Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/yktT3MV9AiIBE3M34FYtZMwSI5k.roa
File: yktT3MV9AiIBE3M34FYtZMwSI5k.roa (raw, json)
Hash identifier: 0tuJaBzrN6j39v8XLYl6+n9NkBVxZPhClCLdCCRvF4U=
Subject key identifier: CA:4B:53:DC:C5:7D:02:22:01:13:73:37:E0:56:2D:64:CC:12:23:99
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 018C86BD0F4E1C0B251D693A1F3BA763A24E
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/yktT3MV9AiIBE3M34FYtZMwSI5k.roa
Signing time: Wed 20 Dec 2023 10:19:46 +0000
ROA not before: Wed 20 Dec 2023 10:19:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.13.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:bd:0f:4e:1c:0b:25:1d:69:3a:1f:3b:a7:63:a2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Dec 20 10:19:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca4b53dcc57d022201137337e0562d64cc122399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:cf:a8:68:fd:fe:f0:14:a8:f1:56:36:d0:
41:49:35:55:3c:8b:28:fe:62:a7:20:73:9b:35:48:
cb:45:08:95:90:09:e4:50:2a:40:79:e1:b3:6a:13:
4e:56:3d:56:11:2b:10:c7:b9:c6:67:63:58:3f:af:
d6:2a:97:41:bb:7a:4a:63:5e:aa:3a:89:89:0e:24:
88:7d:0e:a9:32:46:39:97:1f:8a:37:0e:7d:cd:d2:
a4:a7:67:ab:46:1f:83:3d:cd:bd:87:6b:b5:7b:cd:
8a:30:c2:90:aa:f9:85:fc:0b:2a:75:2d:cb:9f:9e:
b2:63:13:cb:8a:75:9f:a1:a6:13:59:30:f5:dc:8e:
ee:e1:b5:f8:0d:07:da:61:de:e7:8b:d0:f4:eb:5a:
8f:13:9b:bc:aa:19:fc:94:d6:93:6d:59:f5:e7:36:
3e:fc:51:c0:2d:31:d8:c6:44:ca:7a:4b:5d:df:72:
d0:50:95:b6:3f:1d:f2:23:84:a0:1c:40:eb:e5:23:
5d:06:f2:54:b6:4c:eb:f8:e2:69:87:f3:38:76:75:
02:db:0a:d0:d0:3a:45:42:28:30:db:7a:a7:e3:a7:
3c:79:51:0e:db:a6:8b:80:07:3d:30:15:79:e1:83:
a2:a0:bc:62:6a:4e:e4:06:8d:3e:0f:ef:9e:3a:0d:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4B:53:DC:C5:7D:02:22:01:13:73:37:E0:56:2D:64:CC:12:23:99
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/yktT3MV9AiIBE3M34FYtZMwSI5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:17:c2:7d:a1:95:76:49:8c:8d:1d:28:f1:6c:52:48:e9:b7:
08:be:13:39:66:8e:77:29:14:06:26:73:40:cb:cf:a9:11:ed:
32:28:39:8f:17:91:80:af:48:94:d2:95:0d:f1:2e:b3:0a:95:
28:e4:34:e3:9b:70:22:b5:47:fc:dc:f7:e0:ea:50:94:37:22:
32:c7:c9:65:89:e7:a6:d5:dd:04:de:3f:54:bf:b2:15:40:00:
47:f9:53:4f:e6:ac:13:2f:41:68:9e:dc:e8:78:6e:03:a6:4d:
9d:02:ac:77:41:8a:b0:63:d7:eb:fd:83:2c:03:4d:b4:6d:4e:
b5:87:cb:0d:5c:80:ac:cc:13:92:58:dc:4c:4a:c2:58:6c:78:
55:d6:2e:96:b4:f7:c4:13:80:26:a4:22:d3:04:5e:8d:c3:92:
20:29:fa:68:ad:fc:f1:b0:cb:c9:02:61:32:03:96:85:8f:14:
c1:eb:31:cd:90:76:e7:4b:ec:ec:c3:c5:b3:13:ef:69:fe:bf:
a9:e1:61:31:a5:13:ab:ac:19:db:db:fe:82:d7:22:4f:0c:da:
bd:83:dc:51:e9:12:f3:13:36:33:ee:86:3a:dc:35:35:a7:f1:
ac:a5:e3:31:5a:84:f4:b9:d6:bf:53:ae:7f:6c:f6:f5:f6:ac:
2e:96:47:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyGvQ9OHAslHWk6HzunY6JOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTgyYmUyMDBmMmVkOWJlNDBmYzk4M2Q5NGQ5YzcyNjM1
MGE5ZDkwHhcNMjMxMjIwMTAxOTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTRiNTNkY2M1N2QwMjIyMDExMzczMzdlMDU2MmQ2NGNjMTIyMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrvPqGj9/vAUqPFWNtBBSTVVPIso
/mKnIHObNUjLRQiVkAnkUCpAeeGzahNOVj1WESsQx7nGZ2NYP6/WKpdBu3pKY16q
OomJDiSIfQ6pMkY5lx+KNw59zdKkp2erRh+DPc29h2u1e82KMMKQqvmF/AsqdS3L
n56yYxPLinWfoaYTWTD13I7u4bX4DQfaYd7ni9D061qPE5u8qhn8lNaTbVn15zY+
/FHALTHYxkTKektd33LQUJW2Px3yI4SgHEDr5SNdBvJUtkzr+OJph/M4dnUC2wrQ
0DpFQigw23qn46c8eVEO26aLgAc9MBV54YOioLxiak7kBo0+D++eOg3p2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpLU9zFfQIiARNzN+BWLWTMEiOZMB8GA1UdIwQY
MBaAFBWYK+IA8u2b5A/Jg9lNnHJjUKnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpncjRnRHk3WnZrRDhtRDJVMmNjbU5RcWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zMGU2NTMtOWMwYi00MTY0LTlhN2Qt
Y2E3ZTZjM2FlOGNlLzEveWt0VDNNVjlBaUlCRTNNMzRGWXRaTXdTSTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zMGU2NTMtOWMwYi00MTY0LTlhN2QtY2E3ZTZjM2FlOGNl
LzEvRlpncjRnRHk3WnZrRDhtRDJVMmNjbU5RcWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ3iMA0G
CSqGSIb3DQEBCwUAA4IBAQCNF8J9oZV2SYyNHSjxbFJI6bcIvhM5Zo53KRQGJnNA
y8+pEe0yKDmPF5GAr0iU0pUN8S6zCpUo5DTjm3AitUf83Pfg6lCUNyIyx8llieem
1d0E3j9Uv7IVQABH+VNP5qwTL0FontzoeG4Dpk2dAqx3QYqwY9fr/YMsA020bU61
h8sNXICszBOSWNxMSsJYbHhV1i6WtPfEE4AmpCLTBF6Nw5IgKfporfzxsMvJAmEy
A5aFjxTB6zHNkHbnS+zsw8WzE+9p/r+p4WExpROrrBnb2/6C1yJPDNq9g9xR6RLz
EzYz7oY63DU1p/GspeMxWoT0uda/U65/bPb19qwulkeR
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:40 2025 by rpki-client