Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/h-YJMMunIS0_gIZ5p26lgKRQyKc.roa
File: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (raw, json)
Hash identifier: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=
Subject key identifier: 87:E6:09:30:CB:A7:21:2D:3F:80:86:79:A7:6E:A5:80:A4:50:C8:A7
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 0194266C3B893A9EE45CA82DF54663ECF848
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/h-YJMMunIS0_gIZ5p26lgKRQyKc.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51580
IP address blocks: 185.180.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3b:89:3a:9e:e4:5c:a8:2d:f5:46:63:ec:f8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87e60930cba7212d3f808679a76ea580a450c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:a8:3d:f1:86:cf:06:2d:98:cd:99:03:54:
0e:48:b7:c7:a6:5f:c8:9a:ae:6e:b5:0a:e0:1c:0b:
6b:61:13:1e:f8:ba:f2:0d:d8:9c:63:34:e8:8a:16:
9a:42:68:08:e2:27:71:47:c5:12:04:4f:d0:00:eb:
50:96:94:ad:2b:a6:f4:78:88:8f:7d:08:82:91:73:
d8:5a:80:7f:57:ee:09:81:26:a6:bc:cf:b2:75:1a:
32:0e:af:4c:07:94:82:b5:56:23:75:5e:bf:30:dc:
52:6b:16:5b:4f:47:6f:86:a2:b1:5c:2d:76:5e:c8:
fe:cc:a4:79:ce:25:39:03:4d:bd:f8:6a:c8:89:6c:
78:a8:92:a5:3d:e0:f5:76:20:49:e3:c0:71:8d:e8:
a9:73:cb:b0:a0:ce:d3:74:20:9a:aa:db:ee:a5:de:
e4:85:00:2e:64:65:85:e7:cd:c7:4c:5b:06:11:3a:
d7:08:94:fd:75:c4:f6:45:de:88:91:a6:3b:1f:2d:
db:41:ac:90:ed:a3:ba:cf:95:a1:47:17:6a:8f:ac:
d8:87:58:de:40:6d:83:f1:73:76:03:41:9a:c0:d8:
c3:fa:8e:ec:bb:9b:f0:5a:2a:cd:cc:c8:b3:4a:c7:
7d:3e:b1:54:c1:36:b2:65:33:8e:ec:b9:5b:39:91:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E6:09:30:CB:A7:21:2D:3F:80:86:79:A7:6E:A5:80:A4:50:C8:A7
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/h-YJMMunIS0_gIZ5p26lgKRQyKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.182.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a5:ee:18:b9:43:fd:b0:32:23:bc:a8:0c:cb:46:bd:17:6f:
1d:ed:d3:38:11:6c:88:7a:8f:fe:70:90:57:17:df:9b:0a:47:
bf:14:24:34:c2:33:7a:dc:4f:ef:7d:8f:b7:d4:4c:88:ba:ca:
f2:63:92:ae:77:19:c0:33:a9:df:3f:14:42:51:54:91:77:60:
a9:28:83:e0:ad:57:8f:06:99:bd:ed:3d:26:22:d9:9f:3d:5c:
47:c2:65:12:5f:9f:f3:5d:42:a6:cf:bc:2f:8c:11:ef:cc:82:
15:dd:72:b1:8c:71:76:98:41:1f:79:41:7a:6c:3a:a3:3f:9e:
7c:74:4a:23:9a:45:ee:dd:60:c2:99:7f:15:72:84:b0:4c:ba:
50:e5:e7:64:82:5f:0b:3a:e1:2c:2b:f6:0f:9b:64:4f:a4:97:
39:38:60:d3:59:50:2b:39:67:fc:a6:a3:5c:aa:b5:49:c8:13:
6b:62:a5:31:32:32:a4:4b:8a:e9:99:4a:66:b3:04:e4:a1:f5:
15:e9:f0:13:a6:58:b9:e7:0d:72:db:ab:a7:b8:f4:bb:3f:49:
67:8c:0e:96:44:e9:28:15:a6:f1:63:98:da:fe:07:de:d3:f6:
e1:d7:f6:4e:35:80:1c:ff:9f:a4:bd:20:58:ce:1c:72:e0:74:
08:58:13:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbDuJOp7kXKgt9UZj7PhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmJhYTYwMTIzNmFiOWJlYTI5ZjgwN2E2NjkyMGVkNTY1
NmExOTYwHhcNMjUwMTAyMDk1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2U2MDkzMGNiYTcyMTJkM2Y4MDg2NzlhNzZlYTU4MGE0NTBjOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFqoPfGGzwYtmM2ZA1QOSLfHpl/I
mq5utQrgHAtrYRMe+LryDdicYzToihaaQmgI4idxR8USBE/QAOtQlpStK6b0eIiP
fQiCkXPYWoB/V+4JgSamvM+ydRoyDq9MB5SCtVYjdV6/MNxSaxZbT0dvhqKxXC12
Xsj+zKR5ziU5A029+GrIiWx4qJKlPeD1diBJ48Bxjeipc8uwoM7TdCCaqtvupd7k
hQAuZGWF583HTFsGETrXCJT9dcT2Rd6IkaY7Hy3bQayQ7aO6z5WhRxdqj6zYh1je
QG2D8XN2A0GawNjD+o7su5vwWirNzMizSsd9PrFUwTayZTOO7LlbOZF/CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIfmCTDLpyEtP4CGeadupYCkUMinMB8GA1UdIwQY
MBaAFNxrqmASNqub6in4B6ZpIO1WVqGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEt
MzRhMTIzN2YxNjcwLzEvaC1ZSk1NdW5JUzBfZ0laNXAyNmxnS1JReUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEtMzRhMTIzN2YxNjcw
LzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubS2MA0G
CSqGSIb3DQEBCwUAA4IBAQADpe4YuUP9sDIjvKgMy0a9F28d7dM4EWyIeo/+cJBX
F9+bCke/FCQ0wjN63E/vfY+31EyIusryY5KudxnAM6nfPxRCUVSRd2CpKIPgrVeP
Bpm97T0mItmfPVxHwmUSX5/zXUKmz7wvjBHvzIIV3XKxjHF2mEEfeUF6bDqjP558
dEojmkXu3WDCmX8VcoSwTLpQ5edkgl8LOuEsK/YPm2RPpJc5OGDTWVArOWf8pqNc
qrVJyBNrYqUxMjKkS4rpmUpmswTkofUV6fATpli55w1y26unuPS7P0lnjA6WROko
FabxY5ja/gfe0/bh1/ZONYAc/5+kvSBYzhxy4HQIWBMa
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:42 2025 by rpki-client