Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/T0kHCX6-ic9U55kwmuTa4PJx2U8.roa
File: T0kHCX6-ic9U55kwmuTa4PJx2U8.roa (raw, json)
Hash identifier: HUIsrCNwkO4XV5iqnawhTGKYfzUSpbvQRuvV7VTCMCE=
Subject key identifier: 4F:49:07:09:7E:BE:89:CF:54:E7:99:30:9A:E4:DA:E0:F2:71:D9:4F
Certificate issuer: /CN=843d8aa1269d1a3f3321335860c67c7e08677dc5
Certificate serial: 0191040C5D291B8B4840C261F5834E67D4D2
Authority key identifier: 84:3D:8A:A1:26:9D:1A:3F:33:21:33:58:60:C6:7C:7E:08:67:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/T0kHCX6-ic9U55kwmuTa4PJx2U8.roa
Signing time: Tue 30 Jul 2024 14:30:04 +0000
ROA not before: Tue 30 Jul 2024 14:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 185.173.44.0/24 maxlen: 24
185.173.46.0/24 maxlen: 24
185.173.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:0c:5d:29:1b:8b:48:40:c2:61:f5:83:4e:67:d4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d8aa1269d1a3f3321335860c67c7e08677dc5
Validity
Not Before: Jul 30 14:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f4907097ebe89cf54e799309ae4dae0f271d94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:fe:8c:d6:d5:a9:3a:d0:a1:45:a4:6e:2e:
a5:ae:1d:57:1a:98:64:2c:08:30:ef:b1:ca:94:91:
67:da:66:93:e5:30:c1:a6:77:7e:6e:8c:62:a8:d0:
cd:68:30:47:91:b9:2b:cd:f9:38:18:da:4e:9d:86:
69:06:de:30:5e:79:26:9c:64:69:9d:b2:67:a8:1b:
6d:d6:a7:c4:48:b5:84:49:9b:35:54:2a:9e:73:33:
2a:a0:16:8a:73:ea:52:c1:a9:cd:50:50:6e:48:9c:
bb:d6:d6:ab:02:ce:d6:cb:fc:03:ea:7a:d4:32:ea:
48:81:63:39:d3:44:56:0d:d2:09:aa:23:1e:ce:9c:
1d:df:3d:e2:33:32:7e:d4:22:61:e5:e5:b2:09:1a:
42:1a:ce:13:f3:e5:65:9c:07:37:5e:7b:13:6e:b9:
c7:80:b4:a7:1a:e6:93:03:e2:c1:15:8b:72:ea:e9:
ba:dc:e2:fc:26:87:87:74:ff:35:59:ca:58:55:48:
66:a1:65:04:2f:72:74:60:46:71:1e:0f:65:41:04:
68:7d:42:1f:7d:84:61:03:26:11:fe:7a:bc:24:3d:
73:fe:53:3f:48:e4:6b:c5:39:18:9d:c6:3b:c8:26:
b3:b2:ae:a7:55:af:00:9d:23:bb:ae:b1:cb:20:8e:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:07:09:7E:BE:89:CF:54:E7:99:30:9A:E4:DA:E0:F2:71:D9:4F
X509v3 Authority Key Identifier:
keyid:84:3D:8A:A1:26:9D:1A:3F:33:21:33:58:60:C6:7C:7E:08:67:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/T0kHCX6-ic9U55kwmuTa4PJx2U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/hD2KoSadGj8zITNYYMZ8fghnfcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.44.0/24
185.173.46.0/23
Signature Algorithm: sha256WithRSAEncryption
91:e3:62:e9:ce:e4:e6:93:02:3b:51:3b:86:fa:fe:f6:28:41:
44:2a:53:e3:1c:f5:e9:26:14:47:09:91:b5:d6:25:8b:14:95:
ec:e8:75:83:78:87:47:37:1b:1c:2f:40:4c:6d:1f:b0:26:aa:
cc:04:00:fa:68:36:35:bd:15:02:30:32:76:95:e0:96:34:40:
80:53:28:30:84:27:44:1d:7c:a4:88:bb:00:30:63:cc:11:f8:
0b:1d:1c:03:50:97:63:0e:f6:66:66:83:72:ca:17:29:6d:1d:
38:7f:3b:95:56:a2:11:bf:47:22:61:e9:f3:6a:9e:19:bb:9d:
6d:1c:e4:93:f6:7b:14:6c:e7:ce:22:0c:f7:e1:2f:d1:76:b1:
8e:f1:11:a1:ae:a3:23:f1:08:11:be:1d:bd:5e:0a:48:82:fc:
5d:7c:07:41:7b:04:22:0e:5e:80:e8:96:09:43:3c:49:7f:0e:
16:bf:64:22:68:d3:ba:aa:fb:b0:f5:16:bd:88:3c:29:96:d4:
fd:da:0a:4d:83:a1:d6:5d:cd:ab:ce:56:87:1a:8b:26:d9:9b:
3a:3d:58:85:c6:d6:49:10:0c:2c:b5:ea:82:8d:b7:71:be:95:
a1:49:e6:33:47:6b:21:bb:ed:a3:fe:cb:03:e5:fc:21:7e:67:
62:f4:33:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEEDF0pG4tIQMJh9YNOZ9TSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2Q4YWExMjY5ZDFhM2YzMzIxMzM1ODYwYzY3YzdlMDg2
NzdkYzUwHhcNMjQwNzMwMTQzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjQ5MDcwOTdlYmU4OWNmNTRlNzk5MzA5YWU0ZGFlMGYyNzFkOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpD+jNbVqTrQoUWkbi6lrh1XGphk
LAgw77HKlJFn2maT5TDBpnd+boxiqNDNaDBHkbkrzfk4GNpOnYZpBt4wXnkmnGRp
nbJnqBtt1qfESLWESZs1VCqeczMqoBaKc+pSwanNUFBuSJy71tarAs7Wy/wD6nrU
MupIgWM500RWDdIJqiMezpwd3z3iMzJ+1CJh5eWyCRpCGs4T8+VlnAc3XnsTbrnH
gLSnGuaTA+LBFYty6um63OL8JoeHdP81WcpYVUhmoWUEL3J0YEZxHg9lQQRofUIf
fYRhAyYR/nq8JD1z/lM/SORrxTkYncY7yCazsq6nVa8AnSO7rrHLII6fWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE9JBwl+vonPVOeZMJrk2uDycdlPMB8GA1UdIwQY
MBaAFIQ9iqEmnRo/MyEzWGDGfH4IZ33FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQyS29TYWRHajh6SVROWVlNWjhmZ2huZmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNTRlMzItNzA1YS00ZTdhLTk1MTMt
Yjk3OGJmYzc1MmFiLzEvVDBrSENYNi1pYzlVNTVrd211VGE0UEp4MlU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNTRlMzItNzA1YS00ZTdhLTk1MTMtYjk3OGJmYzc1MmFi
LzEvaEQyS29TYWRHajh6SVROWVlNWjhmZ2huZmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAua0sAwQB
ua0uMA0GCSqGSIb3DQEBCwUAA4IBAQCR42LpzuTmkwI7UTuG+v72KEFEKlPjHPXp
JhRHCZG11iWLFJXs6HWDeIdHNxscL0BMbR+wJqrMBAD6aDY1vRUCMDJ2leCWNECA
UygwhCdEHXykiLsAMGPMEfgLHRwDUJdjDvZmZoNyyhcpbR04fzuVVqIRv0ciYenz
ap4Zu51tHOST9nsUbOfOIgz34S/RdrGO8RGhrqMj8QgRvh29XgpIgvxdfAdBewQi
Dl6A6JYJQzxJfw4Wv2QiaNO6qvuw9Ra9iDwpltT92gpNg6HWXc2rzlaHGosm2Zs6
PViFxtZJEAwsteqCjbdxvpWhSeYzR2shu+2j/ssD5fwhfmdi9DOE
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:15 2025 by rpki-client