Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/Y-kaEDT0kPi9V3Tb7zUqrKGx3Pg.roa
File: Y-kaEDT0kPi9V3Tb7zUqrKGx3Pg.roa (raw, json)
Hash identifier: G/9+bVy6EtgCyOO8WKrz91dH8ZQhsdmcc0yZ9/Ute7I=
Subject key identifier: 63:E9:1A:10:34:F4:90:F8:BD:57:74:DB:EF:35:2A:AC:A1:B1:DC:F8
Certificate issuer: /CN=6811d448cfbc6e9582808a17c72c6393fdaba948
Certificate serial: 018369409BEB8A5432E43B6C62D98E6CD7B5
Authority key identifier: 68:11:D4:48:CF:BC:6E:95:82:80:8A:17:C7:2C:63:93:FD:AB:A9:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHUSM-8bpWCgIoXxyxjk_2rqUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/Y-kaEDT0kPi9V3Tb7zUqrKGx3Pg.roa
Signing time: Fri 23 Sep 2022 07:29:45 +0000
ROA not before: Fri 23 Sep 2022 07:29:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202676
IP address blocks: 185.156.251.0/24 maxlen: 24
185.156.248.0/24 maxlen: 24
185.156.249.0/24 maxlen: 24
185.156.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:40:9b:eb:8a:54:32:e4:3b:6c:62:d9:8e:6c:d7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811d448cfbc6e9582808a17c72c6393fdaba948
Validity
Not Before: Sep 23 07:29:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e91a1034f490f8bd5774dbef352aaca1b1dcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:29:ef:2a:a4:be:a2:2d:a9:d6:d1:ff:f2:
90:4d:70:78:1b:cb:c8:a8:01:d2:b9:50:6c:aa:22:
33:7c:65:50:0f:00:96:58:07:21:e5:a6:da:8b:99:
08:3a:7f:2c:d3:41:cd:b3:b0:f2:8e:08:6a:ba:81:
ff:bc:71:ae:b3:ae:1a:25:18:87:ed:30:41:a1:bc:
82:c9:0e:4a:76:ef:c4:94:11:a4:ff:64:e9:9b:3a:
d3:1d:8e:d0:b5:ff:fa:6e:0d:f4:87:7f:d5:c9:54:
3e:01:84:bf:4a:f4:c5:b6:14:dc:e0:14:5c:af:7c:
2c:2d:a2:d9:44:1a:c6:11:7e:ff:36:bd:00:69:bc:
3f:14:f2:af:87:fc:97:41:cb:f5:41:42:28:e7:c1:
a9:75:2a:b4:89:07:b1:fd:f5:d9:9a:2d:c2:4a:b8:
4f:cd:eb:c6:70:9b:19:a4:8a:9a:f6:b5:a6:66:6b:
23:18:83:43:8f:0f:56:db:d8:7c:40:96:07:c4:23:
f4:72:4b:78:7e:42:fe:40:f6:f3:1e:0f:89:05:29:
dc:cf:17:9a:76:5b:70:1d:39:ec:23:a8:08:d2:8d:
23:42:93:f9:2f:e4:40:eb:8b:4a:e8:d0:34:f2:80:
9c:ee:7b:bc:6b:f8:13:67:4e:e3:38:97:cd:b4:c5:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:1A:10:34:F4:90:F8:BD:57:74:DB:EF:35:2A:AC:A1:B1:DC:F8
X509v3 Authority Key Identifier:
keyid:68:11:D4:48:CF:BC:6E:95:82:80:8A:17:C7:2C:63:93:FD:AB:A9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHUSM-8bpWCgIoXxyxjk_2rqUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/Y-kaEDT0kPi9V3Tb7zUqrKGx3Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/aBHUSM-8bpWCgIoXxyxjk_2rqUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:ae:7e:aa:ca:15:3c:71:d2:da:13:75:78:4a:98:6a:07:e0:
87:9a:85:36:a7:b7:e7:76:c2:97:5b:7c:6a:d2:9d:5c:79:33:
5b:91:79:b5:51:db:3a:23:35:b3:7e:9c:d6:9f:3e:87:cf:0f:
eb:fd:57:1a:54:b5:05:ee:42:67:68:5d:cc:69:ab:fc:12:a5:
7f:1c:27:95:7b:8e:12:d9:86:5c:01:fa:32:8e:63:fa:65:be:
10:bf:df:d5:d5:b4:5c:f7:22:76:45:b0:78:78:55:c2:64:f8:
0c:e2:09:39:34:64:e1:63:93:17:b8:a2:ba:50:70:6f:9d:07:
ef:2e:e7:57:63:ba:04:ae:e8:0e:ee:fc:37:58:ad:f5:70:e0:
b1:be:cb:c8:c1:0f:c1:82:a9:d8:ea:00:ab:bd:71:40:49:31:
b7:69:57:7c:96:63:9f:36:16:fc:4c:62:e8:c4:0a:a9:a9:38:
97:a3:77:b9:b0:1a:6b:78:36:b8:b8:16:7b:d7:a0:d3:ee:3c:
76:13:bf:0b:ca:9c:65:bc:a3:66:1b:55:9b:2a:1d:45:3f:71:
54:e9:40:9e:86:cc:4a:ac:d9:ec:34:fd:4e:8c:69:b9:d8:75:
4f:03:9a:ed:1b:f0:07:a1:25:f9:df:f1:c4:3c:90:63:21:86:
39:ff:a6:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNpQJvrilQy5DtsYtmObNe1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTFkNDQ4Y2ZiYzZlOTU4MjgwOGExN2M3MmM2MzkzZmRh
YmE5NDgwHhcNMjIwOTIzMDcyOTQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2U5MWExMDM0ZjQ5MGY4YmQ1Nzc0ZGJlZjM1MmFhY2ExYjFkY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgsp7yqkvqItqdbR//KQTXB4G8vI
qAHSuVBsqiIzfGVQDwCWWAch5abai5kIOn8s00HNs7DyjghquoH/vHGus64aJRiH
7TBBobyCyQ5Kdu/ElBGk/2TpmzrTHY7Qtf/6bg30h3/VyVQ+AYS/SvTFthTc4BRc
r3wsLaLZRBrGEX7/Nr0Aabw/FPKvh/yXQcv1QUIo58GpdSq0iQex/fXZmi3CSrhP
zevGcJsZpIqa9rWmZmsjGINDjw9W29h8QJYHxCP0ckt4fkL+QPbzHg+JBSnczxea
dltwHTnsI6gI0o0jQpP5L+RA64tK6NA08oCc7nu8a/gTZ07jOJfNtMX8YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPpGhA09JD4vVd02+81Kqyhsdz4MB8GA1UdIwQY
MBaAFGgR1EjPvG6VgoCKF8csY5P9q6lIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJIVVNNLThicFdDZ0lvWHh5eGprXzJycVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny84YjNhZmUtMmQ1Ny00MjY4LTgxYTYt
MjgwNmY5NDgxYTRlLzEvWS1rYUVEVDBrUGk5VjNUYjd6VXFyS0d4M1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny84YjNhZmUtMmQ1Ny00MjY4LTgxYTYtMjgwNmY5NDgxYTRl
LzEvYUJIVVNNLThicFdDZ0lvWHh5eGprXzJycVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZz4MA0G
CSqGSIb3DQEBCwUAA4IBAQBLrn6qyhU8cdLaE3V4SphqB+CHmoU2p7fndsKXW3xq
0p1ceTNbkXm1Uds6IzWzfpzWnz6Hzw/r/VcaVLUF7kJnaF3Maav8EqV/HCeVe44S
2YZcAfoyjmP6Zb4Qv9/V1bRc9yJ2RbB4eFXCZPgM4gk5NGThY5MXuKK6UHBvnQfv
LudXY7oErugO7vw3WK31cOCxvsvIwQ/BgqnY6gCrvXFASTG3aVd8lmOfNhb8TGLo
xAqpqTiXo3e5sBpreDa4uBZ716DT7jx2E78LypxlvKNmG1WbKh1FP3FU6UCehsxK
rNnsNP1OjGm52HVPA5rtG/AHoSX53/HEPJBjIYY5/6YC
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:11:50 2025 by rpki-client