Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/019d96-ced6-4116-a710-d1b0448daed8/1/h8HS5GVqpeEFriu1JcK-0uswd_k.roa
File: h8HS5GVqpeEFriu1JcK-0uswd_k.roa (raw, json)
Hash identifier: V/ubQnJP0R96iLJl0PROQ6fVE6y6tmZILAs/st1TGKA=
Subject key identifier: 87:C1:D2:E4:65:6A:A5:E1:05:AE:2B:B5:25:C2:BE:D2:EB:30:77:F9
Certificate issuer: /CN=7453130d8b7c5b0de0648feef255d3079041c02f
Certificate serial: 018571153B9AF29A07C2782DD9D5F7B3FC1A
Authority key identifier: 74:53:13:0D:8B:7C:5B:0D:E0:64:8F:EE:F2:55:D3:07:90:41:C0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFMTDYt8Ww3gZI_u8lXTB5BBwC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/019d96-ced6-4116-a710-d1b0448daed8/1/h8HS5GVqpeEFriu1JcK-0uswd_k.roa
Signing time: Mon 02 Jan 2023 06:04:55 +0000
ROA not before: Mon 02 Jan 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60458
IP address blocks: 185.217.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:3b:9a:f2:9a:07:c2:78:2d:d9:d5:f7:b3:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7453130d8b7c5b0de0648feef255d3079041c02f
Validity
Not Before: Jan 2 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c1d2e4656aa5e105ae2bb525c2bed2eb3077f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:6c:e5:d5:ec:dc:d4:38:6b:ab:b9:1c:19:
6a:91:c8:75:3d:5b:bf:00:bb:e9:12:8c:a6:6f:2f:
08:89:d6:01:02:3e:f5:f7:cf:08:5b:e2:d9:56:1e:
62:e7:29:d6:bd:4c:4a:8e:82:e5:67:92:2e:5a:da:
a9:b9:a2:54:cc:ca:55:28:7e:b2:a8:ff:12:3c:28:
5e:8f:0f:47:e7:df:9c:60:cb:b7:eb:6c:6c:64:0c:
a1:b4:7b:a0:1a:6d:bc:13:7d:09:81:e3:71:9e:f4:
84:57:c4:39:f5:d0:65:38:38:41:5d:1c:7c:63:eb:
fe:da:ed:44:2c:41:a4:4b:f1:69:2a:1f:ee:a8:56:
2c:5c:ea:4c:1e:67:e9:a5:d4:84:1c:c7:f0:0e:49:
29:b4:ff:8d:73:08:e4:38:dd:8d:d6:a8:d7:15:e0:
55:36:c7:aa:90:af:df:8e:20:b7:3b:52:d8:c6:73:
e3:67:82:b2:0a:54:9d:ae:91:42:97:26:ff:ff:6f:
0c:1f:7f:62:6c:75:5d:20:e5:cd:90:11:0f:15:48:
36:75:af:61:59:fb:56:56:0e:db:da:73:52:9b:e2:
43:a3:70:8a:03:1d:80:23:89:5e:ae:df:96:38:29:
da:da:4f:e2:fe:7e:f0:8b:30:8f:cf:7e:3f:9b:68:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C1:D2:E4:65:6A:A5:E1:05:AE:2B:B5:25:C2:BE:D2:EB:30:77:F9
X509v3 Authority Key Identifier:
keyid:74:53:13:0D:8B:7C:5B:0D:E0:64:8F:EE:F2:55:D3:07:90:41:C0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFMTDYt8Ww3gZI_u8lXTB5BBwC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/019d96-ced6-4116-a710-d1b0448daed8/1/h8HS5GVqpeEFriu1JcK-0uswd_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/019d96-ced6-4116-a710-d1b0448daed8/1/dFMTDYt8Ww3gZI_u8lXTB5BBwC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.140.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:62:6e:1f:a2:00:a4:b9:9e:1c:f2:1b:65:4f:e2:c8:62:57:
81:c3:a9:2e:46:67:31:0a:07:8c:b8:8b:cb:0c:27:70:d3:59:
c7:32:68:1e:ce:6b:5f:9d:61:3a:4e:fd:cf:0d:40:93:48:ab:
61:9d:5d:6e:53:fa:a7:7b:e7:0f:cc:47:80:7c:f8:a6:27:ac:
49:4a:3f:ae:f7:6d:84:1d:0a:18:b1:f4:10:64:be:43:74:f6:
a9:b0:08:f7:c9:56:13:25:5f:73:48:c4:6d:20:56:4c:c8:c6:
1a:1d:0c:35:f3:39:22:7e:35:db:57:d7:a7:90:78:2a:8c:a8:
b9:ab:a4:39:a7:09:04:73:97:f2:06:35:bb:a0:af:36:db:69:
bc:cf:4b:cc:76:e1:30:b3:02:b6:42:47:59:31:90:5b:bb:af:
1a:95:d9:e4:48:91:d9:5b:cb:09:ac:0f:54:66:bb:be:aa:d5:
0d:ab:8f:be:2c:83:40:79:52:f9:48:a7:37:e4:5e:fd:2e:81:
2d:ad:d5:d5:0b:f6:ef:0d:a9:84:02:45:e1:65:d1:4e:99:09:
54:64:db:a5:9f:7c:31:b4:13:4f:4b:80:67:20:7c:14:85:b8:
55:a4:3a:93:ed:69:6b:96:02:ca:a4:55:0f:33:77:01:4b:bd:
9c:d1:9c:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxFTua8poHwngt2dX3s/waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTMxMzBkOGI3YzViMGRlMDY0OGZlZWYyNTVkMzA3OTA0
MWMwMmYwHhcNMjMwMTAyMDYwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2MxZDJlNDY1NmFhNWUxMDVhZTJiYjUyNWMyYmVkMmViMzA3N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgls5dXs3NQ4a6u5HBlqkch1PVu/
ALvpEoymby8IidYBAj71988IW+LZVh5i5ynWvUxKjoLlZ5IuWtqpuaJUzMpVKH6y
qP8SPChejw9H59+cYMu362xsZAyhtHugGm28E30JgeNxnvSEV8Q59dBlODhBXRx8
Y+v+2u1ELEGkS/FpKh/uqFYsXOpMHmfppdSEHMfwDkkptP+NcwjkON2N1qjXFeBV
NseqkK/fjiC3O1LYxnPjZ4KyClSdrpFClyb//28MH39ibHVdIOXNkBEPFUg2da9h
WftWVg7b2nNSm+JDo3CKAx2AI4lert+WOCna2k/i/n7wizCPz34/m2gB3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIfB0uRlaqXhBa4rtSXCvtLrMHf5MB8GA1UdIwQY
MBaAFHRTEw2LfFsN4GSP7vJV0weQQcAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZNVERZdDhXdzNnWklfdThsWFRCNUJCd0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMTlkOTYtY2VkNi00MTE2LWE3MTAt
ZDFiMDQ0OGRhZWQ4LzEvaDhIUzVHVnFwZUVGcml1MUpjSy0wdXN3ZF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wMTlkOTYtY2VkNi00MTE2LWE3MTAtZDFiMDQ0OGRhZWQ4
LzEvZEZNVERZdDhXdzNnWklfdThsWFRCNUJCd0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudmMMA0G
CSqGSIb3DQEBCwUAA4IBAQDAYm4fogCkuZ4c8htlT+LIYleBw6kuRmcxCgeMuIvL
DCdw01nHMmgezmtfnWE6Tv3PDUCTSKthnV1uU/qne+cPzEeAfPimJ6xJSj+u922E
HQoYsfQQZL5DdPapsAj3yVYTJV9zSMRtIFZMyMYaHQw18zkifjXbV9enkHgqjKi5
q6Q5pwkEc5fyBjW7oK8222m8z0vMduEwswK2QkdZMZBbu68aldnkSJHZW8sJrA9U
Zru+qtUNq4++LINAeVL5SKc35F79LoEtrdXVC/bvDamEAkXhZdFOmQlUZNuln3wx
tBNPS4BnIHwUhbhVpDqT7WlrlgLKpFUPM3cBS72c0ZyE
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:55 2025 by rpki-client