Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/5cOnIRZG7VIjL3T-EY5dXkOiyig.roa
File: 5cOnIRZG7VIjL3T-EY5dXkOiyig.roa (raw, json)
Hash identifier: fminTBFj94EewbSrxeCTogYSXGOVuK5ySC/XFYJlGdQ=
Subject key identifier: E5:C3:A7:21:16:46:ED:52:23:2F:74:FE:11:8E:5D:5E:43:A2:CA:28
Certificate issuer: /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial: 0185708CE6B99152549B10C62169FDD8B06B
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/5cOnIRZG7VIjL3T-EY5dXkOiyig.roa
Signing time: Mon 02 Jan 2023 03:36:00 +0000
ROA not before: Mon 02 Jan 2023 03:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212781
IP address blocks: 185.107.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e6:b9:91:52:54:9b:10:c6:21:69:fd:d8:b0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
Validity
Not Before: Jan 2 03:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5c3a7211646ed52232f74fe118e5d5e43a2ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:9e:27:99:c2:e8:61:e6:66:bc:a7:4a:e0:
89:10:af:a5:6b:5c:72:e6:9e:c3:a5:9c:6d:d1:86:
a6:6d:73:0f:b2:b6:50:0b:c7:96:bf:fd:00:1a:02:
8e:8b:fc:2e:a2:40:00:b6:e9:cf:29:0f:c1:3c:b4:
1d:3f:98:6b:5e:7f:ae:fc:89:3a:da:51:5c:fb:e7:
79:9c:c9:34:77:a3:ec:46:50:0e:e2:8f:3c:a5:e2:
ae:43:0e:c1:8c:4d:fa:d6:23:3d:df:e2:41:33:ca:
39:f3:66:b7:b3:5c:5c:60:9a:03:1e:f3:8d:87:48:
c6:e2:23:6f:d5:3b:5f:56:1d:a4:5a:70:10:a8:20:
c9:49:fe:4c:cb:ce:f1:32:cc:d1:a8:8d:bc:93:a2:
3d:f4:47:b3:0a:00:27:42:64:d6:0b:7a:9f:46:1d:
d9:37:c2:fe:0e:61:58:2b:89:83:ae:b6:7b:25:36:
36:31:98:ae:a8:1d:6f:ff:f0:f2:ee:57:2a:3e:af:
cf:a0:aa:d5:2b:d6:7a:0d:e7:97:44:47:cc:07:51:
e7:9b:4c:a0:11:26:6e:82:77:60:42:0a:be:e2:48:
53:39:55:92:b9:1d:c6:b9:dd:2f:2f:c0:ba:d9:68:
e5:07:9f:f7:5a:ec:1d:76:1b:a9:29:3a:eb:6b:75:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:A7:21:16:46:ED:52:23:2F:74:FE:11:8E:5D:5E:43:A2:CA:28
X509v3 Authority Key Identifier:
keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/5cOnIRZG7VIjL3T-EY5dXkOiyig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:51:ec:53:a7:60:08:4b:4d:4a:1f:1b:d7:54:ab:17:bd:1a:
8b:a6:8c:be:94:d9:91:5d:8b:5d:73:10:e0:d4:21:a4:db:62:
42:58:cd:b8:68:c5:8e:4d:f6:89:e4:0b:62:98:db:6b:76:fb:
01:c6:5c:80:cd:04:18:8a:2a:84:c2:8e:ee:55:dc:9d:be:d4:
71:31:d3:2c:cf:1f:a0:33:2f:47:7e:e3:98:99:2a:f0:5a:ef:
46:c2:a2:a0:e2:3b:0a:a8:24:f1:a7:d2:36:0b:f1:02:23:db:
39:7c:4f:d4:dd:68:24:b4:8e:cf:8c:18:38:35:24:9f:53:89:
45:1e:b3:46:09:e9:5f:5d:b8:a5:a9:4d:b1:d4:e2:78:78:9c:
2e:ed:0a:93:58:01:f0:e4:d7:cf:6c:07:45:13:bb:85:85:f5:
e8:f6:8e:38:83:71:6a:4d:9b:51:c5:fd:5c:5b:26:20:7e:98:
4e:f4:71:f4:92:b9:b3:cd:bc:5d:60:34:11:17:4a:e2:18:ab:
4f:30:d9:6e:0e:3e:04:4f:81:4d:66:75:66:12:99:2b:f6:70:
f5:2c:73:11:a6:42:f8:8b:fb:12:48:ac:40:50:cc:f8:b9:67:
9d:be:11:43:a7:f3:68:37:d1:2e:aa:d3:5f:91:c6:aa:8c:ab:
cb:e6:e5:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjOa5kVJUmxDGIWn92LBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjlhNDFlNmY1MDdhMzc0NThhNDk2NDNhN2JlNTc5MDc1
OGY3MjYwHhcNMjMwMTAyMDMzNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWMzYTcyMTE2NDZlZDUyMjMyZjc0ZmUxMThlNWQ1ZTQzYTJjYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM+eJ5nC6GHmZrynSuCJEK+la1xy
5p7DpZxt0YambXMPsrZQC8eWv/0AGgKOi/wuokAAtunPKQ/BPLQdP5hrXn+u/Ik6
2lFc++d5nMk0d6PsRlAO4o88peKuQw7BjE361iM93+JBM8o582a3s1xcYJoDHvON
h0jG4iNv1TtfVh2kWnAQqCDJSf5My87xMszRqI28k6I99EezCgAnQmTWC3qfRh3Z
N8L+DmFYK4mDrrZ7JTY2MZiuqB1v//Dy7lcqPq/PoKrVK9Z6DeeXREfMB1Hnm0yg
ESZugndgQgq+4khTOVWSuR3Gud0vL8C62WjlB5/3WuwddhupKTrra3UviQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXDpyEWRu1SIy90/hGOXV5DosooMB8GA1UdIwQY
MBaAFI0ppB5vUHo3RYpJZDp75XkHWPcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNta0htOVFlamRGaWtsa09udmxlUWRZOXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNWI0NWQtNzc4MC00MzRiLWE5MTIt
ZWZiOWEwNGQzY2FhLzEvNWNPbklSWkc3VklqTDNULUVZNWRYa09peWlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNWI0NWQtNzc4MC00MzRiLWE5MTItZWZiOWEwNGQzY2Fh
LzEvalNta0htOVFlamRGaWtsa09udmxlUWRZOXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWtAMA0G
CSqGSIb3DQEBCwUAA4IBAQAcUexTp2AIS01KHxvXVKsXvRqLpoy+lNmRXYtdcxDg
1CGk22JCWM24aMWOTfaJ5AtimNtrdvsBxlyAzQQYiiqEwo7uVdydvtRxMdMszx+g
My9HfuOYmSrwWu9GwqKg4jsKqCTxp9I2C/ECI9s5fE/U3WgktI7PjBg4NSSfU4lF
HrNGCelfXbilqU2x1OJ4eJwu7QqTWAHw5NfPbAdFE7uFhfXo9o44g3FqTZtRxf1c
WyYgfphO9HH0krmzzbxdYDQRF0riGKtPMNluDj4ET4FNZnVmEpkr9nD1LHMRpkL4
i/sSSKxAUMz4uWedvhFDp/NoN9EuqtNfkcaqjKvL5uVm
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:13 2025 by rpki-client