Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/RdKgyuG6QiBeURRPhQ2G7xRPFe8.roa
File: RdKgyuG6QiBeURRPhQ2G7xRPFe8.roa (raw, json)
Hash identifier: dz2BuNqUUVvLka+BdEBx20lI7wLBVKIbNBUf42kca+0=
Subject key identifier: 45:D2:A0:CA:E1:BA:42:20:5E:51:14:4F:85:0D:86:EF:14:4F:15:EF
Certificate issuer: /CN=11466326406436e31478b7bca2dda16c96d5a964
Certificate serial: 018572C3894ECE8810C9D3E052555DA703B5
Authority key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/RdKgyuG6QiBeURRPhQ2G7xRPFe8.roa
Signing time: Mon 02 Jan 2023 13:54:55 +0000
ROA not before: Mon 02 Jan 2023 13:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34534
IP address blocks: 185.142.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:89:4e:ce:88:10:c9:d3:e0:52:55:5d:a7:03:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11466326406436e31478b7bca2dda16c96d5a964
Validity
Not Before: Jan 2 13:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d2a0cae1ba42205e51144f850d86ef144f15ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:50:cf:9f:3d:93:13:df:08:b7:ba:21:3d:
f1:84:2a:5d:b1:31:0c:4d:18:69:d8:61:b9:4b:4e:
dd:02:a5:da:95:72:69:58:ca:2f:ca:bd:02:e6:72:
53:b2:45:f7:af:f4:16:06:47:60:ee:0d:a5:bd:94:
3a:1d:d7:22:7e:2e:0e:38:9b:d4:6b:dd:68:34:ac:
3a:d4:44:40:51:ec:e2:68:e5:bb:50:76:e7:dd:37:
68:77:3a:37:e0:fd:61:5e:39:d0:46:cd:ce:b4:fc:
03:f3:5a:85:48:fe:cc:cf:48:75:00:a1:df:bf:bb:
3b:42:15:78:f3:80:4a:50:d7:ed:01:8e:13:92:c6:
02:56:03:3e:3e:72:57:0c:9d:0f:50:59:f4:2a:03:
16:9e:dc:bc:46:3f:4d:29:28:a8:63:d9:9b:be:7e:
b5:54:05:1f:77:c8:dd:9f:3f:2a:4d:ef:d4:c3:cc:
30:9d:b2:a6:7c:0e:7f:87:4b:6b:7c:d9:30:f4:de:
22:06:ac:32:52:e7:fc:3c:c4:c8:b8:50:b6:36:7a:
aa:8b:44:22:29:bd:df:f9:45:5b:a1:f7:05:b7:8b:
1a:e8:cf:bd:f4:56:7d:7b:ce:89:57:95:34:29:96:
1a:f6:b7:a1:a0:8b:68:3d:3f:55:a3:23:56:48:05:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:A0:CA:E1:BA:42:20:5E:51:14:4F:85:0D:86:EF:14:4F:15:EF
X509v3 Authority Key Identifier:
keyid:11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/RdKgyuG6QiBeURRPhQ2G7xRPFe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:36:ce:1d:a3:cb:4a:94:7b:a8:15:3e:b4:01:6b:10:5d:75:
96:01:ce:f4:a7:b4:1d:e9:3f:1b:16:2a:b6:3a:b3:fa:67:c1:
5c:e2:f1:d9:3f:69:5d:24:9d:d3:c2:9c:f0:2b:76:b1:c0:bf:
a4:80:00:1a:17:13:d0:32:67:2a:94:b3:72:84:3a:f0:35:f0:
9a:de:28:de:84:92:32:66:a7:c2:e3:fc:90:bc:07:66:3a:01:
b5:b2:cb:9f:2d:6c:e5:69:cb:a2:e8:62:40:ae:1d:03:67:49:
ee:8f:e4:3d:1a:42:f9:3c:f4:ab:d0:7c:d6:58:0d:6c:89:89:
ef:e5:73:8f:ee:e7:47:ce:5c:93:9e:b8:d3:ad:6d:ba:9d:95:
82:b4:80:85:95:fb:60:d5:ed:16:fb:d7:2b:b2:72:6d:7e:38:
9b:0a:3d:4d:a0:54:59:c2:16:eb:20:28:81:99:01:bd:67:5a:
0f:da:50:fa:ae:b9:de:82:b3:2f:be:b0:35:7d:43:e9:56:cc:
92:1f:94:06:2d:b9:66:ba:15:19:78:f4:ca:ad:c9:92:13:00:
77:06:08:72:fe:ed:3d:22:9e:3e:f4:82:68:cb:4d:24:62:31:
81:54:97:9e:36:98:89:a9:f2:28:1d:d3:95:6c:29:6b:9c:25:
5d:70:5a:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyw4lOzogQydPgUlVdpwO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNDY2MzI2NDA2NDM2ZTMxNDc4YjdiY2EyZGRhMTZjOTZk
NWE5NjQwHhcNMjMwMTAyMTM1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWQyYTBjYWUxYmE0MjIwNWU1MTE0NGY4NTBkODZlZjE0NGYxNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8JQz589kxPfCLe6IT3xhCpdsTEM
TRhp2GG5S07dAqXalXJpWMovyr0C5nJTskX3r/QWBkdg7g2lvZQ6Hdcifi4OOJvU
a91oNKw61ERAUeziaOW7UHbn3Tdodzo34P1hXjnQRs3OtPwD81qFSP7Mz0h1AKHf
v7s7QhV484BKUNftAY4TksYCVgM+PnJXDJ0PUFn0KgMWnty8Rj9NKSioY9mbvn61
VAUfd8jdnz8qTe/Uw8wwnbKmfA5/h0trfNkw9N4iBqwyUuf8PMTIuFC2Nnqqi0Qi
Kb3f+UVbofcFt4sa6M+99FZ9e86JV5U0KZYa9rehoItoPT9VoyNWSAVlEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXSoMrhukIgXlEUT4UNhu8UTxXvMB8GA1UdIwQY
MBaAFBFGYyZAZDbjFHi3vKLdoWyW1alkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVVaakprQmtOdU1VZUxlOG90MmhiSmJWcVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85YmE2NmMtYmVlNy00NGM5LTgyZTUt
ZDk1YTUxNTVkZDAyLzEvUmRLZ3l1RzZRaUJlVVJSUGhRMkc3eFJQRmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85YmE2NmMtYmVlNy00NGM5LTgyZTUtZDk1YTUxNTVkZDAy
LzEvRVVaakprQmtOdU1VZUxlOG90MmhiSmJWcVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY41MA0G
CSqGSIb3DQEBCwUAA4IBAQCmNs4do8tKlHuoFT60AWsQXXWWAc70p7Qd6T8bFiq2
OrP6Z8Fc4vHZP2ldJJ3TwpzwK3axwL+kgAAaFxPQMmcqlLNyhDrwNfCa3ijehJIy
ZqfC4/yQvAdmOgG1ssufLWzlacui6GJArh0DZ0nuj+Q9GkL5PPSr0HzWWA1siYnv
5XOP7udHzlyTnrjTrW26nZWCtICFlftg1e0W+9crsnJtfjibCj1NoFRZwhbrICiB
mQG9Z1oP2lD6rrnegrMvvrA1fUPpVsySH5QGLblmuhUZePTKrcmSEwB3Bghy/u09
Ip4+9IJoy00kYjGBVJeeNpiJqfIoHdOVbClrnCVdcFoi
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:25 2025 by rpki-client