Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/9pQi_NMMFUj3irIeg0-DmdkDCbk.roa
File: 9pQi_NMMFUj3irIeg0-DmdkDCbk.roa (raw, json)
Hash identifier: PFd36o1XR8n7Qanm5GG5TpwQ2+VBH8Rn7+qS0Um/8ws=
Subject key identifier: F6:94:22:FC:D3:0C:15:48:F7:8A:B2:1E:83:4F:83:99:D9:03:09:B9
Certificate issuer: /CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Certificate serial: 0194258E973F22DF655BA14B2FD8C1627A58
Authority key identifier: 1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/9pQi_NMMFUj3irIeg0-DmdkDCbk.roa
Signing time: Thu 02 Jan 2025 05:48:09 +0000
ROA not before: Thu 02 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49784
IP address blocks: 185.12.216.0/22 maxlen: 24
2a03:8940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:97:3f:22:df:65:5b:a1:4b:2f:d8:c1:62:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
Validity
Not Before: Jan 2 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69422fcd30c1548f78ab21e834f8399d90309b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:89:5b:26:16:28:d8:57:86:33:54:4d:7e:
d6:28:05:9c:72:5c:8f:cd:7d:3c:b0:13:15:e8:11:
67:78:3c:5c:39:6d:43:b0:80:07:23:2f:e7:f0:ff:
91:d9:f5:fc:ae:e5:5a:4a:5d:61:a9:5b:19:00:48:
1f:ca:3e:dc:ee:73:fc:fc:62:2b:9e:71:75:62:bb:
1e:cf:d9:55:6c:2a:97:4d:45:09:e5:59:3a:d0:0c:
ac:b2:f6:f1:04:ae:d2:32:f4:d2:83:24:fd:09:2e:
ae:16:85:b8:af:a9:b1:13:17:7f:0a:40:f7:db:de:
c1:a8:81:91:41:26:d6:b3:bc:c8:42:4c:75:3b:12:
f0:3e:4f:f7:99:54:ab:9f:cb:ba:50:be:a3:19:bb:
01:e9:00:eb:8d:45:91:3d:19:38:aa:d7:03:a5:20:
fe:0e:36:1c:51:e6:07:33:9c:f2:61:0a:c6:57:c9:
a1:06:2c:ae:56:67:52:6e:ee:b9:b2:77:d3:a6:ac:
1e:b3:67:7e:31:40:ce:3f:5b:f7:e5:68:3a:af:be:
83:90:84:69:56:f4:a7:d6:6d:47:76:16:8a:55:36:
4d:66:21:01:a7:2e:d4:eb:6b:01:49:af:fe:b8:bb:
ca:02:43:b4:75:be:7c:78:1f:ee:11:7c:cf:dc:96:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:94:22:FC:D3:0C:15:48:F7:8A:B2:1E:83:4F:83:99:D9:03:09:B9
X509v3 Authority Key Identifier:
keyid:1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/9pQi_NMMFUj3irIeg0-DmdkDCbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.216.0/22
IPv6:
2a03:8940::/32
Signature Algorithm: sha256WithRSAEncryption
1e:3b:d3:5f:f0:d5:72:7d:19:f9:8a:8d:37:56:03:91:f0:40:
5d:03:cd:94:ab:76:4a:cf:e9:31:3d:da:68:c8:af:53:85:b9:
cc:c4:74:7f:a7:ff:c1:72:e9:fd:61:8f:d1:82:e8:a3:34:a6:
16:91:e9:47:60:0a:5c:5d:a0:56:5f:65:3e:3b:c9:42:e3:a6:
5c:d0:64:19:eb:b0:39:0f:ef:e3:42:8d:ae:3f:a1:56:93:2b:
56:9b:c6:a4:60:ee:64:fd:95:7e:7a:82:c9:b7:1b:ce:35:de:
06:3c:77:9f:1b:91:3e:e5:34:9f:e0:89:27:2f:2e:9f:6b:9f:
ce:e8:f9:3a:32:60:e3:f5:cd:8f:a2:fc:1c:e5:6d:bf:37:b6:
2c:44:b0:c7:e0:0b:34:65:7b:57:b4:97:6d:a2:91:f7:b4:2c:
a9:63:97:7e:56:3d:aa:7d:82:24:81:98:96:b3:8e:18:f6:06:
66:3a:8b:1f:e6:7e:0b:ef:78:4e:81:7a:b7:c6:48:0b:b5:7c:
a0:1b:b5:95:a0:55:5f:e4:7f:70:50:c3:57:45:27:b6:2e:f2:
bd:c1:c4:8d:0a:e2:0f:b8:f6:a0:aa:d4:36:dd:a0:5a:ee:5c:
42:ff:f6:80:9b:31:b4:ee:cc:36:2f:7b:65:5b:b4:a2:cb:48:
8d:8f:d7:61
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQljpc/It9lW6FLL9jBYnpYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZjUyNjg3NTJjYmI1MjRiY2ZlNGI1YTQ5NzZmZjBmODVk
Mzg5YWYwHhcNMjUwMTAyMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjk0MjJmY2QzMGMxNTQ4Zjc4YWIyMWU4MzRmODM5OWQ5MDMwOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso2JWyYWKNhXhjNUTX7WKAWcclyP
zX08sBMV6BFneDxcOW1DsIAHIy/n8P+R2fX8ruVaSl1hqVsZAEgfyj7c7nP8/GIr
nnF1Yrsez9lVbCqXTUUJ5Vk60AyssvbxBK7SMvTSgyT9CS6uFoW4r6mxExd/CkD3
297BqIGRQSbWs7zIQkx1OxLwPk/3mVSrn8u6UL6jGbsB6QDrjUWRPRk4qtcDpSD+
DjYcUeYHM5zyYQrGV8mhBiyuVmdSbu65snfTpqwes2d+MUDOP1v35Wg6r76DkIRp
VvSn1m1HdhaKVTZNZiEBpy7U62sBSa/+uLvKAkO0db58eB/uEXzP3JZZAwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPaUIvzTDBVI94qyHoNPg5nZAwm5MB8GA1UdIwQY
MBaAFB/1JodSy7UkvP5LWkl2/w+F04mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9VbWgxTEx0U1M4X2t0YVNYYl9ENFhUaWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80YzI3MzQtMTEzOS00YTNmLThmODQt
OTc0NDg4YmNiNzIzLzEvOXBRaV9OTU1GVWozaXJJZWcwLURtZGtEQ2JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy80YzI3MzQtMTEzOS00YTNmLThmODQtOTc0NDg4YmNiNzIz
LzEvSF9VbWgxTEx0U1M4X2t0YVNYYl9ENFhUaWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQzYMA0E
AgACMAcDBQAqA4lAMA0GCSqGSIb3DQEBCwUAA4IBAQAeO9Nf8NVyfRn5io03VgOR
8EBdA82Uq3ZKz+kxPdpoyK9ThbnMxHR/p//Bcun9YY/RguijNKYWkelHYApcXaBW
X2U+O8lC46Zc0GQZ67A5D+/jQo2uP6FWkytWm8akYO5k/ZV+eoLJtxvONd4GPHef
G5E+5TSf4IknLy6fa5/O6Pk6MmDj9c2Povwc5W2/N7YsRLDH4As0ZXtXtJdtopH3
tCypY5d+Vj2qfYIkgZiWs44Y9gZmOosf5n4L73hOgXq3xkgLtXygG7WVoFVf5H9w
UMNXRSe2LvK9wcSNCuIPuPagqtQ23aBa7lxC//aAmzG07sw2L3tlW7Siy0iNj9dh
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:45 2025 by rpki-client