Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/F8PtMRv-e6nREGszq9sbkJV_Kts.roa
File: F8PtMRv-e6nREGszq9sbkJV_Kts.roa (raw, json)
Hash identifier: +n0+96obQJHfnpZ5fXZoRpPeMFlicL38jLddAnTRZlk=
Subject key identifier: 17:C3:ED:31:1B:FE:7B:A9:D1:10:6B:33:AB:DB:1B:90:95:7F:2A:DB
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0194228DDE2C2BED3B2FFDBDA7A7BCF59050
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/F8PtMRv-e6nREGszq9sbkJV_Kts.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 185.69.120.0/22 maxlen: 22
185.199.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:de:2c:2b:ed:3b:2f:fd:bd:a7:a7:bc:f5:90:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17c3ed311bfe7ba9d1106b33abdb1b90957f2adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:df:70:81:00:e0:e7:47:14:9a:ac:54:1b:
65:d7:03:91:08:47:3b:2e:18:20:30:ae:08:57:f0:
96:1e:e2:d1:f6:7f:30:8e:c2:a1:8e:2b:83:b7:9b:
f0:be:9b:95:2a:6f:ba:c6:3a:ac:05:cd:0f:98:89:
04:ec:28:97:bc:f3:a7:e7:24:48:5b:81:77:57:3f:
28:bf:6c:51:c3:82:f1:49:9f:67:7a:05:bf:e8:2f:
3a:a0:b0:ce:a3:b3:95:02:85:b8:d8:cd:88:4b:7c:
67:0b:ae:ed:9a:61:7a:7c:f8:03:42:ad:bc:80:b1:
65:24:84:55:77:7a:61:79:24:e4:90:21:99:2e:be:
60:29:25:81:49:37:28:d7:24:da:e8:99:d7:76:e5:
e2:d0:89:be:eb:5d:7b:ec:6b:ae:99:3f:6b:72:40:
f7:18:50:eb:7f:91:77:d7:8c:10:6c:ad:3d:d4:c7:
01:bc:8e:02:15:e1:ea:2d:a2:41:c4:bd:7c:3f:c9:
c0:c4:ab:73:d8:6e:6b:84:f3:83:a4:2d:bc:69:96:
bb:11:a3:f8:a2:50:54:99:c3:d3:d0:89:63:27:2d:
67:44:bf:1f:82:0b:3d:aa:9f:42:7e:3a:59:9a:d2:
c8:0b:28:52:3a:7e:5f:e7:7d:19:fe:44:88:85:bb:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:ED:31:1B:FE:7B:A9:D1:10:6B:33:AB:DB:1B:90:95:7F:2A:DB
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/F8PtMRv-e6nREGszq9sbkJV_Kts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
185.199.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:7b:95:b9:e7:8e:eb:a2:93:f6:0a:d1:a4:9d:bb:ec:dd:af:
57:22:0f:33:ec:12:9e:47:b6:2a:86:90:00:b5:7e:30:c6:15:
bc:27:48:ba:2a:8f:74:2a:7f:67:bf:1c:19:16:f9:c6:0e:10:
59:af:32:6d:57:bd:56:44:e1:7c:d7:e4:95:1d:63:98:4c:c3:
4a:07:c5:d2:ae:cf:13:80:5f:8e:9f:fe:87:da:f3:b6:ef:dc:
8d:28:41:2e:d1:c0:e4:dd:94:bc:8b:df:76:1f:4e:62:a9:d2:
13:65:47:00:88:d7:9f:3c:1b:d8:df:aa:f7:2f:55:50:a5:04:
57:97:f7:da:68:13:7e:38:71:67:46:b7:69:5b:16:22:d2:c6:
a2:6c:e3:2d:6b:26:30:2f:51:d6:a8:8f:a2:16:21:f7:d1:2f:
3d:8f:98:b9:c8:38:38:51:71:2d:ea:aa:66:fb:a2:19:50:40:
8f:8d:fc:e1:1a:84:8a:58:3d:00:93:55:59:df:70:ff:8b:8e:
3a:1d:65:34:b7:89:10:4c:12:35:05:8a:ee:29:3d:90:a9:f9:
dc:ce:ca:03:dc:ff:40:04:96:f6:cd:e5:a8:34:74:e2:8e:cb:
a8:97:33:e3:1f:38:f6:fd:99:c4:39:61:14:60:ff:5c:dc:0d:
ba:ea:67:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijd4sK+07L/29p6e89ZBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw
YTFhNjYwHhcNMjUwMTAxMTU0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2MzZWQzMTFiZmU3YmE5ZDExMDZiMzNhYmRiMWI5MDk1N2YyYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww3fcIEA4OdHFJqsVBtl1wORCEc7
LhggMK4IV/CWHuLR9n8wjsKhjiuDt5vwvpuVKm+6xjqsBc0PmIkE7CiXvPOn5yRI
W4F3Vz8ov2xRw4LxSZ9negW/6C86oLDOo7OVAoW42M2IS3xnC67tmmF6fPgDQq28
gLFlJIRVd3pheSTkkCGZLr5gKSWBSTco1yTa6JnXduXi0Im+61177GuumT9rckD3
GFDrf5F314wQbK091McBvI4CFeHqLaJBxL18P8nAxKtz2G5rhPODpC28aZa7EaP4
olBUmcPT0IljJy1nRL8fggs9qp9CfjpZmtLICyhSOn5f530Z/kSIhbtC1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBfD7TEb/nup0RBrM6vbG5CVfyrbMB8GA1UdIwQY
MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct
ZGU5YjJmOGY3ZTI5LzEvRjhQdE1Sdi1lNm5SRUdzenE5c2JrSlZfS3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5
LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUV4AwQC
ucfEMA0GCSqGSIb3DQEBCwUAA4IBAQBee5W5547ropP2CtGknbvs3a9XIg8z7BKe
R7YqhpAAtX4wxhW8J0i6Ko90Kn9nvxwZFvnGDhBZrzJtV71WROF81+SVHWOYTMNK
B8XSrs8TgF+On/6H2vO279yNKEEu0cDk3ZS8i992H05iqdITZUcAiNefPBvY36r3
L1VQpQRXl/faaBN+OHFnRrdpWxYi0saibOMtayYwL1HWqI+iFiH30S89j5i5yDg4
UXEt6qpm+6IZUECPjfzhGoSKWD0Ak1VZ33D/i446HWU0t4kQTBI1BYruKT2Qqfnc
zsoD3P9ABJb2zeWoNHTijsuolzPjHzj2/ZnEOWEUYP9c3A266mc0
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:48 2025 by rpki-client