Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/1kPYBeHFqZcRahwRlHXvuPvT0zI.roa
File: 1kPYBeHFqZcRahwRlHXvuPvT0zI.roa (raw, json)
Hash identifier: qhycFEi6FwqVVERso5+P+dTV24QXX6z3cT56YMpxbXU=
Subject key identifier: D6:43:D8:05:E1:C5:A9:97:11:6A:1C:11:94:75:EF:B8:FB:D3:D3:32
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 019427486BE1DFD331DA1859D15A0604884A
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/1kPYBeHFqZcRahwRlHXvuPvT0zI.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 185.229.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6b:e1:df:d3:31:da:18:59:d1:5a:06:04:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d643d805e1c5a997116a1c119475efb8fbd3d332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:3f:2c:67:4a:93:3d:92:8a:a7:9d:4b:cc:
49:a1:d3:4b:b9:01:48:0d:90:74:3c:94:0f:ce:0e:
22:85:f0:87:4d:c0:84:4e:9d:5e:b8:df:09:f4:f2:
8a:48:11:ab:1d:ed:dd:f8:13:a8:02:b5:01:bc:7b:
ef:7a:73:c6:06:86:60:1c:74:48:3e:2f:fd:22:49:
3f:6f:39:04:89:e6:84:ab:bf:42:43:c0:8f:f1:cb:
2f:83:1e:d8:51:f8:29:06:bf:d8:7e:76:83:6f:26:
57:46:86:a9:e5:69:83:e7:39:9b:58:78:34:40:3e:
77:85:03:1c:bb:da:9a:b3:66:ab:84:3e:aa:9d:61:
56:5d:a1:78:4e:54:96:b7:90:42:33:11:9b:1f:c3:
6e:86:80:d0:ea:1b:c1:01:43:85:4f:28:f1:07:16:
89:e6:14:b6:fd:63:65:e2:f8:dc:44:39:06:4f:bd:
83:dc:ff:94:0d:ea:e3:6e:94:66:2a:84:b5:c1:9f:
3a:6a:c2:39:10:82:a4:f7:de:1e:84:0b:f8:e3:54:
3a:d0:0e:ec:b1:ca:98:e3:6b:ea:85:a0:37:7a:46:
3b:3a:a1:d4:86:46:1b:12:06:ed:cd:e7:14:2a:81:
11:d5:b2:1b:50:15:b0:e8:af:34:42:1f:5d:a8:47:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:D8:05:E1:C5:A9:97:11:6A:1C:11:94:75:EF:B8:FB:D3:D3:32
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/1kPYBeHFqZcRahwRlHXvuPvT0zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:11:72:10:78:c2:d1:fb:51:02:bb:93:70:b6:fa:8f:79:05:
63:5a:38:93:8b:a8:ee:f9:ed:e3:ac:31:fb:77:b4:12:83:fa:
4c:ff:19:16:32:98:5b:fd:57:38:73:6f:58:0a:db:a2:e3:45:
93:fc:95:5f:f4:70:56:13:71:ab:22:3c:13:b9:80:26:5b:ab:
7d:45:90:e1:6f:51:b9:cc:13:33:81:cf:a5:11:02:c4:e0:f5:
ae:f2:4a:bb:ac:86:7f:6a:b1:5a:51:df:e9:a6:df:b5:13:93:
38:95:b7:17:65:cb:30:8c:61:81:22:31:17:63:1e:2c:e5:0a:
5a:e1:db:be:2b:b1:59:86:db:c7:f0:b6:66:e9:c8:d6:a3:70:
6a:9a:11:95:13:e5:57:83:d7:71:37:90:99:e9:0d:b5:e5:4c:
83:61:d5:c6:c9:c9:55:9f:48:be:db:dd:8b:0f:8c:59:c4:ef:
90:06:88:76:d3:71:58:8b:10:61:b6:cd:84:59:31:8d:b2:1f:
4a:f8:70:12:4f:f2:5e:b5:f0:8c:10:9d:4d:0b:92:c4:c9:f5:
84:bc:47:6d:d5:05:b9:30:d4:49:8b:bf:23:e6:c0:da:f1:21:
88:bb:dd:6a:fd:80:f9:35:1e:c7:28:9f:24:b8:50:ab:c8:1f:
31:9d:56:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGvh39Mx2hhZ0VoGBIhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYzg1OGU1MDg1NjM1NDY4NGE1ZDA0YTNlY2MzNTkyNTgw
ZDU0OGQwHhcNMjUwMTAyMTM1MDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjQzZDgwNWUxYzVhOTk3MTE2YTFjMTE5NDc1ZWZiOGZiZDNkMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzY/LGdKkz2SiqedS8xJodNLuQFI
DZB0PJQPzg4ihfCHTcCETp1euN8J9PKKSBGrHe3d+BOoArUBvHvvenPGBoZgHHRI
Pi/9Ikk/bzkEieaEq79CQ8CP8csvgx7YUfgpBr/YfnaDbyZXRoap5WmD5zmbWHg0
QD53hQMcu9qas2arhD6qnWFWXaF4TlSWt5BCMxGbH8NuhoDQ6hvBAUOFTyjxBxaJ
5hS2/WNl4vjcRDkGT72D3P+UDerjbpRmKoS1wZ86asI5EIKk994ehAv441Q60A7s
scqY42vqhaA3ekY7OqHUhkYbEgbtzecUKoER1bIbUBWw6K80Qh9dqEdBHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZD2AXhxamXEWocEZR177j709MyMB8GA1UdIwQY
MBaAFEvIWOUIVjVGhKXQSj7MNZJYDVSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQt
M2Y0ZWY4MWEyZTUzLzEvMWtQWUJlSEZxWmNSYWh3UmxIWHZ1UHZUMHpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQtM2Y0ZWY4MWEyZTUz
LzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueWFMA0G
CSqGSIb3DQEBCwUAA4IBAQAtEXIQeMLR+1ECu5NwtvqPeQVjWjiTi6ju+e3jrDH7
d7QSg/pM/xkWMphb/Vc4c29YCtui40WT/JVf9HBWE3GrIjwTuYAmW6t9RZDhb1G5
zBMzgc+lEQLE4PWu8kq7rIZ/arFaUd/ppt+1E5M4lbcXZcswjGGBIjEXYx4s5Qpa
4du+K7FZhtvH8LZm6cjWo3BqmhGVE+VXg9dxN5CZ6Q215UyDYdXGyclVn0i+292L
D4xZxO+QBoh203FYixBhts2EWTGNsh9K+HAST/JetfCMEJ1NC5LEyfWEvEdt1QW5
MNRJi78j5sDa8SGIu91q/YD5NR7HKJ8kuFCryB8xnVZB
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:37:04 2025 by rpki-client