Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/CiJiuPvatgsNEhqdU2sG_hej3Ic.roa
File: CiJiuPvatgsNEhqdU2sG_hej3Ic.roa (raw, json)
Hash identifier: DEZxgQP23UQYfBEAqpsp5k5orUwvtZY/XWsO1IRUIus=
Subject key identifier: 0A:22:62:B8:FB:DA:B6:0B:0D:12:1A:9D:53:6B:06:FE:17:A3:DC:87
Certificate issuer: /CN=c96640eaef031cb24beb365ec0dabeb26173c421
Certificate serial: 01914BCF41BDAA4E9B1DB79A127BE6F33D84
Authority key identifier: C9:66:40:EA:EF:03:1C:B2:4B:EB:36:5E:C0:DA:BE:B2:61:73:C4:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWZA6u8DHLJL6zZewNq-smFzxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/CiJiuPvatgsNEhqdU2sG_hej3Ic.roa
Signing time: Tue 13 Aug 2024 12:55:59 +0000
ROA not before: Tue 13 Aug 2024 12:55:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51191
IP address blocks: 185.108.216.0/22 maxlen: 22
2a06:4b00::/29 maxlen: 29
2a06:4b01:3300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:cf:41:bd:aa:4e:9b:1d:b7:9a:12:7b:e6:f3:3d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96640eaef031cb24beb365ec0dabeb26173c421
Validity
Not Before: Aug 13 12:55:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a2262b8fbdab60b0d121a9d536b06fe17a3dc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:82:66:d1:99:36:31:e0:75:9b:cf:1e:85:
70:96:d1:d5:e8:26:e0:41:62:68:24:57:b4:f2:21:
00:57:d7:2a:22:0b:9f:a8:4c:fe:08:c6:cf:97:9a:
a3:bb:19:d9:0c:cd:83:72:39:40:2e:93:c6:5f:68:
1d:c3:2b:cb:60:7d:b3:c4:04:a3:96:44:1d:07:56:
67:57:4d:e9:07:ea:13:d4:9c:a0:a4:b5:b5:23:cb:
b5:5d:a1:37:8f:81:b0:b8:44:82:80:64:9d:97:7f:
5a:99:9e:49:2b:f4:e2:74:e9:af:52:a8:ff:7f:87:
78:e4:99:be:c7:0e:25:71:30:63:af:e3:b4:fb:a8:
af:4d:8e:3f:e8:06:20:8d:ea:16:55:e5:09:e3:91:
5c:63:e8:36:c4:73:11:61:b0:7a:c2:ec:f1:92:21:
7d:fd:42:03:0b:fa:5d:db:8d:90:5f:fd:25:0a:35:
5a:50:e3:43:bc:26:66:6d:96:ec:58:8d:d4:6b:ed:
f9:64:b6:74:d9:f9:b0:6f:a4:78:de:0e:f4:bd:15:
21:28:01:68:10:8e:c2:28:11:1f:e9:dd:be:19:a1:
94:2b:e0:54:5c:70:6c:c7:4a:4d:45:b2:e7:27:cc:
b3:e6:ee:1a:8e:20:02:2a:d2:ca:df:dd:3a:79:cd:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:62:B8:FB:DA:B6:0B:0D:12:1A:9D:53:6B:06:FE:17:A3:DC:87
X509v3 Authority Key Identifier:
keyid:C9:66:40:EA:EF:03:1C:B2:4B:EB:36:5E:C0:DA:BE:B2:61:73:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWZA6u8DHLJL6zZewNq-smFzxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/CiJiuPvatgsNEhqdU2sG_hej3Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/yWZA6u8DHLJL6zZewNq-smFzxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.216.0/22
IPv6:
2a06:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
0b:a0:e5:63:1a:74:7c:03:ef:57:46:50:41:6f:4a:c1:8e:64:
4c:eb:94:81:89:63:e9:ab:0d:4a:0c:64:fe:98:8f:ac:dd:ae:
e1:e6:6a:84:bf:0f:fc:56:4f:7a:61:7e:75:fd:23:04:36:6b:
8c:f5:db:15:8b:9f:44:da:cb:c8:b9:86:b7:4e:38:11:9e:7c:
3b:b2:80:39:4b:9c:07:29:ab:fe:f1:86:1d:20:88:1c:38:1f:
59:ed:9d:2f:f0:63:9f:cd:6d:01:db:10:25:8c:a0:34:27:3f:
ba:14:b3:5d:2e:fb:cf:2e:5b:b6:d2:cf:c5:d9:0d:ea:f4:ec:
1c:9c:f5:62:48:60:90:eb:09:3e:17:5d:e7:42:81:b3:ea:3c:
d3:c0:a0:c6:43:1c:7b:95:05:d6:e9:4e:2e:9d:2a:d4:99:55:
e6:1e:23:e3:66:98:16:09:d4:92:0d:ee:26:e5:48:2e:1c:23:
fe:32:11:0a:34:02:fe:5c:bb:d4:5f:9e:3d:b9:50:9d:83:42:
76:50:31:73:20:e9:79:c6:ce:98:3e:7b:90:c9:62:35:51:4f:
1d:0b:59:68:05:80:2f:3e:e1:9f:43:c3:5b:44:e0:a0:52:72:
aa:cf:1d:cd:62:17:44:6e:80:2c:ea:19:d0:ba:4e:e0:79:78:
7f:9d:6e:08
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZFLz0G9qk6bHbeaEnvm8z2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NjY0MGVhZWYwMzFjYjI0YmViMzY1ZWMwZGFiZWIyNjE3
M2M0MjEwHhcNMjQwODEzMTI1NTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTIyNjJiOGZiZGFiNjBiMGQxMjFhOWQ1MzZiMDZmZTE3YTNkYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkeCZtGZNjHgdZvPHoVwltHV6Cbg
QWJoJFe08iEAV9cqIgufqEz+CMbPl5qjuxnZDM2DcjlALpPGX2gdwyvLYH2zxASj
lkQdB1ZnV03pB+oT1JygpLW1I8u1XaE3j4GwuESCgGSdl39amZ5JK/TidOmvUqj/
f4d45Jm+xw4lcTBjr+O0+6ivTY4/6AYgjeoWVeUJ45FcY+g2xHMRYbB6wuzxkiF9
/UIDC/pd242QX/0lCjVaUONDvCZmbZbsWI3Ua+35ZLZ02fmwb6R43g70vRUhKAFo
EI7CKBEf6d2+GaGUK+BUXHBsx0pNRbLnJ8yz5u4ajiACKtLK3906ec3v+wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAoiYrj72rYLDRIanVNrBv4Xo9yHMB8GA1UdIwQY
MBaAFMlmQOrvAxyyS+s2XsDavrJhc8QhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVdaQTZ1OERITEpMNnpaZXdOcS1zbUZ6eENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYzhiM2EtZGIzZC00MmQ2LTkxYzAt
YWY4Y2RhMjU1NjZhLzEvQ2lKaXVQdmF0Z3NORWhxZFUyc0dfaGVqM0ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYzhiM2EtZGIzZC00MmQ2LTkxYzAtYWY4Y2RhMjU1NjZh
LzEveVdaQTZ1OERITEpMNnpaZXdOcS1zbUZ6eENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWzYMA0E
AgACMAcDBQMqBksAMA0GCSqGSIb3DQEBCwUAA4IBAQALoOVjGnR8A+9XRlBBb0rB
jmRM65SBiWPpqw1KDGT+mI+s3a7h5mqEvw/8Vk96YX51/SMENmuM9dsVi59E2svI
uYa3TjgRnnw7soA5S5wHKav+8YYdIIgcOB9Z7Z0v8GOfzW0B2xAljKA0Jz+6FLNd
LvvPLlu20s/F2Q3q9OwcnPViSGCQ6wk+F13nQoGz6jzTwKDGQxx7lQXW6U4unSrU
mVXmHiPjZpgWCdSSDe4m5UguHCP+MhEKNAL+XLvUX549uVCdg0J2UDFzIOl5xs6Y
PnuQyWI1UU8dC1loBYAvPuGfQ8NbROCgUnKqzx3NYhdEboAs6hnQuk7geXh/nW4I
-----END CERTIFICATE-----
Generated at Thu Apr 17 19:43:08 2025 by rpki-client