Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/p6XIOJq-Rop3EksUEenUP6kZBt8.roa
File: p6XIOJq-Rop3EksUEenUP6kZBt8.roa (raw, json)
Hash identifier: K99bJmWCX/2zmrRm/JVipHOMHrm+Z4rftfz2GJevrBE=
Subject key identifier: A7:A5:C8:38:9A:BE:46:8A:77:12:4B:14:11:E9:D4:3F:A9:19:06:DF
Certificate issuer: /CN=8c7fd3dbdc3a9b9531e686b5b07645c328b1b51a
Certificate serial: 01856C9CCFFFB8EDF24A591E5775CB654054
Authority key identifier: 8C:7F:D3:DB:DC:3A:9B:95:31:E6:86:B5:B0:76:45:C3:28:B1:B5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH_T29w6m5Ux5oa1sHZFwyixtRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/p6XIOJq-Rop3EksUEenUP6kZBt8.roa
Signing time: Sun 01 Jan 2023 09:14:54 +0000
ROA not before: Sun 01 Jan 2023 09:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.104.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:cf:ff:b8:ed:f2:4a:59:1e:57:75:cb:65:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7fd3dbdc3a9b9531e686b5b07645c328b1b51a
Validity
Not Before: Jan 1 09:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7a5c8389abe468a77124b1411e9d43fa91906df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:34:2e:b3:1e:49:53:8b:f9:21:1b:8a:08:
68:fd:ea:9a:d3:65:ca:58:ae:0e:e5:7a:1f:65:bd:
5a:dc:a9:1e:31:a1:3c:4a:dd:ca:c8:b7:39:be:0b:
6f:54:0e:80:63:35:cb:ff:5f:f8:f3:b8:4d:df:c4:
64:02:c7:0b:75:b6:09:3b:0a:b5:b1:66:0c:73:e2:
ce:ad:12:d1:96:ae:fb:b4:44:7f:57:8e:57:c0:ec:
56:b2:eb:d8:e3:dc:1d:1c:df:40:4e:02:f5:6c:85:
44:49:02:a3:c5:bb:68:48:10:67:51:30:d2:19:58:
b3:6d:71:c4:ea:9f:c4:bf:7d:58:0a:00:35:da:4e:
20:ff:ca:40:b0:cc:53:89:b6:56:08:6a:e6:74:a3:
75:8f:44:c4:a1:cd:2b:8d:b6:3d:3e:3e:12:7c:5b:
20:1f:e4:d3:37:77:67:2f:ac:20:f4:d2:25:bb:9a:
53:33:6b:07:62:10:d9:47:a3:48:5a:ce:d8:d2:11:
14:20:fb:57:18:cc:9f:b2:c2:4c:99:2b:c8:28:5d:
9f:07:8f:c6:da:7d:36:5b:7b:4b:ee:4b:f4:d3:05:
bf:15:e9:cc:a4:6f:f1:3d:13:68:5e:aa:f4:6e:30:
9e:21:44:a9:49:62:03:99:5c:2d:cd:e9:ba:6d:d5:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A5:C8:38:9A:BE:46:8A:77:12:4B:14:11:E9:D4:3F:A9:19:06:DF
X509v3 Authority Key Identifier:
keyid:8C:7F:D3:DB:DC:3A:9B:95:31:E6:86:B5:B0:76:45:C3:28:B1:B5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH_T29w6m5Ux5oa1sHZFwyixtRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/p6XIOJq-Rop3EksUEenUP6kZBt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/jH_T29w6m5Ux5oa1sHZFwyixtRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cc:f1:8f:f5:f4:69:d6:dd:31:fb:e3:c0:17:56:87:f5:b7:
3e:5f:03:88:43:ad:c2:43:e7:14:66:ac:43:10:64:bb:64:0d:
f7:bc:c8:4d:33:b3:6e:54:d3:3c:0a:c6:42:ac:b0:89:d8:d7:
7e:fb:3b:7f:c6:4c:ed:2c:5f:48:a4:02:66:48:7b:a1:fd:98:
a4:83:9f:94:11:8e:83:38:c6:b8:7e:b9:e0:6a:ae:d6:c8:22:
fe:55:da:d4:ae:3d:40:02:05:fa:93:21:6f:1a:10:b1:64:14:
48:2e:06:7a:47:8c:9c:25:b0:b2:76:68:38:a3:cd:12:35:48:
b3:3a:3b:bf:ee:ce:27:ca:6d:e5:2a:da:7e:5f:12:e8:7f:0a:
c5:90:9f:b9:ae:d5:78:5d:7f:57:d3:09:59:82:e9:9e:5a:99:
49:ea:bf:0f:7c:0e:4d:45:a9:4e:7f:38:94:01:03:de:0f:1d:
ae:f2:3b:34:74:61:08:c5:96:49:41:4f:2b:65:4a:e6:5a:14:
71:0b:c3:21:b9:5d:aa:56:87:cf:c9:a0:81:f5:4e:b1:32:16:
07:bd:09:4d:fe:39:18:62:fc:fc:8f:0d:c0:67:7f:d2:68:f2:
9c:3d:32:48:0f:a8:99:07:1a:68:f8:57:66:6b:42:11:1c:3e:
0e:f1:d1:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsnM//uO3ySlkeV3XLZUBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2ZkM2RiZGMzYTliOTUzMWU2ODZiNWIwNzY0NWMzMjhi
MWI1MWEwHhcNMjMwMTAxMDkxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2E1YzgzODlhYmU0NjhhNzcxMjRiMTQxMWU5ZDQzZmE5MTkwNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJs0LrMeSVOL+SEbigho/eqa02XK
WK4O5XofZb1a3KkeMaE8St3KyLc5vgtvVA6AYzXL/1/487hN38RkAscLdbYJOwq1
sWYMc+LOrRLRlq77tER/V45XwOxWsuvY49wdHN9ATgL1bIVESQKjxbtoSBBnUTDS
GVizbXHE6p/Ev31YCgA12k4g/8pAsMxTibZWCGrmdKN1j0TEoc0rjbY9Pj4SfFsg
H+TTN3dnL6wg9NIlu5pTM2sHYhDZR6NIWs7Y0hEUIPtXGMyfssJMmSvIKF2fB4/G
2n02W3tL7kv00wW/FenMpG/xPRNoXqr0bjCeIUSpSWIDmVwtzem6bdV41wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKelyDiavkaKdxJLFBHp1D+pGQbfMB8GA1UdIwQY
MBaAFIx/09vcOpuVMeaGtbB2RcMosbUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhfVDI5dzZtNVV4NW9hMXNIWkZ3eWl4dFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NmJlOTUtNDA0Ny00NmI1LWIwOTgt
MjllNTNiMzEzNmU2LzEvcDZYSU9KcS1Sb3AzRWtzVUVlblVQNmtaQnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81NmJlOTUtNDA0Ny00NmI1LWIwOTgtMjllNTNiMzEzNmU2
LzEvakhfVDI5dzZtNVV4NW9hMXNIWkZ3eWl4dFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWi+MA0G
CSqGSIb3DQEBCwUAA4IBAQCtzPGP9fRp1t0x++PAF1aH9bc+XwOIQ63CQ+cUZqxD
EGS7ZA33vMhNM7NuVNM8CsZCrLCJ2Nd++zt/xkztLF9IpAJmSHuh/Zikg5+UEY6D
OMa4frngaq7WyCL+VdrUrj1AAgX6kyFvGhCxZBRILgZ6R4ycJbCydmg4o80SNUiz
Oju/7s4nym3lKtp+XxLofwrFkJ+5rtV4XX9X0wlZgumeWplJ6r8PfA5NRalOfziU
AQPeDx2u8js0dGEIxZZJQU8rZUrmWhRxC8MhuV2qVofPyaCB9U6xMhYHvQlN/jkY
Yvz8jw3AZ3/SaPKcPTJID6iZBxpo+Fdma0IRHD4O8dGh
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:09 2025 by rpki-client