Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/I1Tg9zg20py_KnKZA9fgnAsZlcE.roa
File: I1Tg9zg20py_KnKZA9fgnAsZlcE.roa (raw, json)
Hash identifier: f9R1PhIX+ildzOt9qsaAOTBWiOvkEB0uRd8BOyNXL1U=
Subject key identifier: 23:54:E0:F7:38:36:D2:9C:BF:2A:72:99:03:D7:E0:9C:0B:19:95:C1
Certificate issuer: /CN=f5b75ad5609cef112579bd01938c6c73267fff07
Certificate serial: 018BF09D971CA8CF071807AB51E2119D6F32
Authority key identifier: F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/I1Tg9zg20py_KnKZA9fgnAsZlcE.roa
Signing time: Tue 21 Nov 2023 06:42:21 +0000
ROA not before: Tue 21 Nov 2023 06:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.201.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:9d:97:1c:a8:cf:07:18:07:ab:51:e2:11:9d:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b75ad5609cef112579bd01938c6c73267fff07
Validity
Not Before: Nov 21 06:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2354e0f73836d29cbf2a729903d7e09c0b1995c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:78:18:5a:f9:8a:eb:21:36:0b:0c:68:84:
d2:3b:db:db:aa:f6:43:53:67:88:3a:7b:a8:81:48:
58:1e:20:2e:16:83:5f:f2:c0:b2:6e:20:1a:c2:ef:
ff:59:4e:41:c1:8f:ee:27:23:7c:55:2c:cd:e5:cb:
df:23:24:3e:5f:ea:46:ab:9a:b9:55:5c:f0:4a:bd:
f9:cf:79:fb:dd:8a:82:bd:a8:95:05:9f:ef:c7:63:
4d:fd:d4:c8:72:01:0e:fa:84:35:94:3f:78:fc:97:
4a:c9:80:ce:ff:ab:31:6b:d5:cf:3e:9c:23:e9:01:
bd:5a:9c:3b:37:5b:22:47:88:d2:3a:26:bd:f8:f2:
c7:16:09:66:7d:8f:ba:23:e4:df:1e:21:7b:6b:10:
61:d5:dd:26:3c:23:aa:ab:df:5c:2b:e6:bf:c5:a7:
71:c1:70:27:c3:ed:e2:83:c2:85:87:d0:76:c4:a5:
8f:21:3c:b3:6a:53:fc:55:0e:01:ea:c3:63:92:30:
78:4a:0f:27:e1:15:7f:83:5b:4f:ec:18:1c:a6:55:
a8:d5:84:c8:75:bc:95:2a:c6:17:25:cc:a8:44:36:
e2:07:24:bf:28:22:d5:2c:a8:d7:bf:5c:14:41:d5:
ef:18:a3:65:d8:17:9a:55:c5:c5:6b:c7:44:fc:9b:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:E0:F7:38:36:D2:9C:BF:2A:72:99:03:D7:E0:9C:0B:19:95:C1
X509v3 Authority Key Identifier:
keyid:F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/I1Tg9zg20py_KnKZA9fgnAsZlcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.28.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:95:9d:94:e4:99:85:c6:c9:f9:6d:4a:ee:aa:92:22:15:a7:
67:d0:f4:5b:4e:06:fb:70:73:67:13:2f:9d:e0:46:cf:76:46:
33:f6:ee:47:f8:3a:36:e4:dd:f1:cb:a1:d7:00:35:8b:fc:21:
28:cd:b0:e8:ba:31:3a:40:2d:aa:7c:68:38:6e:0a:84:6b:47:
b9:48:c0:00:18:ae:0e:6c:2b:de:95:2b:05:82:be:32:10:75:
1e:34:3e:d0:6c:fd:cd:ca:cc:fa:54:dc:d2:58:a7:aa:b6:b4:
f8:4b:ba:32:ac:3e:48:c8:d3:dd:50:75:65:8a:8f:e4:ed:ac:
22:43:b3:79:f6:46:a0:d5:d5:35:8e:b6:47:66:36:e5:f7:04:
87:21:7d:fa:59:5e:be:22:28:f8:4c:ba:26:7c:0a:a1:ce:a9:
4f:8a:9d:5c:13:cc:96:e7:78:0a:2f:be:42:f9:cf:2e:06:e4:
26:7f:19:16:e5:b6:2b:23:63:ea:7a:bc:a1:a1:fa:51:b1:47:
e4:7d:6a:79:88:59:4a:ac:b4:6e:97:00:dd:b7:26:10:0e:d5:
c0:91:7f:28:76:d1:b3:85:91:f0:15:59:af:ab:09:98:64:9e:
e9:fb:21:e5:45:e1:91:bc:ab:c6:f6:35:29:bc:86:1c:2e:60:
20:cc:bf:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvwnZccqM8HGAerUeIRnW8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Yjc1YWQ1NjA5Y2VmMTEyNTc5YmQwMTkzOGM2YzczMjY3
ZmZmMDcwHhcNMjMxMTIxMDY0MjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU0ZTBmNzM4MzZkMjljYmYyYTcyOTkwM2Q3ZTA5YzBiMTk5NWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb54GFr5iushNgsMaITSO9vbqvZD
U2eIOnuogUhYHiAuFoNf8sCybiAawu//WU5BwY/uJyN8VSzN5cvfIyQ+X+pGq5q5
VVzwSr35z3n73YqCvaiVBZ/vx2NN/dTIcgEO+oQ1lD94/JdKyYDO/6sxa9XPPpwj
6QG9Wpw7N1siR4jSOia9+PLHFglmfY+6I+TfHiF7axBh1d0mPCOqq99cK+a/xadx
wXAnw+3ig8KFh9B2xKWPITyzalP8VQ4B6sNjkjB4Sg8n4RV/g1tP7BgcplWo1YTI
dbyVKsYXJcyoRDbiByS/KCLVLKjXv1wUQdXvGKNl2BeaVcXFa8dE/JsLVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCNU4Pc4NtKcvypymQPX4JwLGZXBMB8GA1UdIwQY
MBaAFPW3WtVgnO8RJXm9AZOMbHMmf/8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJkYTFXQ2M3eEVsZWIwQms0eHNjeVpfX3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82YWQ1NGMtNzU2NC00ODlmLThmODQt
NTkyYzhiY2ViMGQ1LzEvSTFUZzl6ZzIwcHlfS25LWkE5ZmduQXNabGNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82YWQ1NGMtNzU2NC00ODlmLThmODQtNTkyYzhiY2ViMGQ1
LzEvOWJkYTFXQ2M3eEVsZWIwQms0eHNjeVpfX3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuckcMA0G
CSqGSIb3DQEBCwUAA4IBAQC8lZ2U5JmFxsn5bUruqpIiFadn0PRbTgb7cHNnEy+d
4EbPdkYz9u5H+Do25N3xy6HXADWL/CEozbDoujE6QC2qfGg4bgqEa0e5SMAAGK4O
bCvelSsFgr4yEHUeND7QbP3Nysz6VNzSWKeqtrT4S7oyrD5IyNPdUHVlio/k7awi
Q7N59kag1dU1jrZHZjbl9wSHIX36WV6+Iij4TLomfAqhzqlPip1cE8yW53gKL75C
+c8uBuQmfxkW5bYrI2PqeryhofpRsUfkfWp5iFlKrLRulwDdtyYQDtXAkX8odtGz
hZHwFVmvqwmYZJ7p+yHlReGRvKvG9jUpvIYcLmAgzL9i
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:13 2025 by rpki-client