Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RF_a1twbIyDbfDHZU6PWA1YJgIQ.roa
File: RF_a1twbIyDbfDHZU6PWA1YJgIQ.roa (raw, json)
Hash identifier: peIPBHsrphpaLBzeavtDAmxxBwVSWRZ0oaddGkpIUNs=
Subject key identifier: 44:5F:DA:D6:DC:1B:23:20:DB:7C:31:D9:53:A3:D6:03:56:09:80:84
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0193B58E4E8A5058EA350DD6FEFCE3579E2A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RF_a1twbIyDbfDHZU6PWA1YJgIQ.roa
Signing time: Wed 11 Dec 2024 11:50:22 +0000
ROA not before: Wed 11 Dec 2024 11:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213808
IP address blocks: 92.119.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:8e:4e:8a:50:58:ea:35:0d:d6:fe:fc:e3:57:9e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Dec 11 11:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=445fdad6dc1b2320db7c31d953a3d60356098084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:24:80:00:a5:07:3e:b1:6d:1e:b2:27:53:
7d:1f:31:2d:67:cc:b8:bb:86:14:00:71:96:84:10:
c1:3d:01:16:b5:23:34:2c:5c:c7:ad:8c:64:91:07:
db:68:d1:60:05:82:d7:e5:ea:ce:47:2e:74:b8:64:
a5:71:cd:4a:91:53:38:38:88:e1:c0:86:2e:76:da:
4c:9a:67:40:cf:1f:b5:d5:a7:34:d4:7c:2d:65:7d:
22:86:2b:43:6d:94:f1:83:1e:e8:8d:fe:ce:47:67:
17:f1:2d:1f:b7:8d:df:99:6c:d9:cd:4c:5e:fc:84:
10:0a:b9:d9:8a:02:ed:17:38:f8:d3:b4:8d:7d:4e:
45:2b:c9:e3:a3:73:e4:22:f3:fc:41:98:e4:0d:a1:
37:20:da:42:00:b8:66:69:9f:86:e6:22:6b:7e:00:
b3:bf:32:69:45:ad:d2:f6:56:d6:94:f3:e7:ad:49:
05:92:df:8a:08:4d:03:ce:08:7f:4a:5b:1c:fc:fd:
10:44:03:1c:56:fa:a1:4a:69:ab:e2:29:df:28:10:
ce:a2:d1:ac:c2:79:41:aa:da:02:b7:81:23:3f:49:
ba:36:5b:1e:f1:a5:d0:22:44:f4:bb:c8:f9:75:fc:
83:0c:89:55:3f:2f:d3:26:fa:21:41:ee:92:b2:35:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:DA:D6:DC:1B:23:20:DB:7C:31:D9:53:A3:D6:03:56:09:80:84
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RF_a1twbIyDbfDHZU6PWA1YJgIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:78:cf:5b:8a:a1:10:35:7a:0a:3b:82:b3:4a:7c:d1:38:8c:
a9:ef:6f:bc:0b:d4:24:fe:84:46:16:75:3b:21:96:7a:d6:02:
b7:ed:0a:36:87:32:cf:89:a3:5c:21:d6:5f:c6:80:1f:fc:b4:
17:90:ed:06:94:4e:9b:16:62:5f:e2:75:fd:6e:89:91:92:dd:
74:b1:66:c5:74:6b:5c:f2:dd:bc:fe:23:21:78:b5:40:c2:bc:
47:f2:d1:23:8d:fb:4e:45:bb:a1:52:ea:28:76:b8:f5:b9:f2:
71:b5:7b:36:29:4c:2f:55:c3:0b:a4:ac:1d:0a:96:02:81:f7:
00:0e:f2:eb:d2:be:7d:d1:3b:73:79:29:55:b1:69:59:dd:f2:
fc:72:17:cd:dc:0d:6c:3c:f5:40:36:36:d4:b9:44:fd:3d:9f:
41:53:e0:bb:ae:93:ba:1b:71:e7:61:c5:91:81:d0:bf:ac:3e:
ad:ad:92:0c:95:93:c9:4a:ca:34:e3:18:a9:ff:7f:4e:51:0f:
d2:67:09:26:44:ed:ae:6f:2d:8b:b3:49:0f:62:55:85:93:0d:
4b:af:f1:d3:bd:7f:c1:ea:2a:2c:a4:20:ae:c0:96:eb:82:18:
e1:21:9e:f8:59:fb:c5:23:7f:63:61:bc:9b:b4:d9:69:d6:cc:
ca:48:09:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO1jk6KUFjqNQ3W/vzjV54qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQxMjExMTE1MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDVmZGFkNmRjMWIyMzIwZGI3YzMxZDk1M2EzZDYwMzU2MDk4MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/0kgAClBz6xbR6yJ1N9HzEtZ8y4
u4YUAHGWhBDBPQEWtSM0LFzHrYxkkQfbaNFgBYLX5erORy50uGSlcc1KkVM4OIjh
wIYudtpMmmdAzx+11ac01HwtZX0ihitDbZTxgx7ojf7OR2cX8S0ft43fmWzZzUxe
/IQQCrnZigLtFzj407SNfU5FK8njo3PkIvP8QZjkDaE3INpCALhmaZ+G5iJrfgCz
vzJpRa3S9lbWlPPnrUkFkt+KCE0Dzgh/Slsc/P0QRAMcVvqhSmmr4infKBDOotGs
wnlBqtoCt4EjP0m6Nlse8aXQIkT0u8j5dfyDDIlVPy/TJvohQe6SsjWNhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERf2tbcGyMg23wx2VOj1gNWCYCEMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvUkZfYTF0d2JJeURiZkRIWlU2UFdBMVlKZ0lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHfkMA0G
CSqGSIb3DQEBCwUAA4IBAQAOeM9biqEQNXoKO4KzSnzROIyp72+8C9Qk/oRGFnU7
IZZ61gK37Qo2hzLPiaNcIdZfxoAf/LQXkO0GlE6bFmJf4nX9bomRkt10sWbFdGtc
8t28/iMheLVAwrxH8tEjjftORbuhUuoodrj1ufJxtXs2KUwvVcMLpKwdCpYCgfcA
DvLr0r590TtzeSlVsWlZ3fL8chfN3A1sPPVANjbUuUT9PZ9BU+C7rpO6G3HnYcWR
gdC/rD6trZIMlZPJSso04xip/39OUQ/SZwkmRO2uby2Ls0kPYlWFkw1Lr/HTvX/B
6iospCCuwJbrghjhIZ74WfvFI39jYbybtNlp1szKSAmF
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:30 2025 by rpki-client