Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MyqMD_-EsPzdxYyBWA2LUi8CuDk.roa
File: MyqMD_-EsPzdxYyBWA2LUi8CuDk.roa (raw, json)
Hash identifier: 1FbfApOE+L2zWYjuubNHPXrfCYJSpAaKeFtRuB/xKtA=
Subject key identifier: 33:2A:8C:0F:FF:84:B0:FC:DD:C5:8C:81:58:0D:8B:52:2F:02:B8:39
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193F404F6FF384E18D8B5061FE36981DD3C
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MyqMD_-EsPzdxYyBWA2LUi8CuDk.roa
Signing time: Mon 23 Dec 2024 14:56:26 +0000
ROA not before: Mon 23 Dec 2024 14:56:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137263
IP address blocks: 185.122.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:04:f6:ff:38:4e:18:d8:b5:06:1f:e3:69:81:dd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 23 14:56:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=332a8c0fff84b0fcddc58c81580d8b522f02b839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:c2:09:be:8b:84:af:fd:e1:69:53:59:56:
0b:4f:17:1d:d4:b3:71:6f:49:f5:69:c7:a1:bf:7b:
0d:21:5b:9c:62:a0:7b:c5:17:88:82:f1:ad:d1:e2:
be:ab:8b:94:f1:47:8c:30:39:8a:5d:87:f3:d6:f6:
a5:8d:9b:3f:dd:c3:45:66:96:d8:8d:70:11:04:1c:
4e:c7:00:d9:67:64:f8:4a:f7:b3:09:a0:82:36:3a:
6f:a0:d9:df:45:45:3e:89:b6:cd:e0:57:f7:80:9c:
68:6c:a8:44:47:24:1f:5e:1f:35:64:10:ed:f0:94:
fc:b5:3e:6f:16:57:17:fc:56:e3:dc:4a:b9:3b:58:
b3:aa:40:1a:6f:2c:26:e9:34:db:10:d5:fa:88:df:
92:e8:89:59:c8:50:60:9b:b2:0c:c7:9b:34:e7:cd:
ba:40:38:08:39:84:dc:ad:15:7f:7f:9f:4d:36:4d:
ee:cf:26:33:15:52:12:76:5b:09:be:bd:25:1c:9c:
70:61:52:69:51:b0:a0:2b:24:08:92:c9:04:21:0e:
a5:3d:d2:c3:5d:b5:02:70:c3:ee:19:d9:2d:ef:c0:
62:77:47:a1:fe:e3:70:10:d4:93:35:67:43:58:74:
8e:f5:8f:b5:97:75:a5:4d:e0:60:05:e8:85:3f:97:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:8C:0F:FF:84:B0:FC:DD:C5:8C:81:58:0D:8B:52:2F:02:B8:39
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MyqMD_-EsPzdxYyBWA2LUi8CuDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2e:03:de:6f:5a:51:ab:05:ac:d4:12:9a:f7:53:a4:37:f6:
78:0d:ce:ac:bf:99:c8:49:43:aa:a0:f7:32:87:d9:84:f3:c9:
ec:29:8c:a3:7a:d5:9f:6e:a1:ed:75:c2:3e:cd:fa:ee:15:21:
cb:64:bf:90:c0:79:04:38:09:34:c4:df:cb:78:08:08:4a:54:
ae:64:69:d1:e7:4d:2a:f5:7f:cd:8d:d9:ed:8c:dc:a1:d4:d3:
cf:58:4d:2d:86:aa:34:ed:4d:99:c7:89:67:b5:86:7f:fe:82:
d4:4d:3a:e7:86:fb:b1:6f:5b:c9:e7:0a:44:d2:70:20:c0:e3:
38:37:f6:c7:27:97:cd:99:29:5f:cb:22:3f:3c:c6:67:db:56:
17:b7:ff:5b:5e:57:64:d5:04:70:bb:61:c9:14:2f:f0:40:0d:
21:09:49:ef:72:7c:85:f5:85:73:aa:ea:2e:f4:b0:75:4f:75:
e6:1c:fa:47:51:bc:47:11:61:01:e6:28:a6:d3:91:76:84:c5:
3b:60:ab:29:38:8c:62:c6:bc:88:96:fa:7f:34:d2:34:7b:8a:
25:2e:4f:cc:4f:e5:16:59:12:c7:ec:a5:15:28:c0:ec:a6:6b:
47:68:a9:da:37:82:d2:19:19:62:6b:d7:08:91:e1:9a:21:5c:
4f:03:c5:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZP0BPb/OE4Y2LUGH+Npgd08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjQxMjIzMTQ1NjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzJhOGMwZmZmODRiMGZjZGRjNThjODE1ODBkOGI1MjJmMDJiODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcbCCb6LhK/94WlTWVYLTxcd1LNx
b0n1acehv3sNIVucYqB7xReIgvGt0eK+q4uU8UeMMDmKXYfz1valjZs/3cNFZpbY
jXARBBxOxwDZZ2T4SvezCaCCNjpvoNnfRUU+ibbN4Ff3gJxobKhERyQfXh81ZBDt
8JT8tT5vFlcX/Fbj3Eq5O1izqkAabywm6TTbENX6iN+S6IlZyFBgm7IMx5s05826
QDgIOYTcrRV/f59NNk3uzyYzFVISdlsJvr0lHJxwYVJpUbCgKyQIkskEIQ6lPdLD
XbUCcMPuGdkt78Bid0eh/uNwENSTNWdDWHSO9Y+1l3WlTeBgBeiFP5dRCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMqjA//hLD83cWMgVgNi1IvArg5MB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvTXlxTURfLUVzUHpkeFl5QldBMkxVaThDdURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXrPMA0G
CSqGSIb3DQEBCwUAA4IBAQCFLgPeb1pRqwWs1BKa91OkN/Z4Dc6sv5nISUOqoPcy
h9mE88nsKYyjetWfbqHtdcI+zfruFSHLZL+QwHkEOAk0xN/LeAgISlSuZGnR500q
9X/NjdntjNyh1NPPWE0thqo07U2Zx4lntYZ//oLUTTrnhvuxb1vJ5wpE0nAgwOM4
N/bHJ5fNmSlfyyI/PMZn21YXt/9bXldk1QRwu2HJFC/wQA0hCUnvcnyF9YVzquou
9LB1T3XmHPpHUbxHEWEB5iim05F2hMU7YKspOIxixryIlvp/NNI0e4olLk/MT+UW
WRLH7KUVKMDspmtHaKnaN4LSGRlia9cIkeGaIVxPA8XZ
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:49:16 2025 by rpki-client