Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/4seP-1XUj5W4EvQa2YWfkm-ip94.roa
File: 4seP-1XUj5W4EvQa2YWfkm-ip94.roa (raw, json)
Hash identifier: h+aO1eZgEoKhnx+dVQbqY125hj9qWtaGkUBEsmS/BDQ=
Subject key identifier: E2:C7:8F:FB:55:D4:8F:95:B8:12:F4:1A:D9:85:9F:92:6F:A2:A7:DE
Certificate issuer: /CN=36b59523fd549f1b4b653d3c1040ff516db6e999
Certificate serial: 014C78FC
Authority key identifier: 36:B5:95:23:FD:54:9F:1B:4B:65:3D:3C:10:40:FF:51:6D:B6:E9:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrWVI_1UnxtLZT08EED_UW226Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/4seP-1XUj5W4EvQa2YWfkm-ip94.roa
Signing time: Sat 01 Jan 2022 08:54:30 +0000
ROA not before: Sat 01 Jan 2022 08:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211096
IP address blocks: 185.161.121.0/24 maxlen: 24
2a11:9600::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21788924 (0x14c78fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b59523fd549f1b4b653d3c1040ff516db6e999
Validity
Not Before: Jan 1 08:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2c78ffb55d48f95b812f41ad9859f926fa2a7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:b9:8e:61:7b:7c:74:9c:2f:a1:a0:6e:69:
4e:53:e3:cb:e7:35:56:02:22:4f:c5:82:d3:08:29:
fc:3d:aa:9e:0b:4e:05:55:2f:93:33:e9:07:b9:66:
34:40:9f:62:1a:b5:c2:02:7b:52:93:4e:8d:db:8d:
b9:46:0e:78:fe:f9:fd:6b:b7:5b:33:47:62:eb:43:
34:ff:c0:26:b3:10:8f:5c:5b:a5:fa:a7:39:e6:79:
cd:5c:69:56:ef:b2:a0:64:1f:d2:69:d6:7c:83:7c:
ab:65:6f:40:52:21:d3:a2:91:9e:a0:e6:3e:3c:de:
ae:9c:f7:18:21:0d:48:aa:71:b5:a9:4d:dd:d5:cb:
20:a6:b3:34:0c:a2:a7:de:99:44:0a:3d:c2:ec:ff:
a2:d0:91:38:03:f4:0b:17:44:6d:13:b4:15:e2:48:
f7:00:f2:3a:27:33:85:bd:a9:34:aa:68:f2:02:70:
a5:bb:88:0d:fb:a0:0c:d2:08:7d:09:69:50:80:3c:
14:c5:63:ca:24:61:6e:7d:cc:6d:0b:f2:1a:53:70:
fa:54:ee:9d:70:c7:cb:d3:4a:50:35:85:90:fa:ed:
03:87:de:31:a8:41:19:c7:f7:43:76:2d:89:e2:38:
18:41:b2:28:4d:d2:90:eb:77:4c:b5:a8:5f:45:d6:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C7:8F:FB:55:D4:8F:95:B8:12:F4:1A:D9:85:9F:92:6F:A2:A7:DE
X509v3 Authority Key Identifier:
keyid:36:B5:95:23:FD:54:9F:1B:4B:65:3D:3C:10:40:FF:51:6D:B6:E9:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrWVI_1UnxtLZT08EED_UW226Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/4seP-1XUj5W4EvQa2YWfkm-ip94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cd5c51-aff5-45f8-9612-dd3ddb62c719/1/NrWVI_1UnxtLZT08EED_UW226Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.121.0/24
IPv6:
2a11:9600::/29
Signature Algorithm: sha256WithRSAEncryption
89:27:b8:58:16:f9:8a:81:ba:14:48:04:9b:53:86:c2:7e:cb:
43:bc:c3:06:62:77:16:c9:f7:7d:5b:2b:dd:f9:9d:5c:6d:2a:
0f:67:e7:fd:31:48:8a:91:6a:9a:e4:69:be:cf:c7:cd:a3:c7:
39:8a:c5:fe:de:3a:63:6e:ec:14:79:49:c3:a6:98:e6:4d:45:
5a:53:9e:bd:b9:77:b5:1c:47:8e:0f:72:76:98:6b:fa:fe:4f:
bc:f4:21:f5:9c:16:e1:17:52:8a:c7:fa:49:b5:f5:ae:5d:7b:
99:25:61:7f:a1:8a:d3:1c:0e:86:38:fb:0e:fa:0c:0d:ef:90:
42:b8:30:f0:b6:0b:35:45:8f:8e:99:90:57:46:16:e6:cc:a2:
97:da:83:46:df:48:d0:e9:be:2c:aa:bb:30:42:93:f1:a5:99:
41:44:0e:13:c7:79:ac:53:be:f2:1d:74:6d:1c:75:d2:f6:8b:
03:96:50:5b:8b:43:0c:30:b8:c8:97:2f:dd:15:47:d7:bc:5d:
c4:75:60:b5:96:17:4e:4b:c1:63:d7:b0:8f:c8:8c:84:7e:55:
bb:53:d1:9e:67:17:c2:32:42:11:4a:de:6b:b9:87:8f:70:a0:
09:78:41:d8:b1:3b:08:aa:ac:37:0a:d1:1d:13:07:be:dd:c0:
53:55:9d:1e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAUx4/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmI1OTUyM2ZkNTQ5ZjFiNGI2NTNkM2MxMDQwZmY1MTZkYjZlOTk5MB4XDTIyMDEw
MTA4NTQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTJjNzhmZmI1NWQ0
OGY5NWI4MTJmNDFhZDk4NTlmOTI2ZmEyYTdkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvWuY5he3x0nC+hoG5pTlPjy+c1VgIiT8WC0wgp/D2qngtO
BVUvkzPpB7lmNECfYhq1wgJ7UpNOjduNuUYOeP75/Wu3WzNHYutDNP/AJrMQj1xb
pfqnOeZ5zVxpVu+yoGQf0mnWfIN8q2VvQFIh06KRnqDmPjzerpz3GCENSKpxtalN
3dXLIKazNAyip96ZRAo9wuz/otCROAP0CxdEbRO0FeJI9wDyOiczhb2pNKpo8gJw
pbuIDfugDNIIfQlpUIA8FMVjyiRhbn3MbQvyGlNw+lTunXDHy9NKUDWFkPrtA4fe
MahBGcf3Q3YtieI4GEGyKE3SkOt3TLWoX0XW3eMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTix4/7VdSPlbgS9BrZhZ+Sb6Kn3jAfBgNVHSMEGDAWgBQ2tZUj/VSfG0tl
PTwQQP9RbbbpmTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05yV1ZJXzFVbnh0TFpUMDhFRURfVVcyMjZaay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2YvY2Q1YzUxLWFmZjUtNDVmOC05NjEyLWRkM2RkYjYyYzcxOS8x
LzRzZVAtMVhVajVXNEV2UWEyWVdma20taXA5NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Yv
Y2Q1YzUxLWFmZjUtNDVmOC05NjEyLWRkM2RkYjYyYzcxOS8xL05yV1ZJXzFVbnh0
TFpUMDhFRURfVVcyMjZaay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALmheTANBAIAAjAHAwUDKhGWADAN
BgkqhkiG9w0BAQsFAAOCAQEAiSe4WBb5ioG6FEgEm1OGwn7LQ7zDBmJ3Fsn3fVsr
3fmdXG0qD2fn/TFIipFqmuRpvs/HzaPHOYrF/t46Y27sFHlJw6aY5k1FWlOevbl3
tRxHjg9ydphr+v5PvPQh9ZwW4RdSisf6SbX1rl17mSVhf6GK0xwOhjj7DvoMDe+Q
Qrgw8LYLNUWPjpmQV0YW5syil9qDRt9I0Om+LKq7MEKT8aWZQUQOE8d5rFO+8h10
bRx10vaLA5ZQW4tDDDC4yJcv3RVH17xdxHVgtZYXTkvBY9ewj8iMhH5Vu1PRnmcX
wjJCEUrea7mHj3CgCXhB2LE7CKqsNwrRHRMHvt3AU1WdHg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:49 2025 by rpki-client