Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t1JwpNdv4xjSwHW7oDiPhIrzBsI.roa
File: t1JwpNdv4xjSwHW7oDiPhIrzBsI.roa (raw, json)
Hash identifier: +acq5oyazu3YX64/8uzkqg8dEZxZzt2bmyb5vLp0MKs=
Subject key identifier: B7:52:70:A4:D7:6F:E3:18:D2:C0:75:BB:A0:38:8F:84:8A:F3:06:C2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019200F721A249C5F7204D897441A5E93512
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t1JwpNdv4xjSwHW7oDiPhIrzBsI.roa
Signing time: Tue 17 Sep 2024 17:10:48 +0000
ROA not before: Tue 17 Sep 2024 17:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.176.92.0/24 maxlen: 24
185.216.104.0/23 maxlen: 24
185.216.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:f7:21:a2:49:c5:f7:20:4d:89:74:41:a5:e9:35:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 17 17:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b75270a4d76fe318d2c075bba0388f848af306c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:d2:89:50:75:d9:06:7f:8e:1d:d1:e8:dc:
3b:ed:fc:72:88:46:2b:f4:a5:a7:0f:82:1d:87:3e:
e1:ad:24:c7:56:0b:ae:97:bc:3f:fb:13:35:78:4b:
b7:5d:d6:fd:a7:30:d8:f3:d0:e2:e9:9c:09:7d:f0:
02:94:c6:0b:1c:c8:69:c5:63:23:7a:98:0e:40:b9:
98:3f:d1:e7:32:e6:41:f2:61:77:a7:ae:56:54:ad:
83:43:35:4b:1d:57:b1:9b:6d:7e:27:df:0a:e4:c4:
d6:97:11:bb:7e:4c:bf:e5:f3:22:1f:fe:32:97:85:
d8:5d:66:fa:ae:5b:e7:a6:f1:a2:cc:13:ab:52:3f:
4d:68:b9:1a:06:39:93:aa:e4:2f:36:9f:74:d3:fa:
38:6b:cd:da:bf:71:cf:b2:6f:2c:3f:46:d0:42:01:
0b:ca:70:5a:37:fe:df:30:b5:2d:09:d0:2a:d5:d4:
9b:07:f8:bf:ae:48:ff:87:96:03:20:1b:48:e6:7f:
17:3d:95:b1:15:de:fe:86:97:12:05:c3:17:33:6f:
86:f8:2f:28:97:ba:a4:02:5a:c7:a1:b1:c9:3a:cf:
83:19:76:9f:8f:6a:94:e0:5c:76:35:fd:e0:2c:e6:
80:86:db:7f:39:f2:36:7b:c5:71:26:e4:9f:de:fc:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:70:A4:D7:6F:E3:18:D2:C0:75:BB:A0:38:8F:84:8A:F3:06:C2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t1JwpNdv4xjSwHW7oDiPhIrzBsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.92.0/24
185.216.104.0/22
Signature Algorithm: sha256WithRSAEncryption
84:00:32:0b:e3:29:b0:43:6e:dc:fa:cf:26:10:87:a8:3a:0b:
d8:bf:52:b5:06:d6:2a:52:62:1f:6a:9e:41:0e:c1:b5:eb:c5:
d5:11:07:c7:f8:17:db:d5:da:fd:46:6e:81:8f:51:29:36:b4:
35:5d:f9:3b:f2:ed:86:72:d4:df:62:83:e2:eb:52:0d:72:48:
d8:dc:21:28:88:2c:b0:c9:c8:3c:a4:25:9e:23:67:19:88:2f:
9f:29:ec:39:18:f2:a6:b1:8f:f8:34:06:35:e0:c9:f3:e6:99:
e4:c0:38:71:a6:2a:af:27:f7:2e:18:31:95:94:0d:34:72:d4:
3a:82:4f:af:82:cc:81:f4:f8:5f:f6:80:97:0a:37:a2:92:06:
8e:fd:b8:7e:af:bf:9c:fd:e4:ce:3a:17:87:a6:33:31:12:b4:
43:6a:00:7e:18:fe:15:c6:35:0a:b4:1b:67:1c:be:be:d8:0d:
54:41:28:ae:9d:26:29:17:7c:95:2f:c3:3b:2b:75:37:7e:5e:
01:fb:4b:2b:e4:c6:ed:23:18:a1:9a:a8:a6:ca:ef:c9:4d:02:
f4:f8:b2:d0:a9:fb:57:1c:99:ab:b7:62:31:d6:a9:8b:48:dd:
e1:e5:2a:55:d1:79:21:39:70:fa:bf:97:73:c4:c9:81:0a:fb:
6d:ec:96:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIA9yGiScX3IE2JdEGl6TUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjQwOTE3MTcxMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzUyNzBhNGQ3NmZlMzE4ZDJjMDc1YmJhMDM4OGY4NDhhZjMwNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZTSiVB12QZ/jh3R6Nw77fxyiEYr
9KWnD4Idhz7hrSTHVguul7w/+xM1eEu3Xdb9pzDY89Di6ZwJffAClMYLHMhpxWMj
epgOQLmYP9HnMuZB8mF3p65WVK2DQzVLHVexm21+J98K5MTWlxG7fky/5fMiH/4y
l4XYXWb6rlvnpvGizBOrUj9NaLkaBjmTquQvNp900/o4a83av3HPsm8sP0bQQgEL
ynBaN/7fMLUtCdAq1dSbB/i/rkj/h5YDIBtI5n8XPZWxFd7+hpcSBcMXM2+G+C8o
l7qkAlrHobHJOs+DGXafj2qU4Fx2Nf3gLOaAhtt/OfI2e8VxJuSf3vwZPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLdScKTXb+MY0sB1u6A4j4SK8wbCMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdDFKd3BOZHY0eGpTd0hXN29EaVBoSXJ6QnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubBcAwQC
udhoMA0GCSqGSIb3DQEBCwUAA4IBAQCEADIL4ymwQ27c+s8mEIeoOgvYv1K1BtYq
UmIfap5BDsG168XVEQfH+Bfb1dr9Rm6Bj1EpNrQ1Xfk78u2GctTfYoPi61INckjY
3CEoiCywycg8pCWeI2cZiC+fKew5GPKmsY/4NAY14Mnz5pnkwDhxpiqvJ/cuGDGV
lA00ctQ6gk+vgsyB9Phf9oCXCjeikgaO/bh+r7+c/eTOOheHpjMxErRDagB+GP4V
xjUKtBtnHL6+2A1UQSiunSYpF3yVL8M7K3U3fl4B+0sr5MbtIxihmqimyu/JTQL0
+LLQqftXHJmrt2Ix1qmLSN3h5SpV0XkhOXD6v5dzxMmBCvtt7JZl
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:58 2025 by rpki-client