Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/n_McsRwMAppe2QEjAWvImC1dtto.roa
File: n_McsRwMAppe2QEjAWvImC1dtto.roa (raw, json)
Hash identifier: 4gg/YZ3I+XdE5pvPvdQgTIHFrAIC/xo67M5TPSaWEso=
Subject key identifier: 9F:F3:1C:B1:1C:0C:02:9A:5E:D9:01:23:01:6B:C8:98:2D:5D:B6:DA
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 01941FFA273C29151D223FC3C177CEB276BC
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/n_McsRwMAppe2QEjAWvImC1dtto.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202817
IP address blocks: 185.154.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:27:3c:29:15:1d:22:3f:c3:c1:77:ce:b2:76:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ff31cb11c0c029a5ed90123016bc8982d5db6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:50:8a:9d:c4:4b:06:a6:13:e7:ba:05:d3:
56:f8:55:ad:f8:b1:a2:cb:09:02:b9:d2:36:88:01:
75:0e:88:f9:8f:df:50:a2:b4:d3:d4:9a:9c:b0:02:
f5:f9:6f:10:44:f8:d8:25:37:01:25:dc:e7:21:53:
f1:79:10:31:d4:a3:a3:31:6c:19:4b:6f:ea:6f:2c:
d1:49:cc:73:8c:36:af:20:bc:8b:9b:dc:0a:7c:82:
b2:0e:56:44:ad:45:68:be:20:45:e5:0f:b2:88:41:
c4:e0:aa:9c:3e:a8:11:06:54:05:5f:6b:05:50:6a:
00:b6:25:e4:86:c0:a0:7d:f3:de:5d:bc:ac:ae:5c:
d4:aa:cc:bb:ad:62:5e:94:18:95:89:b2:33:db:c2:
6a:3a:21:4b:c2:7b:7d:a2:1b:43:24:0e:fc:86:f2:
65:60:ef:01:41:cf:d3:8a:ab:6b:f5:a3:dc:25:59:
62:d4:c2:f6:df:23:73:c5:ff:d7:c7:e6:d1:b6:48:
e9:8c:e2:ac:74:fb:2a:13:d9:4a:a7:85:fd:d8:8f:
05:eb:4b:2d:ee:e9:22:59:fd:2e:03:3e:81:bc:ff:
e3:8d:4d:47:46:2a:af:bd:e5:af:b4:2f:0e:64:84:
51:02:1c:65:37:72:30:54:e8:89:a1:23:b0:06:2d:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F3:1C:B1:1C:0C:02:9A:5E:D9:01:23:01:6B:C8:98:2D:5D:B6:DA
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/n_McsRwMAppe2QEjAWvImC1dtto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.8.0/22
Signature Algorithm: sha256WithRSAEncryption
51:7c:72:c2:12:5b:6e:fc:81:24:d5:0e:c9:5a:9f:a6:24:06:
b8:9f:37:f7:c7:5f:2b:68:3c:71:0c:20:ce:cb:30:c9:08:dc:
33:a9:a7:a2:10:55:1b:fb:a5:8c:4f:ea:ea:01:c4:43:27:6f:
32:08:45:0a:1c:9b:18:ba:ad:ab:42:7a:68:b1:99:5a:ce:04:
f0:fe:be:ef:fb:15:23:c4:33:54:62:67:4d:fb:88:7a:21:7b:
01:37:e5:b7:2b:ce:22:2f:f7:61:10:19:11:bd:4e:88:58:c5:
3d:25:dc:89:3d:16:f9:e4:af:10:ba:7f:b8:0c:ad:39:42:81:
ce:f1:9c:20:2f:b1:2e:82:8d:0c:98:51:a7:1b:a7:b6:0a:85:
7b:84:df:34:b0:da:9d:cb:0c:18:5a:ac:e9:4b:09:82:54:c8:
4f:18:7c:b1:23:95:74:38:12:ad:43:95:00:e3:90:2a:49:5c:
37:d2:d1:a5:3a:3e:e7:23:7b:5e:50:24:94:76:85:19:7a:a0:
2c:9d:4d:de:a0:1f:2e:b1:a1:66:32:b7:d4:70:69:4d:8e:70:
70:af:20:1e:e8:a3:4c:b0:38:47:61:7f:c7:9a:92:bc:f2:69:
83:63:75:58:eb:77:49:0e:b5:58:c3:76:c2:84:87:bf:b5:da:
b7:f7:a0:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+ic8KRUdIj/DwXfOsna8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzdjZGE3NWY0ZTE1ZTQ4NmRlZTVhNjUwMWNiZTIwMThi
YzBlMGYwHhcNMjUwMTAxMDM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmYzMWNiMTFjMGMwMjlhNWVkOTAxMjMwMTZiYzg5ODJkNWRiNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvJQip3ESwamE+e6BdNW+FWt+LGi
ywkCudI2iAF1Doj5j99QorTT1JqcsAL1+W8QRPjYJTcBJdznIVPxeRAx1KOjMWwZ
S2/qbyzRScxzjDavILyLm9wKfIKyDlZErUVoviBF5Q+yiEHE4KqcPqgRBlQFX2sF
UGoAtiXkhsCgffPeXbysrlzUqsy7rWJelBiVibIz28JqOiFLwnt9ohtDJA78hvJl
YO8BQc/Tiqtr9aPcJVli1ML23yNzxf/Xx+bRtkjpjOKsdPsqE9lKp4X92I8F60st
7ukiWf0uAz6BvP/jjU1HRiqvveWvtC8OZIRRAhxlN3IwVOiJoSOwBi3QbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ/zHLEcDAKaXtkBIwFryJgtXbbaMB8GA1UdIwQY
MBaAFCLHzadfThXkht7lplAcviAYvA4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5Nzgt
NzUxYjE3ZDFjNDM3LzEvbl9NY3NSd01BcHBlMlFFakFXdkltQzFkdHRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5NzgtNzUxYjE3ZDFjNDM3
LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZoIMA0G
CSqGSIb3DQEBCwUAA4IBAQBRfHLCEltu/IEk1Q7JWp+mJAa4nzf3x18raDxxDCDO
yzDJCNwzqaeiEFUb+6WMT+rqAcRDJ28yCEUKHJsYuq2rQnposZlazgTw/r7v+xUj
xDNUYmdN+4h6IXsBN+W3K84iL/dhEBkRvU6IWMU9JdyJPRb55K8Qun+4DK05QoHO
8ZwgL7Eugo0MmFGnG6e2CoV7hN80sNqdywwYWqzpSwmCVMhPGHyxI5V0OBKtQ5UA
45AqSVw30tGlOj7nI3teUCSUdoUZeqAsnU3eoB8usaFmMrfUcGlNjnBwryAe6KNM
sDhHYX/HmpK88mmDY3VY63dJDrVYw3bChIe/tdq396DA
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:01 2025 by rpki-client