Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/aU6C8_2oKIPd2Mj1M59QIJH0QfM.roa
File: aU6C8_2oKIPd2Mj1M59QIJH0QfM.roa (raw, json)
Hash identifier: hB6Q1i6MoxsCS8FDEGrSO/ICsTnTbk1jx5M1f2CgCcQ=
Subject key identifier: 69:4E:82:F3:FD:A8:28:83:DD:D8:C8:F5:33:9F:50:20:91:F4:41:F3
Certificate issuer: /CN=094a031eec7d91f6d9549dec3831f78d7114eb6d
Certificate serial: 04FD1D86
Authority key identifier: 09:4A:03:1E:EC:7D:91:F6:D9:54:9D:EC:38:31:F7:8D:71:14:EB:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUoDHux9kfbZVJ3sODH3jXEU620.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/aU6C8_2oKIPd2Mj1M59QIJH0QfM.roa
Signing time: Sat 01 Jan 2022 10:03:27 +0000
ROA not before: Sat 01 Jan 2022 10:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201789
IP address blocks: 185.119.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83697030 (0x4fd1d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094a031eec7d91f6d9549dec3831f78d7114eb6d
Validity
Not Before: Jan 1 10:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=694e82f3fda82883ddd8c8f5339f502091f441f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:23:82:ac:8f:fd:eb:b0:7c:4e:51:16:e2:
6f:76:ce:c6:38:bd:5f:6d:c7:9d:ac:00:2a:8a:29:
8c:ac:aa:f4:78:b0:24:db:a9:aa:3a:14:ff:31:d3:
c1:a0:23:f9:e1:84:b8:01:e4:cd:a1:6b:bf:66:9e:
b7:d6:ca:4b:95:5c:90:79:8c:59:f3:21:1c:f8:ba:
96:1c:3d:83:4f:ca:16:78:53:74:6a:a3:d7:e4:3a:
e0:a0:0c:40:cd:8c:11:bc:2b:a5:14:c3:dc:c8:e8:
1f:99:2c:e9:7c:96:92:ef:b0:6e:77:f3:98:f8:bf:
de:1e:5e:65:48:45:c2:ce:30:d7:4a:98:d6:2b:aa:
a9:ba:5f:11:60:b7:93:fb:0a:8b:7f:d5:93:14:5e:
22:42:0f:a9:de:38:4c:bf:9f:28:ef:cc:09:c8:06:
c0:0e:2c:b1:80:1b:59:48:dd:e6:3d:d8:5a:e8:5a:
df:11:42:5c:ce:52:1c:56:96:a3:75:96:13:96:25:
22:24:26:9e:17:9f:db:af:ed:9a:7f:95:f9:f9:01:
e4:33:d0:b2:e5:5f:ec:f7:81:6e:f2:e7:cc:d9:e0:
39:7c:67:d5:1a:90:64:9f:68:39:05:c8:03:b6:ea:
c6:69:63:cd:88:ad:73:c6:23:d6:a3:b4:d1:3e:90:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:82:F3:FD:A8:28:83:DD:D8:C8:F5:33:9F:50:20:91:F4:41:F3
X509v3 Authority Key Identifier:
keyid:09:4A:03:1E:EC:7D:91:F6:D9:54:9D:EC:38:31:F7:8D:71:14:EB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUoDHux9kfbZVJ3sODH3jXEU620.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/aU6C8_2oKIPd2Mj1M59QIJH0QfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/CUoDHux9kfbZVJ3sODH3jXEU620.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:46:80:70:ee:b7:d4:9e:ca:cb:14:ad:5f:8c:a7:e6:cf:6a:
2d:75:33:52:65:e4:70:28:a3:41:01:6a:c7:46:28:aa:16:fd:
0a:90:d5:b2:df:8d:4e:d4:25:8c:75:df:67:57:7e:11:aa:be:
d1:55:42:40:0f:29:13:b5:fe:59:6f:c9:3f:30:ba:0b:88:8c:
9d:f9:af:7f:b0:8b:64:b5:df:30:a2:48:a9:cf:26:77:05:d4:
bb:e9:21:db:67:af:6b:9a:89:ba:3f:49:c4:b6:44:9c:f7:07:
50:17:fb:58:76:fb:62:1e:87:db:c0:af:65:68:f6:07:f6:ec:
9d:9a:48:4d:26:b7:b8:40:e0:76:6b:9b:06:1c:db:1d:1e:3f:
46:8f:82:58:8d:29:38:a7:50:e5:a8:40:21:54:9d:a0:4f:20:
d5:4b:27:e7:04:05:20:84:18:4d:b1:1a:ef:81:dc:3a:b4:c0:
6c:36:1f:49:94:8a:6d:1e:0b:a7:05:9b:1d:0a:20:4d:3c:46:
b6:50:83:e1:98:bb:27:eb:75:27:ff:23:74:c8:d0:05:70:bb:
87:d7:02:77:3d:83:c3:ec:28:3e:61:e7:96:7e:9a:1a:1b:d5:
c2:74:14:87:f9:d9:a2:ba:43:82:d0:ef:75:fd:d7:c9:4c:45:
c3:03:7a:a0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBP0dhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OTRhMDMxZWVjN2Q5MWY2ZDk1NDlkZWMzODMxZjc4ZDcxMTRlYjZkMB4XDTIyMDEw
MTEwMDMyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjk0ZTgyZjNmZGE4
Mjg4M2RkZDhjOGY1MzM5ZjUwMjA5MWY0NDFmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALeFI4Ksj/3rsHxOURbib3bOxji9X23HnawAKoopjKyq9Hiw
JNupqjoU/zHTwaAj+eGEuAHkzaFrv2aet9bKS5VckHmMWfMhHPi6lhw9g0/KFnhT
dGqj1+Q64KAMQM2MEbwrpRTD3MjoH5ks6XyWku+wbnfzmPi/3h5eZUhFws4w10qY
1iuqqbpfEWC3k/sKi3/VkxReIkIPqd44TL+fKO/MCcgGwA4ssYAbWUjd5j3YWuha
3xFCXM5SHFaWo3WWE5YlIiQmnhef26/tmn+V+fkB5DPQsuVf7PeBbvLnzNngOXxn
1RqQZJ9oOQXIA7bqxmljzYitc8Yj1qO00T6QNs0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRpToLz/agog93YyPUzn1AgkfRB8zAfBgNVHSMEGDAWgBQJSgMe7H2R9tlU
new4MfeNcRTrbTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NVb0RIdXg5a2ZiWlZKM3NPREgzalhFVTYyMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvNDdhMDg3LTU1ZGYtNDE3Mi1hMzM4LTc4Yzg0NjIyYzBlYy8x
L2FVNkM4XzJvS0lQZDJNajFNNTlRSUpIMFFmTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
NDdhMDg3LTU1ZGYtNDE3Mi1hMzM4LTc4Yzg0NjIyYzBlYy8xL0NVb0RIdXg5a2Zi
WlZKM3NPREgzalhFVTYyMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALl3WzANBgkqhkiG9w0BAQsFAAOC
AQEAt0aAcO631J7KyxStX4yn5s9qLXUzUmXkcCijQQFqx0Yoqhb9CpDVst+NTtQl
jHXfZ1d+Eaq+0VVCQA8pE7X+WW/JPzC6C4iMnfmvf7CLZLXfMKJIqc8mdwXUu+kh
22eva5qJuj9JxLZEnPcHUBf7WHb7Yh6H28CvZWj2B/bsnZpITSa3uEDgdmubBhzb
HR4/Ro+CWI0pOKdQ5ahAIVSdoE8g1Usn5wQFIIQYTbEa74HcOrTAbDYfSZSKbR4L
pwWbHQogTTxGtlCD4Zi7J+t1J/8jdMjQBXC7h9cCdz2Dw+woPmHnln6aGhvVwnQU
h/nZorpDgtDvdf3XyUxFwwN6oA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:54 2025 by rpki-client