Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/4gysLe4WIdy5GF5GpusvwPbIGPk.roa
File: 4gysLe4WIdy5GF5GpusvwPbIGPk.roa (raw, json)
Hash identifier: H79f76jJStStQIyOaK533fnEfOTKcfep9iPnZ9+a56E=
Subject key identifier: E2:0C:AC:2D:EE:16:21:DC:B9:18:5E:46:A6:EB:2F:C0:F6:C8:18:F9
Certificate issuer: /CN=1ac119ecfed677b267ef3e205fd3d035f3f31979
Certificate serial: 018CC5DC9BFAEB6FB3EB65795CE65417F944
Authority key identifier: 1A:C1:19:EC:FE:D6:77:B2:67:EF:3E:20:5F:D3:D0:35:F3:F3:19:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/4gysLe4WIdy5GF5GpusvwPbIGPk.roa
Signing time: Mon 01 Jan 2024 16:30:18 +0000
ROA not before: Mon 01 Jan 2024 16:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57878
IP address blocks: 185.115.206.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9b:fa:eb:6f:b3:eb:65:79:5c:e6:54:17:f9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac119ecfed677b267ef3e205fd3d035f3f31979
Validity
Not Before: Jan 1 16:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e20cac2dee1621dcb9185e46a6eb2fc0f6c818f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:42:82:f2:88:6e:7f:b3:11:af:c3:ba:7a:
8e:13:58:b7:58:1f:7b:eb:c7:f3:d8:66:fb:c8:b8:
b4:20:cb:2c:93:4e:97:3f:17:5f:f1:f5:73:48:ea:
81:c5:d6:4e:72:69:93:50:76:06:52:d6:89:97:1c:
fc:58:fa:b8:60:35:30:19:cc:af:ce:cf:51:be:56:
5e:f1:db:67:96:2d:0a:be:4b:24:66:d9:86:76:fd:
8c:61:db:81:79:a1:b5:2c:6b:d5:a9:2b:2b:43:e9:
6f:6c:5f:d4:de:aa:d4:4d:c9:91:11:00:a7:0a:c7:
f5:ae:64:a7:bd:c9:e2:da:4d:c5:e1:9b:9f:b3:3f:
6c:74:41:ac:08:28:a3:84:56:08:89:ad:f4:ae:dd:
eb:12:7a:a5:8a:2a:42:1f:58:c0:d0:ba:84:21:d9:
2e:a4:f7:49:04:ef:dd:de:9a:27:96:fe:35:14:89:
ef:39:50:92:dc:97:6c:ed:b7:76:4a:0c:90:8d:65:
de:e9:a8:01:49:6c:12:74:1e:cf:1e:f9:bd:1a:02:
9f:0c:fb:ab:bb:ac:dc:f3:37:35:ef:99:de:31:48:
29:40:1d:96:9b:e5:7c:ef:99:df:dd:48:c2:24:8e:
a3:ef:bb:21:eb:31:7f:6b:56:10:28:5d:15:e8:c8:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:AC:2D:EE:16:21:DC:B9:18:5E:46:A6:EB:2F:C0:F6:C8:18:F9
X509v3 Authority Key Identifier:
keyid:1A:C1:19:EC:FE:D6:77:B2:67:EF:3E:20:5F:D3:D0:35:F3:F3:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/4gysLe4WIdy5GF5GpusvwPbIGPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e6:41:78:fe:10:c0:dc:6d:da:c4:df:6e:6c:ee:87:4e:03:
68:cc:a9:96:2b:39:d0:4d:17:4c:e8:b0:2e:f7:33:12:be:46:
3b:c6:3b:ec:23:17:51:77:0e:58:ab:1d:13:33:98:35:93:5b:
fc:24:c7:a6:17:5b:3f:16:92:57:0b:46:1b:1c:a9:56:d8:4d:
92:52:0d:50:05:b4:0e:7f:98:4a:35:96:db:a1:91:73:ff:8f:
e8:f4:c0:fd:5b:cc:1d:72:96:7c:01:de:58:27:27:3e:af:87:
6f:58:71:ee:2c:43:ae:8f:a6:c8:f2:7a:8a:c3:e8:dc:27:c5:
a2:12:86:95:96:0e:fe:dd:4f:e4:52:26:7c:76:93:d6:ef:59:
c9:79:7d:14:65:6f:1d:1f:82:6f:ae:e1:4a:af:f9:4a:7b:b3:
67:d6:4b:45:e1:6a:0b:34:a8:ff:63:28:4d:42:47:a5:75:8c:
dc:c1:f9:c4:be:ef:62:26:56:27:ad:d3:68:16:c4:31:7e:97:
ae:a4:ac:e4:90:a8:72:5e:88:a3:b8:62:ea:3b:17:49:7e:68:
ee:7f:3a:ea:8a:2a:a9:0e:4e:b5:da:f0:0e:4a:e2:6c:e2:22:
fc:57:df:68:6a:ca:7f:7a:ed:32:a5:93:b3:b4:f4:cc:d1:06:
6e:fb:b0:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3Jv662+z62V5XOZUF/lEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYzExOWVjZmVkNjc3YjI2N2VmM2UyMDVmZDNkMDM1ZjNm
MzE5NzkwHhcNMjQwMTAxMTYzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjBjYWMyZGVlMTYyMWRjYjkxODVlNDZhNmViMmZjMGY2YzgxOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7lCgvKIbn+zEa/DunqOE1i3WB97
68fz2Gb7yLi0IMssk06XPxdf8fVzSOqBxdZOcmmTUHYGUtaJlxz8WPq4YDUwGcyv
zs9RvlZe8dtnli0KvkskZtmGdv2MYduBeaG1LGvVqSsrQ+lvbF/U3qrUTcmREQCn
Csf1rmSnvcni2k3F4Zufsz9sdEGsCCijhFYIia30rt3rEnqliipCH1jA0LqEIdku
pPdJBO/d3ponlv41FInvOVCS3Jds7bd2SgyQjWXe6agBSWwSdB7PHvm9GgKfDPur
u6zc8zc175neMUgpQB2Wm+V875nf3UjCJI6j77sh6zF/a1YQKF0V6MgkdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOIMrC3uFiHcuRheRqbrL8D2yBj5MB8GA1UdIwQY
MBaAFBrBGez+1neyZ+8+IF/T0DXz8xl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NFWjdQN1dkN0puN3o0Z1g5UFFOZlB6R1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hNzJlM2EtMDVkNi00ZTBjLWI1YTct
MmU5MDA3NmI1ZTcxLzEvNGd5c0xlNFdJZHk1R0Y1R3B1c3Z3UGJJR1BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9hNzJlM2EtMDVkNi00ZTBjLWI1YTctMmU5MDA3NmI1ZTcx
LzEvR3NFWjdQN1dkN0puN3o0Z1g5UFFOZlB6R1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXPOMA0G
CSqGSIb3DQEBCwUAA4IBAQAP5kF4/hDA3G3axN9ubO6HTgNozKmWKznQTRdM6LAu
9zMSvkY7xjvsIxdRdw5Yqx0TM5g1k1v8JMemF1s/FpJXC0YbHKlW2E2SUg1QBbQO
f5hKNZbboZFz/4/o9MD9W8wdcpZ8Ad5YJyc+r4dvWHHuLEOuj6bI8nqKw+jcJ8Wi
EoaVlg7+3U/kUiZ8dpPW71nJeX0UZW8dH4JvruFKr/lKe7Nn1ktF4WoLNKj/YyhN
QkeldYzcwfnEvu9iJlYnrdNoFsQxfpeupKzkkKhyXoijuGLqOxdJfmjufzrqiiqp
Dk612vAOSuJs4iL8V99oasp/eu0ypZOztPTM0QZu+7B6
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:16 2025 by rpki-client