Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/F1gJNc83matL-NKaNK7uOFg1GvI.roa
File: F1gJNc83matL-NKaNK7uOFg1GvI.roa (raw, json)
Hash identifier: 57nrAc/bycMGpo5OI2K5eDykJwe1V9oTBWr+dpgcfdA=
Subject key identifier: 17:58:09:35:CF:37:99:AB:4B:F8:D2:9A:34:AE:EE:38:58:35:1A:F2
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01894E797B3CD84B0D5B9847449879CCADF1
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/F1gJNc83matL-NKaNK7uOFg1GvI.roa
Signing time: Thu 13 Jul 2023 08:58:51 +0000
ROA not before: Thu 13 Jul 2023 08:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
45.156.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:79:7b:3c:d8:4b:0d:5b:98:47:44:98:79:cc:ad:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jul 13 08:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17580935cf3799ab4bf8d29a34aeee3858351af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:ac:19:96:f1:1a:f3:5b:da:ea:64:89:90:
64:b5:f4:19:ef:ab:9e:1b:49:63:5b:37:3e:21:ef:
84:91:a6:d7:65:c1:84:cc:89:a9:0c:ea:47:78:28:
c4:95:f8:24:2c:da:c2:9e:19:e7:73:c5:15:29:ff:
08:65:e7:b3:40:85:f7:70:59:3c:8c:7c:00:59:6e:
ba:68:4a:65:ce:c3:29:96:b2:73:64:99:f1:e3:f0:
a1:63:12:c5:c4:08:b4:8b:7d:19:e4:15:43:b1:60:
b7:b5:3e:c2:9e:80:4a:e0:f1:a6:46:46:8b:aa:a6:
7d:d6:c9:1a:83:40:9f:f6:f2:b5:48:29:41:d3:80:
63:08:71:98:88:ad:49:57:96:94:f2:93:1f:05:14:
8c:80:86:3b:4a:37:61:7d:f6:06:01:3d:c7:32:60:
2c:dd:bb:ef:78:93:da:1d:72:03:ad:4f:a3:73:3f:
17:2d:4c:a6:65:fb:43:97:27:63:2d:9d:7c:97:55:
05:8d:21:88:3e:a5:e5:6c:b5:c6:b6:95:69:70:17:
16:51:52:c8:eb:ca:fd:e0:0d:76:be:4b:24:31:f0:
d3:96:91:dd:61:52:f7:1e:da:d0:fd:25:56:81:72:
28:71:ab:cc:84:97:26:e1:82:1f:86:92:ee:a9:1a:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:09:35:CF:37:99:AB:4B:F8:D2:9A:34:AE:EE:38:58:35:1A:F2
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/F1gJNc83matL-NKaNK7uOFg1GvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
45.156.144.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:01:c6:e7:48:9d:eb:10:13:cc:5c:78:48:a4:cb:e7:51:17:
7a:d5:74:6b:d9:c1:cb:e2:5e:1d:ca:48:61:ce:f3:ab:44:87:
e8:b9:93:36:86:3c:f1:cd:85:ef:23:7d:fc:29:53:ca:48:0d:
9a:b4:ee:ee:9b:6b:54:29:2a:3c:a4:17:4d:52:09:11:82:6e:
39:48:ab:25:d2:78:da:d6:93:b4:ef:35:26:28:04:10:06:a4:
f3:dc:aa:59:d3:f3:b4:4c:ed:4d:8c:2a:7d:2a:1f:e2:53:ae:
41:e9:e0:73:3b:8d:e5:60:07:21:ab:3f:d8:ae:26:1c:75:ee:
4a:ce:83:a9:b6:71:3d:bd:4f:02:de:17:77:5f:5f:d5:b3:70:
0e:bf:90:6f:00:c8:c9:43:a6:1e:3d:cc:a6:6f:aa:c9:e9:b6:
cc:7d:f9:00:52:df:20:bb:40:8a:2a:cf:46:9f:a0:42:60:58:
60:59:ee:61:f4:ca:0d:43:7c:04:de:df:df:36:4a:0f:55:54:
4e:73:51:f8:18:8a:90:94:a9:e8:0d:1a:5a:23:5c:9b:bf:ca:
b0:1c:80:ad:ea:af:57:8e:e5:a6:83:42:6a:83:9c:90:1d:11:
53:7d:25:6b:cf:92:1f:c1:d5:90:6e:56:4f:4f:65:1e:63:21:
85:7d:2c:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlOeXs82EsNW5hHRJh5zK3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjMwNzEzMDg1ODUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzU4MDkzNWNmMzc5OWFiNGJmOGQyOWEzNGFlZWUzODU4MzUxYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHisGZbxGvNb2upkiZBktfQZ76ue
G0ljWzc+Ie+EkabXZcGEzImpDOpHeCjElfgkLNrCnhnnc8UVKf8IZeezQIX3cFk8
jHwAWW66aEplzsMplrJzZJnx4/ChYxLFxAi0i30Z5BVDsWC3tT7CnoBK4PGmRkaL
qqZ91skag0Cf9vK1SClB04BjCHGYiK1JV5aU8pMfBRSMgIY7SjdhffYGAT3HMmAs
3bvveJPaHXIDrU+jcz8XLUymZftDlydjLZ18l1UFjSGIPqXlbLXGtpVpcBcWUVLI
68r94A12vkskMfDTlpHdYVL3HtrQ/SVWgXIocavMhJcm4YIfhpLuqRqTcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBdYCTXPN5mrS/jSmjSu7jhYNRryMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvRjFnSk5jODNtYXRMLU5LYU5LN3VPRmcxR3ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAju0AwQB
LZyQMA0GCSqGSIb3DQEBCwUAA4IBAQC7AcbnSJ3rEBPMXHhIpMvnURd61XRr2cHL
4l4dykhhzvOrRIfouZM2hjzxzYXvI338KVPKSA2atO7um2tUKSo8pBdNUgkRgm45
SKsl0nja1pO07zUmKAQQBqTz3KpZ0/O0TO1NjCp9Kh/iU65B6eBzO43lYAchqz/Y
riYcde5KzoOptnE9vU8C3hd3X1/Vs3AOv5BvAMjJQ6YePcymb6rJ6bbMffkAUt8g
u0CKKs9Gn6BCYFhgWe5h9MoNQ3wE3t/fNkoPVVROc1H4GIqQlKnoDRpaI1ybv8qw
HICt6q9XjuWmg0Jqg5yQHRFTfSVrz5IfwdWQblZPT2UeYyGFfSyQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:54 2025 by rpki-client