Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/lLs0En-PiwBfifuxTc3Sy8rCLkM.roa
File: lLs0En-PiwBfifuxTc3Sy8rCLkM.roa (raw, json)
Hash identifier: jx3OTZl4aGxwjOIxFgmOXxLonxn+2Yh7K8U7Wt+0LlI=
Subject key identifier: 94:BB:34:12:7F:8F:8B:00:5F:89:FB:B1:4D:CD:D2:CB:CA:C2:2E:43
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01942445A09F1C140D5B196450D55A6E656C
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/lLs0En-PiwBfifuxTc3Sy8rCLkM.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 185.255.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a0:9f:1c:14:0d:5b:19:64:50:d5:5a:6e:65:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94bb34127f8f8b005f89fbb14dcdd2cbcac22e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:53:6a:24:c3:7d:fb:1d:04:7c:3d:f5:9e:
78:f2:b4:36:97:d4:74:dd:b4:c6:72:cc:f5:50:c9:
c9:c2:f2:ca:1c:17:1f:4a:7d:4b:a0:76:37:70:0c:
88:49:31:8c:65:9b:f8:a2:f3:ca:60:41:9a:13:fc:
ef:d7:fc:ff:ac:1f:76:20:1d:f2:34:01:9d:58:70:
08:82:ea:14:83:75:9a:74:5c:ab:cf:29:0f:1f:ee:
01:d6:bc:0a:36:13:17:1c:d1:99:10:1a:23:b4:ac:
6b:ef:15:3a:a9:df:e6:50:0c:93:4e:84:c6:a1:2d:
b5:dc:79:5b:db:fa:14:a3:92:16:ad:57:32:94:e3:
bb:f0:4a:1a:24:a6:ad:4b:80:e1:7d:d2:f8:e3:1c:
f1:dc:ba:db:f1:d0:8f:fc:92:6e:31:58:3f:f0:6e:
79:5c:db:47:72:ad:42:ce:9a:40:66:bc:c7:b4:89:
7b:9e:e2:12:9e:b3:c8:6b:29:85:88:db:c0:c3:f5:
5c:1c:7e:09:93:2b:7a:83:b8:01:74:3b:76:97:53:
07:36:d5:f2:ed:65:42:48:20:d1:53:61:ca:ca:e8:
6a:a1:98:71:b1:10:f0:84:13:bd:f6:c2:a8:bb:90:
67:cf:c3:cd:80:ae:86:4d:a7:59:cc:19:03:e8:10:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:34:12:7F:8F:8B:00:5F:89:FB:B1:4D:CD:D2:CB:CA:C2:2E:43
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/lLs0En-PiwBfifuxTc3Sy8rCLkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ed:91:e7:1a:0f:29:8e:00:89:9d:30:21:37:92:75:21:63:
6a:02:e5:06:d1:19:ef:ac:fb:6c:b1:65:85:7d:de:d1:2b:c2:
9d:2f:6d:d4:46:a1:2d:0f:92:9a:89:6b:35:53:79:31:ee:d8:
80:11:5c:1a:35:81:89:8a:21:a8:32:38:18:c7:a0:c3:56:52:
9f:97:8f:38:ac:eb:02:a1:65:83:d2:a9:89:c4:7b:64:7d:da:
89:86:23:18:11:08:35:99:2c:ac:29:90:0b:23:f8:bb:4b:39:
13:c1:f6:8a:c3:1a:82:c8:3f:23:b3:51:35:7d:75:c3:3a:eb:
70:54:a0:48:5f:d5:98:21:dc:29:0d:65:1e:27:70:66:20:f1:
11:0f:79:11:88:af:d0:b2:9d:5d:91:63:73:16:ab:02:77:df:
8f:bf:f3:8d:d3:5b:48:ee:75:c0:b4:aa:9b:e9:5a:e9:cb:63:
3a:0c:0f:17:2d:a1:d0:16:3c:65:3e:04:ba:97:ec:ab:73:a3:
6a:89:d4:4c:93:52:47:0e:ce:5c:db:a3:06:ae:5d:4c:af:26:
b6:b0:81:72:23:67:ab:06:cd:6a:49:dd:fb:ae:17:c7:a9:c8:
ea:21:48:6f:43:98:22:25:8c:38:a2:01:31:40:bf:98:ed:f0:
9e:9d:5c:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRaCfHBQNWxlkUNVabmVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjUwMTAxMjM0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGJiMzQxMjdmOGY4YjAwNWY4OWZiYjE0ZGNkZDJjYmNhYzIyZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9dTaiTDffsdBHw99Z548rQ2l9R0
3bTGcsz1UMnJwvLKHBcfSn1LoHY3cAyISTGMZZv4ovPKYEGaE/zv1/z/rB92IB3y
NAGdWHAIguoUg3WadFyrzykPH+4B1rwKNhMXHNGZEBojtKxr7xU6qd/mUAyTToTG
oS213Hlb2/oUo5IWrVcylOO78EoaJKatS4DhfdL44xzx3Lrb8dCP/JJuMVg/8G55
XNtHcq1CzppAZrzHtIl7nuISnrPIaymFiNvAw/VcHH4Jkyt6g7gBdDt2l1MHNtXy
7WVCSCDRU2HKyuhqoZhxsRDwhBO99sKou5Bnz8PNgK6GTadZzBkD6BCaQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJS7NBJ/j4sAX4n7sU3N0svKwi5DMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvbExzMEVuLVBpd0JmaWZ1eFRjM1N5OHJDTGtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf/EMA0G
CSqGSIb3DQEBCwUAA4IBAQBf7ZHnGg8pjgCJnTAhN5J1IWNqAuUG0RnvrPtssWWF
fd7RK8KdL23URqEtD5KaiWs1U3kx7tiAEVwaNYGJiiGoMjgYx6DDVlKfl484rOsC
oWWD0qmJxHtkfdqJhiMYEQg1mSysKZALI/i7SzkTwfaKwxqCyD8js1E1fXXDOutw
VKBIX9WYIdwpDWUeJ3BmIPERD3kRiK/Qsp1dkWNzFqsCd9+Pv/ON01tI7nXAtKqb
6Vrpy2M6DA8XLaHQFjxlPgS6l+yrc6NqidRMk1JHDs5c26MGrl1Mrya2sIFyI2er
Bs1qSd37rhfHqcjqIUhvQ5giJYw4ogExQL+Y7fCenVwO
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:20 2025 by rpki-client