Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/LIcVp_gDBZHQHeAoq_OISO4cd-w.roa
File: LIcVp_gDBZHQHeAoq_OISO4cd-w.roa (raw, json)
Hash identifier: AQbKb72tQz1GPwkLuLau17qgDMC46JwMDbO5yS6B1h4=
Subject key identifier: 2C:87:15:A7:F8:03:05:91:D0:1D:E0:28:AB:F3:88:48:EE:1C:77:EC
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01918E03D9EAE4E7EA53302B6BFB6D0DA68C
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/LIcVp_gDBZHQHeAoq_OISO4cd-w.roa
Signing time: Mon 26 Aug 2024 09:28:22 +0000
ROA not before: Mon 26 Aug 2024 09:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.157.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:03:d9:ea:e4:e7:ea:53:30:2b:6b:fb:6d:0d:a6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Aug 26 09:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c8715a7f8030591d01de028abf38848ee1c77ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:c2:c3:df:ff:6a:ad:cb:ce:48:04:5c:a8:
8a:19:39:b9:cc:64:fa:2c:13:d1:ec:0a:97:b0:2a:
c6:a1:f7:b9:89:58:d6:3d:f0:f4:18:8f:ce:33:38:
da:d0:8e:04:3f:fa:99:e6:51:e1:9e:9e:23:c4:bd:
d1:1f:f1:9d:9c:87:5b:28:d8:aa:ba:30:ac:29:4c:
39:41:63:2c:87:5c:5e:0e:dd:39:07:cf:6c:bf:a3:
04:07:08:3e:c7:a5:03:8d:e5:4d:cc:68:e2:66:bd:
8b:be:95:bc:3e:a2:67:68:1c:3b:a4:70:fc:1b:3b:
6d:df:b7:f6:19:4e:e2:75:dd:de:3c:2a:ad:70:a5:
8e:ae:79:24:e2:f3:ef:66:ec:ea:72:ae:69:17:48:
54:c1:07:52:9c:3a:a2:46:f2:3c:41:ba:fe:2f:4d:
a3:5e:75:de:88:3e:c8:02:56:9e:69:3f:4c:dc:a3:
73:97:80:2b:4a:c1:89:02:66:b9:77:ab:88:f3:35:
44:a0:9a:b8:e8:a2:e4:9c:73:3b:a8:1e:d7:b9:1c:
27:a4:01:7f:73:8c:3e:a5:76:2e:d6:9a:a3:0c:20:
59:be:c1:06:43:be:26:f7:43:60:7f:6e:f5:56:50:
78:a9:3a:ec:70:ee:8f:12:14:65:3b:3c:ad:b3:f6:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:15:A7:F8:03:05:91:D0:1D:E0:28:AB:F3:88:48:EE:1C:77:EC
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/LIcVp_gDBZHQHeAoq_OISO4cd-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.51.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0a:96:cc:45:af:a6:49:c0:47:82:da:b8:ab:a3:e5:67:12:
9a:a4:02:2e:13:1f:e0:48:40:8b:65:bd:d1:af:c0:9a:a1:35:
e0:18:ee:9a:1a:4e:64:0a:36:e3:97:ec:f5:4e:8f:04:e6:7b:
e2:e2:8e:d1:40:2e:ec:2a:09:8d:38:0c:a7:db:ac:54:cf:91:
3f:b0:98:f7:cc:5c:2c:53:3b:23:6d:20:51:2a:cb:87:49:b0:
04:50:03:b4:ae:2e:8e:5e:dd:bb:49:93:f4:d2:c4:b4:13:a7:
c9:8c:fe:91:ad:42:a4:f5:fe:8e:8e:ee:4b:36:a0:05:ee:10:
bf:ce:f3:bc:32:20:1f:88:38:b3:67:9d:b2:54:53:3f:12:18:
93:a9:48:3c:a0:ad:14:78:ea:a3:11:72:0a:de:56:6f:b8:b3:
23:54:a5:bb:8b:2f:cd:5f:35:99:5e:d7:be:ec:f0:42:c2:43:
7c:c5:52:1d:64:bc:02:02:4b:1e:dc:0e:c6:0f:a3:9f:98:00:
31:f5:3b:c5:e8:05:25:ee:40:c8:a4:82:5e:bf:99:cc:8f:d9:
b6:c2:f1:3e:8f:89:e2:e0:48:6d:c7:c5:8f:ae:38:9b:96:b2:
c0:a1:d9:60:9a:de:55:e0:1c:45:a1:d1:8b:3a:1e:fb:bc:5b:
01:4b:68:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGOA9nq5OfqUzAra/ttDaaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2
NjNjNjIwHhcNMjQwODI2MDkyODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzg3MTVhN2Y4MDMwNTkxZDAxZGUwMjhhYmYzODg0OGVlMWM3N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbzCw9//aq3LzkgEXKiKGTm5zGT6
LBPR7AqXsCrGofe5iVjWPfD0GI/OMzja0I4EP/qZ5lHhnp4jxL3RH/GdnIdbKNiq
ujCsKUw5QWMsh1xeDt05B89sv6MEBwg+x6UDjeVNzGjiZr2LvpW8PqJnaBw7pHD8
Gztt37f2GU7idd3ePCqtcKWOrnkk4vPvZuzqcq5pF0hUwQdSnDqiRvI8Qbr+L02j
XnXeiD7IAlaeaT9M3KNzl4ArSsGJAma5d6uI8zVEoJq46KLknHM7qB7XuRwnpAF/
c4w+pXYu1pqjDCBZvsEGQ74m90Ngf271VlB4qTrscO6PEhRlOzyts/bXrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCyHFaf4AwWR0B3gKKvziEjuHHfsMB8GA1UdIwQY
MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut
ZjFmMGI5NTk4ZjMyLzEvTEljVnBfZ0RCWkhRSGVBb3FfT0lTTzRjZC13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy
LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ0zMA0G
CSqGSIb3DQEBCwUAA4IBAQCTCpbMRa+mScBHgtq4q6PlZxKapAIuEx/gSECLZb3R
r8CaoTXgGO6aGk5kCjbjl+z1To8E5nvi4o7RQC7sKgmNOAyn26xUz5E/sJj3zFws
UzsjbSBRKsuHSbAEUAO0ri6OXt27SZP00sS0E6fJjP6RrUKk9f6Oju5LNqAF7hC/
zvO8MiAfiDizZ52yVFM/EhiTqUg8oK0UeOqjEXIK3lZvuLMjVKW7iy/NXzWZXte+
7PBCwkN8xVIdZLwCAkse3A7GD6OfmAAx9TvF6AUl7kDIpIJev5nMj9m2wvE+j4ni
4Ehtx8WPrjiblrLAodlgmt5V4BxFodGLOh77vFsBS2iM
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:11 2025 by rpki-client