Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc7b6e-30cb-4eac-849a-c1d9eb8be4f9/1/2X1kKl7jdf2rOP8gSdMMwRFw9gM.roa
File: 2X1kKl7jdf2rOP8gSdMMwRFw9gM.roa (raw, json)
Hash identifier: IYR4gzs2y2p/nypzOsNSFjhDlc6mlg3Ah9+tKRpCqfc=
Subject key identifier: D9:7D:64:2A:5E:E3:75:FD:AB:38:FF:20:49:D3:0C:C1:11:70:F6:03
Certificate issuer: /CN=c8bcaeab463ffaefda9e475cedef54128a0dc65f
Certificate serial: 01834830479A119CA2D1712D5BC104B8CEDE
Authority key identifier: C8:BC:AE:AB:46:3F:FA:EF:DA:9E:47:5C:ED:EF:54:12:8A:0D:C6:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLyuq0Y_-u_ankdc7e9UEooNxl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc7b6e-30cb-4eac-849a-c1d9eb8be4f9/1/2X1kKl7jdf2rOP8gSdMMwRFw9gM.roa
Signing time: Fri 16 Sep 2022 21:24:27 +0000
ROA not before: Fri 16 Sep 2022 21:24:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199775
IP address blocks: 185.242.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:48:30:47:9a:11:9c:a2:d1:71:2d:5b:c1:04:b8:ce:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bcaeab463ffaefda9e475cedef54128a0dc65f
Validity
Not Before: Sep 16 21:24:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d97d642a5ee375fdab38ff2049d30cc11170f603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:b8:37:d5:11:30:84:8a:10:82:c1:7f:23:
05:87:35:78:03:8c:d1:5b:82:b2:5b:9a:51:fa:6e:
3e:23:08:a5:ee:3f:46:24:d3:83:a2:10:6a:9d:16:
0e:51:cc:64:05:04:f4:73:e5:81:c9:f1:a8:c6:64:
d1:b8:6d:87:2d:9f:38:a2:d7:bb:8a:2b:d4:61:f1:
81:d7:8f:69:d0:28:a1:ce:d0:81:e6:6c:dd:6f:e1:
fe:e3:7d:91:2a:ec:df:97:d6:54:dd:70:b0:07:6c:
76:b4:d6:8c:fa:4e:b7:8b:5d:b7:90:22:8e:52:e3:
2d:43:87:fa:78:2f:0f:4c:8c:74:3a:31:f4:59:38:
c2:56:eb:19:a4:c2:c5:f0:07:aa:68:5c:63:ad:85:
86:ae:88:0c:50:6a:bf:92:4c:3d:f4:ba:bc:3b:2b:
81:a6:e0:85:eb:2f:10:84:67:71:90:20:f0:d0:99:
31:18:53:84:62:47:38:a0:08:1b:f8:fa:5c:3f:74:
66:8a:2e:6f:24:43:1e:f0:10:a6:a9:bb:4d:dd:8b:
67:2f:e2:85:7d:14:56:1a:4d:d7:a6:fb:cd:f1:4f:
69:7e:cd:7c:99:a7:ab:2d:e3:30:61:41:d5:35:f9:
0b:73:d2:39:ee:53:cd:17:da:58:0f:3f:93:ff:4f:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:64:2A:5E:E3:75:FD:AB:38:FF:20:49:D3:0C:C1:11:70:F6:03
X509v3 Authority Key Identifier:
keyid:C8:BC:AE:AB:46:3F:FA:EF:DA:9E:47:5C:ED:EF:54:12:8A:0D:C6:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLyuq0Y_-u_ankdc7e9UEooNxl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc7b6e-30cb-4eac-849a-c1d9eb8be4f9/1/2X1kKl7jdf2rOP8gSdMMwRFw9gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc7b6e-30cb-4eac-849a-c1d9eb8be4f9/1/yLyuq0Y_-u_ankdc7e9UEooNxl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.218.0/24
Signature Algorithm: sha256WithRSAEncryption
13:03:d5:24:69:15:ca:03:fc:bf:d0:c8:3d:69:d3:bb:24:b0:
3a:5f:2c:18:ab:5d:57:2e:d7:9a:25:4b:42:27:4d:b1:40:22:
a2:23:e5:b7:f8:9c:31:0f:1b:b5:20:5f:d2:31:ac:49:0c:b6:
ce:48:f4:cf:3c:b7:ae:79:0f:7c:f0:8a:55:eb:14:9b:16:47:
af:e0:e4:f8:fb:cf:56:44:55:79:f1:90:20:04:24:ab:a4:b2:
db:6b:42:f6:a8:a7:e5:a7:63:57:3a:0d:2b:64:cc:e3:b7:01:
a3:25:a5:bc:2b:bf:7c:81:7d:b7:73:ce:bb:76:d8:8f:f7:48:
e2:f6:3d:16:f7:fb:83:21:6a:b3:ea:02:c3:19:21:e3:82:aa:
b6:67:b4:79:ac:4c:e2:91:4a:0e:77:97:54:80:ee:aa:89:2b:
b1:8b:e4:73:3c:4a:d5:79:62:46:47:88:a9:c9:76:e1:fd:29:
f3:f1:49:89:b4:cd:2e:12:e4:5e:ea:94:ed:72:5e:0f:fe:69:
a5:56:06:80:f7:30:91:a3:50:e0:12:c4:2a:97:5e:e3:42:b9:
83:68:c0:18:da:48:a0:2a:7c:d2:ef:f2:44:f7:19:49:64:8e:
4a:fd:e9:6c:50:7d:bb:9e:ba:28:3b:e4:74:d8:5e:c0:04:ed:
75:db:0a:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNIMEeaEZyi0XEtW8EEuM7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YmNhZWFiNDYzZmZhZWZkYTllNDc1Y2VkZWY1NDEyOGEw
ZGM2NWYwHhcNMjIwOTE2MjEyNDI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTdkNjQyYTVlZTM3NWZkYWIzOGZmMjA0OWQzMGNjMTExNzBmNjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eu4N9URMISKEILBfyMFhzV4A4zR
W4KyW5pR+m4+Iwil7j9GJNODohBqnRYOUcxkBQT0c+WByfGoxmTRuG2HLZ84ote7
iivUYfGB149p0CihztCB5mzdb+H+432RKuzfl9ZU3XCwB2x2tNaM+k63i123kCKO
UuMtQ4f6eC8PTIx0OjH0WTjCVusZpMLF8AeqaFxjrYWGrogMUGq/kkw99Lq8OyuB
puCF6y8QhGdxkCDw0JkxGFOEYkc4oAgb+PpcP3Rmii5vJEMe8BCmqbtN3YtnL+KF
fRRWGk3XpvvN8U9pfs18maerLeMwYUHVNfkLc9I57lPNF9pYDz+T/094DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNl9ZCpe43X9qzj/IEnTDMERcPYDMB8GA1UdIwQY
MBaAFMi8rqtGP/rv2p5HXO3vVBKKDcZfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUx5dXEwWV8tdV9hbmtkYzdlOVVFb29OeGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iYzdiNmUtMzBjYi00ZWFjLTg0OWEt
YzFkOWViOGJlNGY5LzEvMlgxa0tsN2pkZjJyT1A4Z1NkTU13UkZ3OWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iYzdiNmUtMzBjYi00ZWFjLTg0OWEtYzFkOWViOGJlNGY5
LzEveUx5dXEwWV8tdV9hbmtkYzdlOVVFb29OeGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufLaMA0G
CSqGSIb3DQEBCwUAA4IBAQATA9UkaRXKA/y/0Mg9adO7JLA6XywYq11XLteaJUtC
J02xQCKiI+W3+JwxDxu1IF/SMaxJDLbOSPTPPLeueQ988IpV6xSbFkev4OT4+89W
RFV58ZAgBCSrpLLba0L2qKflp2NXOg0rZMzjtwGjJaW8K798gX23c867dtiP90ji
9j0W9/uDIWqz6gLDGSHjgqq2Z7R5rEzikUoOd5dUgO6qiSuxi+RzPErVeWJGR4ip
yXbh/Snz8UmJtM0uEuRe6pTtcl4P/mmlVgaA9zCRo1DgEsQql17jQrmDaMAY2kig
KnzS7/JE9xlJZI5K/elsUH27nrooO+R02F7ABO112wrY
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:40 2025 by rpki-client