Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/k_Olvm1Smz2tPD2Yo_k26dAk7vo.roa
File: k_Olvm1Smz2tPD2Yo_k26dAk7vo.roa (raw, json)
Hash identifier: LUgKgLN3aY4VGKsydbOghRQsx4pefzPtmjPICGXezbQ=
Subject key identifier: 93:F3:A5:BE:6D:52:9B:3D:AD:3C:3D:98:A3:F9:36:E9:D0:24:EE:FA
Certificate issuer: /CN=22fd6c153b46ee4f621da74fd572983bcaff0632
Certificate serial: 018A50C68EA9D20192C80E86507B222260FB
Authority key identifier: 22:FD:6C:15:3B:46:EE:4F:62:1D:A7:4F:D5:72:98:3B:CA:FF:06:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv1sFTtG7k9iHadP1XKYO8r_BjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/k_Olvm1Smz2tPD2Yo_k26dAk7vo.roa
Signing time: Fri 01 Sep 2023 12:45:04 +0000
ROA not before: Fri 01 Sep 2023 12:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 185.222.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:c6:8e:a9:d2:01:92:c8:0e:86:50:7b:22:22:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd6c153b46ee4f621da74fd572983bcaff0632
Validity
Not Before: Sep 1 12:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93f3a5be6d529b3dad3c3d98a3f936e9d024eefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:95:4f:e4:35:ec:ee:e5:4d:b7:eb:68:5d:
ba:40:c0:3e:ae:96:87:85:86:85:4d:e4:cc:6b:20:
49:10:5d:81:c2:96:46:94:4a:aa:64:94:1d:d1:7c:
e2:da:59:69:2c:4a:dc:d6:7a:1d:80:a2:dd:7b:5e:
86:61:fa:dc:e8:1f:1c:56:b6:1f:d8:35:a1:be:65:
40:4a:88:c2:25:c9:37:c6:78:72:d2:76:88:fa:c1:
ed:94:ff:a3:1c:0c:9e:98:43:10:ed:6c:8b:9d:8f:
91:e1:94:b2:8b:7c:db:dc:82:78:52:30:a8:92:8f:
1b:e6:7c:31:39:65:93:89:50:3d:49:d7:69:64:78:
f9:de:33:68:24:9b:c1:f6:1a:28:5b:b0:c1:41:68:
0d:3c:96:63:09:7b:6c:05:79:cd:d6:9d:82:25:62:
79:41:1a:80:48:7a:d7:d9:e1:87:76:82:5f:79:e7:
f8:08:64:f1:d7:be:e9:27:6f:53:02:2e:f3:7f:e2:
ba:0e:c4:a3:24:59:c5:fb:98:a7:86:fd:b5:41:fd:
68:03:71:a2:18:b7:10:14:f3:54:8d:48:4c:76:d7:
33:f7:ab:12:01:f4:39:39:ba:c8:f6:8a:17:f8:71:
17:5f:e5:6c:69:c0:9f:a7:3c:b4:e9:b9:4a:88:4e:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:A5:BE:6D:52:9B:3D:AD:3C:3D:98:A3:F9:36:E9:D0:24:EE:FA
X509v3 Authority Key Identifier:
keyid:22:FD:6C:15:3B:46:EE:4F:62:1D:A7:4F:D5:72:98:3B:CA:FF:06:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv1sFTtG7k9iHadP1XKYO8r_BjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/k_Olvm1Smz2tPD2Yo_k26dAk7vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/Iv1sFTtG7k9iHadP1XKYO8r_BjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ab:b4:f1:1b:e1:88:67:9b:aa:7b:bd:52:29:1e:25:da:e2:
cc:6d:8d:18:14:00:ec:de:30:2d:89:14:ea:a5:fa:ab:a5:59:
1c:cf:5b:b2:67:5c:11:73:0d:7a:58:ae:83:ce:25:80:b3:ac:
7e:d2:b6:b8:72:7e:cc:3d:a3:5a:df:4e:d9:40:04:63:3e:f4:
c4:44:8b:b7:8a:1e:d8:93:a8:e2:f0:3c:2e:12:73:0d:0f:7d:
ea:2b:27:f2:30:af:93:23:a0:30:87:7f:f7:30:2a:ff:c3:89:
52:51:12:3b:dc:78:e6:17:08:e6:cb:6c:6c:5c:e3:c7:93:da:
83:92:55:92:f9:5c:9d:ae:f4:ca:86:cc:58:fc:45:8a:9a:ef:
01:a8:76:ac:35:8b:49:cd:b8:83:4d:55:02:bb:07:69:f6:b8:
b9:b6:ff:13:34:5f:e1:d1:61:70:c8:55:74:ca:c4:94:49:5f:
6b:69:e3:80:35:8d:bc:79:1c:db:d0:4c:66:c3:69:11:9d:a1:
c3:51:7d:ff:ba:78:c3:bd:5c:98:39:99:e0:e2:fe:c5:e9:8d:
22:fc:d3:8a:6e:ce:c9:9b:69:20:53:56:8e:b9:73:08:d7:25:
32:a7:12:d5:fa:cf:61:1a:b2:62:4f:af:a1:1a:33:d1:ff:b4:
94:17:ba:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpQxo6p0gGSyA6GUHsiImD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmQ2YzE1M2I0NmVlNGY2MjFkYTc0ZmQ1NzI5ODNiY2Fm
ZjA2MzIwHhcNMjMwOTAxMTI0NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2YzYTViZTZkNTI5YjNkYWQzYzNkOThhM2Y5MzZlOWQwMjRlZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X+VT+Q17O7lTbfraF26QMA+rpaH
hYaFTeTMayBJEF2BwpZGlEqqZJQd0Xzi2llpLErc1nodgKLde16GYfrc6B8cVrYf
2DWhvmVASojCJck3xnhy0naI+sHtlP+jHAyemEMQ7WyLnY+R4ZSyi3zb3IJ4UjCo
ko8b5nwxOWWTiVA9SddpZHj53jNoJJvB9hooW7DBQWgNPJZjCXtsBXnN1p2CJWJ5
QRqASHrX2eGHdoJfeef4CGTx177pJ29TAi7zf+K6DsSjJFnF+5inhv21Qf1oA3Gi
GLcQFPNUjUhMdtcz96sSAfQ5ObrI9ooX+HEXX+VsacCfpzy06blKiE6GUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJPzpb5tUps9rTw9mKP5NunQJO76MB8GA1UdIwQY
MBaAFCL9bBU7Ru5PYh2nT9VymDvK/wYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXYxc0ZUdEc3azlpSGFkUDFYS1lPOHJfQmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wODVjZjctZDRlYy00ODE3LTg4YTkt
N2JlY2YyOTJlOGRmLzEva19PbHZtMVNtejJ0UEQyWW9fazI2ZEFrN3ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wODVjZjctZDRlYy00ODE3LTg4YTktN2JlY2YyOTJlOGRm
LzEvSXYxc0ZUdEc3azlpSGFkUDFYS1lPOHJfQmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud4qMA0G
CSqGSIb3DQEBCwUAA4IBAQB7q7TxG+GIZ5uqe71SKR4l2uLMbY0YFADs3jAtiRTq
pfqrpVkcz1uyZ1wRcw16WK6DziWAs6x+0ra4cn7MPaNa307ZQARjPvTERIu3ih7Y
k6ji8DwuEnMND33qKyfyMK+TI6Awh3/3MCr/w4lSURI73HjmFwjmy2xsXOPHk9qD
klWS+VydrvTKhsxY/EWKmu8BqHasNYtJzbiDTVUCuwdp9ri5tv8TNF/h0WFwyFV0
ysSUSV9raeOANY28eRzb0Exmw2kRnaHDUX3/unjDvVyYOZng4v7F6Y0i/NOKbs7J
m2kgU1aOuXMI1yUypxLV+s9hGrJiT6+hGjPR/7SUF7oi
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:03 2025 by rpki-client