Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/rn6kNNRS1ftHYz4n76BKnrZaYFk.roa
File: rn6kNNRS1ftHYz4n76BKnrZaYFk.roa (raw, json)
Hash identifier: o5/QHGoGAsUP/AJBQSAvL5qV7Ho7RQQcrrKbD6+YUtc=
Subject key identifier: AE:7E:A4:34:D4:52:D5:FB:47:63:3E:27:EF:A0:4A:9E:B6:5A:60:59
Certificate issuer: /CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
Certificate serial: 01856E6FD1958A4107A5D0DD87191644657C
Authority key identifier: F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/rn6kNNRS1ftHYz4n76BKnrZaYFk.roa
Signing time: Sun 01 Jan 2023 17:44:59 +0000
ROA not before: Sun 01 Jan 2023 17:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59816
IP address blocks: 185.213.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:d1:95:8a:41:07:a5:d0:dd:87:19:16:44:65:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cbf97713ff30d2dc767d521cd30c2b928ae783
Validity
Not Before: Jan 1 17:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae7ea434d452d5fb47633e27efa04a9eb65a6059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:09:b8:44:af:c3:47:4e:b2:ab:97:ef:11:
1c:f7:ed:ec:4a:fe:79:ce:0c:49:97:fc:f9:d8:0d:
21:a3:28:b8:94:31:aa:4a:35:22:03:7a:3a:ef:ae:
8b:46:96:fd:78:3e:da:8c:3c:6b:86:a1:71:37:9e:
14:25:0c:b6:16:b9:78:d0:5b:9d:ce:a8:22:bb:57:
8d:79:a8:41:fc:ca:6c:76:e6:a3:8c:fd:65:da:af:
31:c8:be:96:da:f8:95:cc:cf:85:69:1f:48:da:75:
82:2f:56:50:0b:14:4f:0e:86:dd:ab:40:8a:92:f0:
a2:80:c5:58:34:6d:2c:4a:c9:1c:7c:0d:22:a6:68:
f7:7f:e4:ea:3e:99:64:a6:a9:ad:a6:8d:49:9d:83:
c4:4f:7a:07:a6:62:30:b4:96:e8:be:65:e4:8d:1f:
52:8e:f5:3c:ee:dd:5d:6f:ed:31:7b:d2:27:06:65:
67:41:30:bb:5f:9a:8e:22:47:b6:28:0f:22:6f:35:
7e:a4:40:07:95:78:5b:97:b7:21:ec:96:33:b7:f0:
54:45:b0:21:ab:11:d3:52:b2:7c:f8:28:7f:4e:24:
29:0c:c7:7b:d0:1f:38:ae:e1:0b:e5:ef:0d:ef:d0:
9e:79:fc:e4:83:b1:43:a1:26:6e:66:5d:d4:49:51:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:A4:34:D4:52:D5:FB:47:63:3E:27:EF:A0:4A:9E:B6:5A:60:59
X509v3 Authority Key Identifier:
keyid:F5:CB:F9:77:13:FF:30:D2:DC:76:7D:52:1C:D3:0C:2B:92:8A:E7:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cv5dxP_MNLcdn1SHNMMK5KK54M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/rn6kNNRS1ftHYz4n76BKnrZaYFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c0dfed-1d0d-4fca-b15b-b5e4ef322946/1/9cv5dxP_MNLcdn1SHNMMK5KK54M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.92.0/22
Signature Algorithm: sha256WithRSAEncryption
15:4d:0d:72:75:a3:5b:0e:da:c7:e5:73:4f:98:29:8f:39:15:
da:2c:23:81:01:08:db:18:23:5f:1e:31:f2:cc:7a:8a:e1:79:
3b:c3:05:69:a5:2b:dd:31:a5:75:df:3d:7d:ce:97:3f:2d:94:
97:bc:f3:18:2d:f2:1e:35:df:2f:5b:4e:e3:6e:2a:3e:36:e4:
1e:56:20:67:f0:45:bb:15:5d:73:fb:ea:00:a8:2c:d0:60:83:
09:1e:de:9e:ae:cc:93:51:b5:ed:b4:fd:5f:45:77:fd:7b:58:
fd:55:3d:65:35:f9:b5:4b:73:62:a5:f0:6a:9e:85:92:3c:fa:
2e:8c:27:f8:d8:87:cc:e0:99:96:4e:00:bf:1a:9b:43:1a:12:
b0:4c:2a:90:c8:43:eb:7e:2c:44:63:a4:38:75:ec:86:3f:16:
be:e0:9b:79:b7:0e:58:99:de:b7:43:db:3e:e8:37:7c:98:7d:
74:d3:a8:42:2a:c4:cc:fc:f2:91:83:81:b2:58:d1:52:d9:d8:
7b:49:52:39:36:e9:c3:bb:7a:39:5f:20:c1:83:03:47:2f:5c:
63:f3:d8:17:57:b4:79:6b:03:c1:be:df:a5:1b:3c:f5:dc:59:
11:29:91:06:cb:61:50:10:6b:12:f0:97:03:b0:78:31:cf:e4:
97:95:cd:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVub9GVikEHpdDdhxkWRGV8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2JmOTc3MTNmZjMwZDJkYzc2N2Q1MjFjZDMwYzJiOTI4
YWU3ODMwHhcNMjMwMTAxMTc0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTdlYTQzNGQ0NTJkNWZiNDc2MzNlMjdlZmEwNGE5ZWI2NWE2MDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4kJuESvw0dOsquX7xEc9+3sSv55
zgxJl/z52A0hoyi4lDGqSjUiA3o6766LRpb9eD7ajDxrhqFxN54UJQy2Frl40Fud
zqgiu1eNeahB/MpsduajjP1l2q8xyL6W2viVzM+FaR9I2nWCL1ZQCxRPDobdq0CK
kvCigMVYNG0sSskcfA0ipmj3f+TqPplkpqmtpo1JnYPET3oHpmIwtJbovmXkjR9S
jvU87t1db+0xe9InBmVnQTC7X5qOIke2KA8ibzV+pEAHlXhbl7ch7JYzt/BURbAh
qxHTUrJ8+Ch/TiQpDMd70B84ruEL5e8N79Ceefzkg7FDoSZuZl3USVE8ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5+pDTUUtX7R2M+J++gSp62WmBZMB8GA1UdIwQY
MBaAFPXL+XcT/zDS3HZ9UhzTDCuSiueDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWN2NWR4UF9NTkxjZG4xU0hOTU1LNUtLNTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMGRmZWQtMWQwZC00ZmNhLWIxNWIt
YjVlNGVmMzIyOTQ2LzEvcm42a05OUlMxZnRIWXo0bjc2QktuclphWUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jMGRmZWQtMWQwZC00ZmNhLWIxNWItYjVlNGVmMzIyOTQ2
LzEvOWN2NWR4UF9NTkxjZG4xU0hOTU1LNUtLNTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudVcMA0G
CSqGSIb3DQEBCwUAA4IBAQAVTQ1ydaNbDtrH5XNPmCmPORXaLCOBAQjbGCNfHjHy
zHqK4Xk7wwVppSvdMaV13z19zpc/LZSXvPMYLfIeNd8vW07jbio+NuQeViBn8EW7
FV1z++oAqCzQYIMJHt6ersyTUbXttP1fRXf9e1j9VT1lNfm1S3NipfBqnoWSPPou
jCf42IfM4JmWTgC/GptDGhKwTCqQyEPrfixEY6Q4deyGPxa+4Jt5tw5Ymd63Q9s+
6Dd8mH1006hCKsTM/PKRg4GyWNFS2dh7SVI5NunDu3o5XyDBgwNHL1xj89gXV7R5
awPBvt+lGzz13FkRKZEGy2FQEGsS8JcDsHgxz+SXlc2s
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:25 2025 by rpki-client