Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/M4Jv3Sh9kH6glCggHSZejNULYjA.roa
File: M4Jv3Sh9kH6glCggHSZejNULYjA.roa (raw, json)
Hash identifier: 8/qGBQWt2IjwfplKSmXmJ0SqW8+ks7O0TJauJ5vtOmM=
Subject key identifier: 33:82:6F:DD:28:7D:90:7E:A0:94:28:20:1D:26:5E:8C:D5:0B:62:30
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01942747A491AC9BF7A16A4795F96D456707
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/M4Jv3Sh9kH6glCggHSZejNULYjA.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12874
IP address blocks: 185.162.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a4:91:ac:9b:f7:a1:6a:47:95:f9:6d:45:67:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33826fdd287d907ea09428201d265e8cd50b6230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:33:6f:83:0e:3f:1c:69:5c:5e:4c:8b:ae:
86:e1:c1:e5:71:89:9b:04:bd:bf:7c:fb:86:9f:c4:
31:f6:f9:6d:5e:f7:f3:ca:52:50:58:f9:1f:99:45:
69:61:6c:7d:cb:f7:e8:fe:bb:ac:88:6b:5f:d9:bf:
95:af:51:2a:1e:8a:8c:e7:df:ff:db:2d:4f:75:1d:
d5:b1:a8:e3:c6:ec:04:98:90:1f:6f:81:38:c1:0d:
a7:4c:1d:25:a7:18:9a:7a:f8:d2:7a:88:7e:1e:96:
b1:54:0b:14:f1:31:c0:dd:5a:90:d5:43:df:00:9a:
45:47:4a:c2:78:ce:4f:c5:7d:6b:e6:da:e7:20:da:
47:7b:1d:c2:a6:47:a3:bb:10:36:4e:d5:02:3f:b7:
94:3a:0b:e0:ce:4f:fe:cd:6b:19:74:d6:48:a4:f9:
f1:1b:ff:67:6c:11:6b:c8:54:cb:4b:6f:6d:88:a8:
d6:9d:af:78:2a:f1:33:05:14:f3:63:a5:79:d1:21:
bf:01:26:bd:69:fc:fb:d0:af:38:4d:20:15:12:05:
de:c0:ee:90:78:bc:6f:99:72:98:5b:fc:be:b2:98:
18:01:c1:e1:0d:93:e7:fd:9a:e1:c7:6c:8c:21:d5:
0f:9f:00:09:4c:a9:b6:53:3b:b2:5f:e5:ba:f1:a6:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:6F:DD:28:7D:90:7E:A0:94:28:20:1D:26:5E:8C:D5:0B:62:30
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/M4Jv3Sh9kH6glCggHSZejNULYjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.179.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d1:2f:25:b8:4f:f4:78:ad:0b:5f:05:d1:7a:19:f5:53:ca:
88:d4:1c:ca:bf:09:46:e7:82:e5:00:9b:6b:74:25:f0:96:57:
c0:48:2c:51:21:ab:2c:10:9e:39:14:5d:f2:60:96:5e:9b:42:
1b:6d:a9:77:d1:4b:91:ef:b4:e0:76:87:bc:f7:a4:5e:1d:4f:
fd:bd:51:8a:9e:f4:94:c4:5a:f2:49:d9:36:b2:2d:19:53:96:
f7:ec:c7:18:54:9b:94:d4:f8:c9:55:92:24:cb:18:75:22:19:
f4:21:4b:26:80:8f:5b:ae:ee:05:54:51:18:44:a9:93:26:c3:
de:00:6d:cb:2b:3c:52:40:82:fd:fe:9c:27:bf:77:cf:f4:44:
64:9c:5f:97:ee:43:20:75:0c:0d:17:c2:21:a2:84:44:da:41:
2b:8e:48:4c:29:5f:03:35:8f:e8:d3:e2:84:f2:3c:5a:90:76:
f8:ed:95:da:aa:33:33:bd:80:b8:02:3a:42:6b:22:3f:4b:d9:
29:8f:71:87:c2:73:a6:4d:0a:55:a1:74:8f:2a:41:76:a2:23:
3d:df:74:a2:fa:e8:21:a2:2e:82:4d:6b:cf:bd:7b:f5:81:60:
13:23:58:10:5d:70:ed:f6:a0:8b:a8:da:2f:ce:9c:2c:31:e1:
8c:f2:88:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR6SRrJv3oWpHlfltRWcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5
NDEyZTIwHhcNMjUwMTAyMTM0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzgyNmZkZDI4N2Q5MDdlYTA5NDI4MjAxZDI2NWU4Y2Q1MGI2MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksIzb4MOPxxpXF5Mi66G4cHlcYmb
BL2/fPuGn8Qx9vltXvfzylJQWPkfmUVpYWx9y/fo/rusiGtf2b+Vr1EqHoqM59//
2y1PdR3VsajjxuwEmJAfb4E4wQ2nTB0lpxiaevjSeoh+HpaxVAsU8THA3VqQ1UPf
AJpFR0rCeM5PxX1r5trnINpHex3CpkejuxA2TtUCP7eUOgvgzk/+zWsZdNZIpPnx
G/9nbBFryFTLS29tiKjWna94KvEzBRTzY6V50SG/ASa9afz70K84TSAVEgXewO6Q
eLxvmXKYW/y+spgYAcHhDZPn/Zrhx2yMIdUPnwAJTKm2UzuyX+W68aYNUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOCb90ofZB+oJQoIB0mXozVC2IwMB8GA1UdIwQY
MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt
OGE5NWU2Mzc3MzMyLzEvTTRKdjNTaDlrSDZnbENnZ0hTWmVqTlVMWWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy
LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaKzMA0G
CSqGSIb3DQEBCwUAA4IBAQAE0S8luE/0eK0LXwXRehn1U8qI1BzKvwlG54LlAJtr
dCXwllfASCxRIassEJ45FF3yYJZem0Ibbal30UuR77Tgdoe896ReHU/9vVGKnvSU
xFrySdk2si0ZU5b37McYVJuU1PjJVZIkyxh1Ihn0IUsmgI9bru4FVFEYRKmTJsPe
AG3LKzxSQIL9/pwnv3fP9ERknF+X7kMgdQwNF8IhooRE2kErjkhMKV8DNY/o0+KE
8jxakHb47ZXaqjMzvYC4AjpCayI/S9kpj3GHwnOmTQpVoXSPKkF2oiM933Si+ugh
oi6CTWvPvXv1gWATI1gQXXDt9qCLqNovzpwsMeGM8ohU
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:46 2025 by rpki-client