Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/iXPiUecWNNRxBpxUE3apiqAOums.roa
File: iXPiUecWNNRxBpxUE3apiqAOums.roa (raw, json)
Hash identifier: fpSXnW2HKaz2gJWxMNQJozCOAsBtJYUiJyHW0Gsw1IY=
Subject key identifier: 89:73:E2:51:E7:16:34:D4:71:06:9C:54:13:76:A9:8A:A0:0E:BA:6B
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 01856C53CF1DB55B24B61121F7E432DAC419
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/iXPiUecWNNRxBpxUE3apiqAOums.roa
Signing time: Sun 01 Jan 2023 07:55:09 +0000
ROA not before: Sun 01 Jan 2023 07:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51302
IP address blocks: 185.88.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cf:1d:b5:5b:24:b6:11:21:f7:e4:32:da:c4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 1 07:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8973e251e71634d471069c541376a98aa00eba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:29:88:f1:a6:a0:c1:67:31:89:06:0d:9f:d0:
5d:ca:17:69:d4:54:a0:91:81:0f:e0:40:95:43:65:
60:11:c4:e5:3b:5d:78:a3:9d:4c:65:cc:58:6b:41:
a2:df:16:d7:32:0f:f1:b8:db:22:8b:5c:70:2d:39:
ba:90:16:05:5d:a6:0a:3b:18:32:53:7a:62:ff:b2:
e4:07:66:db:a5:2b:17:55:b8:e5:18:97:40:d1:b3:
6d:e0:f7:5b:ea:4a:8c:ac:63:f2:26:46:54:aa:16:
af:c7:08:0b:a8:54:13:bf:b0:6c:6e:69:87:06:11:
4f:9e:a1:0b:de:41:d9:d4:66:09:14:62:de:64:1b:
07:65:de:72:51:48:5e:e7:a6:12:65:55:b1:ef:ea:
1e:d3:82:0b:94:b2:cc:40:b3:26:7d:6b:a9:ef:3a:
c2:df:dd:c1:34:cd:67:74:58:94:f6:e1:5a:07:05:
9f:96:d7:e3:32:5f:a9:03:49:c0:77:d5:3b:3e:e7:
67:db:02:9a:9b:c0:90:d5:ae:5c:3c:85:79:22:cc:
85:d8:3f:4c:cd:fa:44:7e:e0:c0:e8:7d:7d:5c:ba:
41:a9:82:f3:c5:59:3f:19:7d:df:e9:bd:59:eb:00:
9e:5c:30:f3:88:07:49:f5:89:6a:87:51:96:e0:1a:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:E2:51:E7:16:34:D4:71:06:9C:54:13:76:A9:8A:A0:0E:BA:6B
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/iXPiUecWNNRxBpxUE3apiqAOums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:36:4d:90:ad:29:ad:75:f5:9f:19:cf:d0:05:2c:56:77:c4:
e4:af:fa:5d:4b:8c:fc:e7:af:77:f5:46:da:6d:ce:89:a8:30:
12:99:22:ba:97:12:03:da:20:3c:68:80:06:02:40:ff:14:9c:
e3:cb:fb:47:3a:cd:63:90:be:0a:f0:19:5a:0e:0a:a8:18:17:
96:96:e3:43:a9:89:dd:fc:2d:6f:d6:bf:e1:c5:03:65:2b:74:
2b:d2:8e:7c:b3:50:c4:1a:bc:e8:4b:4e:72:16:98:8b:92:da:
ef:19:79:78:e7:3e:e4:a7:09:32:ce:fe:41:84:a3:87:9e:1b:
b0:dc:b7:78:1c:d9:38:15:40:79:35:f6:f8:74:28:59:05:cb:
f5:72:a7:a9:83:ee:a2:ea:f7:79:83:16:a0:14:06:db:8f:a7:
df:4a:84:8f:92:5a:71:48:dc:70:ec:17:ba:fd:9e:2b:30:4f:
5f:82:5e:2b:c3:a5:05:d1:e4:6e:27:2b:55:50:f7:60:3a:24:
92:b4:f4:62:de:11:fe:23:3b:72:e4:01:36:75:98:eb:bc:46:
eb:88:0b:ab:76:e2:b4:cc:7e:31:8f:f9:a9:ba:38:9a:90:62:
a8:5b:70:26:25:45:f2:06:f8:31:f2:61:c1:a1:b3:65:eb:bd:
c8:5f:93:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU88dtVskthEh9+Qy2sQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWIzYjNiNTc5YzkwYjRiOTk2YTdmZTQwZjIwNTAzOTEz
YTI1Y2YwHhcNMjMwMTAxMDc1NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTczZTI1MWU3MTYzNGQ0NzEwNjljNTQxMzc2YTk4YWEwMGViYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCmI8aagwWcxiQYNn9Bdyhdp1FSg
kYEP4ECVQ2VgEcTlO114o51MZcxYa0Gi3xbXMg/xuNsii1xwLTm6kBYFXaYKOxgy
U3pi/7LkB2bbpSsXVbjlGJdA0bNt4Pdb6kqMrGPyJkZUqhavxwgLqFQTv7BsbmmH
BhFPnqEL3kHZ1GYJFGLeZBsHZd5yUUhe56YSZVWx7+oe04ILlLLMQLMmfWup7zrC
393BNM1ndFiU9uFaBwWfltfjMl+pA0nAd9U7Pudn2wKam8CQ1a5cPIV5IsyF2D9M
zfpEfuDA6H19XLpBqYLzxVk/GX3f6b1Z6wCeXDDziAdJ9Ylqh1GW4Bp7NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlz4lHnFjTUcQacVBN2qYqgDrprMB8GA1UdIwQY
MBaAFEbrOztXnJC0uZan/kDyBQOROiXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnVzN08xZWNrTFM1bHFmLVFQSUZBNUU2SmM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNmFkOWYtOGQ2OS00NmVhLWJkN2Mt
MzJiMTUwZjhlNjFmLzEvaVhQaVVlY1dOTlJ4QnB4VUUzYXBpcUFPdW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNmFkOWYtOGQ2OS00NmVhLWJkN2MtMzJiMTUwZjhlNjFm
LzEvUnVzN08xZWNrTFM1bHFmLVFQSUZBNUU2SmM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuViBMA0G
CSqGSIb3DQEBCwUAA4IBAQCcNk2QrSmtdfWfGc/QBSxWd8Tkr/pdS4z856939Uba
bc6JqDASmSK6lxID2iA8aIAGAkD/FJzjy/tHOs1jkL4K8BlaDgqoGBeWluNDqYnd
/C1v1r/hxQNlK3Qr0o58s1DEGrzoS05yFpiLktrvGXl45z7kpwkyzv5BhKOHnhuw
3Ld4HNk4FUB5Nfb4dChZBcv1cqepg+6i6vd5gxagFAbbj6ffSoSPklpxSNxw7Be6
/Z4rME9fgl4rw6UF0eRuJytVUPdgOiSStPRi3hH+Izty5AE2dZjrvEbriAurduK0
zH4xj/mpujiakGKoW3AmJUXyBvgx8mHBobNl673IX5Nj
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:52 2025 by rpki-client