Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/1hC1F4jsuLhzhjncnQUAWh-u9DY.roa
File: 1hC1F4jsuLhzhjncnQUAWh-u9DY.roa (raw, json)
Hash identifier: wr9wFRYZBoOhcBfzrMQbS6vRjC1Fne7nexLSpFMTc3s=
Subject key identifier: D6:10:B5:17:88:EC:B8:B8:73:86:39:DC:9D:05:00:5A:1F:AE:F4:36
Certificate issuer: /CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
Certificate serial: 0182207AED4134CB6C76292237C08BCF1CB2
Authority key identifier: 21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/1hC1F4jsuLhzhjncnQUAWh-u9DY.roa
Signing time: Thu 21 Jul 2022 11:18:23 +0000
ROA not before: Thu 21 Jul 2022 11:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 194.26.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:7a:ed:41:34:cb:6c:76:29:22:37:c0:8b:cf:1c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
Validity
Not Before: Jul 21 11:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d610b51788ecb8b8738639dc9d05005a1faef436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:46:69:61:44:92:e3:a0:29:71:dc:c5:00:75:
ac:2c:f7:a7:15:10:3e:05:18:c9:b8:03:22:eb:38:
1a:6a:7c:78:4e:ed:95:02:a0:5f:51:34:2c:eb:c6:
55:e3:18:16:82:98:96:64:5f:95:93:d9:70:f0:44:
f0:d8:83:a4:6b:bd:6d:60:77:fd:38:48:ad:de:18:
c5:3b:6a:06:a2:2f:7f:97:71:71:0d:e3:48:09:b3:
28:e1:39:34:67:1e:0a:c7:17:7c:5d:fa:1c:a7:a3:
c5:c2:69:86:e0:01:3f:cd:dd:1b:47:cc:3e:6a:d5:
dd:a5:26:8b:12:e0:12:69:62:be:e9:09:f3:6a:38:
f2:12:ad:08:a1:5a:12:93:4b:a6:c7:7d:3d:3f:af:
38:5c:9f:65:b6:4d:48:d3:ff:cf:82:54:e0:aa:7b:
bf:de:57:9a:6b:1c:20:45:ea:da:8b:ec:dd:2e:1a:
99:b0:0e:1d:e1:e1:8a:1c:3b:b8:6f:1d:38:e2:91:
47:09:b7:8f:29:c9:ab:27:d4:31:8c:d0:a7:42:0b:
cb:3c:db:a3:06:c8:cd:42:41:62:a9:58:f0:90:e8:
dd:ca:9e:5a:c7:ab:a0:2b:7a:5d:a7:d9:18:54:c4:
7f:25:3f:9a:24:0b:8a:3d:48:fd:17:ca:7b:b4:fb:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:B5:17:88:EC:B8:B8:73:86:39:DC:9D:05:00:5A:1F:AE:F4:36
X509v3 Authority Key Identifier:
keyid:21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/1hC1F4jsuLhzhjncnQUAWh-u9DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d2:1f:0d:62:9c:8c:5b:b9:6a:92:1b:f8:c7:dc:75:f3:39:
f8:7a:d6:66:30:52:17:28:28:86:53:74:1e:86:b1:72:90:ae:
ec:74:c0:2c:27:85:ac:74:8d:c0:14:6e:6f:41:97:4a:ae:9e:
40:8b:ac:89:4d:12:da:12:b8:7a:e9:f5:66:d2:78:ef:04:68:
9e:77:30:89:92:89:25:a7:88:2e:07:60:1b:9d:93:8b:1c:04:
66:c4:8d:a2:02:37:db:e9:12:14:bb:dd:b5:73:d2:ec:37:b7:
da:08:18:b4:b0:bd:85:9a:85:73:25:aa:20:06:55:3a:ce:af:
a5:0e:c1:be:09:10:a2:a9:b4:4f:47:94:8c:81:10:69:ed:58:
80:0f:30:24:63:a4:14:80:c6:07:52:88:01:30:dd:c8:73:ac:
e2:5a:8f:ac:7d:04:0b:bc:7d:5d:86:80:ee:8a:0a:83:9a:a7:
a3:91:6a:ed:54:81:e2:96:83:ce:84:a4:71:0b:15:a9:ff:00:
d6:85:b9:93:c6:46:c6:83:a8:12:b1:62:b5:7a:0c:04:7d:12:
c4:bb:cf:2c:76:22:40:2b:96:1a:ac:14:ad:16:37:90:63:86:
99:a1:e8:ec:20:1e:32:a4:f0:e1:1b:09:7d:de:d4:fd:78:fc:
97:f0:33:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIgeu1BNMtsdikiN8CLzxyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGY3YjczYjhkZTU4MjgzNzBkMDg5ZGVhNjg2OGUyOGMz
ZTBmNGQwHhcNMjIwNzIxMTExODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjEwYjUxNzg4ZWNiOGI4NzM4NjM5ZGM5ZDA1MDA1YTFmYWVmNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0ZpYUSS46ApcdzFAHWsLPenFRA+
BRjJuAMi6zgaanx4Tu2VAqBfUTQs68ZV4xgWgpiWZF+Vk9lw8ETw2IOka71tYHf9
OEit3hjFO2oGoi9/l3FxDeNICbMo4Tk0Zx4Kxxd8Xfocp6PFwmmG4AE/zd0bR8w+
atXdpSaLEuASaWK+6QnzajjyEq0IoVoSk0umx309P684XJ9ltk1I0//PglTgqnu/
3leaaxwgRerai+zdLhqZsA4d4eGKHDu4bx044pFHCbePKcmrJ9QxjNCnQgvLPNuj
BsjNQkFiqVjwkOjdyp5ax6ugK3pdp9kYVMR/JT+aJAuKPUj9F8p7tPvsywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNYQtReI7Li4c4Y53J0FAFofrvQ2MB8GA1UdIwQY
MBaAFCGPe3O43lgoNw0InepoaOKMPg9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVk5N2M3amVXQ2czRFFpZDZtaG80b3ctRDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80YjJjODAtMmQ3Ni00YjBiLTgyNmUt
NDhkNGJmOGVmYmM1LzEvMWhDMUY0anN1TGh6aGpuY25RVUFXaC11OURZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80YjJjODAtMmQ3Ni00YjBiLTgyNmUtNDhkNGJmOGVmYmM1
LzEvSVk5N2M3amVXQ2czRFFpZDZtaG80b3ctRDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrmMA0G
CSqGSIb3DQEBCwUAA4IBAQAv0h8NYpyMW7lqkhv4x9x18zn4etZmMFIXKCiGU3Qe
hrFykK7sdMAsJ4WsdI3AFG5vQZdKrp5Ai6yJTRLaErh66fVm0njvBGiedzCJkokl
p4guB2AbnZOLHARmxI2iAjfb6RIUu921c9LsN7faCBi0sL2FmoVzJaogBlU6zq+l
DsG+CRCiqbRPR5SMgRBp7ViADzAkY6QUgMYHUogBMN3Ic6ziWo+sfQQLvH1dhoDu
igqDmqejkWrtVIHiloPOhKRxCxWp/wDWhbmTxkbGg6gSsWK1egwEfRLEu88sdiJA
K5YarBStFjeQY4aZoejsIB4ypPDhGwl93tT9ePyX8DPX
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:45 2025 by rpki-client