Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/m47qBE9phwomTDeqf52wHfAYr9E.roa
File: m47qBE9phwomTDeqf52wHfAYr9E.roa (raw, json)
Hash identifier: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=
Subject key identifier: 9B:8E:EA:04:4F:69:87:0A:26:4C:37:AA:7F:9D:B0:1D:F0:18:AF:D1
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 0194228DD963D0BE4AEE5BCDD29F678A198E
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/m47qBE9phwomTDeqf52wHfAYr9E.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.67.4.0/22 maxlen: 22
185.67.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d9:63:d0:be:4a:ee:5b:cd:d2:9f:67:8a:19:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b8eea044f69870a264c37aa7f9db01df018afd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:97:cd:1d:63:ac:29:b3:b4:e5:a2:cb:c7:
65:2a:f3:a8:53:78:0d:53:2d:4a:ae:e7:99:93:71:
83:27:f6:5f:03:9e:60:70:ea:e2:a7:47:5a:2a:63:
40:29:20:b5:33:48:b9:b5:af:f4:fd:06:54:ed:55:
a5:f6:73:84:68:c5:18:b1:d6:5e:1e:34:ae:d9:86:
4b:3d:ad:c5:34:34:3a:21:69:c6:66:68:50:22:78:
89:fb:69:84:d9:1a:99:ce:71:cc:48:fd:f4:22:5f:
e0:76:53:c2:b6:fa:89:4f:b7:49:48:aa:67:24:05:
71:fd:1b:26:94:76:42:ed:39:e9:d4:17:df:3b:a3:
b2:cc:54:82:0e:b4:ec:a7:d6:df:d4:4f:4e:97:55:
4a:4d:a3:7b:41:78:f5:1c:c5:56:d7:cb:c9:bc:5d:
ef:c9:f1:b1:03:6c:cd:be:33:19:e6:2e:d4:6f:71:
cb:35:2c:ea:7d:78:80:af:8a:91:53:e3:92:a5:92:
59:af:fc:b3:5b:00:4c:7f:25:e9:0c:bd:c1:80:83:
41:f2:45:d5:b4:bc:20:19:b1:73:e2:93:e5:47:33:
fb:7f:01:7d:69:de:ca:04:80:44:63:16:05:f0:8b:
9e:c8:6f:18:9f:15:49:55:31:e2:a0:3a:08:2d:5d:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8E:EA:04:4F:69:87:0A:26:4C:37:AA:7F:9D:B0:1D:F0:18:AF:D1
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/m47qBE9phwomTDeqf52wHfAYr9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.4.0/22
Signature Algorithm: sha256WithRSAEncryption
17:d1:3b:bd:56:c0:a2:1a:d4:c5:db:6a:b7:42:87:b9:4e:83:
b0:3d:88:ff:3c:c8:ff:e0:6d:34:c0:f5:53:90:f1:82:8b:78:
6f:f1:a4:24:0b:9a:59:a8:75:f1:81:e9:57:ae:f1:b3:c6:7a:
67:a3:7d:c2:74:fd:37:f7:71:27:6e:96:3b:8f:3a:a6:e4:0d:
d5:2c:40:d0:3c:ec:87:b6:79:8a:11:d2:d8:72:98:f8:08:02:
ee:b0:3a:93:62:b9:b9:71:00:10:b1:81:ae:8d:87:6f:26:5c:
a5:3a:13:d8:df:f1:7b:b6:5e:25:45:da:db:14:d6:da:2d:8b:
93:c2:77:d1:d4:8e:d6:10:97:8d:fe:a0:34:a0:80:81:a9:5f:
d8:ae:63:0e:e2:04:72:40:b8:97:89:be:69:da:35:9a:ca:26:
92:08:92:40:56:88:c7:15:13:23:da:25:bb:b8:a8:bd:ea:00:
2f:d9:2f:ef:4e:d5:b3:71:7a:52:61:77:d2:69:62:4c:ac:8f:
7f:fe:3e:84:1f:57:08:98:81:d9:f9:3a:ee:4f:52:37:82:1d:
1d:cc:56:5b:73:fe:74:49:0e:2b:f7:9b:29:66:05:ee:4e:fc:
b3:e3:66:a5:17:a9:14:6a:89:33:5d:d3:ce:0f:55:d8:37:fa:
4b:31:6d:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijdlj0L5K7lvN0p9nihmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NjE3MGNiOTA2ZWY0MmQwOTdjNjQwMmQ4M2VlYzNkOTI2
NzdhNjgwHhcNMjUwMTAxMTU0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjhlZWEwNDRmNjk4NzBhMjY0YzM3YWE3ZjlkYjAxZGYwMThhZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS+XzR1jrCmztOWiy8dlKvOoU3gN
Uy1KrueZk3GDJ/ZfA55gcOrip0daKmNAKSC1M0i5ta/0/QZU7VWl9nOEaMUYsdZe
HjSu2YZLPa3FNDQ6IWnGZmhQIniJ+2mE2RqZznHMSP30Il/gdlPCtvqJT7dJSKpn
JAVx/RsmlHZC7Tnp1BffO6OyzFSCDrTsp9bf1E9Ol1VKTaN7QXj1HMVW18vJvF3v
yfGxA2zNvjMZ5i7Ub3HLNSzqfXiAr4qRU+OSpZJZr/yzWwBMfyXpDL3BgINB8kXV
tLwgGbFz4pPlRzP7fwF9ad7KBIBEYxYF8IueyG8YnxVJVTHioDoILV3Q/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJuO6gRPaYcKJkw3qn+dsB3wGK/RMB8GA1UdIwQY
MBaAFBRhcMuQbvQtCXxkAtg+7D2SZ3poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MDJhNzItMzExMi00ZDlmLWJiYTkt
ODAzNGUyZDA1ZDM5LzEvbTQ3cUJFOXBod29tVERlcWY1MndIZkFZcjlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MDJhNzItMzExMi00ZDlmLWJiYTktODAzNGUyZDA1ZDM5
LzEvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUMEMA0G
CSqGSIb3DQEBCwUAA4IBAQAX0Tu9VsCiGtTF22q3Qoe5ToOwPYj/PMj/4G00wPVT
kPGCi3hv8aQkC5pZqHXxgelXrvGzxnpno33CdP0393EnbpY7jzqm5A3VLEDQPOyH
tnmKEdLYcpj4CALusDqTYrm5cQAQsYGujYdvJlylOhPY3/F7tl4lRdrbFNbaLYuT
wnfR1I7WEJeN/qA0oICBqV/YrmMO4gRyQLiXib5p2jWayiaSCJJAVojHFRMj2iW7
uKi96gAv2S/vTtWzcXpSYXfSaWJMrI9//j6EH1cImIHZ+TruT1I3gh0dzFZbc/50
SQ4r95spZgXuTvyz42alF6kUaokzXdPOD1XYN/pLMW0A
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:22 2025 by rpki-client