Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/k33PDi-0BwBpumPZCcifHIc16B8.roa
File: k33PDi-0BwBpumPZCcifHIc16B8.roa (raw, json)
Hash identifier: W4poH848CANzeR+R3vajkMVJQMrdqqhNd7VCkCdJV1k=
Subject key identifier: 93:7D:CF:0E:2F:B4:07:00:69:BA:63:D9:09:C8:9F:1C:87:35:E8:1F
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0186E97FB8AD761BA72145214002C3804745
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/k33PDi-0BwBpumPZCcifHIc16B8.roa
Signing time: Thu 16 Mar 2023 08:18:26 +0000
ROA not before: Thu 16 Mar 2023 08:18:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29256
IP address blocks: 185.136.144.0/22 maxlen: 22
2a00:b800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:7f:b8:ad:76:1b:a7:21:45:21:40:02:c3:80:47:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Mar 16 08:18:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=937dcf0e2fb4070069ba63d909c89f1c8735e81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:f7:e7:f1:0c:f4:97:6f:09:30:99:c6:49:
6c:cb:d6:0a:d1:a4:b6:ae:b0:e0:6e:d4:f1:2f:66:
c9:7b:ef:c5:12:93:b7:5e:55:aa:12:89:10:e0:72:
2e:1a:e1:03:7e:7e:8e:1d:db:ed:a7:02:69:c7:e1:
f8:3e:04:7d:05:e5:df:00:ba:80:4f:ce:aa:df:55:
dc:ff:7a:07:a5:97:ab:03:a7:26:61:1e:ff:35:e4:
0f:6a:86:cb:9a:b0:79:30:86:45:41:41:8e:b6:46:
51:a5:b0:86:49:45:7a:1f:b2:65:a0:4b:b4:f8:8f:
d4:5e:7c:80:3f:66:93:f6:03:cb:2b:b7:15:c8:ec:
e5:62:32:6c:13:09:a6:e2:0e:51:d4:a2:ab:ba:6b:
94:62:30:db:67:f2:8d:f5:51:db:99:8e:e5:7d:7d:
d3:12:f9:99:07:86:02:08:20:a7:6e:ea:dd:3a:d3:
5a:e9:8b:15:07:e5:8e:e5:1d:a6:47:22:5a:6e:9c:
9e:da:4f:6a:4d:a0:c5:63:1b:73:3a:e5:05:7a:76:
14:47:d5:09:14:94:67:ca:af:f5:a9:7c:e0:8b:17:
e7:d3:9a:c4:ad:2b:96:2f:44:a5:04:59:00:1d:5b:
94:85:0c:77:63:dd:3b:d3:5f:bb:a3:48:ae:11:a8:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:CF:0E:2F:B4:07:00:69:BA:63:D9:09:C8:9F:1C:87:35:E8:1F
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/k33PDi-0BwBpumPZCcifHIc16B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.144.0/22
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
12:db:33:9e:12:27:11:73:2a:47:e7:9c:63:5b:5d:3f:58:44:
fc:fe:e4:ad:22:cd:9e:8b:a8:0b:70:96:e0:22:f6:d0:3f:24:
65:04:cf:a9:8d:4a:f6:20:2f:43:9f:b7:f2:7b:32:ff:39:e8:
c3:d5:5a:1f:b3:c7:6a:34:6c:fe:b0:63:d4:53:d1:d3:9e:f5:
1f:0e:52:d3:7f:fa:de:6d:9f:d7:f7:e7:f3:42:4b:95:f5:fd:
04:b4:fd:f9:62:49:22:70:7c:8f:9a:a0:bb:e1:b6:58:c5:ea:
dc:40:4e:e7:4c:0b:fe:ff:c6:8d:ad:a3:95:1d:98:4e:a6:d7:
c6:15:bc:93:ed:a1:f9:4a:63:45:b2:46:ba:3d:75:8c:b3:cf:
7a:24:b9:5c:df:aa:ed:43:66:f1:76:ef:a6:38:b1:98:fb:19:
ba:c5:66:26:c2:6a:f0:f6:e8:06:63:8c:c4:f7:46:05:bb:c9:
64:f6:e1:5e:67:e7:0f:5b:b5:dc:2a:e0:71:a9:c9:db:e7:06:
b0:be:98:b4:ad:66:d1:b9:b9:53:9b:3e:c6:d5:67:28:2d:ed:
75:05:96:28:03:38:1b:b2:06:35:d0:bb:7c:da:09:31:7a:0e:
06:c7:d4:04:8c:89:98:2a:13:f1:88:c6:1e:20:93:a0:69:9d:
e5:2e:11:12
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYbpf7itdhunIUUhQALDgEdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjMwMzE2MDgxODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzdkY2YwZTJmYjQwNzAwNjliYTYzZDkwOWM4OWYxYzg3MzVlODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC/35/EM9JdvCTCZxklsy9YK0aS2
rrDgbtTxL2bJe+/FEpO3XlWqEokQ4HIuGuEDfn6OHdvtpwJpx+H4PgR9BeXfALqA
T86q31Xc/3oHpZerA6cmYR7/NeQPaobLmrB5MIZFQUGOtkZRpbCGSUV6H7JloEu0
+I/UXnyAP2aT9gPLK7cVyOzlYjJsEwmm4g5R1KKrumuUYjDbZ/KN9VHbmY7lfX3T
EvmZB4YCCCCnburdOtNa6YsVB+WO5R2mRyJabpye2k9qTaDFYxtzOuUFenYUR9UJ
FJRnyq/1qXzgixfn05rErSuWL0SlBFkAHVuUhQx3Y90701+7o0iuEajv8wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJN9zw4vtAcAabpj2QnInxyHNegfMB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvazMzUERpLTBCd0JwdW1QWkNjaWZISWMxNkI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYiQMA0E
AgACMAcDBQAqALgAMA0GCSqGSIb3DQEBCwUAA4IBAQAS2zOeEicRcypH55xjW10/
WET8/uStIs2ei6gLcJbgIvbQPyRlBM+pjUr2IC9Dn7fyezL/OejD1Vofs8dqNGz+
sGPUU9HTnvUfDlLTf/rebZ/X9+fzQkuV9f0EtP35YkkicHyPmqC74bZYxercQE7n
TAv+/8aNraOVHZhOptfGFbyT7aH5SmNFska6PXWMs896JLlc36rtQ2bxdu+mOLGY
+xm6xWYmwmrw9ugGY4zE90YFu8lk9uFeZ+cPW7XcKuBxqcnb5wawvpi0rWbRublT
mz7G1WcoLe11BZYoAzgbsgY10Lt82gkxeg4Gx9QEjImYKhPxiMYeIJOgaZ3lLhES
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:05 2025 by rpki-client