Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/Efg7T69N0gxARjKD604a2lDG_Ao.roa
File: Efg7T69N0gxARjKD604a2lDG_Ao.roa (raw, json)
Hash identifier: LalOH0a1G/mxn/ujUbd/p3XCiq0eJjP5az0TFSYJtZU=
Subject key identifier: 11:F8:3B:4F:AF:4D:D2:0C:40:46:32:83:EB:4E:1A:DA:50:C6:FC:0A
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0192288133E2CEC03A1D6C1C7CC9BE16AD33
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/Efg7T69N0gxARjKD604a2lDG_Ao.roa
Signing time: Wed 25 Sep 2024 09:26:48 +0000
ROA not before: Wed 25 Sep 2024 09:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214164
IP address blocks: 185.213.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:81:33:e2:ce:c0:3a:1d:6c:1c:7c:c9:be:16:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Sep 25 09:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11f83b4faf4dd20c40463283eb4e1ada50c6fc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:cd:cb:23:f1:43:8e:0f:da:47:eb:eb:f4:
07:24:83:18:39:c6:dc:f0:ed:fc:eb:89:ef:c6:ec:
0e:79:41:6c:89:79:7a:64:cf:9a:68:4b:43:23:5d:
82:f8:72:78:83:ad:61:32:dc:d7:95:02:ca:12:cb:
eb:e3:71:20:79:d6:43:f5:10:38:cf:62:72:4c:59:
b8:e8:7e:ae:34:10:52:f4:e0:5e:3d:77:51:48:04:
9f:da:dc:18:25:24:9f:aa:04:b5:71:f7:2e:a0:39:
24:02:f0:66:4a:c5:16:9f:0d:43:1b:59:02:3a:41:
a2:4c:5b:57:4c:c2:7e:9e:29:5e:42:2f:bd:c5:3c:
44:64:e6:39:9b:bd:93:fa:03:fa:d5:bb:e7:71:b0:
0b:65:a9:c6:92:f4:03:34:c2:32:09:5c:75:50:c1:
d5:ae:f6:b6:16:0e:d2:1c:4f:eb:60:0f:6a:26:d4:
65:1d:3a:07:49:be:e0:8f:5b:b9:51:7a:46:91:a3:
87:cb:7b:ae:d3:87:d0:56:4d:58:82:9a:fe:b5:f3:
a0:86:d5:73:6a:67:d4:d3:dc:b9:81:81:ba:4d:71:
b0:db:76:4b:19:5d:b6:ae:eb:0c:ed:bb:8f:57:4a:
c4:80:21:e2:02:e6:4e:39:7c:bf:f9:c5:f1:d6:0a:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:3B:4F:AF:4D:D2:0C:40:46:32:83:EB:4E:1A:DA:50:C6:FC:0A
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/Efg7T69N0gxARjKD604a2lDG_Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.114.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2f:d8:70:b4:a6:28:c3:4f:b5:40:5b:c5:32:1a:e0:e9:08:
06:1e:64:a6:36:be:79:b2:2f:b0:d3:97:d2:60:82:a6:ee:56:
16:b1:c6:16:30:e6:18:fd:58:cb:f6:32:c5:db:9b:28:2c:a0:
9d:a5:75:fd:41:e4:ec:ba:7a:7d:bc:3d:5f:43:6d:5b:4d:26:
65:bf:89:3c:e8:2e:d7:02:64:1f:cc:e4:58:b4:1e:5c:25:bc:
76:22:e1:59:99:6e:be:db:cd:d9:ca:3f:5d:81:04:0d:ac:47:
13:16:da:8b:10:3f:5c:0a:07:dc:5b:c6:3e:68:82:8a:cc:a6:
9e:67:af:ff:12:fa:c6:78:93:cc:28:73:80:0d:79:bd:36:d0:
ed:d5:4c:de:d1:99:42:41:81:09:ca:e4:a9:7d:4c:23:be:68:
1c:69:3e:ec:71:66:85:71:6f:cf:a3:43:68:ea:08:bc:d6:9b:
31:ce:2d:18:0d:79:e9:09:4c:6b:bc:97:d7:28:c0:bf:a6:16:
2f:34:5b:10:cc:4d:dd:19:1b:a5:1a:3a:da:27:8d:52:50:ea:
92:ff:6a:81:9c:e2:9e:70:20:ec:17:dd:7e:3c:db:cc:13:1c:
2e:98:db:4c:ed:7e:01:92:9f:9a:e9:73:17:83:a7:79:98:f4:
46:12:12:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIogTPizsA6HWwcfMm+Fq0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji
Njk1MDMwHhcNMjQwOTI1MDkyNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWY4M2I0ZmFmNGRkMjBjNDA0NjMyODNlYjRlMWFkYTUwYzZmYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBHNyyPxQ44P2kfr6/QHJIMYOcbc
8O3864nvxuwOeUFsiXl6ZM+aaEtDI12C+HJ4g61hMtzXlQLKEsvr43EgedZD9RA4
z2JyTFm46H6uNBBS9OBePXdRSASf2twYJSSfqgS1cfcuoDkkAvBmSsUWnw1DG1kC
OkGiTFtXTMJ+nileQi+9xTxEZOY5m72T+gP61bvncbALZanGkvQDNMIyCVx1UMHV
rva2Fg7SHE/rYA9qJtRlHToHSb7gj1u5UXpGkaOHy3uu04fQVk1Ygpr+tfOghtVz
amfU09y5gYG6TXGw23ZLGV22rusM7buPV0rEgCHiAuZOOXy/+cXx1grEPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBH4O0+vTdIMQEYyg+tOGtpQxvwKMB8GA1UdIwQY
MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt
NTczY2E1YTYwOWMwLzEvRWZnN1Q2OU4wZ3hBUmpLRDYwNGEybERHX0FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw
LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudVyMA0G
CSqGSIb3DQEBCwUAA4IBAQBJL9hwtKYow0+1QFvFMhrg6QgGHmSmNr55si+w05fS
YIKm7lYWscYWMOYY/VjL9jLF25soLKCdpXX9QeTsunp9vD1fQ21bTSZlv4k86C7X
AmQfzORYtB5cJbx2IuFZmW6+283Zyj9dgQQNrEcTFtqLED9cCgfcW8Y+aIKKzKae
Z6//EvrGeJPMKHOADXm9NtDt1Uze0ZlCQYEJyuSpfUwjvmgcaT7scWaFcW/Po0No
6gi81psxzi0YDXnpCUxrvJfXKMC/phYvNFsQzE3dGRulGjraJ41SUOqS/2qBnOKe
cCDsF91+PNvMExwumNtM7X4Bkp+a6XMXg6d5mPRGEhK/
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:24 2025 by rpki-client