Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/mm1QzOIAjpJ0CzdgM1IUl36VTZ4.roa
File: mm1QzOIAjpJ0CzdgM1IUl36VTZ4.roa (raw, json)
Hash identifier: i7Q9ASK+O8BQwChA7pz5kBCQUK9uUpFz6WgMTZ80wP8=
Subject key identifier: 9A:6D:50:CC:E2:00:8E:92:74:0B:37:60:33:52:14:97:7E:95:4D:9E
Certificate issuer: /CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Certificate serial: 01941F8C2DF001ACAF4C7E71EB769D87DB71
Authority key identifier: 8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/mm1QzOIAjpJ0CzdgM1IUl36VTZ4.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 185.203.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2d:f0:01:ac:af:4c:7e:71:eb:76:9d:87:db:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a6d50cce2008e92740b3760335214977e954d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fb:2f:3f:7a:da:dd:a4:f9:ed:e8:f5:63:99:
a3:bd:9d:9b:0f:0e:2f:b7:ab:de:44:04:6d:7d:f7:
4c:6a:d3:83:a6:b7:51:a8:bb:02:98:6c:92:7a:cf:
52:60:08:f8:d5:8b:ab:36:d2:70:4c:5d:5e:27:02:
53:36:80:98:69:39:1f:c8:b5:65:cb:0f:4d:1d:0c:
21:0f:c7:2d:16:06:b0:f3:64:46:20:b5:cd:1a:2d:
a9:66:87:c4:09:9b:ff:70:30:39:5c:82:f0:a5:97:
37:24:ef:76:b2:2e:50:a5:62:a7:55:ec:b2:9b:07:
05:78:ac:c6:4c:45:4d:84:85:9d:44:bb:38:da:98:
33:bc:b0:7f:47:e8:97:89:6c:64:16:eb:ae:48:32:
3c:17:62:5d:35:78:3a:c7:6a:7c:1d:c5:a1:13:cb:
c9:67:72:d6:d2:0b:59:b0:18:b3:70:6a:de:5a:b7:
8f:f3:b8:45:4e:ca:fc:c7:5f:e4:8e:2a:c2:89:04:
cf:d8:36:b3:90:0e:95:e8:45:70:4f:51:ac:0f:c2:
c3:b0:a9:f2:02:df:83:13:38:27:d0:01:24:59:15:
99:29:5f:a3:91:61:ad:45:f5:37:ff:18:7d:89:75:
1d:83:6c:0c:b1:45:ae:2a:b5:e5:6b:a5:f7:3b:14:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:50:CC:E2:00:8E:92:74:0B:37:60:33:52:14:97:7E:95:4D:9E
X509v3 Authority Key Identifier:
keyid:8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/mm1QzOIAjpJ0CzdgM1IUl36VTZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.132.0/22
Signature Algorithm: sha256WithRSAEncryption
43:5d:9d:9d:07:da:81:06:24:c3:c9:00:de:99:79:85:cd:28:
9d:85:73:71:4c:0f:7f:0d:61:bf:fb:bf:80:b7:be:39:47:5e:
56:a0:a4:1a:a3:f1:98:59:f4:2c:ed:94:3f:4f:1f:ca:a7:f6:
e9:05:86:92:50:cd:b8:01:69:42:d3:34:7a:c9:69:d5:0e:76:
82:cb:c1:88:ae:73:55:e8:ac:5b:d7:20:0c:a5:ab:8f:9b:50:
0f:b7:b6:7d:5a:10:3a:38:d7:e2:45:b2:69:82:66:50:dc:5a:
e7:cf:3b:34:70:16:79:00:16:1a:e0:72:ee:4b:fe:c3:6a:a5:
25:94:49:26:40:b3:9d:e3:9e:49:db:fd:a4:a1:9a:39:85:23:
b5:6f:87:b7:eb:80:1b:c8:07:79:a7:c6:53:80:06:ca:dd:21:
03:64:06:27:97:d4:06:4a:98:9f:1e:e0:b5:0a:1d:57:eb:d3:
28:b1:b4:39:38:21:87:92:33:4d:41:88:2c:59:a4:b1:e3:d4:
60:a4:5b:b9:2f:e0:6f:1f:45:d6:30:27:5d:56:62:e4:38:fb:
0b:f3:a0:65:56:6e:5d:ef:c3:02:78:12:fd:19:d3:9c:cd:04:
eb:2f:49:7d:b5:cb:bd:55:1f:4e:2b:08:f5:d9:b3:75:be:1a:
2b:d2:70:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjC3wAayvTH5x63adh9txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjRlYjE1OTEwOGUzZjhhNTAzNGMxOTZhZmZjZTA0Yzdh
NzI0NmUwHhcNMjUwMTAxMDE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTZkNTBjY2UyMDA4ZTkyNzQwYjM3NjAzMzUyMTQ5NzdlOTU0ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fsvP3ra3aT57ej1Y5mjvZ2bDw4v
t6veRARtffdMatODprdRqLsCmGySes9SYAj41YurNtJwTF1eJwJTNoCYaTkfyLVl
yw9NHQwhD8ctFgaw82RGILXNGi2pZofECZv/cDA5XILwpZc3JO92si5QpWKnVeyy
mwcFeKzGTEVNhIWdRLs42pgzvLB/R+iXiWxkFuuuSDI8F2JdNXg6x2p8HcWhE8vJ
Z3LW0gtZsBizcGreWreP87hFTsr8x1/kjirCiQTP2DazkA6V6EVwT1GsD8LDsKny
At+DEzgn0AEkWRWZKV+jkWGtRfU3/xh9iXUdg2wMsUWuKrXla6X3OxQulwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJptUMziAI6SdAs3YDNSFJd+lU2eMB8GA1UdIwQY
MBaAFI1k6xWRCOP4pQNMGWr/zgTHpyRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldUckZaRUk0X2lsQTB3WmF2X09CTWVuSkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82MDNlN2UtMjE1MC00ZDk1LTk1ZmIt
NDQ1NjVhZTU4OWNhLzEvbW0xUXpPSUFqcEowQ3pkZ00xSVVsMzZWVFo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82MDNlN2UtMjE1MC00ZDk1LTk1ZmItNDQ1NjVhZTU4OWNh
LzEvaldUckZaRUk0X2lsQTB3WmF2X09CTWVuSkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucuEMA0G
CSqGSIb3DQEBCwUAA4IBAQBDXZ2dB9qBBiTDyQDemXmFzSidhXNxTA9/DWG/+7+A
t745R15WoKQao/GYWfQs7ZQ/Tx/Kp/bpBYaSUM24AWlC0zR6yWnVDnaCy8GIrnNV
6Kxb1yAMpauPm1APt7Z9WhA6ONfiRbJpgmZQ3Frnzzs0cBZ5ABYa4HLuS/7DaqUl
lEkmQLOd455J2/2koZo5hSO1b4e364AbyAd5p8ZTgAbK3SEDZAYnl9QGSpifHuC1
Ch1X69MosbQ5OCGHkjNNQYgsWaSx49RgpFu5L+BvH0XWMCddVmLkOPsL86BlVm5d
78MCeBL9GdOczQTrL0l9tcu9VR9OKwj12bN1vhor0nA8
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:27:54 2025 by rpki-client