Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/2pr-_P6iDqjAxA7czCmuypqm4EU.roa
File: 2pr-_P6iDqjAxA7czCmuypqm4EU.roa (raw, json)
Hash identifier: ej7V7a6TRJZtAHiPijn6nzDCvVHx84y+/K94PPrq0S8=
Subject key identifier: DA:9A:FE:FC:FE:A2:0E:A8:C0:C4:0E:DC:CC:29:AE:CA:9A:A6:E0:45
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0194228E29D67955DED1F54DC48890283ACA
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/2pr-_P6iDqjAxA7czCmuypqm4EU.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.155.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:29:d6:79:55:de:d1:f5:4d:c4:88:90:28:3a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da9afefcfea20ea8c0c40edccc29aeca9aa6e045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:73:91:29:27:25:a2:1b:6f:d1:bc:e4:8b:
b2:91:27:99:e5:e9:81:3a:2f:8b:db:e8:fc:fb:b3:
2c:3c:95:0c:70:14:36:b1:bb:1a:3a:5c:30:0b:6e:
17:ae:14:55:65:de:f7:15:07:8a:6d:bc:81:85:0d:
5b:1d:b0:1f:cd:fc:32:ef:fb:93:5a:02:57:69:1c:
b5:a0:c4:97:91:78:9e:1d:f0:5f:23:0f:9b:33:56:
ce:6a:63:e8:4e:84:4a:0e:2b:20:5a:3a:6b:bf:ef:
bf:37:8b:af:31:13:28:80:19:55:20:17:2e:e2:44:
70:0d:a7:81:20:13:a9:06:4d:14:32:87:43:7e:da:
9a:30:1d:4e:58:7f:2f:47:8c:bd:8e:f6:8c:98:15:
67:0f:aa:da:4c:f3:db:28:f7:40:27:02:df:0d:8f:
f3:09:d3:fb:b2:4f:41:4e:e1:42:de:ad:2d:93:84:
c7:a1:a4:12:7a:12:20:aa:37:b7:51:28:66:5f:0d:
90:ef:3d:3a:4e:a3:62:86:62:72:91:4b:5a:33:94:
63:11:4c:b9:89:9d:c1:6e:1a:8e:35:3e:b8:71:fb:
73:fa:70:f8:c3:cb:d9:47:d6:2a:40:84:9d:fe:68:
9e:5f:5a:cc:71:da:46:d0:e4:c6:c5:94:9c:65:d8:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:FE:FC:FE:A2:0E:A8:C0:C4:0E:DC:CC:29:AE:CA:9A:A6:E0:45
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/2pr-_P6iDqjAxA7czCmuypqm4EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:51:b3:bb:d9:e1:cf:3b:4a:e4:41:40:95:94:be:12:f3:d1:
8c:db:4a:1e:ff:ff:e7:21:07:23:c7:73:79:b8:3c:b4:67:d0:
05:94:b0:dc:48:1a:57:a2:11:1e:e7:66:74:8a:d9:11:93:9b:
67:a7:ab:b4:c4:e0:cb:8b:45:52:81:54:79:b2:fc:8c:24:a9:
6d:01:be:6e:2e:36:fc:51:ce:f8:fc:d3:b6:2e:5f:31:f0:77:
66:4a:d9:c5:93:08:78:65:c7:9b:c0:00:24:81:14:12:e5:88:
7d:15:4b:9e:12:aa:58:7c:ff:a7:3d:80:8f:56:12:4f:04:9d:
56:97:74:e2:45:65:ff:51:ed:10:dd:83:4b:cc:70:19:25:ca:
e8:a7:7d:11:b1:44:b3:a5:28:66:91:db:8b:89:4b:cc:21:2e:
d6:14:62:3d:83:9a:55:34:56:a2:bc:95:e7:ca:58:a2:9d:72:
3c:c0:0b:36:3d:cc:7f:3c:a2:7d:af:da:f6:09:4b:08:bd:71:
7a:91:0b:74:6f:58:06:68:c1:0c:71:d8:75:e1:b3:5e:c5:7a:
6b:f9:1f:6c:77:70:f0:50:19:4a:06:97:5b:ae:15:7e:85:0a:
99:8f:cd:98:75:69:3a:d5:34:c9:82:b0:c2:7b:0c:3b:74:20:
fe:a7:21:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijinWeVXe0fVNxIiQKDrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjUwMTAxMTU0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTlhZmVmY2ZlYTIwZWE4YzBjNDBlZGNjYzI5YWVjYTlhYTZlMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtNzkSknJaIbb9G85IuykSeZ5emB
Oi+L2+j8+7MsPJUMcBQ2sbsaOlwwC24XrhRVZd73FQeKbbyBhQ1bHbAfzfwy7/uT
WgJXaRy1oMSXkXieHfBfIw+bM1bOamPoToRKDisgWjprv++/N4uvMRMogBlVIBcu
4kRwDaeBIBOpBk0UModDftqaMB1OWH8vR4y9jvaMmBVnD6raTPPbKPdAJwLfDY/z
CdP7sk9BTuFC3q0tk4THoaQSehIgqje3UShmXw2Q7z06TqNihmJykUtaM5RjEUy5
iZ3BbhqONT64cftz+nD4w8vZR9YqQISd/mieX1rMcdpG0OTGxZScZdhOsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNqa/vz+og6owMQO3MwprsqapuBFMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvMnByLV9QNmlEcWpBeEE3Y3pDbXV5cHFtNEVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZs2MA0G
CSqGSIb3DQEBCwUAA4IBAQAdUbO72eHPO0rkQUCVlL4S89GM20oe///nIQcjx3N5
uDy0Z9AFlLDcSBpXohEe52Z0itkRk5tnp6u0xODLi0VSgVR5svyMJKltAb5uLjb8
Uc74/NO2Ll8x8HdmStnFkwh4ZcebwAAkgRQS5Yh9FUueEqpYfP+nPYCPVhJPBJ1W
l3TiRWX/Ue0Q3YNLzHAZJcrop30RsUSzpShmkduLiUvMIS7WFGI9g5pVNFaivJXn
yliinXI8wAs2Pcx/PKJ9r9r2CUsIvXF6kQt0b1gGaMEMcdh14bNexXpr+R9sd3Dw
UBlKBpdbrhV+hQqZj82YdWk61TTJgrDCeww7dCD+pyEY
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:40 2025 by rpki-client