Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/klR3Tw2zhQustpC27SdEaChdhaU.roa
File: klR3Tw2zhQustpC27SdEaChdhaU.roa (raw, json)
Hash identifier: 0xbZ9p/+EGEzLEiF56AqxrPvwXrScXB0PK58PUuY9JA=
Subject key identifier: 92:54:77:4F:0D:B3:85:0B:AC:B6:90:B6:ED:27:44:68:28:5D:85:A5
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 02A850A0
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/klR3Tw2zhQustpC27SdEaChdhaU.roa
Signing time: Sat 01 Jan 2022 13:01:18 +0000
ROA not before: Sat 01 Jan 2022 13:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208058
IP address blocks: 185.125.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44585120 (0x2a850a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 1 13:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9254774f0db3850bacb690b6ed274468285d85a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:37:19:73:66:cb:e7:0c:f1:8e:cc:5d:25:
ad:06:24:57:f0:8a:ac:65:f4:af:44:25:47:69:40:
d2:72:2a:45:38:73:bb:d6:b8:a6:1b:59:b9:50:17:
db:92:17:63:ef:31:7c:51:bc:8b:5e:87:37:ec:02:
85:53:a2:63:a9:d3:4f:65:cb:47:3b:71:e0:de:52:
26:09:7b:28:3d:41:dd:91:48:c3:6d:97:ed:60:16:
05:08:2e:db:24:e6:f4:ef:fb:8c:f3:1c:87:b1:3f:
5c:4d:5e:ab:a7:26:93:19:98:3a:a0:6e:d0:3b:75:
bd:12:ee:a8:93:17:9c:29:b7:37:9f:9f:f8:9a:d2:
7d:7f:30:d5:a1:aa:91:5a:46:8a:19:f8:08:79:a7:
97:6a:b0:df:08:a0:0c:05:3e:ee:79:3c:5d:9d:aa:
d6:de:fa:54:40:76:a8:23:82:0d:34:88:3d:94:f7:
17:d0:a3:d6:3c:6a:79:71:8c:72:1c:33:07:cc:86:
f6:e3:71:d6:73:40:01:07:b3:4f:7b:af:da:bc:a0:
b2:70:a1:96:2f:6f:25:23:a9:7b:59:8a:72:0a:ac:
37:c4:fe:7c:e7:0a:11:96:7b:23:d5:7e:63:e1:2c:
c3:d2:4d:fc:07:91:c6:ad:8a:45:29:96:c2:e4:07:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:77:4F:0D:B3:85:0B:AC:B6:90:B6:ED:27:44:68:28:5D:85:A5
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/klR3Tw2zhQustpC27SdEaChdhaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:4e:77:01:56:65:eb:09:5f:8f:3c:81:6d:f1:a3:47:0d:c1:
3d:65:b8:80:9a:52:cf:0a:ce:13:1c:eb:65:12:11:cd:e2:22:
57:31:c4:a6:8c:03:f1:67:88:30:68:f6:b7:2f:5c:2f:f6:77:
83:a6:17:bb:c8:7b:58:bf:bb:8a:54:88:11:c5:ed:5f:f2:25:
35:7f:e7:17:7c:15:ee:f5:e0:d5:5e:27:15:ca:45:6b:02:4b:
f3:22:d0:a9:b0:74:74:1d:9a:6b:b3:d3:13:bd:c1:00:c4:bb:
ae:9f:de:60:65:ea:b0:c7:21:e5:d5:2c:24:86:53:ae:89:a9:
06:11:66:49:87:17:f8:34:cd:29:ef:7e:23:07:86:28:17:f4:
82:a1:4c:00:30:79:0a:b4:d1:a2:84:3d:98:42:b5:e7:d2:47:
30:5f:b3:f7:67:31:51:7a:b8:b8:f2:f4:2a:5a:e8:c0:59:c7:
5c:e0:7b:d4:ac:20:25:ba:60:f7:f2:36:42:62:e0:96:3c:8c:
5f:47:a5:8a:e4:9e:f2:30:10:83:9e:d0:8c:54:ee:c5:ee:4f:
55:d0:a3:28:34:0d:86:a4:2b:f6:5c:ef:47:d4:36:23:b2:b7:
2c:23:7d:83:c6:61:bb:03:f8:48:85:ec:84:37:bc:42:31:cc:
3d:4f:61:d0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAqhQoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YmE1MWEwYmMwZjBhZmViYmY2ZDVkOTI3ZmUxZjk4MTZmNTIzNTJkMB4XDTIyMDEw
MTEzMDExOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTI1NDc3NGYwZGIz
ODUwYmFjYjY5MGI2ZWQyNzQ0NjgyODVkODVhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJBgNxlzZsvnDPGOzF0lrQYkV/CKrGX0r0QlR2lA0nIqRThz
u9a4phtZuVAX25IXY+8xfFG8i16HN+wChVOiY6nTT2XLRztx4N5SJgl7KD1B3ZFI
w22X7WAWBQgu2yTm9O/7jPMch7E/XE1eq6cmkxmYOqBu0Dt1vRLuqJMXnCm3N5+f
+JrSfX8w1aGqkVpGihn4CHmnl2qw3wigDAU+7nk8XZ2q1t76VEB2qCOCDTSIPZT3
F9Cj1jxqeXGMchwzB8yG9uNx1nNAAQezT3uv2rygsnChli9vJSOpe1mKcgqsN8T+
fOcKEZZ7I9V+Y+Esw9JN/AeRxq2KRSmWwuQHXikCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSSVHdPDbOFC6y2kLbtJ0RoKF2FpTAfBgNVHSMEGDAWgBQbpRoLwPCv679t
XZJ/4fmBb1I1LTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0c2VWFDOER3ci11X2JWMlNmLUg1Z1c5U05TMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNGYyMTFlLTc5ZDctNDUwNC05ZWFkLTg3MWY5ZWQ3MDhlMC8x
L2tsUjNUdzJ6aFF1c3RwQzI3U2RFYUNoZGhhVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NGYyMTFlLTc5ZDctNDUwNC05ZWFkLTg3MWY5ZWQ3MDhlMC8xL0c2VWFDOER3ci11
X2JWMlNmLUg1Z1c5U05TMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl9wDANBgkqhkiG9w0BAQsFAAOC
AQEAak53AVZl6wlfjzyBbfGjRw3BPWW4gJpSzwrOExzrZRIRzeIiVzHEpowD8WeI
MGj2ty9cL/Z3g6YXu8h7WL+7ilSIEcXtX/IlNX/nF3wV7vXg1V4nFcpFawJL8yLQ
qbB0dB2aa7PTE73BAMS7rp/eYGXqsMch5dUsJIZTrompBhFmSYcX+DTNKe9+IweG
KBf0gqFMADB5CrTRooQ9mEK159JHMF+z92cxUXq4uPL0KlrowFnHXOB71KwgJbpg
9/I2QmLgljyMX0eliuSe8jAQg57QjFTuxe5PVdCjKDQNhqQr9lzvR9Q2I7K3LCN9
g8ZhuwP4SIXshDe8QjHMPU9h0A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:33 2025 by rpki-client