Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa
File: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (raw, json)
Hash identifier: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=
Subject key identifier: 99:B9:8E:AD:4D:60:A5:EA:6D:64:8D:C7:A5:40:B0:7B:8F:BC:3F:14
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 0194228E3101A951DBBA21F5BFF67DCAA4C1
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212388
IP address blocks: 185.206.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:31:01:a9:51:db:ba:21:f5:bf:f6:7d:ca:a4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99b98ead4d60a5ea6d648dc7a540b07b8fbc3f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:e7:54:8b:58:67:79:c5:1b:7d:6f:da:60:
6a:33:8b:71:2e:31:a2:88:dd:12:7f:77:07:36:e3:
59:e3:17:b9:e2:5a:69:3c:6a:e2:96:c9:a8:6d:ce:
31:b7:2e:cc:b1:ee:bd:ec:5a:dd:05:c4:f8:97:5f:
f5:18:fa:9a:b2:90:eb:d9:76:2c:13:00:81:cf:8c:
f0:02:8b:35:22:d7:e0:73:78:e9:58:c6:e7:ce:6e:
8a:ab:64:3b:f3:c6:59:fb:2a:27:fb:6e:36:55:f1:
c5:36:83:ef:6f:22:2a:9d:47:98:66:5c:bf:42:65:
70:38:3b:1a:0c:15:a0:a8:54:dd:19:0f:21:62:fc:
db:6a:2e:ad:2a:b6:48:da:c7:1b:ac:8f:64:97:da:
a9:92:9f:fe:83:78:d4:b6:1f:5d:32:db:10:d2:fb:
c7:1f:c1:f7:c7:47:5a:53:81:55:80:f6:c6:63:82:
f2:b0:99:36:c7:b8:e1:89:59:28:55:5d:e9:d0:6f:
1c:f0:92:00:c2:42:66:cf:8c:cb:5a:a7:35:2e:06:
74:f4:ce:ba:0e:37:db:5b:b0:71:c7:6f:44:8c:f8:
ff:6c:dd:b1:09:00:4c:39:66:5d:05:3d:a7:8a:30:
fb:1f:97:24:7c:4d:08:d3:e5:fe:2d:29:2e:fd:c4:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:8E:AD:4D:60:A5:EA:6D:64:8D:C7:A5:40:B0:7B:8F:BC:3F:14
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.71.0/24
Signature Algorithm: sha256WithRSAEncryption
52:88:82:f5:e9:54:5e:3a:0c:d0:c2:83:69:36:71:d9:6c:79:
db:b4:d1:21:66:36:aa:2e:69:ec:e5:5a:4a:5e:d3:07:8e:da:
d6:ff:26:c1:75:08:97:1f:1a:cf:42:45:56:2e:bc:86:9e:ae:
39:da:75:72:6b:fd:c8:b8:77:9b:d6:bc:39:e1:47:15:c4:60:
b9:d9:f6:ee:66:ae:bc:0c:29:7b:f8:6f:6e:86:a9:e2:91:f5:
97:11:46:b7:60:87:c8:29:5c:21:86:6c:9b:95:4a:08:26:88:
5d:c7:fd:74:8c:25:8d:a4:44:e1:cd:d7:ed:ee:f2:f3:03:20:
fd:a9:07:9d:a2:81:2a:d1:53:64:c1:f6:24:45:18:ac:2a:25:
56:fa:f0:27:8c:c9:22:d6:e9:05:60:10:a7:ed:78:4b:2c:19:
e2:fc:c4:d0:db:8a:6f:55:11:04:e2:87:5a:63:74:bb:2d:68:
a0:21:2f:04:3e:9b:a7:fc:72:b8:aa:05:f9:8d:6a:b5:88:5b:
3c:94:66:6a:7e:ac:b9:15:8e:ce:1d:30:fc:ac:4a:3f:b1:6d:
34:ed:b3:11:26:f6:1b:76:de:fb:5f:9e:2e:dd:cc:2b:64:21:
47:27:52:6b:c7:89:af:e1:9a:d7:48:f7:6b:21:99:9f:16:36:
35:8d:9b:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijjEBqVHbuiH1v/Z9yqTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzRjOTBlZDE2YWEyMGU0OTE3ODQyMGJmYzg0YTg4M2Mx
MmFjNjgwHhcNMjUwMTAxMTU0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWI5OGVhZDRkNjBhNWVhNmQ2NDhkYzdhNTQwYjA3YjhmYmMzZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+DnVItYZ3nFG31v2mBqM4txLjGi
iN0Sf3cHNuNZ4xe54lppPGrilsmobc4xty7Mse697FrdBcT4l1/1GPqaspDr2XYs
EwCBz4zwAos1Itfgc3jpWMbnzm6Kq2Q788ZZ+yon+242VfHFNoPvbyIqnUeYZly/
QmVwODsaDBWgqFTdGQ8hYvzbai6tKrZI2scbrI9kl9qpkp/+g3jUth9dMtsQ0vvH
H8H3x0daU4FVgPbGY4LysJk2x7jhiVkoVV3p0G8c8JIAwkJmz4zLWqc1LgZ09M66
DjfbW7Bxx29EjPj/bN2xCQBMOWZdBT2nijD7H5ckfE0I0+X+LSku/cTdGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJm5jq1NYKXqbWSNx6VAsHuPvD8UMB8GA1UdIwQY
MBaAFELEyQ7RaqIOSReEIL/ISog8EqxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYt
YThlNGU3MWJlZTUxLzEvbWJtT3JVMWdwZXB0WkkzSHBVQ3dlNC04UHhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYtYThlNGU3MWJlZTUx
LzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc5HMA0G
CSqGSIb3DQEBCwUAA4IBAQBSiIL16VReOgzQwoNpNnHZbHnbtNEhZjaqLmns5VpK
XtMHjtrW/ybBdQiXHxrPQkVWLryGnq452nVya/3IuHeb1rw54UcVxGC52fbuZq68
DCl7+G9uhqnikfWXEUa3YIfIKVwhhmyblUoIJohdx/10jCWNpEThzdft7vLzAyD9
qQedooEq0VNkwfYkRRisKiVW+vAnjMki1ukFYBCn7XhLLBni/MTQ24pvVREE4oda
Y3S7LWigIS8EPpun/HK4qgX5jWq1iFs8lGZqfqy5FY7OHTD8rEo/sW007bMRJvYb
dt77X54u3cwrZCFHJ1Jrx4mv4ZrXSPdrIZmfFjY1jZuI
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:55 2025 by rpki-client