Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/71ShF1BCLjj0zaSeXk0AMT8blX8.roa
File: 71ShF1BCLjj0zaSeXk0AMT8blX8.roa (raw, json)
Hash identifier: e2hez6w1xM1fmLGyeGjPMPTWmBAzD8pwvbWMd9Ngygs=
Subject key identifier: EF:54:A1:17:50:42:2E:38:F4:CD:A4:9E:5E:4D:00:31:3F:1B:95:7F
Certificate issuer: /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial: 019425FD51061E26107AE804C348205BD11D
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/71ShF1BCLjj0zaSeXk0AMT8blX8.roa
Signing time: Thu 02 Jan 2025 07:49:05 +0000
ROA not before: Thu 02 Jan 2025 07:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204156
IP address blocks: 188.214.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:51:06:1e:26:10:7a:e8:04:c3:48:20:5b:d1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef54a11750422e38f4cda49e5e4d00313f1b957f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:5c:5b:66:8b:eb:ed:72:34:44:8f:b2:13:
32:d5:11:01:43:ef:3d:16:cd:00:05:01:9d:60:c2:
85:a0:d9:d6:7b:74:71:5e:1b:a9:4e:3f:ec:61:23:
55:a8:5b:f3:b8:32:8a:83:33:f3:cc:d2:b2:66:ea:
97:04:7e:fd:df:9b:4a:89:5b:09:7e:a3:dd:32:69:
75:1e:00:2d:8e:ab:a7:d3:7e:37:31:0c:b1:15:79:
9b:56:ef:f1:44:62:f4:ca:db:48:41:dc:2a:18:19:
65:63:03:72:86:15:72:ee:16:1e:17:5f:e3:89:6f:
1f:73:3a:a7:96:42:9e:18:6e:58:de:b9:a4:70:8a:
dc:71:11:6d:e9:63:b0:d7:b2:de:d0:65:9e:4f:d5:
27:e0:fc:72:29:36:70:08:ff:65:9c:bd:4c:b6:17:
35:ce:79:8e:5b:6f:19:1c:26:3f:75:b7:f0:2e:e0:
e4:87:11:23:64:0e:8f:a6:6f:5c:65:03:00:58:40:
43:22:73:f7:49:a7:ef:27:73:2c:a7:1d:ba:f6:12:
34:f6:03:28:fb:1f:44:8a:a9:f5:e8:7b:ff:cf:2f:
a5:51:14:50:43:97:35:f0:be:90:3b:da:f3:4b:16:
39:97:a5:a1:bd:86:54:96:37:11:b9:18:dd:79:d3:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:A1:17:50:42:2E:38:F4:CD:A4:9E:5E:4D:00:31:3F:1B:95:7F
X509v3 Authority Key Identifier:
keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/71ShF1BCLjj0zaSeXk0AMT8blX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8d:e0:07:e7:7f:14:cb:06:b6:cd:d5:f6:ba:77:a9:34:21:
f9:d2:da:b7:67:e8:28:58:87:45:39:fe:ce:76:cf:53:f4:43:
37:06:00:b0:41:58:f6:f1:b4:64:37:6c:06:e2:d6:08:34:ad:
24:b9:06:1a:b5:9d:e8:63:0f:15:cf:f5:53:c1:6b:bf:00:0a:
f7:7d:44:da:14:31:c4:51:ef:fc:89:46:87:08:c7:9c:90:b5:
9f:e2:62:92:4f:87:14:e6:e7:0e:2e:11:71:b7:57:98:bc:60:
34:42:9a:9e:f5:18:22:a6:74:0d:9e:96:60:fe:02:af:2e:11:
27:b9:10:32:61:09:74:17:8f:fd:03:20:64:d4:10:83:84:b8:
6c:91:45:dd:8b:0f:f0:6a:8a:4e:a7:28:7f:fe:da:99:41:51:
0b:7b:50:cc:e0:20:b5:96:8e:80:7c:0b:70:ae:30:ab:a9:87:
76:12:b9:e6:d4:91:82:05:09:b4:87:6a:42:fa:dd:75:8d:5c:
ea:8b:0d:3d:e8:78:a8:33:43:d4:f6:f3:d8:c7:40:42:a8:65:
b8:c7:4a:1e:3f:c0:f4:45:6c:49:64:4e:aa:d2:8f:72:2b:5d:
e2:8e:d4:21:6c:9c:4b:a3:ac:df:1a:74:c7:46:d9:53:2a:e1:
61:1d:81:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/VEGHiYQeugEw0ggW9EdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzkwYzdlY2YyNGQyOGJlMmUxM2ZlMDY5MTE4Y2VlMjdk
NTgwMDIwHhcNMjUwMTAyMDc0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjU0YTExNzUwNDIyZTM4ZjRjZGE0OWU1ZTRkMDAzMTNmMWI5NTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5ZcW2aL6+1yNESPshMy1REBQ+89
Fs0ABQGdYMKFoNnWe3RxXhupTj/sYSNVqFvzuDKKgzPzzNKyZuqXBH7935tKiVsJ
fqPdMml1HgAtjqun0343MQyxFXmbVu/xRGL0yttIQdwqGBllYwNyhhVy7hYeF1/j
iW8fczqnlkKeGG5Y3rmkcIrccRFt6WOw17Le0GWeT9Un4PxyKTZwCP9lnL1Mthc1
znmOW28ZHCY/dbfwLuDkhxEjZA6Ppm9cZQMAWEBDInP3SafvJ3Mspx269hI09gMo
+x9Eiqn16Hv/zy+lURRQQ5c18L6QO9rzSxY5l6WhvYZUljcRuRjdedOuZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9UoRdQQi449M2knl5NADE/G5V/MB8GA1UdIwQY
MBaAFHV5DH7PJNKL4uE/4GkRjO4n1YACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80OTZkNTYtODZmZi00OGJlLWJkZTMt
MjcxZmRlMmRjNjU1LzEvNzFTaEYxQkNMamowemFTZVhrMEFNVDhibFg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80OTZkNTYtODZmZi00OGJlLWJkZTMtMjcxZmRlMmRjNjU1
LzEvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNZcMA0G
CSqGSIb3DQEBCwUAA4IBAQAajeAH538Uywa2zdX2unepNCH50tq3Z+goWIdFOf7O
ds9T9EM3BgCwQVj28bRkN2wG4tYINK0kuQYatZ3oYw8Vz/VTwWu/AAr3fUTaFDHE
Ue/8iUaHCMeckLWf4mKST4cU5ucOLhFxt1eYvGA0Qpqe9RgipnQNnpZg/gKvLhEn
uRAyYQl0F4/9AyBk1BCDhLhskUXdiw/waopOpyh//tqZQVELe1DM4CC1lo6AfAtw
rjCrqYd2Ernm1JGCBQm0h2pC+t11jVzqiw096HioM0PU9vPYx0BCqGW4x0oeP8D0
RWxJZE6q0o9yK13ijtQhbJxLo6zfGnTHRtlTKuFhHYHC
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:26:46 2025 by rpki-client