Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/0jV5LTodhzA8wVDje7kdH5wl0LE.roa
File: 0jV5LTodhzA8wVDje7kdH5wl0LE.roa (raw, json)
Hash identifier: OhxiR+DlZMWnXzRatnCbYzcanScQ4hgV764Jpk76hgE=
Subject key identifier: D2:35:79:2D:3A:1D:87:30:3C:C1:50:E3:7B:B9:1D:1F:9C:25:D0:B1
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019425FDBFAAD2BF8EE91C7A7DA96A844796
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/0jV5LTodhzA8wVDje7kdH5wl0LE.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 185.11.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bf:aa:d2:bf:8e:e9:1c:7a:7d:a9:6a:84:47:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d235792d3a1d87303cc150e37bb91d1f9c25d0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:7e:f7:54:b1:af:5d:35:db:bd:ba:87:ab:
88:23:d8:07:25:bc:c1:4f:c7:8a:06:08:00:9e:69:
6f:88:ac:80:86:5f:7f:8e:56:7a:4a:9c:85:1f:c7:
e5:d0:83:76:91:3c:05:fd:c9:07:a2:88:bf:9b:4e:
97:81:f8:8d:01:b6:05:52:ee:8f:9f:b2:10:a3:4e:
a9:89:f6:73:57:4f:d1:26:79:2d:3a:81:42:8f:6f:
98:9e:a7:93:72:49:c2:3e:ad:9f:86:52:e0:fa:a2:
f1:3b:36:2a:e0:8a:3c:f8:78:10:51:fe:38:51:75:
30:27:b5:af:0c:a1:20:b2:b1:70:8b:1f:84:a4:0b:
7d:cb:24:3f:28:99:d8:bb:3a:f4:68:a5:bf:29:b8:
8f:42:4b:11:22:e5:57:1f:2b:a2:74:4a:bb:b0:3e:
a8:71:d2:5e:c8:40:bc:8d:b7:d5:34:1f:e0:b6:9b:
6b:7e:42:63:bb:93:26:1d:50:a3:38:41:9a:ef:17:
af:89:b3:18:e5:87:cc:ea:56:62:2d:8a:19:5c:39:
33:6b:56:56:3a:99:ee:8a:a9:8f:6e:4e:07:4b:e1:
a8:25:be:88:da:46:62:01:9d:4a:b2:ef:81:2c:17:
61:db:9b:6e:19:4b:80:08:df:83:0c:da:20:1a:4b:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:35:79:2D:3A:1D:87:30:3C:C1:50:E3:7B:B9:1D:1F:9C:25:D0:B1
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/0jV5LTodhzA8wVDje7kdH5wl0LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.140.0/23
Signature Algorithm: sha256WithRSAEncryption
23:04:ff:df:b6:58:0c:56:8c:fe:01:0f:45:17:34:d6:68:f5:
aa:cf:f0:dc:59:dd:6d:91:90:79:77:00:74:d0:01:08:d1:46:
3e:80:ba:fb:a6:07:e9:d1:e1:45:84:aa:f2:9c:54:c6:79:40:
e0:27:82:af:44:ab:49:21:ac:39:ed:8c:62:67:68:54:5c:f8:
48:50:98:9b:c6:86:f5:8f:f1:a5:92:4f:63:09:3b:05:12:95:
8f:b4:ef:89:fa:e3:c7:59:f5:81:d9:26:b3:7e:cd:8d:5a:54:
f4:0d:57:d9:7c:ac:ba:85:3b:88:cd:9f:98:32:bd:42:67:7b:
d1:bf:74:f1:96:c7:46:fb:37:73:90:b4:6a:cb:13:c2:62:dd:
8d:75:e8:2f:95:c4:fd:ee:68:fb:0a:11:b5:71:b8:54:4f:17:
6e:4a:a0:dd:77:6f:2c:22:b0:ce:7e:f5:93:97:b3:ed:2c:ec:
2e:d0:07:56:47:93:00:c1:6b:7a:45:13:02:a4:41:b1:5e:ab:
2d:26:a6:1c:f8:cd:55:c9:c9:ea:70:94:51:15:4b:64:b4:19:
63:3b:67:f1:8c:ab:75:e7:f4:0f:94:eb:65:83:1a:db:6f:c5:
28:6b:24:b6:1c:87:f6:fc:71:93:61:32:07:e1:83:c9:31:95:
17:12:fa:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/b+q0r+O6Rx6falqhEeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1
NGRmNjMwHhcNMjUwMTAyMDc0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjM1NzkyZDNhMWQ4NzMwM2NjMTUwZTM3YmI5MWQxZjljMjVkMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM5+91Sxr1012726h6uII9gHJbzB
T8eKBggAnmlviKyAhl9/jlZ6SpyFH8fl0IN2kTwF/ckHooi/m06XgfiNAbYFUu6P
n7IQo06pifZzV0/RJnktOoFCj2+YnqeTcknCPq2fhlLg+qLxOzYq4Io8+HgQUf44
UXUwJ7WvDKEgsrFwix+EpAt9yyQ/KJnYuzr0aKW/KbiPQksRIuVXHyuidEq7sD6o
cdJeyEC8jbfVNB/gtptrfkJju5MmHVCjOEGa7xevibMY5YfM6lZiLYoZXDkza1ZW
OpnuiqmPbk4HS+GoJb6I2kZiAZ1Ksu+BLBdh25tuGUuACN+DDNogGks+CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNI1eS06HYcwPMFQ43u5HR+cJdCxMB8GA1UdIwQY
MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt
OTQ2NDA0ZWMxYWE0LzEvMGpWNUxUb2RoekE4d1ZEamU3a2RINXdsMExFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0
LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQuMMA0G
CSqGSIb3DQEBCwUAA4IBAQAjBP/ftlgMVoz+AQ9FFzTWaPWqz/DcWd1tkZB5dwB0
0AEI0UY+gLr7pgfp0eFFhKrynFTGeUDgJ4KvRKtJIaw57YxiZ2hUXPhIUJibxob1
j/Glkk9jCTsFEpWPtO+J+uPHWfWB2Sazfs2NWlT0DVfZfKy6hTuIzZ+YMr1CZ3vR
v3TxlsdG+zdzkLRqyxPCYt2NdegvlcT97mj7ChG1cbhUTxduSqDdd28sIrDOfvWT
l7PtLOwu0AdWR5MAwWt6RRMCpEGxXqstJqYc+M1VycnqcJRRFUtktBljO2fxjKt1
5/QPlOtlgxrbb8UoayS2HIf2/HGTYTIH4YPJMZUXEvq1
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:58 2025 by rpki-client