Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/ibsagXyULK6_yzLYa3pXOko3XKU.roa
File: ibsagXyULK6_yzLYa3pXOko3XKU.roa (raw, json)
Hash identifier: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=
Subject key identifier: 89:BB:1A:81:7C:94:2C:AE:BF:CB:32:D8:6B:7A:57:3A:4A:37:5C:A5
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 01941F8C2F6CA926F279F20A1D1F530CAFFF
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/ibsagXyULK6_yzLYa3pXOko3XKU.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206853
IP address blocks: 185.174.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2f:6c:a9:26:f2:79:f2:0a:1d:1f:53:0c:af:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89bb1a817c942caebfcb32d86b7a573a4a375ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:a2:69:e8:aa:f2:1a:54:dd:7b:42:b9:1f:
51:8b:e3:bd:75:04:81:68:24:16:c7:46:16:e0:e3:
98:cc:a5:4e:22:08:3a:b3:ca:10:c9:a3:e7:8d:a5:
05:46:40:42:bb:18:aa:22:85:3d:95:2d:b7:f4:b8:
21:d6:67:76:7d:91:70:6a:e9:e7:25:e2:a1:ef:2f:
c0:39:f2:8b:fb:19:c3:a3:9d:ed:e9:fc:5c:ee:5f:
54:00:70:02:b0:4f:50:e1:4b:8b:0c:10:0c:0a:d5:
26:1d:cd:83:d9:e9:19:ef:26:43:b4:b0:7d:1d:46:
16:df:c3:61:e0:53:c8:d0:54:f8:4c:83:0d:fe:0e:
5b:c0:08:0e:a3:ba:29:fe:ba:7d:35:e0:93:b9:2a:
89:33:dd:8d:2f:1a:7f:53:48:69:84:55:27:26:97:
ed:1b:6c:70:18:18:25:7d:12:7c:4d:64:6f:3b:9d:
37:3d:d1:9e:e4:2a:75:f6:a7:65:e8:00:45:ff:46:
84:88:6e:dc:89:30:88:c8:6b:30:b1:a2:00:9d:92:
28:24:4c:21:c2:b3:ec:3c:d0:0a:cf:43:70:7e:49:
04:eb:84:fb:56:37:f1:d5:d0:69:f6:d6:0f:fa:b2:
b9:e1:21:67:41:f7:f9:87:93:5c:00:fd:8a:3a:48:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:1A:81:7C:94:2C:AE:BF:CB:32:D8:6B:7A:57:3A:4A:37:5C:A5
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/ibsagXyULK6_yzLYa3pXOko3XKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.80.0/22
Signature Algorithm: sha256WithRSAEncryption
79:48:9c:7f:1b:52:dd:8b:1e:04:5c:fa:c8:cd:c5:bc:ff:70:
fa:3c:1e:f3:ba:9b:22:cf:3a:32:07:b5:42:cf:f7:d1:41:30:
e1:2e:a4:4b:01:b4:a6:3e:ad:dc:da:2d:7b:2a:e8:d5:91:c9:
cf:0d:6f:98:ef:8e:e4:41:28:9a:bb:e1:39:4b:55:0d:08:88:
7c:a2:b6:f2:dc:50:90:31:22:d8:e0:02:75:c3:77:0a:fe:9a:
f0:ba:00:64:66:db:48:c8:29:81:71:2b:4b:a3:6b:6e:04:9b:
42:f2:f5:cd:69:9a:3b:00:2f:8c:3e:b3:19:2e:d0:39:f2:8c:
65:f1:1f:55:73:5d:5b:03:00:95:83:3b:13:d0:8e:72:b6:3b:
f6:66:96:2c:29:62:cb:b2:34:fa:7e:5c:26:30:50:47:a7:2a:
fb:2c:fc:8e:2a:45:7d:11:ca:db:58:6a:a6:7f:06:d1:36:5d:
d6:88:52:33:5c:8a:85:86:ad:88:08:20:89:8d:ec:d1:8d:c2:
ab:c0:65:13:30:32:21:5b:dd:06:e3:c9:ac:8b:15:a2:1f:b3:
0a:d7:e9:79:b7:fa:5d:ed:a0:87:3e:6a:72:de:bd:a5:c8:6b:
9d:c7:68:fe:32:33:7d:fa:d9:50:73:f3:c8:2b:54:02:85:6c:
94:da:ae:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjC9sqSbyefIKHR9TDK//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy
NmI1ZDMwHhcNMjUwMTAxMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWJiMWE4MTdjOTQyY2FlYmZjYjMyZDg2YjdhNTczYTRhMzc1Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Wiaeiq8hpU3XtCuR9Ri+O9dQSB
aCQWx0YW4OOYzKVOIgg6s8oQyaPnjaUFRkBCuxiqIoU9lS239Lgh1md2fZFwaunn
JeKh7y/AOfKL+xnDo53t6fxc7l9UAHACsE9Q4UuLDBAMCtUmHc2D2ekZ7yZDtLB9
HUYW38Nh4FPI0FT4TIMN/g5bwAgOo7op/rp9NeCTuSqJM92NLxp/U0hphFUnJpft
G2xwGBglfRJ8TWRvO503PdGe5Cp19qdl6ABF/0aEiG7ciTCIyGswsaIAnZIoJEwh
wrPsPNAKz0NwfkkE64T7Vjfx1dBp9tYP+rK54SFnQff5h5NcAP2KOkgzLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIm7GoF8lCyuv8sy2Gt6VzpKN1ylMB8GA1UdIwQY
MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt
OTgyM2I3ZWE0ZGIzLzEvaWJzYWdYeVVMSzZfeXpMWWEzcFhPa28zWEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz
LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua5QMA0G
CSqGSIb3DQEBCwUAA4IBAQB5SJx/G1Ldix4EXPrIzcW8/3D6PB7zupsizzoyB7VC
z/fRQTDhLqRLAbSmPq3c2i17KujVkcnPDW+Y747kQSiau+E5S1UNCIh8orby3FCQ
MSLY4AJ1w3cK/prwugBkZttIyCmBcStLo2tuBJtC8vXNaZo7AC+MPrMZLtA58oxl
8R9Vc11bAwCVgzsT0I5ytjv2ZpYsKWLLsjT6flwmMFBHpyr7LPyOKkV9EcrbWGqm
fwbRNl3WiFIzXIqFhq2ICCCJjezRjcKrwGUTMDIhW90G48msixWiH7MK1+l5t/pd
7aCHPmpy3r2lyGudx2j+MjN9+tlQc/PIK1QChWyU2q7O
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:31 2025 by rpki-client