Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/IBnEUCv49s-wjNeqzT3qaqp1KRY.roa
File: IBnEUCv49s-wjNeqzT3qaqp1KRY.roa (raw, json)
Hash identifier: nVPwI3DF9+6spdFoXkhrlk2NGhLX++Z04m3HerG7yZ0=
Subject key identifier: 20:19:C4:50:2B:F8:F6:CF:B0:8C:D7:AA:CD:3D:EA:6A:AA:75:29:16
Certificate issuer: /CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Certificate serial: ABC9
Authority key identifier: 05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/IBnEUCv49s-wjNeqzT3qaqp1KRY.roa
Signing time: Tue 25 Jan 2022 18:23:29 +0000
ROA not before: Tue 25 Jan 2022 18:23:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.11.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43977 (0xabc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Validity
Not Before: Jan 25 18:23:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2019c4502bf8f6cfb08cd7aacd3dea6aaa752916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:97:3e:97:3e:38:ed:0f:8b:13:73:c6:fc:01:
88:d7:ad:4e:f8:c4:30:3c:c1:71:e4:ed:9b:b3:75:
42:28:6a:62:16:43:be:31:83:72:36:b4:34:40:b8:
91:3d:fe:e6:e9:69:97:92:29:fb:c7:79:2d:f0:70:
06:c0:f9:e4:38:4b:71:d2:e4:43:88:42:c9:73:3f:
98:9b:6d:0d:15:b2:2d:51:f9:61:b8:58:57:16:27:
74:74:62:9c:50:07:c3:bf:1f:7c:f3:5a:eb:5e:83:
85:7f:2f:2b:fc:fb:b0:db:59:73:f3:df:c6:1e:ce:
0d:2a:ab:35:3f:48:6f:2e:ad:fe:3e:56:4a:0d:a0:
16:79:09:83:c7:7f:95:5b:7c:64:fa:83:46:a3:00:
08:8d:95:41:8f:3b:32:c5:df:16:06:a0:a1:65:34:
3d:c3:a5:b4:dc:6e:b9:06:b4:04:de:7e:4b:6f:52:
f8:d2:cb:1b:b1:f7:20:c0:88:c1:1b:42:ed:c7:24:
3d:98:09:eb:9c:89:d1:64:b7:08:5c:57:17:28:69:
b6:7c:bb:3f:fd:22:c7:99:9a:d5:4f:d3:71:59:7c:
cf:ac:fb:02:45:38:0b:d2:06:7a:b6:73:9b:92:8a:
5e:c9:12:24:c0:f6:c5:04:9b:19:84:d7:de:d1:55:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:C4:50:2B:F8:F6:CF:B0:8C:D7:AA:CD:3D:EA:6A:AA:75:29:16
X509v3 Authority Key Identifier:
keyid:05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/IBnEUCv49s-wjNeqzT3qaqp1KRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.63.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e9:45:b1:93:39:77:fb:a1:7b:67:09:4b:ce:a4:21:f3:c5:
6c:6d:f2:43:8b:46:5b:d9:6f:a4:a3:96:7f:ff:ec:1d:45:c0:
2a:31:d8:f9:58:37:3c:9f:f1:4a:f7:74:42:26:9a:0d:81:db:
ae:7a:49:8a:31:58:98:d6:d7:77:8f:b8:29:b3:f2:73:17:4e:
4e:3c:de:d5:cd:c2:4d:da:43:b8:0e:98:87:ce:85:4a:a0:1c:
98:59:f7:40:1c:67:89:31:9c:d9:87:96:bf:ca:41:61:6c:89:
33:5b:bc:93:6c:cc:da:cc:5f:27:21:a7:d3:ec:fd:ff:18:b0:
c4:ef:82:08:7a:86:35:44:81:77:ce:3f:2c:81:ec:3d:c5:22:
16:52:10:9c:a9:09:d9:7f:60:e6:ba:4b:62:32:67:a4:75:6c:
e0:5c:40:68:c6:83:f5:98:64:fb:7b:56:89:22:ae:8f:e0:5a:
23:d7:92:5b:ad:21:95:8d:13:98:84:d2:57:84:ed:82:9e:e4:
81:21:f9:55:ab:3e:0d:e6:49:a1:e9:e7:df:91:4b:b3:95:58:
0f:57:d4:08:d2:74:65:40:b4:76:0b:d5:e4:b0:29:7e:e5:1d:
4d:cc:ce:f6:0b:12:97:6b:4a:df:b7:ae:08:20:f6:ab:8a:1c:
b3:db:83:41
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAKvJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
NGYxZWI4YjMwNzI3OTZmZWU0MjkyMjg2M2EwYmI2Njk3ZjVjOTcwHhcNMjIwMTI1
MTgyMzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyMDE5YzQ1MDJiZjhm
NmNmYjA4Y2Q3YWFjZDNkZWE2YWFhNzUyOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA8Jc+lz447Q+LE3PG/AGI161O+MQwPMFx5O2bs3VCKGpiFkO+
MYNyNrQ0QLiRPf7m6WmXkin7x3kt8HAGwPnkOEtx0uRDiELJcz+Ym20NFbItUflh
uFhXFid0dGKcUAfDvx9881rrXoOFfy8r/Puw21lz89/GHs4NKqs1P0hvLq3+PlZK
DaAWeQmDx3+VW3xk+oNGowAIjZVBjzsyxd8WBqChZTQ9w6W03G65BrQE3n5Lb1L4
0ssbsfcgwIjBG0LtxyQ9mAnrnInRZLcIXFcXKGm2fLs//SLHmZrVT9NxWXzPrPsC
RTgL0gZ6tnObkopeyRIkwPbFBJsZhNfe0VUqPQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCAZxFAr+PbPsIzXqs096mqqdSkWMB8GA1UdIwQYMBaAFAVPHrizByeW/uQp
IoY6C7Zpf1yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
QlU4ZXVMTUhKNWItNUNraWhqb0x0bWxfWEpjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82OS81ZmJmNTAtZjEzOS00NTg1LTg5NTMtNTM2ZGQ2Y2JlNTMyLzEv
SUJuRVVDdjQ5cy13ak5lcXpUM3FhcXAxS1JZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81
ZmJmNTAtZjEzOS00NTg1LTg5NTMtNTM2ZGQ2Y2JlNTMyLzEvQlU4ZXVMTUhKNWIt
NUNraWhqb0x0bWxfWEpjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQs/MA0GCSqGSIb3DQEBCwUAA4IB
AQCT6UWxkzl3+6F7ZwlLzqQh88VsbfJDi0Zb2W+ko5Z//+wdRcAqMdj5WDc8n/FK
93RCJpoNgduuekmKMViY1td3j7gps/JzF05OPN7VzcJN2kO4DpiHzoVKoByYWfdA
HGeJMZzZh5a/ykFhbIkzW7yTbMzazF8nIafT7P3/GLDE74IIeoY1RIF3zj8sgew9
xSIWUhCcqQnZf2DmuktiMmekdWzgXEBoxoP1mGT7e1aJIq6P4Foj15JbrSGVjROY
hNJXhO2CnuSBIflVqz4N5kmh6effkUuzlVgPV9QI0nRlQLR2C9XksCl+5R1NzM72
CxKXa0rft64IIParihyz24NB
-----END CERTIFICATE-----
Generated at Sat Jun 14 03:02:59 2025 by rpki-client