Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/SWoEFelEatU_dibcF-_TT8FcqBU.roa
File: SWoEFelEatU_dibcF-_TT8FcqBU.roa (raw, json)
Hash identifier: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=
Subject key identifier: 49:6A:04:15:E9:44:6A:D5:3F:76:26:DC:17:EF:D3:4F:C1:5C:A8:15
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019426D9AF868A7C8307FD474E6561DF027C
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/SWoEFelEatU_dibcF-_TT8FcqBU.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197722
IP address blocks: 185.157.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:af:86:8a:7c:83:07:fd:47:4e:65:61:df:02:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=496a0415e9446ad53f7626dc17efd34fc15ca815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:ca:58:1a:37:ce:ca:b6:25:d4:79:26:15:
41:82:da:cb:f0:b0:40:cb:b5:a1:36:14:a2:15:99:
1f:10:0a:94:f9:9e:89:92:7a:46:4b:87:a7:b0:b5:
e4:60:b1:f8:c1:bb:eb:33:a6:85:ef:36:7c:e4:3b:
7e:49:0b:e1:8e:1a:a1:2a:1b:50:59:53:1f:19:cd:
cb:d3:c7:d3:f0:1a:a5:08:70:3e:23:e2:21:b4:73:
48:eb:a2:62:5d:83:12:ff:d0:cb:d3:08:23:88:18:
2f:60:31:f4:76:08:5e:4f:9c:97:12:7c:2b:d8:d8:
c9:5e:33:37:7b:50:66:64:b5:1e:0f:de:a7:57:98:
34:64:d9:15:9f:5f:1a:bc:11:1b:6c:5c:bb:50:ac:
8f:ff:44:04:80:bf:78:39:47:6b:57:b8:30:0e:df:
26:d0:8f:57:28:81:8e:d9:fd:a7:38:30:1a:b3:04:
47:b6:49:5f:9c:a0:47:6e:5d:1a:7a:e2:d5:ea:1c:
a3:00:32:0b:b3:61:c4:36:07:af:cd:d2:72:6b:4a:
25:d7:9c:f1:71:f7:c1:40:57:14:61:18:2e:f0:0b:
9b:f1:d1:40:29:06:4e:bf:26:1c:6a:00:70:93:58:
13:c0:84:5b:b5:b9:a4:8a:df:2c:b1:32:c9:6e:d6:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:04:15:E9:44:6A:D5:3F:76:26:DC:17:EF:D3:4F:C1:5C:A8:15
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/SWoEFelEatU_dibcF-_TT8FcqBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.92.0/22
Signature Algorithm: sha256WithRSAEncryption
00:4d:c9:1d:1b:fb:16:06:f3:56:e2:54:b6:ef:83:19:ca:8a:
b4:6c:f5:d7:97:48:e4:f7:1e:fb:c5:71:6c:8a:11:d7:ca:36:
87:18:26:cd:4a:22:d7:bf:48:af:a3:e3:b0:f7:b2:a8:f6:d5:
eb:38:7d:a6:18:d8:54:f8:d6:28:ab:a5:62:95:2b:36:ae:5f:
6e:08:ff:0e:10:4d:b0:54:36:06:f0:b6:b7:3d:78:9a:da:14:
dd:ee:4a:22:dc:ce:27:d1:97:c8:bb:c9:3f:17:b2:5f:13:2a:
f1:d9:82:4a:9e:b4:d0:8c:d4:2e:da:01:5a:33:14:6d:87:e4:
23:a9:0f:30:8b:99:c6:3c:34:4f:b2:5a:d9:a5:cc:fe:dd:bd:
f1:15:5c:79:1f:f6:9d:34:69:b8:ca:d7:36:f0:60:4e:4d:97:
8e:93:83:92:fd:ad:dd:09:a4:2e:d4:79:08:f7:59:9d:25:25:
e5:45:8b:df:bd:5a:4b:b4:b3:ef:93:e6:d7:7d:45:5b:eb:db:
71:10:94:66:3d:2c:36:ab:40:22:0a:13:02:45:64:05:0d:e1:
53:e5:8c:d9:71:34:b5:98:c2:3f:ba:b2:f9:96:d1:9a:dc:79:
a7:45:1e:31:6d:df:72:57:02:e1:29:bf:48:5d:26:46:86:0a:
72:52:39:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2a+GinyDB/1HTmVh3wJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3
MDZjZTIwHhcNMjUwMTAyMTE0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTZhMDQxNWU5NDQ2YWQ1M2Y3NjI2ZGMxN2VmZDM0ZmMxNWNhODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25PKWBo3zsq2JdR5JhVBgtrL8LBA
y7WhNhSiFZkfEAqU+Z6JknpGS4ensLXkYLH4wbvrM6aF7zZ85Dt+SQvhjhqhKhtQ
WVMfGc3L08fT8BqlCHA+I+IhtHNI66JiXYMS/9DL0wgjiBgvYDH0dgheT5yXEnwr
2NjJXjM3e1BmZLUeD96nV5g0ZNkVn18avBEbbFy7UKyP/0QEgL94OUdrV7gwDt8m
0I9XKIGO2f2nODAaswRHtklfnKBHbl0aeuLV6hyjADILs2HENgevzdJya0ol15zx
cffBQFcUYRgu8Aub8dFAKQZOvyYcagBwk1gTwIRbtbmkit8ssTLJbtYWTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFElqBBXpRGrVP3Ym3Bfv00/BXKgVMB8GA1UdIwQY
MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt
MDZhODEwYWY4ZDM0LzEvU1dvRUZlbEVhdFVfZGliY0YtX1RUOEZjcUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0
LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ1cMA0G
CSqGSIb3DQEBCwUAA4IBAQAATckdG/sWBvNW4lS274MZyoq0bPXXl0jk9x77xXFs
ihHXyjaHGCbNSiLXv0ivo+Ow97Ko9tXrOH2mGNhU+NYoq6VilSs2rl9uCP8OEE2w
VDYG8La3PXia2hTd7koi3M4n0ZfIu8k/F7JfEyrx2YJKnrTQjNQu2gFaMxRth+Qj
qQ8wi5nGPDRPslrZpcz+3b3xFVx5H/adNGm4ytc28GBOTZeOk4OS/a3dCaQu1HkI
91mdJSXlRYvfvVpLtLPvk+bXfUVb69txEJRmPSw2q0AiChMCRWQFDeFT5YzZcTS1
mMI/urL5ltGa3HmnRR4xbd9yVwLhKb9IXSZGhgpyUjmU
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:03 2025 by rpki-client