Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/GAAIvFEjyE2FyKp0MwV02bWv1QE.roa
File: GAAIvFEjyE2FyKp0MwV02bWv1QE.roa (raw, json)
Hash identifier: AMEaLMpFDNzQygE5DQqp7mYyWAuWwbJNprN3rjDCOf4=
Subject key identifier: 18:00:08:BC:51:23:C8:4D:85:C8:AA:74:33:05:74:D9:B5:AF:D5:01
Certificate issuer: /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial: 0188BF3CF9715958EA404AC7D6F55EB64153
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/GAAIvFEjyE2FyKp0MwV02bWv1QE.roa
Signing time: Thu 15 Jun 2023 13:27:04 +0000
ROA not before: Thu 15 Jun 2023 13:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.186.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:3c:f9:71:59:58:ea:40:4a:c7:d6:f5:5e:b6:41:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Validity
Not Before: Jun 15 13:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=180008bc5123c84d85c8aa74330574d9b5afd501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8e:39:1d:7b:e5:87:f5:af:98:c4:5c:f1:ff:
71:ac:52:b2:46:f6:77:8d:63:d0:e7:f5:bc:00:0e:
ba:ab:7c:65:a9:f0:3e:52:8e:3d:60:10:04:7f:41:
ae:bf:17:4f:72:4f:64:eb:3f:a6:34:c2:75:90:a0:
e9:51:cb:1c:b4:87:2b:d1:d9:7e:eb:dd:09:65:87:
74:b2:78:a8:c5:7c:fd:36:23:1b:63:db:a7:05:d0:
85:67:71:51:36:2a:54:ae:7b:af:68:6e:d5:16:9a:
01:74:1e:db:e7:fb:c5:02:d8:25:1d:2c:75:4b:bd:
f3:0d:0f:2c:50:ae:de:e1:ce:dc:d1:51:17:a2:e1:
a8:fe:f1:6f:80:a3:af:92:4a:37:84:93:6c:5a:f9:
32:81:08:28:bf:ab:4d:53:40:16:00:7c:36:04:f8:
fd:2a:6e:c7:21:2f:96:d5:a8:65:ec:0e:36:03:d3:
d2:32:ab:8a:20:a4:b3:77:f5:df:2e:b3:f4:32:dc:
8d:92:cd:8d:d9:5e:b8:83:32:41:19:9a:c3:b0:69:
e5:13:99:e5:66:e4:91:18:4f:2c:2b:e8:5e:a5:51:
1d:76:24:90:d2:43:e4:25:c0:9d:1e:15:c1:42:dc:
ab:3a:90:f4:8d:6a:a0:a9:eb:81:cd:c5:2c:bf:38:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:00:08:BC:51:23:C8:4D:85:C8:AA:74:33:05:74:D9:B5:AF:D5:01
X509v3 Authority Key Identifier:
keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/GAAIvFEjyE2FyKp0MwV02bWv1QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:62:06:15:98:32:49:89:06:53:c8:56:b5:ef:1b:fc:11:44:
44:02:f4:9e:d8:df:45:98:bc:9c:fd:f7:61:9a:8a:e7:84:7d:
21:49:93:df:b5:a5:c4:e0:40:72:ab:62:e3:cf:ba:95:37:fb:
53:54:1a:c2:1a:5c:45:d4:75:17:f2:cd:0d:51:46:f9:2f:04:
bb:6a:ce:4f:f7:2a:60:35:09:fb:ec:46:da:87:ec:d4:39:8b:
70:b9:61:09:f5:e5:5d:c6:f6:3e:f3:ba:95:da:3b:f7:89:e2:
36:ba:2d:a4:8c:3e:d4:1e:0b:ea:8b:02:53:5d:0b:62:0e:46:
63:64:fd:fa:03:84:92:d4:59:82:eb:23:97:16:e7:b0:a2:62:
dc:33:fc:08:e5:f6:50:fb:d8:e7:6c:58:25:40:70:cc:6d:f2:
eb:3b:67:31:e6:f3:da:43:60:1f:32:0d:d1:dd:64:af:7e:b3:
d0:03:2b:d1:e9:ed:e4:40:6b:81:c4:e6:10:09:05:73:3e:5a:
c2:6a:87:7e:fc:1e:d1:77:ac:09:ff:3d:a5:1b:67:e3:51:60:
d3:69:06:70:51:8e:e4:39:2e:8c:60:4c:c7:0e:b2:45:b7:b4:
27:1a:64:71:87:70:18:f6:f7:3b:8c:64:f2:12:55:a9:1d:7b:
10:ee:a5:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi/PPlxWVjqQErH1vVetkFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTBhZGIxYThiNzk3MDIwZjBlYzdhMjlhOWI1YWJhZDQw
YjY1M2UwHhcNMjMwNjE1MTMyNzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODAwMDhiYzUxMjNjODRkODVjOGFhNzQzMzA1NzRkOWI1YWZkNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI45HXvlh/WvmMRc8f9xrFKyRvZ3
jWPQ5/W8AA66q3xlqfA+Uo49YBAEf0GuvxdPck9k6z+mNMJ1kKDpUcsctIcr0dl+
690JZYd0snioxXz9NiMbY9unBdCFZ3FRNipUrnuvaG7VFpoBdB7b5/vFAtglHSx1
S73zDQ8sUK7e4c7c0VEXouGo/vFvgKOvkko3hJNsWvkygQgov6tNU0AWAHw2BPj9
Km7HIS+W1ahl7A42A9PSMquKIKSzd/XfLrP0MtyNks2N2V64gzJBGZrDsGnlE5nl
ZuSRGE8sK+hepVEddiSQ0kPkJcCdHhXBQtyrOpD0jWqgqeuBzcUsvzhxawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgACLxRI8hNhciqdDMFdNm1r9UBMB8GA1UdIwQY
MBaAFNygrbGot5cCDw7HopqbWrrUC2U+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYt
M2UzNmNhOWEyZDY5LzEvR0FBSXZGRWp5RTJGeUtwME13VjAyYld2MVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYtM2UzNmNhOWEyZDY5
LzEvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuboaMA0G
CSqGSIb3DQEBCwUAA4IBAQA8YgYVmDJJiQZTyFa17xv8EUREAvSe2N9FmLyc/fdh
mornhH0hSZPftaXE4EByq2Ljz7qVN/tTVBrCGlxF1HUX8s0NUUb5LwS7as5P9ypg
NQn77Ebah+zUOYtwuWEJ9eVdxvY+87qV2jv3ieI2ui2kjD7UHgvqiwJTXQtiDkZj
ZP36A4SS1FmC6yOXFuewomLcM/wI5fZQ+9jnbFglQHDMbfLrO2cx5vPaQ2AfMg3R
3WSvfrPQAyvR6e3kQGuBxOYQCQVzPlrCaod+/B7Rd6wJ/z2lG2fjUWDTaQZwUY7k
OS6MYEzHDrJFt7QnGmRxh3AY9vc7jGTyElWpHXsQ7qXj
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:04 2025 by rpki-client