:95:51:ba:39:ba:b2:b9:af:
12:21:10:80:bb:7e:ec:89:69:9e:a0:b9:31:35:b8:
4e:ca:d7:03:6a:72:c9:5f:a1:99:80:f6:3a:62:fb:
4b:cf:10:75:f1:ff:e8:ed:e8:39:0f:37:88:66:71:
31:21:a1:9f:b9:9f:c4:28:82:d0:8b:57:1f:7d:98:
ff:85:13:73:ae:3f:96:4e:42:91:07:8f:00:1b:9f:
4a:6c:4f:a3:27:f5:69:b2:46:5e:65:65:77:45:8b:
8e:75:43:07:2b:ad:3c:ba:f0:26:63:31:07:65:09:
d7:2b:4d:a4:f9:1e:01:d0:30:eb:c5:4f:92:48:1f:
da:d9:a1:e0:0a:ca:7e:6c:c7:61:c5:a3:69:c9:2f:
f4:05:b6:c7:24:be:28:75:04:6e:c7:dd:31:28:02:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3B:A5:B4:C4:51:DD:B6:C5:3F:45:3A:FF:7F:09:D6:41:70:71:F3
X509v3 Authority Key Identifier:
keyid:73:7F:9E:60:B3:86:F6:8D:CA:02:CD:82:07:6B:7C:00:66:D2:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3-eYLOG9o3KAs2CB2t8AGbS0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/iTultMRR3bbFP0U6_38J1kFwcfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/760816-91fb-498b-a393-bda87e1274b8/1/c3-eYLOG9o3KAs2CB2t8AGbS0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0c:b9:4e:14:73:1e:73:6f:7b:69:4a:72:7b:ea:bb:07:65:
a0:74:36:a2:11:fe:1a:4e:e7:de:5c:5f:c0:44:e7:1e:f3:ee:
0f:0d:43:df:8c:81:65:05:e6:fc:42:05:e7:8d:a1:f7:90:82:
97:4b:24:51:4d:65:92:0a:3e:72:4e:3d:85:de:83:1e:ec:f5:
9b:3b:a1:12:e0:c7:be:a0:a6:8f:67:76:e1:87:93:f8:87:ab:
9a:75:f4:eb:a7:13:bc:f2:e6:8d:16:ca:7e:dd:31:db:d5:6e:
15:78:7f:8c:68:56:ca:aa:03:ff:76:0f:6f:4b:39:df:9e:28:
44:93:42:0d:c0:74:35:7e:23:e5:31:1c:13:d5:a3:9a:c3:0b:
b7:04:b1:fb:93:5e:05:0f:cd:d7:19:94:df:10:f4:68:2d:9e:
a9:9d:ac:81:10:11:d6:bb:dd:33:df:44:e6:33:02:6e:53:32:
bc:23:9a:2f:5f:82:4b:d3:02:20:31:09:8f:6b:e4:48:c8:aa:
04:a3:07:e3:6c:a0:8c:18:0d:b7:64:da:e4:2a:10:94:15:10:
58:6d:78:43:30:34:66:99:e1:41:54:b3:fb:a5:c5:94:8c:39:
40:82:59:3e:60:f8:33:21:6e:a9:b1:39:d3:54:02:28:cd:2a:
49:86:35:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpxsq1US7mzqm1rdgt+IaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczN2Y5ZTYwYjM4NmY2OGRjYTAyY2Q4MjA3NmI3YzAwNjZk
MmQyMzAwHhcNMjMwMTAxMjMyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTNiYTViNGM0NTFkZGI2YzUzZjQ1M2FmZjdmMDlkNjQxNzA3MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHryx7REtdIOY++l6mxybB7g6r6H
E9CrdGiBMaA2ma5w5pfLjPj4iEHV1dAM76TDMqXwpId4CWDI2eP9MnBgbOL9jest
6Uk+19WkFrdvGNS5PLeahy2ai/r5XcR8kKaZlVG6Obqyua8SIRCAu37siWmeoLkx
NbhOytcDanLJX6GZgPY6YvtLzxB18f/o7eg5DzeIZnExIaGfuZ/EKILQi1cffZj/
hRNzrj+WTkKRB48AG59KbE+jJ/VpskZeZWV3RYuOdUMHK608uvAmYzEHZQnXK02k
+R4B0DDrxU+SSB/a2aHgCsp+bMdhxaNpyS/0BbbHJL4odQRux90xKALZPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIk7pbTEUd22xT9FOv9/CdZBcHHzMB8GA1UdIwQY
MBaAFHN/nmCzhvaNygLNggdrfABm0tIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzMtZVlMT0c5bzNLQXMyQ0IydDhBR2JTMGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83NjA4MTYtOTFmYi00OThiLWEzOTMt
YmRhODdlMTI3NGI4LzEvaVR1bHRNUlIzYmJGUDBVNl8zOEoxa0Z3Y2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83NjA4MTYtOTFmYi00OThiLWEzOTMtYmRhODdlMTI3NGI4
LzEvYzMtZVlMT0c5bzNLQXMyQ0IydDhBR2JTMGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuebdMA0G
CSqGSIb3DQEBCwUAA4IBAQA7DLlOFHMec297aUpye+q7B2WgdDaiEf4aTufeXF/A
ROce8+4PDUPfjIFlBeb8QgXnjaH3kIKXSyRRTWWSCj5yTj2F3oMe7PWbO6ES4Me+
oKaPZ3bhh5P4h6uadfTrpxO88uaNFsp+3THb1W4VeH+MaFbKqgP/dg9vSznfnihE
k0INwHQ1fiPlMRwT1aOawwu3BLH7k14FD83XGZTfEPRoLZ6pnayBEBHWu90z30Tm
MwJuUzK8I5ovX4JL0wIgMQmPa+RIyKoEowfjbKCMGA23ZNrkKhCUFRBYbXhDMDRm
meFBVLP7pcWUjDlAglk+YPgzIW6psTnTVAIozSpJhjUd
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:32 2025 by rpki-client