Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/_KO8Oi7vtPgAowOISHE5epxFK5Q.roa
File: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (raw, json)
Hash identifier: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=
Subject key identifier: FC:A3:BC:3A:2E:EF:B4:F8:00:A3:03:88:48:71:39:7A:9C:45:2B:94
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 01942521CAABF0D28DB89EE7A9AEB1D539FA
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/_KO8Oi7vtPgAowOISHE5epxFK5Q.roa
Signing time: Thu 02 Jan 2025 03:49:19 +0000
ROA not before: Thu 02 Jan 2025 03:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207645
IP address blocks: 185.86.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ca:ab:f0:d2:8d:b8:9e:e7:a9:ae:b1:d5:39:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Jan 2 03:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fca3bc3a2eefb4f800a303884871397a9c452b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:2b:ba:e5:36:48:9a:2c:59:f7:3c:d8:5f:
02:3d:f3:27:34:b5:ef:26:c0:d5:54:1f:c6:b7:0c:
9f:9a:cb:f6:da:91:35:1d:fc:46:5e:9a:4c:e1:b5:
20:2b:99:09:0f:5c:a2:55:39:97:e5:1c:5e:0d:e2:
50:e6:26:02:30:fe:a5:ec:69:4a:40:1b:22:11:8e:
93:5c:5f:8f:48:e8:69:c2:37:fa:b9:a3:fa:95:aa:
6a:33:34:d7:05:ac:77:e9:c2:a0:b2:fc:c1:91:51:
5f:cf:e3:54:d2:30:9e:a6:7f:bd:a8:3a:c6:a8:dd:
e0:27:a6:d1:51:bd:0a:28:1f:ad:9f:d7:3a:e1:7b:
fe:81:9b:48:1b:93:72:d0:bc:96:4d:ca:04:f7:d7:
56:bc:70:ac:51:38:dc:97:39:ee:3e:05:ac:05:15:
6e:18:a6:11:de:1c:44:71:09:62:a9:e0:da:38:27:
fb:34:27:03:41:39:27:1a:63:bc:92:d7:dd:2a:1b:
c2:53:91:e2:b6:7a:5e:b3:a8:90:0d:a2:f0:92:a2:
29:4f:e6:8d:f3:cd:b3:4c:13:f4:51:44:9f:a6:f6:
b6:11:50:59:be:ab:3c:0c:7e:5d:23:06:29:e6:6d:
77:11:90:8b:67:4f:4d:f9:c2:c0:46:77:a8:2d:c9:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A3:BC:3A:2E:EF:B4:F8:00:A3:03:88:48:71:39:7A:9C:45:2B:94
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/_KO8Oi7vtPgAowOISHE5epxFK5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:21:5f:c0:f0:47:4e:a2:77:79:22:b6:22:9b:28:4c:b2:58:
ea:a6:2a:03:76:b5:a3:3f:fe:74:b5:f3:96:c8:29:57:ef:d5:
f6:69:66:99:f8:0a:c9:fc:b3:26:4a:b6:f7:63:6f:d0:b0:29:
4a:9a:cd:de:1c:c3:4d:ad:a3:b4:e2:3a:42:03:4e:c1:5a:50:
9a:18:42:91:ed:7e:9f:e4:f2:a9:d1:46:3d:f1:bd:39:d1:e7:
7f:59:a9:b1:95:03:65:80:34:4c:f3:44:8c:d3:7b:e2:6f:cf:
10:41:c8:3c:9d:4e:ea:07:71:a3:4f:0b:de:a4:f8:2c:a6:c0:
fd:9b:5e:bc:45:4b:66:7f:e1:0a:d4:6d:b2:20:da:be:af:9d:
43:88:78:bb:d9:51:e4:f0:ab:7f:bf:5b:ec:f5:6c:87:2e:ea:
3a:7a:d6:63:8b:ab:0a:23:80:78:6b:aa:3e:08:13:37:77:53:
5f:c9:2b:cf:73:66:1c:44:df:7c:38:49:ff:2a:71:36:ba:84:
1f:a8:5c:dc:ac:0d:2a:cc:c6:1d:3d:28:d2:9d:d8:89:53:72:
d9:79:47:08:a9:c1:fd:6c:1a:03:de:cb:8d:eb:09:e6:47:2d:
6a:37:fb:1f:40:85:c3:9e:9a:51:8b:00:2b:72:1a:4a:a7:8e:
97:23:2d:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIcqr8NKNuJ7nqa6x1Tn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk
ZmUyYTIwHhcNMjUwMTAyMDM0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2EzYmMzYTJlZWZiNGY4MDBhMzAzODg0ODcxMzk3YTljNDUyYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzcruuU2SJosWfc82F8CPfMnNLXv
JsDVVB/Gtwyfmsv22pE1HfxGXppM4bUgK5kJD1yiVTmX5RxeDeJQ5iYCMP6l7GlK
QBsiEY6TXF+PSOhpwjf6uaP6lapqMzTXBax36cKgsvzBkVFfz+NU0jCepn+9qDrG
qN3gJ6bRUb0KKB+tn9c64Xv+gZtIG5Ny0LyWTcoE99dWvHCsUTjclznuPgWsBRVu
GKYR3hxEcQliqeDaOCf7NCcDQTknGmO8ktfdKhvCU5Hitnpes6iQDaLwkqIpT+aN
882zTBP0UUSfpva2EVBZvqs8DH5dIwYp5m13EZCLZ09N+cLARneoLck4VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPyjvDou77T4AKMDiEhxOXqcRSuUMB8GA1UdIwQY
MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt
ZjQ3NGY3YmQzNTMxLzEvX0tPOE9pN3Z0UGdBb3dPSVNIRTVlcHhGSzVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx
LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVYKMA0G
CSqGSIb3DQEBCwUAA4IBAQAbIV/A8EdOond5IrYimyhMsljqpioDdrWjP/50tfOW
yClX79X2aWaZ+ArJ/LMmSrb3Y2/QsClKms3eHMNNraO04jpCA07BWlCaGEKR7X6f
5PKp0UY98b050ed/WamxlQNlgDRM80SM03vib88QQcg8nU7qB3GjTwvepPgspsD9
m168RUtmf+EK1G2yINq+r51DiHi72VHk8Kt/v1vs9WyHLuo6etZji6sKI4B4a6o+
CBM3d1NfySvPc2YcRN98OEn/KnE2uoQfqFzcrA0qzMYdPSjSndiJU3LZeUcIqcH9
bBoD3suN6wnmRy1qN/sfQIXDnppRiwArchpKp46XIy01
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:36 2025 by rpki-client