Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/lQAPhET9EdA9DLeNMBRlmI6pYWM.roa
File: lQAPhET9EdA9DLeNMBRlmI6pYWM.roa (raw, json)
Hash identifier: /CucsbEZi08hEpmbfsj0X0NSMsqVV3B7HxAJUMtbafg=
Subject key identifier: 95:00:0F:84:44:FD:11:D0:3D:0C:B7:8D:30:14:65:98:8E:A9:61:63
Certificate issuer: /CN=4d1380e88c64a3003478ddf54142d2ac56163e93
Certificate serial: 6E1C3B
Authority key identifier: 4D:13:80:E8:8C:64:A3:00:34:78:DD:F5:41:42:D2:AC:56:16:3E:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TROA6IxkowA0eN31QULSrFYWPpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/lQAPhET9EdA9DLeNMBRlmI6pYWM.roa
Signing time: Tue 19 Apr 2022 07:42:58 +0000
ROA not before: Tue 19 Apr 2022 07:42:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.120.84.0/24 maxlen: 24
185.120.85.0/24 maxlen: 24
185.120.87.0/24 maxlen: 24
185.120.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7216187 (0x6e1c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1380e88c64a3003478ddf54142d2ac56163e93
Validity
Not Before: Apr 19 07:42:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95000f8444fd11d03d0cb78d301465988ea96163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:a4:fa:ce:f4:5d:ac:88:8d:cd:51:df:a8:
b4:f5:53:49:19:1d:ee:35:2c:40:76:d6:6d:71:78:
64:21:67:3c:25:55:b6:64:00:16:8f:2a:c8:1b:40:
47:86:ea:c3:88:87:0a:9a:d9:de:b0:cc:99:67:3e:
6f:07:54:61:d9:52:f5:7d:ea:48:a3:35:1a:c1:57:
64:95:1c:26:c3:08:08:9f:e8:a3:ef:ea:ee:8c:19:
eb:6d:19:b2:ad:39:16:89:21:7d:a6:3b:7c:4e:95:
d4:41:8c:1d:fe:26:f2:4e:71:3b:fa:0e:a4:75:3c:
24:f6:8f:05:bf:b8:3a:a8:68:0e:7c:56:88:cb:0f:
44:e9:2d:05:34:76:b1:26:ba:2c:bb:f5:b3:f4:62:
f4:2c:79:02:16:9e:42:c5:5d:4b:56:c9:0f:09:8a:
df:fb:b2:7d:7c:89:82:d6:9b:32:45:12:38:0a:0e:
48:b1:08:c7:ca:cd:25:b4:a8:04:1f:3d:b2:69:5e:
af:60:41:47:ae:15:99:18:c5:c1:7c:ee:6f:02:d3:
36:60:27:94:61:0f:2d:76:51:f3:5c:38:74:64:14:
20:2f:5d:ac:a0:97:ee:69:7e:62:c6:81:59:34:f2:
38:c7:13:35:d8:17:08:61:68:41:b7:e7:51:71:7a:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:0F:84:44:FD:11:D0:3D:0C:B7:8D:30:14:65:98:8E:A9:61:63
X509v3 Authority Key Identifier:
keyid:4D:13:80:E8:8C:64:A3:00:34:78:DD:F5:41:42:D2:AC:56:16:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TROA6IxkowA0eN31QULSrFYWPpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/lQAPhET9EdA9DLeNMBRlmI6pYWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40ae5e-9f9e-4056-9f5f-678d236abb75/1/TROA6IxkowA0eN31QULSrFYWPpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.84.0/22
Signature Algorithm: sha256WithRSAEncryption
32:92:02:b4:dc:38:82:8c:73:55:76:ae:32:eb:d4:9d:8b:a8:
e7:4c:4c:2f:b7:4b:16:85:59:ce:52:88:8d:b9:48:4a:ad:31:
d1:b3:c0:6b:10:7f:44:16:12:91:8b:fe:2e:de:89:01:b6:71:
a7:d2:87:67:33:2c:b1:b6:62:28:70:ba:64:8d:27:2e:49:24:
0e:fa:b6:7a:30:b7:5e:9d:c5:98:99:d7:5e:9e:56:34:9f:f3:
1a:bc:56:5d:fe:d5:c0:df:20:be:a9:56:42:f6:7c:b6:a8:e1:
3e:62:7c:c7:4d:0c:f9:d4:11:74:f7:b2:ea:24:c0:8a:e5:d7:
a0:c4:d7:ed:40:5f:ce:5a:95:7e:e9:30:d2:f7:68:dc:c1:97:
3f:30:ef:9a:15:1c:3c:11:24:78:e2:a2:00:cd:db:ad:8a:eb:
1a:14:52:45:66:e1:a8:ed:c4:09:8a:af:94:58:1d:a9:80:6d:
1b:bd:1c:d5:de:bc:76:79:4e:9f:f7:c8:0b:98:b6:42:a4:aa:
f9:87:57:ce:6b:32:79:09:ee:46:de:d9:ef:76:cf:ad:3b:24:
90:bf:ea:49:bf:78:51:7e:5a:40:8d:21:b4:38:99:fb:2e:cd:
d7:fe:5c:2d:4c:ee:d3:42:56:ea:f3:d5:ba:43:c6:60:36:d6:
65:b2:08:8c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDbhw7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
MTM4MGU4OGM2NGEzMDAzNDc4ZGRmNTQxNDJkMmFjNTYxNjNlOTMwHhcNMjIwNDE5
MDc0MjU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5NTAwMGY4NDQ0ZmQx
MWQwM2QwY2I3OGQzMDE0NjU5ODhlYTk2MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtHuk+s70XayIjc1R36i09VNJGR3uNSxAdtZtcXhkIWc8JVW2
ZAAWjyrIG0BHhurDiIcKmtnesMyZZz5vB1Rh2VL1fepIozUawVdklRwmwwgIn+ij
7+rujBnrbRmyrTkWiSF9pjt8TpXUQYwd/ibyTnE7+g6kdTwk9o8Fv7g6qGgOfFaI
yw9E6S0FNHaxJrosu/Wz9GL0LHkCFp5CxV1LVskPCYrf+7J9fImC1psyRRI4Cg5I
sQjHys0ltKgEHz2yaV6vYEFHrhWZGMXBfO5vAtM2YCeUYQ8tdlHzXDh0ZBQgL12s
oJfuaX5ixoFZNPI4xxM12BcIYWhBt+dRcXrBSwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJUAD4RE/RHQPQy3jTAUZZiOqWFjMB8GA1UdIwQYMBaAFE0TgOiMZKMANHjd
9UFC0qxWFj6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VFJPQTZJeGtvd0EwZU4zMVFVTFNyRllXUHBNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83OC80MGFlNWUtOWY5ZS00MDU2LTlmNWYtNjc4ZDIzNmFiYjc1LzEv
bFFBUGhFVDlFZEE5RExlTk1CUmxtSTZwWVdNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80
MGFlNWUtOWY5ZS00MDU2LTlmNWYtNjc4ZDIzNmFiYjc1LzEvVFJPQTZJeGtvd0Ew
ZU4zMVFVTFNyRllXUHBNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXhUMA0GCSqGSIb3DQEBCwUAA4IB
AQAykgK03DiCjHNVdq4y69Sdi6jnTEwvt0sWhVnOUoiNuUhKrTHRs8BrEH9EFhKR
i/4u3okBtnGn0odnMyyxtmIocLpkjScuSSQO+rZ6MLdencWYmddenlY0n/MavFZd
/tXA3yC+qVZC9ny2qOE+YnzHTQz51BF097LqJMCK5degxNftQF/OWpV+6TDS92jc
wZc/MO+aFRw8ESR44qIAzdutiusaFFJFZuGo7cQJiq+UWB2pgG0bvRzV3rx2eU6f
98gLmLZCpKr5h1fOazJ5Ce5G3tnvds+tOySQv+pJv3hRflpAjSG0OJn7Ls3X/lwt
TO7TQlbq89W6Q8ZgNtZlsgiM
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:03 2025 by rpki-client