Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa
File: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (raw, json)
Hash identifier: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=
Subject key identifier: 01:42:40:A2:10:DB:EE:0B:D6:A7:63:C0:9F:6C:47:DF:3D:D9:C7:C2
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 019548DC1D30FE28F33530594EACB546F7FA
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa
Signing time: Thu 27 Feb 2025 19:22:19 +0000
ROA not before: Thu 27 Feb 2025 19:22:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201637
IP address blocks: 185.140.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:dc:1d:30:fe:28:f3:35:30:59:4e:ac:b5:46:f7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Feb 27 19:22:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=014240a210dbee0bd6a763c09f6c47df3dd9c7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:10:0a:18:35:df:b7:48:22:3a:d1:b0:f1:
d7:0e:26:f5:9f:62:c8:9b:c4:c9:32:bd:cb:ad:4a:
04:15:9e:1b:e8:52:58:f1:ef:00:04:49:00:5b:23:
b6:7f:25:c1:ed:04:1a:a1:96:21:ea:02:b5:83:37:
af:45:03:94:a8:28:2b:b6:cf:27:5c:ec:b4:02:3c:
be:16:9f:40:61:42:81:ae:b8:2e:b7:74:84:a1:85:
93:cd:15:4f:0c:f0:74:f4:8e:b0:0e:33:00:61:c9:
ce:6d:7c:f7:e8:2f:10:a1:77:8c:b2:88:e2:5e:67:
70:1f:2d:5e:80:ff:06:71:36:0e:a0:af:9f:d7:86:
1d:eb:10:09:a2:e1:38:02:f2:bc:9a:10:27:03:f4:
36:88:f6:93:db:57:11:58:4f:0b:7f:6f:5c:21:47:
be:52:da:9f:79:5e:09:0a:a8:bd:14:1e:ac:0d:98:
7a:22:84:03:59:1c:f1:c8:2a:f8:ca:b5:68:4e:d7:
b6:f3:53:03:35:da:41:ca:66:82:b8:49:9f:b1:86:
8a:59:ff:d9:5c:98:21:38:9f:ac:a5:dc:8b:cc:cd:
03:b8:56:fc:98:09:36:94:a3:c7:07:72:6c:25:14:
65:37:51:e0:43:35:99:93:7c:55:65:ee:86:34:92:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:42:40:A2:10:DB:EE:0B:D6:A7:63:C0:9F:6C:47:DF:3D:D9:C7:C2
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.100.0/22
Signature Algorithm: sha256WithRSAEncryption
16:4e:62:16:5f:a7:1c:7e:6a:79:e6:2e:5c:19:57:45:3b:82:
9f:ce:e0:b4:5e:52:9a:38:2d:d5:d0:d3:43:ae:4d:e9:56:15:
9e:70:47:c2:8a:68:f8:33:d6:7f:6e:29:24:b5:45:12:1e:1d:
c7:b4:72:e2:6f:79:9b:df:28:cc:a7:12:e7:e8:ad:a7:e4:9a:
5e:ef:3d:0b:58:0f:7a:f1:ae:c4:81:a7:3b:15:e2:3f:ff:1e:
c5:b3:a9:3b:69:3b:0a:c8:33:af:04:86:61:f8:cd:b0:8c:03:
0d:42:61:a2:30:ba:0d:87:60:ec:85:a8:5c:9e:f6:2e:39:6c:
f3:22:21:64:e9:2e:a6:d8:e6:df:e4:ce:0d:d2:57:27:5f:37:
75:01:ed:35:6a:36:fb:33:6a:d7:41:24:cf:c7:2d:cd:41:50:
08:2a:a7:5a:fe:74:de:99:56:7f:b9:d4:f9:0f:1a:33:07:11:
7c:8c:c4:4b:f8:38:17:47:01:a8:9d:5e:7e:b5:cd:c5:92:9d:
23:32:09:08:1b:6c:bf:15:00:65:4b:7a:af:49:57:f1:26:72:
40:ca:79:0e:e6:38:db:be:e0:07:5a:8b:c4:1e:81:72:06:81:
3d:ca:35:2d:cf:89:49:81:3d:80:94:6d:c8:1b:b2:7c:ac:a9:
9d:90:4d:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVI3B0w/ijzNTBZTqy1Rvf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTI4MjY1YjgwOTkxNzg4ZDg2ZTIyNjJlOTMzOTAzOGI0
ZWZhODIwHhcNMjUwMjI3MTkyMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTQyNDBhMjEwZGJlZTBiZDZhNzYzYzA5ZjZjNDdkZjNkZDljN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WcQChg137dIIjrRsPHXDib1n2LI
m8TJMr3LrUoEFZ4b6FJY8e8ABEkAWyO2fyXB7QQaoZYh6gK1gzevRQOUqCgrts8n
XOy0Ajy+Fp9AYUKBrrgut3SEoYWTzRVPDPB09I6wDjMAYcnObXz36C8QoXeMsoji
XmdwHy1egP8GcTYOoK+f14Yd6xAJouE4AvK8mhAnA/Q2iPaT21cRWE8Lf29cIUe+
UtqfeV4JCqi9FB6sDZh6IoQDWRzxyCr4yrVoTte281MDNdpBymaCuEmfsYaKWf/Z
XJghOJ+spdyLzM0DuFb8mAk2lKPHB3JsJRRlN1HgQzWZk3xVZe6GNJIPpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFCQKIQ2+4L1qdjwJ9sR9892cfCMB8GA1UdIwQY
MBaAFCwSgmW4CZF4jYbiJi6TOQOLTvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUt
MTE1NzVkYjY0ZmJlLzEvQVVKQW9oRGI3Z3ZXcDJQQW4yeEgzejNaeDhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUtMTE1NzVkYjY0ZmJl
LzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYxkMA0G
CSqGSIb3DQEBCwUAA4IBAQAWTmIWX6ccfmp55i5cGVdFO4KfzuC0XlKaOC3V0NND
rk3pVhWecEfCimj4M9Z/bikktUUSHh3HtHLib3mb3yjMpxLn6K2n5Jpe7z0LWA96
8a7Egac7FeI//x7Fs6k7aTsKyDOvBIZh+M2wjAMNQmGiMLoNh2DshahcnvYuOWzz
IiFk6S6m2Obf5M4N0lcnXzd1Ae01ajb7M2rXQSTPxy3NQVAIKqda/nTemVZ/udT5
DxozBxF8jMRL+DgXRwGonV5+tc3Fkp0jMgkIG2y/FQBlS3qvSVfxJnJAynkO5jjb
vuAHWovEHoFyBoE9yjUtz4lJgT2AlG3IG7J8rKmdkE2+
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:49 2025 by rpki-client