Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa
File: 9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa (raw, json)
Hash identifier: FAkZUvlkFTeURhyGPk/Cqy2vo8UntR2/HehcNI9EJVU=
Subject key identifier: F6:2A:14:94:D9:14:35:80:5C:C7:24:F1:91:7D:EB:82:DE:40:D2:CD
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01942444C23A9F126A387145C5CC6A2DFB5B
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146943
IP address blocks: 185.131.53.0/24 maxlen: 24
185.131.54.0/24 maxlen: 24
185.131.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c2:3a:9f:12:6a:38:71:45:c5:cc:6a:2d:fb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f62a1494d91435805cc724f1917deb82de40d2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:c9:d3:f2:2e:51:9c:d5:fb:26:ad:54:73:
31:6b:9b:3d:d5:59:eb:7d:d3:6d:d5:23:fe:3a:03:
37:05:09:6a:53:6b:7b:a5:d9:b3:65:be:4d:14:3f:
a6:5e:cc:b7:bf:32:15:9e:3f:a4:66:05:9d:46:81:
bd:49:28:db:79:0c:91:ba:1b:4f:ef:b4:78:af:4f:
1a:1a:8f:f6:38:91:f6:9f:24:08:2e:94:b7:80:f7:
80:af:86:5b:a0:79:81:b8:3c:83:02:76:8a:03:1e:
4f:84:97:f8:fc:48:f9:15:75:8a:8f:03:2a:24:7f:
20:8d:d1:25:cf:e3:80:d6:a6:ea:7c:ad:01:9d:8a:
e7:63:d0:20:32:8c:54:73:55:13:f2:f6:0a:8c:17:
db:59:27:50:14:4e:ea:0e:09:3e:7b:b5:db:9e:76:
78:72:45:ee:55:76:60:18:f3:22:b3:b9:0e:ec:d6:
3c:81:2b:13:0a:2a:b2:e3:81:75:fb:69:3f:14:03:
3a:d2:75:15:c1:4b:4a:68:6a:15:81:4f:bb:6a:49:
7a:77:d0:fb:12:4f:79:a4:f7:58:6d:6d:b1:b6:48:
41:a7:f5:0a:f5:09:c4:b0:4d:e3:16:98:01:3a:cf:
e5:05:17:ba:9b:8e:8b:3b:19:7a:0a:e4:32:59:68:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:14:94:D9:14:35:80:5C:C7:24:F1:91:7D:EB:82:DE:40:D2:CD
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.53.0-185.131.55.255
Signature Algorithm: sha256WithRSAEncryption
a2:2c:a5:34:c6:88:b4:41:9a:01:79:13:79:36:07:0f:4f:b6:
7f:1b:5a:9a:68:92:88:4b:ca:04:db:3a:6a:d9:2d:b0:9c:7b:
47:f4:8a:2d:be:55:ca:c4:17:bd:1b:20:2b:6a:d7:e9:1a:85:
07:3a:8a:19:b4:a6:7b:02:5b:00:ea:3b:a3:a2:03:88:ed:38:
52:ec:23:9f:49:33:29:68:27:79:e1:9a:88:08:ab:ef:05:d0:
f2:e6:d9:4b:20:37:0a:90:03:c3:5b:30:db:d9:1e:d4:60:4a:
29:8b:a2:b9:49:0c:62:b0:15:ba:c8:96:d8:e7:0d:aa:05:b6:
ad:c5:63:c4:33:8a:3c:94:5d:3e:db:4f:b0:1c:ec:be:17:5c:
74:20:39:6d:04:25:a3:18:97:1e:e2:31:f9:b1:45:37:dc:d4:
6d:f2:a9:90:fd:18:07:a6:68:aa:15:dc:11:42:40:8a:4f:02:
b0:12:98:7a:67:82:5c:76:3f:49:6d:e8:59:a8:10:fc:6b:54:
ce:b9:da:d3:c2:ee:79:4e:cb:c1:ca:a2:f9:f0:08:b9:a3:6d:
3c:c2:20:96:a7:bb:ec:f2:3f:ca:78:d2:2f:f5:14:de:58:54:
fe:74:6f:71:37:62:1e:83:65:0f:d0:49:97:cc:0c:54:49:0b:
f4:56:83:0f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQkRMI6nxJqOHFFxcxqLftbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk
MTdiYWMwHhcNMjUwMTAxMjM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjJhMTQ5NGQ5MTQzNTgwNWNjNzI0ZjE5MTdkZWI4MmRlNDBkMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw27J0/IuUZzV+yatVHMxa5s91Vnr
fdNt1SP+OgM3BQlqU2t7pdmzZb5NFD+mXsy3vzIVnj+kZgWdRoG9SSjbeQyRuhtP
77R4r08aGo/2OJH2nyQILpS3gPeAr4ZboHmBuDyDAnaKAx5PhJf4/Ej5FXWKjwMq
JH8gjdElz+OA1qbqfK0BnYrnY9AgMoxUc1UT8vYKjBfbWSdQFE7qDgk+e7XbnnZ4
ckXuVXZgGPMis7kO7NY8gSsTCiqy44F1+2k/FAM60nUVwUtKaGoVgU+7akl6d9D7
Ek95pPdYbW2xtkhBp/UK9QnEsE3jFpgBOs/lBRe6m46LOxl6CuQyWWgNqwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPYqFJTZFDWAXMck8ZF964LeQNLNMB8GA1UdIwQY
MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt
N2Y0MzViZjU1MDFjLzEvOWlvVWxOa1VOWUJjeHlUeGtYM3JndDVBMHMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj
LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5gzUD
BAO5gzAwDQYJKoZIhvcNAQELBQADggEBAKIspTTGiLRBmgF5E3k2Bw9Ptn8bWppo
kohLygTbOmrZLbCce0f0ii2+VcrEF70bICtq1+kahQc6ihm0pnsCWwDqO6OiA4jt
OFLsI59JMyloJ3nhmogIq+8F0PLm2UsgNwqQA8NbMNvZHtRgSimLorlJDGKwFbrI
ltjnDaoFtq3FY8QzijyUXT7bT7Ac7L4XXHQgOW0EJaMYlx7iMfmxRTfc1G3yqZD9
GAemaKoV3BFCQIpPArASmHpnglx2P0lt6FmoEPxrVM652tPC7nlOy8HKovnwCLmj
bTzCIJanu+zyP8p40i/1FN5YVP50b3E3Yh6DZQ/QSZfMDFRJC/RWgw8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:44 2025 by rpki-client