Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/lJBmTW8FTOWG5bBWR8vdOqdrwQk.roa
File: lJBmTW8FTOWG5bBWR8vdOqdrwQk.roa (raw, json)
Hash identifier: gYiHrOFTB30VdE3AKynt4alzsBfoibVKaBD10n5gyVU=
Subject key identifier: 94:90:66:4D:6F:05:4C:E5:86:E5:B0:56:47:CB:DD:3A:A7:6B:C1:09
Certificate issuer: /CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Certificate serial: 18475E
Authority key identifier: 67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/lJBmTW8FTOWG5bBWR8vdOqdrwQk.roa
Signing time: Fri 04 Feb 2022 14:22:14 +0000
ROA not before: Fri 04 Feb 2022 14:22:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57427
IP address blocks: 185.11.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591134 (0x18475e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Validity
Not Before: Feb 4 14:22:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9490664d6f054ce586e5b05647cbdd3aa76bc109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:41:86:ba:79:cb:4f:65:ac:07:27:74:68:
74:b2:8b:14:a9:1d:7d:b0:b9:7e:ce:a7:96:7e:16:
e2:76:46:2d:51:42:c9:1a:77:31:78:ab:d1:41:07:
58:42:39:8c:17:5d:38:df:dc:b6:23:57:90:d6:e5:
89:09:40:56:31:f0:ac:1a:05:89:e4:d5:fb:dd:6e:
d9:39:48:75:e3:60:6e:29:39:d4:29:09:0a:96:f8:
a9:57:34:b0:e7:eb:96:12:4d:07:6b:99:74:4d:f5:
19:83:28:3e:90:97:69:32:1a:fa:18:04:56:25:83:
4c:31:fa:e0:9e:32:2f:6a:95:d6:f3:79:32:5d:86:
e0:f8:cc:5a:ff:c9:da:da:a4:e6:2e:83:17:a6:c6:
13:44:87:0a:38:a1:5a:da:f6:17:bc:61:de:05:97:
f2:64:2b:d2:b7:2b:0f:2b:62:cc:86:8f:a5:12:4c:
fc:5a:d3:d0:31:a3:23:25:cc:66:ff:9f:34:d6:1f:
9f:5c:64:32:77:7d:71:17:73:0f:eb:00:0a:5e:2a:
08:06:87:43:4b:fe:42:2e:a0:c7:89:99:46:5a:8a:
9d:7d:9e:01:06:67:ef:23:73:bb:d4:96:79:7e:ec:
0d:21:3a:43:e1:9f:4b:d8:93:44:01:72:0c:a8:2c:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:66:4D:6F:05:4C:E5:86:E5:B0:56:47:CB:DD:3A:A7:6B:C1:09
X509v3 Authority Key Identifier:
keyid:67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/lJBmTW8FTOWG5bBWR8vdOqdrwQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.61.0/24
Signature Algorithm: sha256WithRSAEncryption
38:35:fd:a2:5a:72:65:ab:78:a0:f1:2c:b5:ed:93:e5:a9:d4:
8e:b1:33:68:e4:32:48:69:85:74:e8:fe:6a:48:00:81:0a:01:
8e:b0:84:ec:ca:a2:d1:d1:00:c1:62:28:89:b4:85:b5:24:8e:
1f:98:78:e9:b2:cf:4d:0a:7e:20:03:40:7c:e3:56:84:d4:80:
f7:0e:a2:d5:f1:db:f8:9d:e8:85:5e:8f:b7:33:7d:08:34:9b:
ca:92:de:ce:29:70:fa:11:12:c0:53:ad:1b:8c:b4:a2:83:5d:
bc:aa:ac:b2:bb:0e:e2:eb:25:51:60:41:24:0f:79:b5:97:65:
26:32:1d:9b:d2:dc:d5:92:3b:09:bd:df:5f:b9:f5:90:08:1f:
60:68:69:03:02:ca:53:cf:af:e3:4a:00:57:e4:90:05:85:75:
a6:6b:6e:f6:9d:2a:37:10:d5:ea:26:47:01:43:77:7c:d7:7f:
44:67:6e:8e:c7:ba:49:f2:21:07:51:aa:77:54:7d:19:92:1e:
a6:3c:89:52:10:ca:0b:cc:47:9e:09:39:94:e2:d7:ed:72:9d:
7a:22:28:06:93:c6:ec:f4:46:56:4c:ec:92:51:e8:a5:86:7a:
30:50:c2:79:9c:c6:32:c0:cf:1b:34:3e:a5:96:0b:57:2f:ea:
84:d9:e9:61
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDGEdeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY3
NGQ4OWM4ZTliZTUyZDk1NmZjNWI4OGE5OGE3MmJlMDY5OWZkZmQwHhcNMjIwMjA0
MTQyMjE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5NDkwNjY0ZDZmMDU0
Y2U1ODZlNWIwNTY0N2NiZGQzYWE3NmJjMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAydlBhrp5y09lrAcndGh0sosUqR19sLl+zqeWfhbidkYtUULJ
GncxeKvRQQdYQjmMF10439y2I1eQ1uWJCUBWMfCsGgWJ5NX73W7ZOUh142BuKTnU
KQkKlvipVzSw5+uWEk0Ha5l0TfUZgyg+kJdpMhr6GARWJYNMMfrgnjIvapXW83ky
XYbg+Mxa/8na2qTmLoMXpsYTRIcKOKFa2vYXvGHeBZfyZCvStysPK2LMho+lEkz8
WtPQMaMjJcxm/5801h+fXGQyd31xF3MP6wAKXioIBodDS/5CLqDHiZlGWoqdfZ4B
BmfvI3O71JZ5fuwNITpD4Z9L2JNEAXIMqCxG1wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJSQZk1vBUzlhuWwVkfL3Tqna8EJMB8GA1UdIwQYMBaAFGdNicjpvlLZVvxb
iKmKcr4Gmf39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WjAySnlPbS1VdGxXX0Z1SXFZcHl2Z2FaX2YwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84Yy8xMzZlNWEtYmExYS00YWUzLWE0YzgtNTllMmZkNGUzODBmLzEv
bEpCbVRXOEZUT1dHNWJCV1I4dmRPcWRyd1FrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8x
MzZlNWEtYmExYS00YWUzLWE0YzgtNTllMmZkNGUzODBmLzEvWjAySnlPbS1VdGxX
X0Z1SXFZcHl2Z2FaX2YwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQs9MA0GCSqGSIb3DQEBCwUAA4IB
AQA4Nf2iWnJlq3ig8Sy17ZPlqdSOsTNo5DJIaYV06P5qSACBCgGOsITsyqLR0QDB
YiiJtIW1JI4fmHjpss9NCn4gA0B841aE1ID3DqLV8dv4neiFXo+3M30INJvKkt7O
KXD6ERLAU60bjLSig128qqyyuw7i6yVRYEEkD3m1l2UmMh2b0tzVkjsJvd9fufWQ
CB9gaGkDAspTz6/jSgBX5JAFhXWma272nSo3ENXqJkcBQ3d8139EZ26Ox7pJ8iEH
Uap3VH0Zkh6mPIlSEMoLzEeeCTmU4tftcp16IigGk8bs9EZWTOySUeilhnowUMJ5
nMYywM8bND6llgtXL+qE2elh
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:32 2025 by rpki-client