Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa
File: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (raw, json)
Hash identifier: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=
Subject key identifier: 89:B4:2C:62:23:0E:53:50:FD:ED:9E:9D:07:0D:99:DA:7B:89:A0:0D
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01948018F378FCA27A5656899FD57CD7929E
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa
Signing time: Sun 19 Jan 2025 19:45:06 +0000
ROA not before: Sun 19 Jan 2025 19:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147293
IP address blocks: 185.113.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:80:18:f3:78:fc:a2:7a:56:56:89:9f:d5:7c:d7:92:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 19 19:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89b42c62230e5350fded9e9d070d99da7b89a00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:a6:2d:36:3b:6e:d9:fa:3c:18:a7:8e:05:
47:5c:a0:e0:ce:17:f0:ad:ff:b6:ba:9a:e8:9f:66:
e4:ed:d2:a4:53:f2:44:79:43:ff:6b:ae:89:a1:dc:
4a:19:8a:b5:6a:57:73:ac:2e:9b:e9:41:2c:06:c8:
8e:87:9e:1e:83:d8:f2:1a:3a:4f:72:bd:56:43:c6:
45:09:74:76:aa:20:69:09:b2:e6:68:66:a2:b5:e3:
ac:ec:07:08:31:50:60:7b:ed:43:a6:b4:cf:c0:ff:
a6:35:1e:ef:2f:d2:c1:15:e5:32:8f:09:08:1e:6f:
7b:9b:fe:b1:b4:04:a4:6a:e3:84:63:6b:8f:da:25:
4b:11:2d:4f:25:a1:cd:ed:2d:67:af:6b:83:c4:a3:
ac:ae:39:6b:d3:27:6e:f5:58:0c:e0:aa:89:e5:fa:
20:1c:cd:a4:73:96:8e:09:76:57:7c:ce:41:eb:13:
e9:12:ab:75:3f:93:ed:5e:f8:ad:e2:51:94:72:19:
de:bc:61:9d:bf:47:36:2e:be:ff:e7:9f:d8:07:47:
e1:c1:38:e6:6b:a6:b5:77:8a:a2:c5:94:dc:13:41:
5e:17:10:86:de:3c:0a:2f:96:ab:6f:85:9c:f2:42:
c1:01:e1:dc:ff:d6:4b:62:65:09:be:c4:bf:d8:bd:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:2C:62:23:0E:53:50:FD:ED:9E:9D:07:0D:99:DA:7B:89:A0:0D
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
Signature Algorithm: sha256WithRSAEncryption
56:72:6f:9e:e5:a3:22:7f:06:45:6b:15:22:b8:5b:82:77:bb:
e3:ce:a7:9a:13:00:fd:c4:fc:ae:f7:9b:a4:cd:4c:a0:c1:69:
a0:da:ef:71:e2:7a:49:0d:75:9c:cc:6a:af:75:ee:ff:8f:09:
18:d8:86:fd:1f:78:3a:9c:8b:25:c4:9b:5d:85:c7:63:b7:3c:
6e:28:1a:13:9a:cc:fc:a0:63:79:a1:1d:07:38:68:7f:f9:92:
76:af:9e:65:7d:b3:59:00:11:96:dc:e5:5a:2c:26:39:32:11:
10:a2:7b:7b:ec:c5:31:55:c2:39:09:f0:4a:6c:e3:62:d2:2a:
60:4f:61:c9:68:4b:61:31:14:77:6c:7f:95:3d:5d:13:c0:4e:
34:e6:82:df:8e:c3:72:ce:f5:60:43:67:e2:4c:65:5f:1d:a3:
c9:29:a7:14:7a:ba:47:fe:bb:8a:91:e6:23:3f:2f:ea:ec:16:
2b:e5:cb:c3:b5:a0:7a:36:09:a5:7a:20:82:7e:a5:9f:4a:98:
40:4c:cf:be:2b:7d:0b:73:85:78:45:a7:8a:85:e1:c4:db:2e:
b4:8d:c0:17:2f:3d:c1:da:c5:4c:66:1b:94:0d:c8:dc:c7:d6:
7c:9e:3a:c3:05:04:03:e6:fd:58:20:78:08:a4:25:04:08:06:
3c:68:76:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSAGPN4/KJ6VlaJn9V815KeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4
NjJlNWYwHhcNMjUwMTE5MTk0NTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWI0MmM2MjIzMGU1MzUwZmRlZDllOWQwNzBkOTlkYTdiODlhMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBKmLTY7btn6PBinjgVHXKDgzhfw
rf+2upron2bk7dKkU/JEeUP/a66JodxKGYq1aldzrC6b6UEsBsiOh54eg9jyGjpP
cr1WQ8ZFCXR2qiBpCbLmaGaiteOs7AcIMVBge+1DprTPwP+mNR7vL9LBFeUyjwkI
Hm97m/6xtASkauOEY2uP2iVLES1PJaHN7S1nr2uDxKOsrjlr0ydu9VgM4KqJ5fog
HM2kc5aOCXZXfM5B6xPpEqt1P5PtXvit4lGUchnevGGdv0c2Lr7/55/YB0fhwTjm
a6a1d4qixZTcE0FeFxCG3jwKL5arb4Wc8kLBAeHc/9ZLYmUJvsS/2L0KSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIm0LGIjDlNQ/e2enQcNmdp7iaANMB8GA1UdIwQY
MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt
MGQzZmNlNDI5YmRlLzEvaWJRc1lpTU9VMUQ5N1o2ZEJ3MloybnVKb0EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl
LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXFCMA0G
CSqGSIb3DQEBCwUAA4IBAQBWcm+e5aMifwZFaxUiuFuCd7vjzqeaEwD9xPyu95uk
zUygwWmg2u9x4npJDXWczGqvde7/jwkY2Ib9H3g6nIslxJtdhcdjtzxuKBoTmsz8
oGN5oR0HOGh/+ZJ2r55lfbNZABGW3OVaLCY5MhEQont77MUxVcI5CfBKbONi0ipg
T2HJaEthMRR3bH+VPV0TwE405oLfjsNyzvVgQ2fiTGVfHaPJKacUerpH/ruKkeYj
Py/q7BYr5cvDtaB6NgmleiCCfqWfSphATM++K30Lc4V4RaeKheHE2y60jcAXLz3B
2sVMZhuUDcjcx9Z8njrDBQQD5v1YIHgIpCUECAY8aHY3
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:55 2025 by rpki-client