Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/ra0nnbcZjMUUDlUlb-vmYcIyds0.roa
File: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (raw, json)
Hash identifier: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=
Subject key identifier: AD:AD:27:9D:B7:19:8C:C5:14:0E:55:25:6F:EB:E6:61:C2:32:76:CD
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 0194282698C573DEE27C9A4B6881B6ACC9B4
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/ra0nnbcZjMUUDlUlb-vmYcIyds0.roa
Signing time: Thu 02 Jan 2025 17:53:25 +0000
ROA not before: Thu 02 Jan 2025 17:53:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 185.154.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:98:c5:73:de:e2:7c:9a:4b:68:81:b6:ac:c9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Jan 2 17:53:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adad279db7198cc5140e55256febe661c23276cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:03:2c:fc:81:2c:56:00:3f:58:a8:34:c2:
3f:b8:47:b1:18:15:9b:37:95:a3:a1:96:84:76:17:
ff:87:63:67:c0:58:b4:cd:89:3b:11:f5:ce:2c:d7:
09:ed:57:09:76:3c:b0:e2:51:1d:97:4f:2d:fc:8b:
76:0e:03:d5:1d:32:8e:ca:3c:df:7f:f7:54:88:34:
6b:06:bd:24:e3:92:48:13:46:d2:ca:43:02:0d:a0:
02:cd:21:e7:e9:d0:51:83:f9:ea:27:b1:6c:c5:24:
a6:5d:2a:06:b9:c8:a1:72:1a:a6:d3:e0:7c:0d:a2:
99:45:cf:1f:7e:86:8d:73:2c:c1:c9:0d:97:82:70:
d5:82:38:c6:00:20:e9:70:b4:69:f2:95:c9:77:ba:
18:81:4b:40:e4:bf:53:2a:13:93:bd:e4:92:e5:5f:
7b:40:48:3d:fa:da:0f:8d:37:73:a5:6a:3a:74:6d:
3d:3b:2d:fa:54:37:73:05:44:2d:d5:ac:c2:e4:c5:
00:0b:51:68:e7:17:da:d2:ac:1d:ae:e2:63:cd:96:
22:a5:e0:09:ec:8f:12:f4:1f:67:c0:eb:c7:84:12:
3d:0e:79:ee:12:65:6b:32:0b:11:10:54:77:52:5d:
1e:82:88:66:93:45:72:4d:9b:93:a8:61:c9:97:26:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:27:9D:B7:19:8C:C5:14:0E:55:25:6F:EB:E6:61:C2:32:76:CD
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/ra0nnbcZjMUUDlUlb-vmYcIyds0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.148.0/23
Signature Algorithm: sha256WithRSAEncryption
88:6a:cb:9b:06:34:af:cd:b7:ed:35:ec:0b:92:5d:d2:f1:68:
49:aa:c7:59:6f:8e:62:32:98:99:39:5a:8f:3a:44:ec:61:5d:
10:d2:b9:ee:25:e3:d4:de:dc:25:bd:08:fc:a3:09:f5:c2:94:
67:16:77:74:db:c1:41:4c:58:30:ad:5b:4c:60:7f:45:4d:b0:
38:3e:d3:05:cc:9a:38:bd:7a:c8:a8:5f:e4:11:d9:d7:12:f4:
9e:a1:3c:33:73:f6:dd:4a:ef:2b:d2:b1:11:5f:71:28:89:84:
68:c6:62:68:76:4d:72:49:0a:22:e9:2f:02:da:18:9a:49:11:
c5:b3:ce:10:d4:43:96:9e:37:0b:3d:24:5d:ec:0d:92:59:98:
aa:6f:33:af:61:dd:55:b8:4f:88:c3:ba:7f:45:70:cf:be:c5:
47:26:da:9c:f6:86:f7:29:9a:99:65:07:80:9a:21:aa:98:d6:
47:d0:17:d3:8d:61:7d:62:7c:a7:7f:86:45:d4:c5:e3:6c:59:
94:53:2e:54:21:01:8d:0a:58:60:d8:a2:b9:99:60:47:9a:70:
dc:02:c4:8c:6d:f1:25:cc:2f:e0:81:3c:55:e0:78:45:7f:4d:
6c:53:0e:40:4c:46:26:44:77:74:89:97:42:e9:45:9e:d5:04:
2b:5f:28:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJpjFc97ifJpLaIG2rMm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFiMzQxNTNkYTBkNWQxMjFjZmY0MzI1OWZjZDllM2Ri
ZmM3ZDQwHhcNMjUwMTAyMTc1MzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGFkMjc5ZGI3MTk4Y2M1MTQwZTU1MjU2ZmViZTY2MWMyMzI3NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg8DLPyBLFYAP1ioNMI/uEexGBWb
N5WjoZaEdhf/h2NnwFi0zYk7EfXOLNcJ7VcJdjyw4lEdl08t/It2DgPVHTKOyjzf
f/dUiDRrBr0k45JIE0bSykMCDaACzSHn6dBRg/nqJ7FsxSSmXSoGucihchqm0+B8
DaKZRc8ffoaNcyzByQ2XgnDVgjjGACDpcLRp8pXJd7oYgUtA5L9TKhOTveSS5V97
QEg9+toPjTdzpWo6dG09Oy36VDdzBUQt1azC5MUAC1Fo5xfa0qwdruJjzZYipeAJ
7I8S9B9nwOvHhBI9DnnuEmVrMgsREFR3Ul0egohmk0VyTZuTqGHJlyZ6JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2tJ523GYzFFA5VJW/r5mHCMnbNMB8GA1UdIwQY
MBaAFHqRs0FT2g1dEhz/QyWfzZ49v8fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTkt
NGRjYjIzZmRiMDZhLzEvcmEwbm5iY1pqTVVVRGxVbGItdm1ZY0l5ZHMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTktNGRjYjIzZmRiMDZh
LzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZqUMA0G
CSqGSIb3DQEBCwUAA4IBAQCIasubBjSvzbftNewLkl3S8WhJqsdZb45iMpiZOVqP
OkTsYV0Q0rnuJePU3twlvQj8own1wpRnFnd028FBTFgwrVtMYH9FTbA4PtMFzJo4
vXrIqF/kEdnXEvSeoTwzc/bdSu8r0rERX3EoiYRoxmJodk1ySQoi6S8C2hiaSRHF
s84Q1EOWnjcLPSRd7A2SWZiqbzOvYd1VuE+Iw7p/RXDPvsVHJtqc9ob3KZqZZQeA
miGqmNZH0BfTjWF9Ynynf4ZF1MXjbFmUUy5UIQGNClhg2KK5mWBHmnDcAsSMbfEl
zC/ggTxV4HhFf01sUw5ATEYmRHd0iZdC6UWe1QQrXyhK
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:24 2025 by rpki-client