Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kMC5hte8GNyJ6h-oXpkqS2DsBOM.roa
File: kMC5hte8GNyJ6h-oXpkqS2DsBOM.roa (raw, json)
Hash identifier: ZgBf36hOVK9kCWz4Ah8Cb9qP3sDXrNeqV+7rwR8jY9U=
Subject key identifier: 90:C0:B9:86:D7:BC:18:DC:89:EA:1F:A8:5E:99:2A:4B:60:EC:04:E3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018E7FEC701D943C92935CED1785BDFBA14B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kMC5hte8GNyJ6h-oXpkqS2DsBOM.roa
Signing time: Wed 27 Mar 2024 12:39:45 +0000
ROA not before: Wed 27 Mar 2024 12:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215340
IP address blocks: 194.116.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:ec:70:1d:94:3c:92:93:5c:ed:17:85:bd:fb:a1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 27 12:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90c0b986d7bc18dc89ea1fa85e992a4b60ec04e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:fc:a5:1d:e6:d3:7d:99:42:ae:ac:b8:f7:
39:aa:9a:98:aa:63:60:c7:a8:82:a2:8f:ea:f2:d7:
49:1f:3b:7b:a1:a3:87:29:fb:58:18:28:78:41:a6:
45:cf:19:52:c5:cc:e6:4b:f9:00:ee:6b:c6:a5:57:
19:a3:a7:66:e5:a6:a6:64:11:63:c2:08:63:29:92:
7a:ae:3e:a8:1b:ee:48:59:a3:f3:66:48:c0:89:69:
77:72:7a:fe:b1:78:f2:3a:93:c6:e9:99:10:5b:ac:
5a:f0:01:d7:08:27:08:bc:b7:74:d1:18:be:5f:49:
05:93:3c:c3:7e:1a:a3:a3:47:87:69:86:da:ef:29:
36:9f:2e:49:a5:6d:0d:a1:9c:3c:ab:a9:1c:80:c7:
00:08:67:33:e7:64:84:d3:4b:44:a5:d3:e5:17:c6:
ca:76:10:c8:05:67:dd:b0:43:84:74:b6:35:08:03:
20:da:e4:ad:1a:bc:d6:63:6e:d0:da:78:d7:1e:1b:
b2:33:b4:22:be:98:17:f9:d1:39:52:cb:28:ad:4b:
16:e6:2d:b6:a8:5e:10:0d:2f:29:9a:45:e7:dc:bc:
4f:e2:4a:6f:d4:98:87:4f:a9:28:7b:ee:3e:3a:32:
dd:6e:69:12:b6:b4:6f:d5:ab:d1:e1:11:90:7d:37:
14:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:B9:86:D7:BC:18:DC:89:EA:1F:A8:5E:99:2A:4B:60:EC:04:E3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kMC5hte8GNyJ6h-oXpkqS2DsBOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d0:8d:46:08:e0:08:ca:b2:59:0e:60:b3:26:7d:17:e9:cf:
9e:5f:06:1d:2b:48:cd:5c:b6:58:a7:18:06:0b:dd:73:58:66:
85:a8:64:58:51:ac:44:9a:8a:1a:08:37:17:ca:09:4b:ad:82:
1e:61:b8:ff:b6:69:fc:92:97:7e:7b:31:6f:e1:8a:b5:a2:eb:
1c:78:8e:b9:5f:7d:78:e0:9a:0c:f9:ac:71:9f:28:b9:3e:33:
d9:3b:74:7d:70:82:da:b4:9a:48:85:e7:e1:0d:94:52:c8:b8:
6d:0d:1d:43:cf:8c:f5:a9:3f:26:dd:1b:3d:ac:d8:78:ce:fe:
29:2a:d0:c8:a0:29:e6:fe:8c:a9:dc:44:3f:09:8e:d7:af:e3:
a0:20:06:fe:0f:62:ce:7b:2c:4a:ca:32:d3:56:a5:d0:7c:4d:
2d:c1:a0:16:86:8b:27:2e:7c:a9:84:b9:f6:33:a4:10:a4:8b:
de:63:d7:3e:9b:4c:cd:62:1c:33:f4:3c:49:29:1a:66:99:96:
d4:12:4c:62:41:36:26:b0:3a:69:7a:08:a4:9e:4b:4d:bc:fe:
85:99:e7:13:54:58:3e:3c:26:40:90:93:f2:5a:e6:64:35:0a:
84:f0:ef:2d:2f:26:bc:47:30:c9:63:fb:58:62:7c:50:c1:bf:
41:6a:75:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5/7HAdlDySk1ztF4W9+6FLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwMzI3MTIzOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGMwYjk4NmQ3YmMxOGRjODllYTFmYTg1ZTk5MmE0YjYwZWMwNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2/8pR3m032ZQq6suPc5qpqYqmNg
x6iCoo/q8tdJHzt7oaOHKftYGCh4QaZFzxlSxczmS/kA7mvGpVcZo6dm5aamZBFj
wghjKZJ6rj6oG+5IWaPzZkjAiWl3cnr+sXjyOpPG6ZkQW6xa8AHXCCcIvLd00Ri+
X0kFkzzDfhqjo0eHaYba7yk2ny5JpW0NoZw8q6kcgMcACGcz52SE00tEpdPlF8bK
dhDIBWfdsEOEdLY1CAMg2uStGrzWY27Q2njXHhuyM7QivpgX+dE5UssorUsW5i22
qF4QDS8pmkXn3LxP4kpv1JiHT6koe+4+OjLdbmkStrRv1avR4RGQfTcUqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJDAuYbXvBjcieofqF6ZKktg7ATjMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEva01DNWh0ZThHTnlKNmgtb1hwa3FTMkRzQk9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTlMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ0I1GCOAIyrJZDmCzJn0X6c+eXwYdK0jNXLZYpxgG
C91zWGaFqGRYUaxEmooaCDcXyglLrYIeYbj/tmn8kpd+ezFv4Yq1ousceI65X314
4JoM+axxnyi5PjPZO3R9cILatJpIhefhDZRSyLhtDR1Dz4z1qT8m3Rs9rNh4zv4p
KtDIoCnm/oyp3EQ/CY7Xr+OgIAb+D2LOeyxKyjLTVqXQfE0twaAWhosnLnyphLn2
M6QQpIveY9c+m0zNYhwz9DxJKRpmmZbUEkxiQTYmsDppegiknktNvP6FmecTVFg+
PCZAkJPyWuZkNQqE8O8tLya8RzDJY/tYYnxQwb9BanX6
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:12 2025 by rpki-client