Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/ic7hNDdJKidN-B7Xj9Yn9lIXLrg.roa
File: ic7hNDdJKidN-B7Xj9Yn9lIXLrg.roa (raw, json)
Hash identifier: Q5LHJCUTGHS9VP/xB0mXDZaZ/g0m50VxUWs69E8SZZk=
Subject key identifier: 89:CE:E1:34:37:49:2A:27:4D:F8:1E:D7:8F:D6:27:F6:52:17:2E:B8
Certificate issuer: /CN=a11a491d1a37062b46ee8df165e053421477d63f
Certificate serial: 06E7EAFE
Authority key identifier: A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/ic7hNDdJKidN-B7Xj9Yn9lIXLrg.roa
Signing time: Sat 01 Jan 2022 01:00:42 +0000
ROA not before: Sat 01 Jan 2022 01:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29396
IP address blocks: 185.184.188.0/24 maxlen: 24
185.184.188.0/22 maxlen: 22
194.146.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115862270 (0x6e7eafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11a491d1a37062b46ee8df165e053421477d63f
Validity
Not Before: Jan 1 01:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89cee13437492a274df81ed78fd627f652172eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:d4:22:2f:50:a0:77:10:43:66:b7:fd:ec:
47:8c:76:ea:18:d1:cb:a3:2f:0a:f8:75:04:d0:ae:
e1:14:d6:3a:0e:c6:90:d0:4e:06:dd:ea:09:d7:e4:
04:61:0b:1e:8a:ef:a7:aa:84:00:13:eb:bf:22:13:
8d:a1:95:9f:28:ed:3b:8f:d8:1a:79:3e:e8:0d:0d:
87:c3:23:c8:4d:9a:67:ff:c9:9f:e8:29:91:8c:12:
1f:6b:62:eb:0c:23:0d:43:b4:6f:fb:ad:08:49:61:
6f:0c:3f:56:6a:8c:21:57:45:34:58:8c:ca:41:34:
f5:c0:52:78:b6:6f:7a:43:03:6b:0a:69:a9:b2:78:
97:83:bb:8a:d0:03:64:dc:08:85:05:a2:45:a3:99:
6d:a5:18:86:ed:e0:ae:c1:13:55:3e:f9:44:ea:c8:
6a:e1:9a:af:13:6a:6c:28:90:de:c9:27:6d:e9:10:
91:3a:6c:09:3d:87:26:07:c6:32:3a:18:ca:91:28:
5c:6e:e5:f6:cf:f8:7b:2d:09:1d:73:aa:7c:23:b5:
f8:2a:96:ac:14:d2:60:6a:fe:b1:6c:9b:e0:e5:cb:
f6:c9:75:c2:81:08:90:84:2d:51:f9:0c:b1:18:e2:
fe:fd:d2:b8:39:fb:fe:5e:f5:9f:7d:3b:bb:2b:19:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:E1:34:37:49:2A:27:4D:F8:1E:D7:8F:D6:27:F6:52:17:2E:B8
X509v3 Authority Key Identifier:
keyid:A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/ic7hNDdJKidN-B7Xj9Yn9lIXLrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/22
194.146.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:dc:94:29:32:19:ba:8c:0c:46:7d:06:5e:2e:1f:6f:aa:27:
86:18:8c:72:ca:a2:a8:2f:7c:56:c8:b3:90:0b:d8:e8:0e:bc:
46:b5:0d:8b:fe:4a:95:3a:83:c4:ec:73:f9:e1:e3:de:7a:4f:
6c:3d:83:6a:dc:e0:50:22:cb:9a:be:bf:d0:8b:90:d1:05:ae:
d1:fc:33:38:2e:8f:88:ed:69:6f:e2:7c:99:13:b4:7d:a8:d4:
c9:c5:a9:12:0a:5e:ac:f2:95:93:0b:e2:2a:13:88:0d:9f:bb:
95:cc:5d:e5:ac:b6:7b:27:68:e4:30:e9:74:9b:e7:81:dd:20:
34:66:e3:17:fb:bc:5b:08:f2:3d:59:28:be:ac:e1:f9:ad:b8:
48:96:18:a1:1a:59:25:82:fc:0f:ce:c6:71:e7:d2:63:2d:dd:
e2:2e:ca:ae:9c:7a:45:b5:31:33:ac:2a:35:fe:02:cb:1a:92:
4a:75:eb:50:34:a0:ff:bc:11:ff:0a:90:6f:0e:ed:bd:60:75:
02:2d:21:eb:ed:13:36:40:77:6f:c5:56:17:0d:ea:ad:a3:5d:
52:5d:2d:f1:8c:67:3e:bc:9e:ee:4e:31:ee:81:0c:fa:c0:69:
05:cf:10:86:7e:69:fd:88:33:45:59:0c:e3:3c:10:26:c4:1d:
1e:ae:ac:7b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBufq/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MTFhNDkxZDFhMzcwNjJiNDZlZThkZjE2NWUwNTM0MjE0NzdkNjNmMB4XDTIyMDEw
MTAxMDA0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODljZWUxMzQzNzQ5
MmEyNzRkZjgxZWQ3OGZkNjI3ZjY1MjE3MmViODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdK1CIvUKB3EENmt/3sR4x26hjRy6MvCvh1BNCu4RTWOg7G
kNBOBt3qCdfkBGELHorvp6qEABPrvyITjaGVnyjtO4/YGnk+6A0Nh8MjyE2aZ//J
n+gpkYwSH2ti6wwjDUO0b/utCElhbww/VmqMIVdFNFiMykE09cBSeLZvekMDawpp
qbJ4l4O7itADZNwIhQWiRaOZbaUYhu3grsETVT75ROrIauGarxNqbCiQ3sknbekQ
kTpsCT2HJgfGMjoYypEoXG7l9s/4ey0JHXOqfCO1+CqWrBTSYGr+sWyb4OXL9sl1
woEIkIQtUfkMsRji/v3SuDn7/l71n307uysZX5MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSJzuE0N0kqJ034HteP1if2UhcuuDAfBgNVHSMEGDAWgBShGkkdGjcGK0bu
jfFl4FNCFHfWPzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29ScEpIUm8zQml0RzdvM3haZUJUUWhSMzFqOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvNjA5MTIyLTdiZDMtNDYyMy1hOTZjLWNkYTJhMTYwZDQ1NS8x
L2ljN2hORGRKS2lkTi1CN1hqOVluOWxJWExyZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
NjA5MTIyLTdiZDMtNDYyMy1hOTZjLWNkYTJhMTYwZDQ1NS8xL29ScEpIUm8zQml0
RzdvM3haZUJUUWhSMzFqOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArm4vAMEAMKSfzANBgkqhkiG9w0B
AQsFAAOCAQEAO9yUKTIZuowMRn0GXi4fb6onhhiMcsqiqC98VsizkAvY6A68RrUN
i/5KlTqDxOxz+eHj3npPbD2DatzgUCLLmr6/0IuQ0QWu0fwzOC6PiO1pb+J8mRO0
fajUycWpEgperPKVkwviKhOIDZ+7lcxd5ay2eydo5DDpdJvngd0gNGbjF/u8Wwjy
PVkovqzh+a24SJYYoRpZJYL8D87GcefSYy3d4i7Krpx6RbUxM6wqNf4CyxqSSnXr
UDSg/7wR/wqQbw7tvWB1Ai0h6+0TNkB3b8VWFw3qraNdUl0t8YxnPrye7k4x7oEM
+sBpBc8Qhn5p/YgzRVkM4zwQJsQdHq6sew==
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:09:32 2025 by rpki-client