Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/abBgrE3cG5TSwy7tslQuaq4suak.roa
File: abBgrE3cG5TSwy7tslQuaq4suak.roa (raw, json)
Hash identifier: ROg/PtHqx8VPe0wCEzh6KN1X/PLiCYsL8daVn5kSi3k=
Subject key identifier: 69:B0:60:AC:4D:DC:1B:94:D2:C3:2E:ED:B2:54:2E:6A:AE:2C:B9:A9
Certificate issuer: /CN=6811d448cfbc6e9582808a17c72c6393fdaba948
Certificate serial: 018369409B40361380FD50A02E783B0E6344
Authority key identifier: 68:11:D4:48:CF:BC:6E:95:82:80:8A:17:C7:2C:63:93:FD:AB:A9:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHUSM-8bpWCgIoXxyxjk_2rqUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/abBgrE3cG5TSwy7tslQuaq4suak.roa
Signing time: Fri 23 Sep 2022 07:29:45 +0000
ROA not before: Fri 23 Sep 2022 07:29:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.156.249.0/24 maxlen: 24
185.156.248.0/24 maxlen: 24
185.156.251.0/24 maxlen: 24
185.156.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:40:9b:40:36:13:80:fd:50:a0:2e:78:3b:0e:63:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811d448cfbc6e9582808a17c72c6393fdaba948
Validity
Not Before: Sep 23 07:29:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69b060ac4ddc1b94d2c32eedb2542e6aae2cb9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:6c:04:34:17:83:83:64:f2:93:7e:8f:2b:
c4:b6:72:b0:d1:ab:27:7b:8d:0b:66:43:e4:66:c9:
54:11:53:44:4b:3b:6e:01:a3:d7:27:de:79:95:ff:
e9:93:58:c6:3f:a4:57:4d:26:e0:74:9b:7e:4f:3b:
09:30:7b:b6:a8:74:75:dc:98:d4:56:d7:ca:d7:c9:
df:e2:bc:58:2d:d2:75:8a:43:ad:5c:0d:c2:a2:9d:
f3:8e:0b:1f:e8:ea:ce:2e:90:1f:00:af:93:2b:25:
85:d3:5a:76:c4:78:63:a4:73:72:a5:3d:bb:a2:56:
5c:19:79:c6:f6:a3:74:73:c5:bf:dd:db:c2:e8:a4:
25:da:7f:b0:d6:33:88:d7:e4:9c:af:69:bf:9c:fa:
c4:17:74:f7:c2:6d:02:05:5f:e2:b8:ab:cc:fc:04:
d9:70:11:35:91:f8:05:15:bc:0e:e6:91:b3:8e:0e:
0b:98:bc:a4:45:96:30:81:2d:9f:7c:74:f3:b2:e6:
43:f0:49:1d:4e:5b:14:14:ab:05:b0:9e:f9:0f:eb:
f5:23:2e:09:b8:7a:db:87:da:55:a8:4f:d3:9f:88:
10:11:cb:2c:ad:06:33:e7:cf:fa:4e:61:f9:be:35:
9a:d4:28:7e:ff:cc:3e:15:58:d8:11:5b:3f:69:ba:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:60:AC:4D:DC:1B:94:D2:C3:2E:ED:B2:54:2E:6A:AE:2C:B9:A9
X509v3 Authority Key Identifier:
keyid:68:11:D4:48:CF:BC:6E:95:82:80:8A:17:C7:2C:63:93:FD:AB:A9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHUSM-8bpWCgIoXxyxjk_2rqUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/abBgrE3cG5TSwy7tslQuaq4suak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/aBHUSM-8bpWCgIoXxyxjk_2rqUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:15:e2:e9:12:3e:df:4e:56:df:19:b1:c0:5b:87:06:00:60:
30:23:c4:0e:1e:ab:27:05:7a:51:79:d2:c3:cc:e0:a8:91:94:
26:a7:58:c0:20:a6:0c:97:e5:a2:06:c3:d5:80:31:a6:13:76:
02:5b:f9:d7:c6:68:f4:8b:c3:b8:e5:df:f5:53:4d:a9:db:44:
58:a9:a8:dd:24:92:f3:96:37:c3:f6:2f:fb:02:e4:d8:36:ed:
fd:a2:13:7b:c8:1f:17:bc:30:28:69:85:0b:42:ca:6e:ac:c2:
3d:19:31:18:39:81:01:1b:d1:fe:f6:98:32:8a:8e:af:f2:4d:
26:4e:99:49:be:56:d0:ac:9b:c7:0c:05:52:5e:7b:90:48:36:
f3:e0:a4:eb:96:47:45:5a:05:43:ef:4c:27:28:a3:22:34:50:
33:19:ce:d3:b9:55:37:1f:9b:b4:03:97:ea:50:d2:8c:d2:13:
44:47:53:67:3f:60:51:7d:08:22:8d:03:e0:dd:8a:2a:92:d6:
b3:27:7e:bf:45:f5:cc:cf:7d:cd:8a:eb:f8:3b:e9:2f:a6:ef:
3e:88:2e:3d:c9:85:0c:19:85:6e:f5:7b:5a:f8:b1:63:16:91:
6d:01:b4:f7:a2:bc:cf:b9:88:a3:c6:ba:e8:21:ad:f2:fa:c6:
55:2e:41:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNpQJtANhOA/VCgLng7DmNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTFkNDQ4Y2ZiYzZlOTU4MjgwOGExN2M3MmM2MzkzZmRh
YmE5NDgwHhcNMjIwOTIzMDcyOTQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWIwNjBhYzRkZGMxYjk0ZDJjMzJlZWRiMjU0MmU2YWFlMmNiOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOtsBDQXg4Nk8pN+jyvEtnKw0asn
e40LZkPkZslUEVNESztuAaPXJ955lf/pk1jGP6RXTSbgdJt+TzsJMHu2qHR13JjU
VtfK18nf4rxYLdJ1ikOtXA3Cop3zjgsf6OrOLpAfAK+TKyWF01p2xHhjpHNypT27
olZcGXnG9qN0c8W/3dvC6KQl2n+w1jOI1+Scr2m/nPrEF3T3wm0CBV/iuKvM/ATZ
cBE1kfgFFbwO5pGzjg4LmLykRZYwgS2ffHTzsuZD8EkdTlsUFKsFsJ75D+v1Iy4J
uHrbh9pVqE/Tn4gQEcssrQYz58/6TmH5vjWa1Ch+/8w+FVjYEVs/aboz6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGmwYKxN3BuU0sMu7bJULmquLLmpMB8GA1UdIwQY
MBaAFGgR1EjPvG6VgoCKF8csY5P9q6lIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJIVVNNLThicFdDZ0lvWHh5eGprXzJycVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny84YjNhZmUtMmQ1Ny00MjY4LTgxYTYt
MjgwNmY5NDgxYTRlLzEvYWJCZ3JFM2NHNVRTd3k3dHNsUXVhcTRzdWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny84YjNhZmUtMmQ1Ny00MjY4LTgxYTYtMjgwNmY5NDgxYTRl
LzEvYUJIVVNNLThicFdDZ0lvWHh5eGprXzJycVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZz4MA0G
CSqGSIb3DQEBCwUAA4IBAQCfFeLpEj7fTlbfGbHAW4cGAGAwI8QOHqsnBXpRedLD
zOCokZQmp1jAIKYMl+WiBsPVgDGmE3YCW/nXxmj0i8O45d/1U02p20RYqajdJJLz
ljfD9i/7AuTYNu39ohN7yB8XvDAoaYULQspurMI9GTEYOYEBG9H+9pgyio6v8k0m
TplJvlbQrJvHDAVSXnuQSDbz4KTrlkdFWgVD70wnKKMiNFAzGc7TuVU3H5u0A5fq
UNKM0hNER1NnP2BRfQgijQPg3YoqktazJ36/RfXMz33Niuv4O+kvpu8+iC49yYUM
GYVu9Xta+LFjFpFtAbT3orzPuYijxrroIa3y+sZVLkFi
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:22:25 2025 by rpki-client