Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/URk7jJjtHHDl2ICs8EXm8XLdVt8.roa
File: URk7jJjtHHDl2ICs8EXm8XLdVt8.roa (raw, json)
Hash identifier: 6y1JIIxm5WbCoUI0SM2AXghVeJP/OQd4ET6wI6IKc34=
Subject key identifier: 51:19:3B:8C:98:ED:1C:70:E5:D8:80:AC:F0:45:E6:F1:72:DD:56:DF
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 018204E0AFEA6E89EFB35FF20584CFC0CAB7
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/URk7jJjtHHDl2ICs8EXm8XLdVt8.roa
Signing time: Sat 16 Jul 2022 02:40:09 +0000
ROA not before: Sat 16 Jul 2022 02:40:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:e0:af:ea:6e:89:ef:b3:5f:f2:05:84:cf:c0:ca:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jul 16 02:40:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51193b8c98ed1c70e5d880acf045e6f172dd56df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:a4:4f:e6:6f:02:c6:93:ba:80:c1:77:29:
ba:f8:1d:34:3b:e8:6d:ae:f7:dc:cd:e1:f8:5b:99:
a6:6e:5d:47:11:0e:22:99:2e:79:f2:37:b5:4e:59:
29:e0:9a:7b:aa:49:e5:f2:ad:59:fe:bc:03:b3:fb:
e0:01:45:a1:94:76:b6:22:04:bc:b0:6c:bb:1b:db:
7e:f4:d2:b6:8c:87:59:0c:dc:03:f9:24:a6:bb:ca:
45:b9:8b:7c:6d:42:76:6e:dc:f6:2f:68:60:e3:02:
aa:5b:be:05:eb:ad:a0:36:af:60:f2:f6:03:d9:cf:
7b:7d:74:72:1b:05:e8:68:de:c6:ee:a8:fc:54:42:
87:b6:46:63:91:57:0f:a6:71:b9:90:63:1e:84:b5:
d1:2f:09:49:c1:17:5e:86:d3:2e:cb:d2:bf:ee:c0:
3e:68:5a:e5:31:08:d8:f3:2f:07:55:de:c0:af:49:
18:fc:c8:28:a5:62:ed:d9:a7:65:6f:a0:0e:1a:ed:
4c:e6:6a:3e:c9:f6:d7:a9:cb:31:d1:85:cb:12:89:
11:58:e3:86:b7:f7:5f:2e:70:8c:f4:56:c2:c0:ec:
54:ba:6a:e0:b5:8e:af:81:f0:e7:18:ba:ac:b2:bf:
4f:1c:c4:1a:e6:e1:dc:a2:92:d9:ed:44:46:7b:2e:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:3B:8C:98:ED:1C:70:E5:D8:80:AC:F0:45:E6:F1:72:DD:56:DF
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/URk7jJjtHHDl2ICs8EXm8XLdVt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:d5:8e:18:a3:d7:69:f5:74:aa:30:98:68:ce:5a:e4:8d:48:
3e:9e:52:e4:1d:23:99:5e:87:ef:e0:f0:2a:fb:c7:6c:42:d7:
44:8a:2c:e8:8a:ea:57:e6:f4:35:67:2b:29:48:bf:56:ed:d6:
fa:d9:26:c2:c2:1b:24:70:62:56:38:4a:25:82:b0:34:28:0b:
b3:74:9b:f5:17:e9:94:91:da:f3:ce:b2:0c:d0:38:90:fc:10:
42:57:32:b3:fe:a5:64:15:76:9f:0c:10:72:16:c8:de:a6:6c:
7c:69:43:27:ae:ab:91:e7:4f:f0:0f:72:4f:01:b3:ca:cd:76:
34:8a:cb:5c:36:b3:67:54:37:db:7a:c4:e0:1f:49:05:1a:7d:
42:47:64:b6:19:67:73:dd:be:36:19:a2:ff:bd:94:67:ec:ce:
5e:4b:de:0c:a3:12:24:0d:c6:3f:65:77:77:18:f8:90:d5:72:
f2:af:f4:f6:3f:74:90:51:fe:5a:87:6c:83:e6:3b:8c:c3:ce:
aa:d3:df:39:9e:f6:62:33:ee:1e:05:52:f0:a6:06:4b:b5:d9:
69:94:f5:ab:4e:31:fa:fe:41:04:df:6f:20:fd:16:6a:fc:71:
fa:7e:bc:eb:c2:b4:a6:cb:00:f0:07:f8:0e:cf:37:4a:f8:61:
2b:75:0d:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIE4K/qbonvs1/yBYTPwMq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMjAzYzE0MTllYzZhMjFlNjYxMjcyMDNmNTFjMWZhNzRk
YzA0NGYwHhcNMjIwNzE2MDI0MDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTE5M2I4Yzk4ZWQxYzcwZTVkODgwYWNmMDQ1ZTZmMTcyZGQ1NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrKkT+ZvAsaTuoDBdym6+B00O+ht
rvfczeH4W5mmbl1HEQ4imS558je1Tlkp4Jp7qknl8q1Z/rwDs/vgAUWhlHa2IgS8
sGy7G9t+9NK2jIdZDNwD+SSmu8pFuYt8bUJ2btz2L2hg4wKqW74F662gNq9g8vYD
2c97fXRyGwXoaN7G7qj8VEKHtkZjkVcPpnG5kGMehLXRLwlJwRdehtMuy9K/7sA+
aFrlMQjY8y8HVd7Ar0kY/MgopWLt2adlb6AOGu1M5mo+yfbXqcsx0YXLEokRWOOG
t/dfLnCM9FbCwOxUumrgtY6vgfDnGLqssr9PHMQa5uHcopLZ7URGey4BfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEZO4yY7Rxw5diArPBF5vFy3VbfMB8GA1UdIwQY
MBaAFH8gPBQZ7Goh5mEnID9Rwfp03ARPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnlBOEZCbnNhaUhtWVNjZ1AxSEItblRjQkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jOTA0NjktZTYzOC00YTU3LTkyY2Ut
NTM0ZTczY2MzYjdjLzEvVVJrN2pKanRISERsMklDczhFWG04WExkVnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jOTA0NjktZTYzOC00YTU3LTkyY2UtNTM0ZTczY2MzYjdj
LzEvZnlBOEZCbnNhaUhtWVNjZ1AxSEItblRjQkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6cMA0G
CSqGSIb3DQEBCwUAA4IBAQBq1Y4Yo9dp9XSqMJhozlrkjUg+nlLkHSOZXofv4PAq
+8dsQtdEiizoiupX5vQ1ZyspSL9W7db62SbCwhskcGJWOEolgrA0KAuzdJv1F+mU
kdrzzrIM0DiQ/BBCVzKz/qVkFXafDBByFsjepmx8aUMnrquR50/wD3JPAbPKzXY0
istcNrNnVDfbesTgH0kFGn1CR2S2GWdz3b42GaL/vZRn7M5eS94MoxIkDcY/ZXd3
GPiQ1XLyr/T2P3SQUf5ah2yD5juMw86q0985nvZiM+4eBVLwpgZLtdlplPWrTjH6
/kEE328g/RZq/HH6frzrwrSmywDwB/gOzzdK+GErdQ36
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:03:41 2025 by rpki-client