Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/Dh46ZNEJhY0yZsonNA1WuwYuZmw.roa
File: Dh46ZNEJhY0yZsonNA1WuwYuZmw.roa (raw, json)
Hash identifier: W3Qog7pcz/mj/d+++y3CDuJxSohZ1sCRXLB7ldW4EhU=
Subject key identifier: 0E:1E:3A:64:D1:09:85:8D:32:66:CA:27:34:0D:56:BB:06:2E:66:6C
Certificate issuer: /CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Certificate serial: 018CC5DC807ED0A37D518607CEFF511C7B88
Authority key identifier: 05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/Dh46ZNEJhY0yZsonNA1WuwYuZmw.roa
Signing time: Mon 01 Jan 2024 16:30:11 +0000
ROA not before: Mon 01 Jan 2024 16:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.11.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:80:7e:d0:a3:7d:51:86:07:ce:ff:51:1c:7b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Validity
Not Before: Jan 1 16:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e1e3a64d109858d3266ca27340d56bb062e666c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:4a:cb:8c:ac:f3:f5:f4:f2:27:4b:e3:36:
f1:dc:73:f1:d3:23:36:45:e3:d3:34:40:d7:00:b8:
c8:0f:14:14:a8:51:d0:33:f8:65:ce:8e:ee:96:36:
fd:62:21:c2:af:cf:2a:e3:8b:25:9e:d0:78:b9:ee:
d2:3c:8d:6a:48:37:7f:4a:aa:fe:e8:d0:14:63:10:
d0:dc:24:57:0b:21:1c:a5:8d:53:c2:4a:df:19:39:
91:d3:ae:87:28:de:9e:37:ad:0d:8e:db:1a:5c:ba:
b9:43:ce:4f:c3:e5:2c:43:5d:64:ad:f4:28:a1:3d:
b4:bd:4d:20:07:1e:0c:90:51:4f:a3:10:ae:b0:1b:
cb:60:f6:94:ef:73:d5:66:51:5d:8e:b2:0d:57:39:
92:c5:7c:fc:3e:ca:45:9e:81:d8:00:7e:7c:25:61:
ad:79:41:52:e5:bc:49:8c:63:62:49:25:35:35:98:
e3:69:13:d1:c6:7b:43:a2:24:bd:4d:b6:99:db:8c:
c7:e9:4d:c6:40:81:21:c3:24:ff:f2:fb:45:a4:86:
b1:b5:cf:73:10:2c:52:71:54:8b:51:b4:3c:70:0e:
d2:c3:46:6f:5f:9e:f7:c5:4f:a2:49:71:f0:47:dd:
21:bd:af:45:85:50:9f:1b:cd:47:37:55:4c:f2:e1:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:3A:64:D1:09:85:8D:32:66:CA:27:34:0D:56:BB:06:2E:66:6C
X509v3 Authority Key Identifier:
keyid:05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/Dh46ZNEJhY0yZsonNA1WuwYuZmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.63.0/24
Signature Algorithm: sha256WithRSAEncryption
44:11:02:65:06:83:a5:62:0c:dd:ab:cc:7a:40:22:67:c2:f5:
77:65:28:5e:1d:22:12:3a:0b:f0:ff:b8:94:0a:76:dd:95:5c:
3b:ee:5a:72:a7:f1:ae:58:84:ce:55:69:a4:01:fa:93:bf:1a:
f4:53:ca:4f:81:16:e2:83:e5:e6:58:00:bb:a9:5d:55:31:3d:
4e:5f:63:69:2d:01:d3:49:82:fc:d9:3a:6c:fe:57:d1:73:6c:
ea:11:fa:5e:db:e7:65:3b:84:9f:a8:83:fd:05:5e:32:dc:af:
9f:df:18:2f:e5:4e:77:43:f2:2e:55:87:ed:85:a5:57:90:a2:
29:46:e7:7a:16:d8:ba:94:0e:81:4e:84:ce:69:9f:ec:1e:fd:
77:c7:8f:fe:11:b2:d2:e2:e9:a8:46:1d:b5:92:9b:00:94:f4:
5a:7c:66:c4:43:53:85:70:aa:43:c7:a7:1f:96:3f:84:de:62:
86:90:e1:67:4f:f4:17:84:3c:b1:07:18:09:a6:5e:c0:90:db:
58:e2:5b:f1:b4:e5:0c:f0:e9:ce:28:ff:17:04:f9:e2:44:ae:
f0:9c:7c:c5:dd:54:5e:20:0f:31:49:e1:bb:db:28:30:4b:32:
fb:ac:2c:bd:8c:06:54:6e:42:49:ac:7d:3d:23:fb:a2:6e:dc:
ca:94:73:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3IB+0KN9UYYHzv9RHHuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGYxZWI4YjMwNzI3OTZmZWU0MjkyMjg2M2EwYmI2Njk3
ZjVjOTcwHhcNMjQwMTAxMTYzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTFlM2E2NGQxMDk4NThkMzI2NmNhMjczNDBkNTZiYjA2MmU2NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O9Ky4ys8/X08idL4zbx3HPx0yM2
RePTNEDXALjIDxQUqFHQM/hlzo7uljb9YiHCr88q44slntB4ue7SPI1qSDd/Sqr+
6NAUYxDQ3CRXCyEcpY1TwkrfGTmR066HKN6eN60NjtsaXLq5Q85Pw+UsQ11krfQo
oT20vU0gBx4MkFFPoxCusBvLYPaU73PVZlFdjrINVzmSxXz8PspFnoHYAH58JWGt
eUFS5bxJjGNiSSU1NZjjaRPRxntDoiS9TbaZ24zH6U3GQIEhwyT/8vtFpIaxtc9z
ECxScVSLUbQ8cA7Sw0ZvX573xU+iSXHwR90hva9FhVCfG81HN1VM8uEGsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4eOmTRCYWNMmbKJzQNVrsGLmZsMB8GA1UdIwQY
MBaAFAVPHrizByeW/uQpIoY6C7Zpf1yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlU4ZXVMTUhKNWItNUNraWhqb0x0bWxfWEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZmJmNTAtZjEzOS00NTg1LTg5NTMt
NTM2ZGQ2Y2JlNTMyLzEvRGg0NlpORUpoWTB5WnNvbk5BMVd1d1l1Wm13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZmJmNTAtZjEzOS00NTg1LTg5NTMtNTM2ZGQ2Y2JlNTMy
LzEvQlU4ZXVMTUhKNWItNUNraWhqb0x0bWxfWEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQs/MA0G
CSqGSIb3DQEBCwUAA4IBAQBEEQJlBoOlYgzdq8x6QCJnwvV3ZSheHSISOgvw/7iU
CnbdlVw77lpyp/GuWITOVWmkAfqTvxr0U8pPgRbig+XmWAC7qV1VMT1OX2NpLQHT
SYL82Tps/lfRc2zqEfpe2+dlO4SfqIP9BV4y3K+f3xgv5U53Q/IuVYfthaVXkKIp
Rud6Fti6lA6BToTOaZ/sHv13x4/+EbLS4umoRh21kpsAlPRafGbEQ1OFcKpDx6cf
lj+E3mKGkOFnT/QXhDyxBxgJpl7AkNtY4lvxtOUM8OnOKP8XBPniRK7wnHzF3VRe
IA8xSeG72ygwSzL7rCy9jAZUbkJJrH09I/uibtzKlHN2
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:38 2025 by rpki-client