Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/ik7BczW7s2cKSRXetHUxAcfKSmg.roa
File: ik7BczW7s2cKSRXetHUxAcfKSmg.roa (raw, json)
Hash identifier: 1phjfls1YRQbAw6RK/ctMkM6JhPIlCwGD3vDCMjjxV0=
Subject key identifier: 8A:4E:C1:73:35:BB:B3:67:0A:49:15:DE:B4:75:31:01:C7:CA:4A:68
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0194236A271C165A4AE0F4F0850972B6C9AF
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/ik7BczW7s2cKSRXetHUxAcfKSmg.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59776
IP address blocks: 185.72.120.0/22 maxlen: 24
2001:678:82c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:27:1c:16:5a:4a:e0:f4:f0:85:09:72:b6:c9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a4ec17335bbb3670a4915deb4753101c7ca4a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:21:5a:7b:02:de:86:76:ef:53:9b:86:25:
26:35:f6:b7:c1:90:9d:b1:a0:02:12:ef:21:75:b4:
9c:da:66:ae:e6:b4:73:a4:c0:15:0e:ed:2d:2c:80:
0d:b6:e4:fe:fb:81:e0:b2:42:1f:b7:48:00:57:e6:
fc:81:6f:41:38:16:33:52:2f:96:e1:86:df:10:17:
8e:f2:d4:a6:46:0c:29:5f:e5:6a:34:6d:e4:a3:03:
94:1f:06:29:af:1d:e9:7a:08:85:90:e3:64:4d:38:
a1:50:e2:a5:f2:83:2d:45:e3:52:c8:39:64:2f:89:
69:bb:24:18:7c:b6:d9:19:32:f2:53:97:18:4e:8c:
43:42:35:23:ab:00:96:d7:e4:95:04:0e:10:c3:01:
92:b6:3c:04:bd:65:2f:77:23:26:53:63:58:a7:26:
fd:cb:14:16:2a:b7:9d:1f:b4:84:09:c1:b6:e6:81:
5a:ce:2f:43:f5:67:4a:ea:98:40:89:83:7c:24:28:
c2:18:ac:f0:1c:84:a8:f8:64:1c:56:30:30:b3:5a:
45:d4:42:7f:da:3f:ed:41:cc:a3:1a:79:c1:8f:a2:
45:86:55:d9:c0:24:c0:89:2e:fa:ea:25:5c:0b:6b:
47:06:27:b1:e8:1a:06:f7:86:3c:84:91:a9:a6:f4:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4E:C1:73:35:BB:B3:67:0A:49:15:DE:B4:75:31:01:C7:CA:4A:68
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/ik7BczW7s2cKSRXetHUxAcfKSmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.120.0/22
IPv6:
2001:678:82c::/48
Signature Algorithm: sha256WithRSAEncryption
6c:f2:49:bb:c6:8e:7d:ff:d0:aa:23:37:db:77:93:4a:74:fe:
c6:8c:7c:80:59:e0:37:2e:92:ba:24:1a:7d:e5:17:22:4a:41:
1c:6e:d1:94:a2:1c:21:fa:f7:aa:5f:32:ee:87:7e:cf:bf:89:
45:ad:fb:9d:62:d5:47:86:6d:08:f8:a7:a5:7f:72:1a:ca:85:
70:eb:07:41:4a:33:2e:3c:cd:53:82:4b:64:fa:11:38:dc:2c:
f2:0a:d5:e8:d2:4e:c3:77:9d:8c:9b:55:a9:94:eb:a9:95:46:
13:60:ea:39:0f:0f:ea:1f:28:f5:f0:89:94:27:53:d1:90:6f:
2b:16:cf:65:b6:ec:54:21:e0:4a:60:4a:49:45:c7:55:40:40:
5c:c2:84:60:b9:22:3f:c4:b4:b8:d1:1f:b4:ed:4f:03:af:88:
81:72:99:33:8c:1e:c3:d1:6b:20:c6:89:99:02:70:89:56:d6:
ad:9e:1c:69:7a:c7:2f:3b:f5:e9:d0:85:6f:f9:1a:01:b0:af:
d9:9f:70:8f:96:0c:f5:a7:de:0f:98:6d:89:5a:41:cf:c7:d8:
94:50:8d:51:d8:58:fa:cd:0e:7f:2a:99:61:3a:ff:90:c6:6b:
e2:45:fe:19:1f:be:d1:49:88:c3:79:57:32:1e:3a:9f:2a:3f:
1d:d2:40:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQjaiccFlpK4PTwhQlytsmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjUwMTAxMTk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTRlYzE3MzM1YmJiMzY3MGE0OTE1ZGViNDc1MzEwMWM3Y2E0YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbEhWnsC3oZ271ObhiUmNfa3wZCd
saACEu8hdbSc2mau5rRzpMAVDu0tLIANtuT++4HgskIft0gAV+b8gW9BOBYzUi+W
4YbfEBeO8tSmRgwpX+VqNG3kowOUHwYprx3pegiFkONkTTihUOKl8oMtReNSyDlk
L4lpuyQYfLbZGTLyU5cYToxDQjUjqwCW1+SVBA4QwwGStjwEvWUvdyMmU2NYpyb9
yxQWKredH7SECcG25oFazi9D9WdK6phAiYN8JCjCGKzwHISo+GQcVjAws1pF1EJ/
2j/tQcyjGnnBj6JFhlXZwCTAiS766iVcC2tHBiex6BoG94Y8hJGppvQBGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIpOwXM1u7NnCkkV3rR1MQHHykpoMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEvaWs3QmN6VzdzMmNLU1JYZXRIVXhBY2ZLU21nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuUh4MA8E
AgACMAkDBwAgAQZ4CCwwDQYJKoZIhvcNAQELBQADggEBAGzySbvGjn3/0KojN9t3
k0p0/saMfIBZ4DcukrokGn3lFyJKQRxu0ZSiHCH696pfMu6Hfs+/iUWt+51i1UeG
bQj4p6V/chrKhXDrB0FKMy48zVOCS2T6ETjcLPIK1ejSTsN3nYybVamU66mVRhNg
6jkPD+ofKPXwiZQnU9GQbysWz2W27FQh4EpgSklFx1VAQFzChGC5Ij/EtLjRH7Tt
TwOviIFymTOMHsPRayDGiZkCcIlW1q2eHGl6xy879enQhW/5GgGwr9mfcI+WDPWn
3g+YbYlaQc/H2JRQjVHYWPrNDn8qmWE6/5DGa+JF/hkfvtFJiMN5VzIeOp8qPx3S
QLU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:03 2025 by rpki-client