Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/I709bbaWjjvBjycgl5Y9TKJLvE0.roa
File: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (raw, json)
Hash identifier: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=
Subject key identifier: 23:BD:3D:6D:B6:96:8E:3B:C1:8F:27:20:97:96:3D:4C:A2:4B:BC:4D
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 019426D999B257D3D9B3A4435E9F7769EA4F
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/I709bbaWjjvBjycgl5Y9TKJLvE0.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61207
IP address blocks: 185.41.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:99:b2:57:d3:d9:b3:a4:43:5e:9f:77:69:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23bd3d6db6968e3bc18f272097963d4ca24bbc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:01:47:ce:9f:f2:72:e3:a6:ce:9c:85:67:
97:fd:95:23:8d:5e:2d:20:1c:67:a5:eb:4e:19:8c:
28:32:84:67:f2:e2:89:c6:8c:05:0a:ec:eb:ba:bb:
a2:32:00:cd:c6:10:2a:17:e6:90:09:bb:4f:25:6b:
76:dc:2f:19:53:35:81:e7:36:ca:06:4b:7f:2b:08:
4e:2d:16:fc:f7:b5:a1:44:0c:c8:41:dd:7d:46:bb:
60:d9:68:7f:98:49:0d:87:52:2a:50:78:a3:6c:ac:
27:f0:ae:23:76:bb:21:d2:36:6b:9e:28:17:00:41:
15:5b:8d:1d:98:e4:0d:c6:df:21:9b:2e:0e:fe:de:
49:72:d6:92:3b:06:9c:08:58:61:c0:50:6f:97:86:
1d:13:bd:6f:ec:82:17:ea:09:bd:ea:44:cb:39:7c:
6c:b4:3d:29:7e:93:0e:36:57:e0:be:7b:91:37:f5:
64:7b:5d:1d:51:4e:f7:99:4c:54:5d:6a:9a:d5:81:
25:f8:d8:2b:27:d2:00:03:48:ec:a2:22:f5:cb:b3:
86:1f:e6:45:d0:95:07:57:b4:05:93:15:d9:75:6b:
1e:2a:44:cd:39:11:17:3e:5c:56:11:87:56:e5:2b:
d6:94:f3:a0:05:f0:67:a1:19:b3:47:b8:6f:77:a3:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:3D:6D:B6:96:8E:3B:C1:8F:27:20:97:96:3D:4C:A2:4B:BC:4D
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/I709bbaWjjvBjycgl5Y9TKJLvE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e4:3d:51:ae:df:db:50:e8:cd:d9:ec:98:58:7b:83:8f:c4:
2a:27:64:5d:e2:d9:a1:a7:f0:7e:ee:9c:ad:6d:53:c6:0b:a1:
91:81:99:91:8c:39:e5:4f:0d:e9:a5:df:67:9e:ac:e6:61:ce:
58:f4:64:51:49:c8:38:81:3d:57:25:1f:56:0a:d5:46:28:f9:
43:f7:5c:b5:fb:aa:ca:b1:79:74:a7:41:76:e2:66:11:f0:ab:
da:c0:07:68:62:5c:d9:ec:d9:71:93:2f:df:af:3d:e6:c4:21:
24:df:aa:66:b3:c2:2b:86:aa:b2:72:9b:1a:9e:a0:b8:d7:8e:
f3:d6:74:8d:36:48:8a:8b:b1:b1:1d:20:2d:21:6b:4a:53:b0:
87:84:31:16:b7:8a:9b:b7:00:bc:ce:39:34:2a:93:13:c6:a1:
95:23:43:a0:2a:fc:29:ff:dc:a4:6e:0e:80:39:75:9e:9c:d3:
ff:21:76:b3:7f:41:bb:3d:5c:18:b3:f5:6f:8e:13:f4:d3:1e:
a3:30:5d:81:ba:54:3a:6b:cb:4f:62:69:6f:e0:d7:2b:8a:71:
96:02:fc:e5:3f:a6:2e:44:64:dd:c2:e2:eb:93:25:24:ac:bf:
0a:50:ec:90:bb:11:3b:c4:d3:b2:1a:67:70:b4:32:47:da:62:
ab:9a:29:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2ZmyV9PZs6RDXp93aepPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz
ZWM1YzIwHhcNMjUwMTAyMTE0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2JkM2Q2ZGI2OTY4ZTNiYzE4ZjI3MjA5Nzk2M2Q0Y2EyNGJiYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j0BR86f8nLjps6chWeX/ZUjjV4t
IBxnpetOGYwoMoRn8uKJxowFCuzruruiMgDNxhAqF+aQCbtPJWt23C8ZUzWB5zbK
Bkt/KwhOLRb897WhRAzIQd19Rrtg2Wh/mEkNh1IqUHijbKwn8K4jdrsh0jZrnigX
AEEVW40dmOQNxt8hmy4O/t5JctaSOwacCFhhwFBvl4YdE71v7IIX6gm96kTLOXxs
tD0pfpMONlfgvnuRN/Vke10dUU73mUxUXWqa1YEl+NgrJ9IAA0jsoiL1y7OGH+ZF
0JUHV7QFkxXZdWseKkTNOREXPlxWEYdW5SvWlPOgBfBnoRmzR7hvd6PpMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCO9PW22lo47wY8nIJeWPUyiS7xNMB8GA1UdIwQY
MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt
MzA1NjU4ZjkxNjM1LzEvSTcwOWJiYVdqanZCanljZ2w1WTlUS0pMdkUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1
LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSmUMA0G
CSqGSIb3DQEBCwUAA4IBAQAt5D1Rrt/bUOjN2eyYWHuDj8QqJ2Rd4tmhp/B+7pyt
bVPGC6GRgZmRjDnlTw3ppd9nnqzmYc5Y9GRRScg4gT1XJR9WCtVGKPlD91y1+6rK
sXl0p0F24mYR8KvawAdoYlzZ7Nlxky/frz3mxCEk36pms8IrhqqycpsanqC4147z
1nSNNkiKi7GxHSAtIWtKU7CHhDEWt4qbtwC8zjk0KpMTxqGVI0OgKvwp/9ykbg6A
OXWenNP/IXazf0G7PVwYs/VvjhP00x6jMF2BulQ6a8tPYmlv4NcrinGWAvzlP6Yu
RGTdwuLrkyUkrL8KUOyQuxE7xNOyGmdwtDJH2mKrmikw
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:20:29 2025 by rpki-client