Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/etRjZbIj12dLl3Cu-wmUuq9jXZg.roa
File: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (raw, json)
Hash identifier: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=
Subject key identifier: 7A:D4:63:65:B2:23:D7:67:4B:97:70:AE:FB:09:94:BA:AF:63:5D:98
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 01950302B0417755CE5794F2EC4042D5D3B5
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/etRjZbIj12dLl3Cu-wmUuq9jXZg.roa
Signing time: Fri 14 Feb 2025 05:51:02 +0000
ROA not before: Fri 14 Feb 2025 05:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214794
IP address blocks: 185.199.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:02:b0:41:77:55:ce:57:94:f2:ec:40:42:d5:d3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: Feb 14 05:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ad46365b223d7674b9770aefb0994baaf635d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:b0:bd:55:f1:fe:79:1d:d4:98:90:68:a1:
8c:11:91:40:1b:7d:51:19:36:95:96:d8:d2:6e:0a:
24:20:62:54:70:8c:4e:6b:45:30:2d:e3:60:03:0e:
6f:08:20:03:81:d3:d2:a6:62:a4:bf:93:79:17:a9:
77:fb:36:00:27:da:95:b9:94:57:a8:f2:49:46:f2:
ff:ca:05:ce:f0:ca:15:26:6d:1e:89:34:c3:63:9c:
3a:d2:01:08:2e:e6:e0:ff:fe:b6:96:eb:f6:50:7e:
9d:80:2b:e3:fc:85:87:a1:1e:0f:a8:92:d7:b4:7b:
d0:86:5a:13:c4:b4:c0:46:8b:2a:6b:85:72:67:ec:
c4:0d:02:53:91:a7:f6:5a:33:fb:6f:c0:b6:08:4c:
f7:5b:c1:16:06:6a:00:b9:55:fe:33:7d:75:4a:ef:
71:a1:a0:3e:ed:0b:22:ed:26:96:3e:8f:2d:cc:1b:
60:82:22:ab:08:4b:4b:0d:2f:7a:05:f9:4f:6d:31:
a3:e3:cf:00:8f:5d:12:96:40:31:f8:28:59:0b:56:
eb:2a:a0:ff:d4:81:35:08:de:5a:b1:46:62:79:c5:
65:97:9d:64:48:92:e6:c5:d7:13:05:c8:de:ae:95:
53:59:e8:aa:3d:c3:63:90:1f:63:84:26:de:bb:05:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D4:63:65:B2:23:D7:67:4B:97:70:AE:FB:09:94:BA:AF:63:5D:98
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/etRjZbIj12dLl3Cu-wmUuq9jXZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.146.0/23
Signature Algorithm: sha256WithRSAEncryption
09:56:fa:14:70:f1:3f:5f:50:df:b4:0f:b5:cb:ae:af:b4:7d:
f7:f3:7d:a6:67:90:d5:9f:29:b4:c2:e2:ff:9e:1b:f8:ba:b4:
61:e3:bd:ac:b7:30:b5:27:d5:6e:cb:d2:a9:67:a2:5f:5f:81:
c0:f1:7c:60:43:02:8f:20:39:0d:a0:4b:b2:d2:64:46:b9:9b:
5c:3a:49:00:82:29:96:0c:5d:da:63:e0:27:fc:4e:6d:b4:fc:
c5:8b:d8:1b:e1:3c:f2:5a:8e:51:5a:de:ae:5f:e9:ff:25:b2:
38:1c:58:b0:68:9d:2d:a6:bb:b3:9a:ed:0d:92:d9:39:fa:10:
90:69:e5:fa:80:65:89:8b:03:c2:26:42:40:cd:80:f9:21:b4:
0e:6e:c4:1f:11:b9:dc:74:94:1d:73:6e:cf:54:4b:94:41:48:
be:b8:f4:21:97:d2:df:23:67:e5:66:19:72:bc:f8:e6:47:d0:
0c:17:9a:38:6f:61:1a:bb:5a:8a:34:3f:04:ac:9b:c8:85:6f:
4b:47:2e:93:e8:ba:6e:1c:d0:e3:0f:d6:0b:5b:ec:6d:72:45:
e8:64:3a:f4:b5:f9:cf:56:ea:d4:91:e9:17:1e:9f:5c:ff:a1:
de:ce:30:29:6d:ce:4b:d6:82:3c:22:43:92:00:d4:de:d3:2d:
e1:85:89:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUDArBBd1XOV5Ty7EBC1dO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj
NThlZTIwHhcNMjUwMjE0MDU1MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWQ0NjM2NWIyMjNkNzY3NGI5NzcwYWVmYjA5OTRiYWFmNjM1ZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r+wvVXx/nkd1JiQaKGMEZFAG31R
GTaVltjSbgokIGJUcIxOa0UwLeNgAw5vCCADgdPSpmKkv5N5F6l3+zYAJ9qVuZRX
qPJJRvL/ygXO8MoVJm0eiTTDY5w60gEILubg//62luv2UH6dgCvj/IWHoR4PqJLX
tHvQhloTxLTARosqa4VyZ+zEDQJTkaf2WjP7b8C2CEz3W8EWBmoAuVX+M311Su9x
oaA+7Qsi7SaWPo8tzBtggiKrCEtLDS96BflPbTGj488Aj10SlkAx+ChZC1brKqD/
1IE1CN5asUZiecVll51kSJLmxdcTBcjerpVTWeiqPcNjkB9jhCbeuwU5CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrUY2WyI9dnS5dwrvsJlLqvY12YMB8GA1UdIwQY
MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt
YzhjY2RkOWU2ODdhLzEvZXRSalpiSWoxMmRMbDNDdS13bVV1cTlqWFpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh
LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuceSMA0G
CSqGSIb3DQEBCwUAA4IBAQAJVvoUcPE/X1DftA+1y66vtH33832mZ5DVnym0wuL/
nhv4urRh472stzC1J9Vuy9KpZ6JfX4HA8XxgQwKPIDkNoEuy0mRGuZtcOkkAgimW
DF3aY+An/E5ttPzFi9gb4TzyWo5RWt6uX+n/JbI4HFiwaJ0tpruzmu0Nktk5+hCQ
aeX6gGWJiwPCJkJAzYD5IbQObsQfEbncdJQdc27PVEuUQUi+uPQhl9LfI2flZhly
vPjmR9AMF5o4b2Eau1qKND8ErJvIhW9LRy6T6LpuHNDjD9YLW+xtckXoZDr0tfnP
VurUkekXHp9c/6HezjApbc5L1oI8IkOSANTe0y3hhYkw
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:29:44 2025 by rpki-client