Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/M8Z3ilnnfghANzmwD1choYrRjms.roa
File: M8Z3ilnnfghANzmwD1choYrRjms.roa (raw, json)
Hash identifier: 4V9U37Dve5RHms73Zj538sa51s1Uy9SYJtHvNeV/CbY=
Subject key identifier: 33:C6:77:8A:59:E7:7E:08:40:37:39:B0:0F:57:21:A1:8A:D1:8E:6B
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 0194228E368A5E4AD006D151EEA24F483C45
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/M8Z3ilnnfghANzmwD1choYrRjms.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215733
IP address blocks: 185.24.232.0/24 maxlen: 24
2a04:2e02::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:36:8a:5e:4a:d0:06:d1:51:ee:a2:4f:48:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33c6778a59e77e08403739b00f5721a18ad18e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:01:9a:72:0a:d4:5f:4d:01:5c:7a:cd:40:
39:44:f1:c4:d8:65:1c:1a:f1:76:d2:dd:64:cc:c3:
98:77:d7:b2:84:af:89:76:31:ed:a3:be:33:87:47:
38:44:3a:12:53:46:c6:35:44:c5:6f:4b:61:7f:5f:
46:ab:38:e6:9d:46:82:c2:5e:b5:de:00:52:24:6e:
68:56:80:be:12:f1:b7:a9:9e:b1:be:76:cb:f8:55:
95:c1:6a:82:7d:3e:23:74:c5:ce:ff:30:21:1e:d6:
64:e9:d0:24:b3:80:49:de:84:43:32:fb:da:e7:9b:
00:99:f8:1a:eb:55:43:ac:0d:b3:e0:49:80:4c:54:
c3:6d:cd:2c:97:02:26:18:4f:6e:88:bb:2c:fb:b5:
be:8b:55:ee:68:44:96:e3:ed:85:1a:a5:a9:a3:18:
55:a2:26:34:e5:0f:ac:23:89:0f:ad:91:e0:11:d2:
36:da:e2:9c:46:37:ba:97:77:1f:99:cc:a9:1e:e0:
27:6f:e2:52:1c:86:d0:03:6b:2d:9e:34:25:85:71:
c0:dc:8e:9e:7d:6b:99:17:ed:45:c7:c0:35:15:67:
cf:3c:aa:2f:1f:f5:ac:79:7c:07:94:6a:64:26:ec:
08:5f:31:d5:1a:9e:7d:64:21:fe:e2:4e:83:4b:21:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C6:77:8A:59:E7:7E:08:40:37:39:B0:0F:57:21:A1:8A:D1:8E:6B
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/M8Z3ilnnfghANzmwD1choYrRjms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.232.0/24
IPv6:
2a04:2e02::/32
Signature Algorithm: sha256WithRSAEncryption
96:7a:83:99:b6:c4:18:d0:2b:da:39:ab:c8:91:49:a2:e2:60:
db:9b:92:64:a9:d0:19:aa:e5:49:e7:ca:22:14:cb:45:19:b2:
ef:15:f2:78:21:d3:95:1f:22:c1:9e:25:8d:91:fe:b9:15:c3:
bd:af:c7:88:fd:2a:5a:f0:e2:5f:9a:b7:ab:51:e6:46:6a:c2:
b2:ad:9d:cf:52:1b:80:ac:02:c1:b0:3f:f6:d1:da:c2:f7:da:
69:8f:0d:34:a3:95:f6:28:8d:de:23:61:f2:b0:87:2c:45:92:
5f:ec:75:82:08:ae:d9:de:0e:42:3b:95:bd:69:b7:e6:4e:2f:
14:40:63:10:23:e2:90:db:d9:cd:85:0e:d0:30:ca:d5:d0:89:
c2:0e:5f:0a:79:3e:44:3e:ec:e7:6f:9c:4a:24:79:6c:55:be:
8b:63:3c:c5:42:74:67:01:73:ef:f8:50:95:35:4c:a6:bb:49:
0b:68:56:96:37:f0:04:52:a0:09:23:d5:0b:e6:ba:8b:6d:5e:
22:fc:ae:5f:76:3a:e9:94:c5:a0:08:84:b6:21:ad:00:c5:dc:
62:d8:90:b4:1b:02:eb:9f:c2:b7:d2:9b:9e:8f:25:87:0f:8a:
8d:bc:1a:f7:05:82:96:85:35:04:a3:7e:6b:58:b1:c4:6b:a4:
6e:1d:1d:45
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijjaKXkrQBtFR7qJPSDxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2JiZjkzNDhhZTU1OGM2ZWZhMGMwODZmMjRiZTA0Y2Iy
M2M2ZTkwHhcNMjUwMTAxMTU0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2M2Nzc4YTU5ZTc3ZTA4NDAzNzM5YjAwZjU3MjFhMThhZDE4ZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5QBmnIK1F9NAVx6zUA5RPHE2GUc
GvF20t1kzMOYd9eyhK+JdjHto74zh0c4RDoSU0bGNUTFb0thf19GqzjmnUaCwl61
3gBSJG5oVoC+EvG3qZ6xvnbL+FWVwWqCfT4jdMXO/zAhHtZk6dAks4BJ3oRDMvva
55sAmfga61VDrA2z4EmATFTDbc0slwImGE9uiLss+7W+i1XuaESW4+2FGqWpoxhV
oiY05Q+sI4kPrZHgEdI22uKcRje6l3cfmcypHuAnb+JSHIbQA2stnjQlhXHA3I6e
fWuZF+1Fx8A1FWfPPKovH/WseXwHlGpkJuwIXzHVGp59ZCH+4k6DSyEgDwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDPGd4pZ534IQDc5sA9XIaGK0Y5rMB8GA1UdIwQY
MBaAFCPLv5NIrlWMbvoMCG8kvgTLI8bpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTh1X2swaXVWWXh1LWd3SWJ5Uy1CTXNqeHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZTkwZjktZThkMy00NTYyLWE1YjMt
NjIxZWUwNTJhNmZjLzEvTThaM2lsbm5mZ2hBTnptd0QxY2hvWXJSam1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZTkwZjktZThkMy00NTYyLWE1YjMtNjIxZWUwNTJhNmZj
LzEvSTh1X2swaXVWWXh1LWd3SWJ5Uy1CTXNqeHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRjoMA0E
AgACMAcDBQAqBC4CMA0GCSqGSIb3DQEBCwUAA4IBAQCWeoOZtsQY0CvaOavIkUmi
4mDbm5JkqdAZquVJ58oiFMtFGbLvFfJ4IdOVHyLBniWNkf65FcO9r8eI/Spa8OJf
mrerUeZGasKyrZ3PUhuArALBsD/20drC99ppjw00o5X2KI3eI2HysIcsRZJf7HWC
CK7Z3g5CO5W9abfmTi8UQGMQI+KQ29nNhQ7QMMrV0InCDl8KeT5EPuznb5xKJHls
Vb6LYzzFQnRnAXPv+FCVNUymu0kLaFaWN/AEUqAJI9UL5rqLbV4i/K5fdjrplMWg
CIS2Ia0Axdxi2JC0GwLrn8K30puejyWHD4qNvBr3BYKWhTUEo35rWLHEa6RuHR1F
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:58:01 2025 by rpki-client