Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/197szCrW8c-DAHsUqyFAFcvxUL4.roa
File: 197szCrW8c-DAHsUqyFAFcvxUL4.roa (raw, json)
Hash identifier: sCZJa/rEhODEYIftgT48Tsv5+yoWxHxqbZ2unAtdkBs=
Subject key identifier: D7:DE:EC:CC:2A:D6:F1:CF:83:00:7B:14:AB:21:40:15:CB:F1:50:BE
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 01940772E9B54B8AB8C4FBEEE518001D55D8
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/197szCrW8c-DAHsUqyFAFcvxUL4.roa
Signing time: Fri 27 Dec 2024 09:29:18 +0000
ROA not before: Fri 27 Dec 2024 09:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50053
IP address blocks: 185.232.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:72:e9:b5:4b:8a:b8:c4:fb:ee:e5:18:00:1d:55:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Dec 27 09:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7deeccc2ad6f1cf83007b14ab214015cbf150be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:ba:b7:ed:7d:6f:21:89:9b:a2:d9:b0:33:
66:d2:f7:cb:de:b7:24:70:fa:a7:a9:8e:e0:67:9d:
1a:b5:9f:c4:28:c9:91:8b:ab:76:34:c4:cd:34:8b:
3b:b8:48:31:dd:17:17:e8:e3:7d:4a:fa:03:ef:32:
70:24:1e:11:9a:32:74:4f:db:a6:1b:3f:b5:08:b5:
4c:0e:33:07:63:64:a6:7b:7b:a2:de:96:90:48:25:
52:60:8d:85:e3:20:b0:1f:46:06:86:ab:33:84:74:
33:96:0c:df:90:b2:f8:2b:64:b7:1f:23:ce:e3:38:
05:f1:6e:a7:a0:73:33:81:4d:01:ba:86:1c:79:d3:
1b:69:dc:d5:7c:6b:9d:11:99:43:eb:44:78:ff:9f:
f9:62:d4:2f:e8:fa:8b:fc:3e:af:69:f5:32:0a:d9:
cd:9c:eb:4e:bb:1f:05:b2:d2:03:f7:ef:76:fa:77:
af:7c:54:64:ab:b5:22:cc:ef:98:1d:71:ab:67:da:
3f:31:ce:fe:ae:89:11:16:30:f0:c0:43:e4:fc:e9:
a0:05:89:8c:a2:2f:67:ec:75:bb:3c:97:80:e8:bd:
eb:75:97:e8:9b:4f:ba:c0:b2:cd:91:f3:f1:a1:c7:
c3:f6:62:f9:75:dc:05:8d:0d:fc:e7:66:eb:43:69:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DE:EC:CC:2A:D6:F1:CF:83:00:7B:14:AB:21:40:15:CB:F1:50:BE
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/197szCrW8c-DAHsUqyFAFcvxUL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.204.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fe:b0:c8:03:82:fc:aa:b4:d1:71:a3:76:02:e3:70:5c:cf:
14:e5:70:5e:43:f3:fa:24:ba:38:e8:97:2a:4f:98:2a:49:78:
ec:79:a4:82:a6:b0:1c:c7:e6:6e:33:01:e2:28:8e:67:12:37:
c5:10:5a:5a:36:7a:26:a0:82:e8:b0:78:25:f2:9c:e1:82:40:
0d:fd:a7:0f:13:4f:27:77:84:2c:0e:9d:8f:23:f0:ad:e3:38:
05:15:59:f6:e5:7c:70:b2:ef:48:2b:d5:2a:45:62:85:96:76:
74:f4:d2:a8:14:9c:5c:54:37:99:b4:58:2c:92:cf:c6:c4:21:
c3:b7:c9:32:52:47:88:dd:ae:3f:7e:98:3f:04:cd:f4:dd:dc:
a8:00:d8:4b:ef:12:85:22:e6:93:c8:3b:da:6f:4e:c7:b2:13:
0c:cb:02:14:2f:f8:b8:ac:a4:43:ae:a4:17:74:fd:a7:e0:19:
60:6c:7a:9a:ba:c4:97:1f:30:57:c1:06:f0:fb:1f:8b:b4:e7:
ce:38:cb:43:24:c2:eb:7c:e0:db:5d:87:73:ad:e3:0f:85:4e:
83:3b:57:36:5e:a1:20:bf:25:13:87:3d:b4:14:96:c9:ae:8f:
11:64:44:cb:19:84:ae:5d:2e:ac:99:a1:c4:44:0e:49:7f:fb:
c2:22:73:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQHcum1S4q4xPvu5RgAHVXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZWVjZDcxYzE5M2U0YWMzMGVkMDNkMGI5ZjA1ZGExMDFj
NjAzZDIwHhcNMjQxMjI3MDkyOTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2RlZWNjYzJhZDZmMWNmODMwMDdiMTRhYjIxNDAxNWNiZjE1MGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz66t+19byGJm6LZsDNm0vfL3rck
cPqnqY7gZ50atZ/EKMmRi6t2NMTNNIs7uEgx3RcX6ON9SvoD7zJwJB4RmjJ0T9um
Gz+1CLVMDjMHY2Sme3ui3paQSCVSYI2F4yCwH0YGhqszhHQzlgzfkLL4K2S3HyPO
4zgF8W6noHMzgU0BuoYcedMbadzVfGudEZlD60R4/5/5YtQv6PqL/D6vafUyCtnN
nOtOux8FstID9+92+nevfFRkq7UizO+YHXGrZ9o/Mc7+rokRFjDwwEPk/OmgBYmM
oi9n7HW7PJeA6L3rdZfom0+6wLLNkfPxocfD9mL5ddwFjQ3852brQ2lLwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfe7Mwq1vHPgwB7FKshQBXL8VC+MB8GA1UdIwQY
MBaAFBHuzXHBk+SsMO0D0LnwXaEBxgPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWU3TmNjR1Q1S3d3N1FQUXVmQmRvUUhHQTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZmQ5NWEtNTE1Ny00YTFiLWI4Njgt
MTM4OTk1Yzk5Yjk3LzEvMTk3c3pDclc4Yy1EQUhzVXF5RkFGY3Z4VUw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80ZmQ5NWEtNTE1Ny00YTFiLWI4NjgtMTM4OTk1Yzk5Yjk3
LzEvRWU3TmNjR1Q1S3d3N1FQUXVmQmRvUUhHQTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuejMMA0G
CSqGSIb3DQEBCwUAA4IBAQBD/rDIA4L8qrTRcaN2AuNwXM8U5XBeQ/P6JLo46Jcq
T5gqSXjseaSCprAcx+ZuMwHiKI5nEjfFEFpaNnomoILosHgl8pzhgkAN/acPE08n
d4QsDp2PI/Ct4zgFFVn25Xxwsu9IK9UqRWKFlnZ09NKoFJxcVDeZtFgsks/GxCHD
t8kyUkeI3a4/fpg/BM303dyoANhL7xKFIuaTyDvab07HshMMywIUL/i4rKRDrqQX
dP2n4BlgbHqausSXHzBXwQbw+x+LtOfOOMtDJMLrfODbXYdzreMPhU6DO1c2XqEg
vyUThz20FJbJro8RZETLGYSuXS6smaHERA5Jf/vCInPe
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:14 2025 by rpki-client