Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa
File: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (raw, json)
Hash identifier: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=
Subject key identifier: 32:85:89:CC:02:BC:C8:CD:88:F6:DD:4B:4D:17:09:1A:05:A2:2F:C2
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC9B10E29087DDD165F62D1740C00
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211771
IP address blocks: 185.11.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c9:b1:0e:29:08:7d:dd:16:5f:62:d1:74:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=328589cc02bcc8cd88f6dd4b4d17091a05a22fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:ef:ff:41:40:99:68:4b:da:7d:9b:99:97:
43:c1:94:7c:9c:1a:dd:c9:0b:b7:f8:51:d8:cd:cf:
7f:cc:00:50:58:f7:59:82:e0:0d:f1:5c:1b:1b:5f:
67:ad:5d:23:c3:f2:dc:b7:d1:fb:49:ad:69:07:39:
16:6f:a6:9e:0c:a8:ff:d4:70:7e:38:97:86:98:db:
e9:cc:b4:4a:a8:a0:96:a0:8e:d7:2f:5d:01:e1:af:
e5:45:f1:dc:0a:7d:a4:ed:ae:a8:1c:83:63:04:5b:
32:3a:43:19:1c:17:d9:28:a4:9d:41:80:6a:ba:a6:
80:5e:76:11:2a:e8:a8:15:e0:c4:12:a6:3c:79:a8:
a9:b3:45:36:c7:8f:30:34:7b:9b:3b:c0:72:b0:19:
0c:3e:8d:70:4a:2c:9a:30:a0:ed:bf:b4:45:c8:ab:
2d:08:4b:ac:16:62:52:82:15:2e:5f:b5:c6:e3:cc:
f4:93:0c:35:85:37:1f:e8:e1:82:1b:bc:ac:19:fd:
08:cd:68:6d:c0:ad:10:3c:f7:f7:12:75:d9:d5:20:
bd:fd:88:7d:b5:30:6f:86:5a:cd:44:d4:0e:3d:b4:
51:d5:b9:80:d4:be:25:21:43:89:4b:4e:21:f0:c8:
17:1b:45:0d:b2:c8:a4:f5:75:b5:d2:82:db:78:a8:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:85:89:CC:02:BC:C8:CD:88:F6:DD:4B:4D:17:09:1A:05:A2:2F:C2
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.27.0/24
Signature Algorithm: sha256WithRSAEncryption
31:97:f8:09:e7:ed:8e:eb:9f:d5:20:d7:c7:38:fe:c2:75:de:
0b:2d:58:f5:b1:09:eb:2f:90:a8:da:ee:58:85:ea:d9:29:07:
5e:13:51:1d:0d:40:80:93:b5:58:eb:27:9f:b8:b8:33:22:25:
53:c1:95:60:0d:9c:84:b7:c8:50:fa:2c:e9:8c:3c:f5:a0:a1:
5a:b3:88:49:ec:31:66:37:d3:7e:71:de:6c:53:dd:5a:d4:f5:
2e:c0:89:08:6e:c8:f1:e5:5c:b1:7f:c2:ae:ec:2e:29:e5:23:
57:87:11:c4:5f:62:8a:9b:00:06:08:85:58:19:af:ce:4d:17:
42:10:1d:1c:2f:06:c6:8d:76:77:b2:71:bd:28:2b:0f:02:1b:
62:79:a4:b9:c5:3a:9b:f3:a9:d7:d0:29:9b:d9:47:43:fb:f6:
5e:62:31:29:cb:32:c7:fb:19:b5:b5:6c:cc:0e:93:72:f7:82:
cd:09:6f:02:5f:7f:b0:42:78:e7:d2:de:f5:cf:18:1d:1d:cc:
f6:59:d2:37:4a:a6:8f:92:ad:f9:1d:49:fe:12:bc:61:12:bd:
74:70:93:09:12:d9:09:ee:11:50:cf:ab:01:ae:b9:e2:67:5d:
5d:b0:e7:95:85:e6:e2:2d:32:cf:3a:21:ce:3c:49:9c:48:ab:
9c:a5:f2:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8mxDikIfd0WX2LRdAwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjUwMTAyMDk0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjg1ODljYzAyYmNjOGNkODhmNmRkNGI0ZDE3MDkxYTA1YTIyZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse3v/0FAmWhL2n2bmZdDwZR8nBrd
yQu3+FHYzc9/zABQWPdZguAN8VwbG19nrV0jw/Lct9H7Sa1pBzkWb6aeDKj/1HB+
OJeGmNvpzLRKqKCWoI7XL10B4a/lRfHcCn2k7a6oHINjBFsyOkMZHBfZKKSdQYBq
uqaAXnYRKuioFeDEEqY8eaips0U2x48wNHubO8BysBkMPo1wSiyaMKDtv7RFyKst
CEusFmJSghUuX7XG48z0kww1hTcf6OGCG7ysGf0IzWhtwK0QPPf3EnXZ1SC9/Yh9
tTBvhlrNRNQOPbRR1bmA1L4lIUOJS04h8MgXG0UNssik9XW10oLbeKi4ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDKFicwCvMjNiPbdS00XCRoFoi/CMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvTW9XSnpBSzh5TTJJOXQxTFRSY0pHZ1dpTDhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQsbMA0G
CSqGSIb3DQEBCwUAA4IBAQAxl/gJ5+2O65/VINfHOP7Cdd4LLVj1sQnrL5Co2u5Y
herZKQdeE1EdDUCAk7VY6yefuLgzIiVTwZVgDZyEt8hQ+izpjDz1oKFas4hJ7DFm
N9N+cd5sU91a1PUuwIkIbsjx5Vyxf8Ku7C4p5SNXhxHEX2KKmwAGCIVYGa/OTRdC
EB0cLwbGjXZ3snG9KCsPAhtieaS5xTqb86nX0Cmb2UdD+/ZeYjEpyzLH+xm1tWzM
DpNy94LNCW8CX3+wQnjn0t71zxgdHcz2WdI3SqaPkq35HUn+ErxhEr10cJMJEtkJ
7hFQz6sBrrniZ11dsOeVhebiLTLPOiHOPEmcSKucpfLL
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:25 2025 by rpki-client