Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/Fjx1cHnsNZ9li9m6yulepsRl338.roa
File: Fjx1cHnsNZ9li9m6yulepsRl338.roa (raw, json)
Hash identifier: UOrtSid9cPXL0Os80fEf4TVg78oTPJ/CvXDwuXBbC3M=
Subject key identifier: 16:3C:75:70:79:EC:35:9F:65:8B:D9:BA:CA:E9:5E:A6:C4:65:DF:7F
Certificate issuer: /CN=2325e7618ef963795cd3ffbb47a11ade64013905
Certificate serial: 01856FF043E99FF6C339B87BA5068EAC0464
Authority key identifier: 23:25:E7:61:8E:F9:63:79:5C:D3:FF:BB:47:A1:1A:DE:64:01:39:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/Fjx1cHnsNZ9li9m6yulepsRl338.roa
Signing time: Mon 02 Jan 2023 00:44:54 +0000
ROA not before: Mon 02 Jan 2023 00:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 185.234.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:43:e9:9f:f6:c3:39:b8:7b:a5:06:8e:ac:04:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2325e7618ef963795cd3ffbb47a11ade64013905
Validity
Not Before: Jan 2 00:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=163c757079ec359f658bd9bacae95ea6c465df7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:f4:8b:eb:8f:51:81:19:9b:a6:06:43:55:
1d:87:02:4d:80:1c:7b:2d:39:a6:64:b7:ac:74:d3:
df:49:f9:2f:e7:6b:40:38:5f:1d:40:7d:94:4c:16:
8d:00:67:4a:54:58:dd:72:c0:35:d4:69:53:31:33:
94:7f:75:b6:e8:12:0d:5a:99:7c:dc:c4:7f:4d:cf:
4a:dc:fa:93:3a:1e:44:69:f9:d2:7d:4b:38:1a:a1:
1c:5a:b9:7c:46:49:71:97:b1:44:5b:50:d0:e7:0e:
09:d5:c8:12:e4:dd:ad:26:8f:22:fb:c7:a0:34:79:
56:92:1b:74:4f:15:9e:f4:c7:ac:34:0e:f0:7b:a2:
a7:e1:c5:ca:6b:3b:d7:25:9d:6e:91:7b:99:bf:59:
c9:f8:06:e5:bf:2f:12:58:9d:f3:dc:8b:d9:06:66:
cc:45:fb:45:0d:50:94:12:18:1c:03:d0:ca:f9:5d:
27:be:23:46:7e:af:9d:2c:30:12:c5:d7:e4:ce:ff:
2a:31:3b:8f:df:83:ec:15:0d:da:20:eb:e8:76:4a:
a2:ef:4e:4e:b2:cd:0a:48:95:db:48:c2:31:d5:75:
10:e7:63:3b:0b:72:0c:dd:30:dc:37:4c:78:1b:7e:
96:a6:99:51:0a:bc:23:5d:eb:f9:21:d8:e0:7c:31:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3C:75:70:79:EC:35:9F:65:8B:D9:BA:CA:E9:5E:A6:C4:65:DF:7F
X509v3 Authority Key Identifier:
keyid:23:25:E7:61:8E:F9:63:79:5C:D3:FF:BB:47:A1:1A:DE:64:01:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/Fjx1cHnsNZ9li9m6yulepsRl338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8c:05:70:e0:ca:b0:75:e9:f0:08:7f:03:e3:26:e4:4a:40:
93:e4:11:78:1b:4f:20:5b:a9:af:ae:2f:e3:81:82:01:e4:ef:
80:f8:c3:bf:13:d7:6e:78:dc:60:d1:fe:32:0e:dc:12:20:4a:
18:fd:e4:b7:28:f1:e9:92:5d:7d:10:6b:7f:4d:51:34:71:fa:
c0:2e:bb:95:85:0a:fb:95:22:7f:ed:35:d6:90:9d:d8:a5:74:
fa:fb:71:17:a0:db:92:77:21:fd:bc:bf:c6:bb:6e:0a:5e:44:
8f:e7:bd:18:ed:cd:b2:1d:e0:cb:7d:39:0b:c6:7e:0e:10:fa:
3e:b1:d5:6f:d1:46:5a:4e:2e:b6:78:81:55:77:c2:10:00:9e:
39:7e:69:4d:af:4d:b3:ad:80:48:13:64:ea:9b:6a:74:ad:c6:
34:9e:97:ea:db:8f:95:1c:73:87:8c:ad:41:8a:9e:4e:bd:20:
86:a3:76:c2:03:13:8c:9c:f4:bb:7a:de:a7:eb:b2:a7:b1:de:
d1:da:61:2c:ec:9e:9c:be:94:1a:9e:3c:27:3b:28:34:66:52:
f8:0e:f9:66:20:86:f8:ae:1c:3f:e9:81:a8:9d:42:b5:ab:33:
27:88:16:c8:2f:01:8d:b0:6a:29:f9:82:69:80:41:35:a4:8c:
7f:6e:92:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8EPpn/bDObh7pQaOrARkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjVlNzYxOGVmOTYzNzk1Y2QzZmZiYjQ3YTExYWRlNjQw
MTM5MDUwHhcNMjMwMTAyMDA0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjNjNzU3MDc5ZWMzNTlmNjU4YmQ5YmFjYWU5NWVhNmM0NjVkZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy30i+uPUYEZm6YGQ1UdhwJNgBx7
LTmmZLesdNPfSfkv52tAOF8dQH2UTBaNAGdKVFjdcsA11GlTMTOUf3W26BINWpl8
3MR/Tc9K3PqTOh5EafnSfUs4GqEcWrl8Rklxl7FEW1DQ5w4J1cgS5N2tJo8i+8eg
NHlWkht0TxWe9MesNA7we6Kn4cXKazvXJZ1ukXuZv1nJ+Ablvy8SWJ3z3IvZBmbM
RftFDVCUEhgcA9DK+V0nviNGfq+dLDASxdfkzv8qMTuP34PsFQ3aIOvodkqi705O
ss0KSJXbSMIx1XUQ52M7C3IM3TDcN0x4G36WpplRCrwjXev5IdjgfDFbLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBY8dXB57DWfZYvZusrpXqbEZd9/MB8GA1UdIwQY
MBaAFCMl52GO+WN5XNP/u0ehGt5kATkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlYbllZNzVZM2xjMF8tN1I2RWEzbVFCT1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83OWE4ZDEtN2I3NS00YTBiLThmZDkt
MzY2NDI3YTA3YmVhLzEvRmp4MWNIbnNOWjlsaTltNnl1bGVwc1JsMzM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83OWE4ZDEtN2I3NS00YTBiLThmZDktMzY2NDI3YTA3YmVh
LzEvSXlYbllZNzVZM2xjMF8tN1I2RWEzbVFCT1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueoJMA0G
CSqGSIb3DQEBCwUAA4IBAQCMjAVw4MqwdenwCH8D4ybkSkCT5BF4G08gW6mvri/j
gYIB5O+A+MO/E9dueNxg0f4yDtwSIEoY/eS3KPHpkl19EGt/TVE0cfrALruVhQr7
lSJ/7TXWkJ3YpXT6+3EXoNuSdyH9vL/Gu24KXkSP570Y7c2yHeDLfTkLxn4OEPo+
sdVv0UZaTi62eIFVd8IQAJ45fmlNr02zrYBIE2Tqm2p0rcY0npfq24+VHHOHjK1B
ip5OvSCGo3bCAxOMnPS7et6n67Knsd7R2mEs7J6cvpQanjwnOyg0ZlL4DvlmIIb4
rhw/6YGonUK1qzMniBbILwGNsGop+YJpgEE1pIx/bpKd
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:48 2025 by rpki-client