Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/mLoigfB9vrInWq3nJ0J7Wxmf0t4.roa
File: mLoigfB9vrInWq3nJ0J7Wxmf0t4.roa (raw, json)
Hash identifier: 4FwhfGdWmlyBhnx1X+ZJalRnXOeqaX7xZDQnuMN3V5I=
Subject key identifier: 98:BA:22:81:F0:7D:BE:B2:27:5A:AD:E7:27:42:7B:5B:19:9F:D2:DE
Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial: 019427B5E09A8300BE61687953BAA47762E2
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/mLoigfB9vrInWq3nJ0J7Wxmf0t4.roa
Signing time: Thu 02 Jan 2025 15:50:18 +0000
ROA not before: Thu 02 Jan 2025 15:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207827
IP address blocks: 185.180.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e0:9a:83:00:be:61:68:79:53:ba:a4:77:62:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98ba2281f07dbeb2275aade727427b5b199fd2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1d:8e:a5:c9:e7:86:27:e2:34:92:df:68:73:
2d:4b:e3:c6:35:49:b9:66:e4:f4:7c:ab:29:4d:f0:
ef:ab:75:96:aa:92:a1:42:c3:db:7b:ca:16:8b:32:
33:cf:e3:9f:1c:67:8e:cf:00:d0:b3:06:ec:78:21:
7d:67:a5:d1:1c:75:49:a5:19:8e:c1:89:ca:b5:ea:
dd:fc:59:8d:3a:70:f0:22:d5:71:5e:7d:f0:cd:2d:
0f:f2:77:40:53:3d:3c:8f:73:b4:f7:88:02:ee:e9:
8f:f8:5c:2a:14:7a:2a:38:f2:8e:1e:60:90:b5:bb:
13:84:3b:61:e7:38:5f:ab:53:91:31:0c:c5:f5:e4:
ab:f8:1d:61:ea:3a:3c:1b:01:80:93:a9:ef:0b:ae:
34:15:37:e1:14:40:d3:af:4b:c3:83:3c:8d:5f:fc:
d9:d8:34:be:07:5c:ce:fe:1b:d7:a9:36:6a:0d:f3:
60:69:a7:61:0a:09:ae:1d:23:83:c4:20:d2:59:04:
58:8c:d4:2f:a2:85:d9:a5:ef:66:db:a5:17:e9:b2:
bf:8b:93:f4:37:03:c8:cf:86:4f:93:e7:e3:ea:87:
69:50:30:90:67:cc:d2:0e:cd:73:3b:ce:2f:39:b2:
99:92:5c:e4:50:99:75:14:25:37:f0:dc:97:df:0b:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BA:22:81:F0:7D:BE:B2:27:5A:AD:E7:27:42:7B:5B:19:9F:D2:DE
X509v3 Authority Key Identifier:
keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/mLoigfB9vrInWq3nJ0J7Wxmf0t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.174.0/23
Signature Algorithm: sha256WithRSAEncryption
91:e1:4e:5c:af:44:69:b2:23:db:b7:df:3e:0e:b0:d1:c6:65:
82:00:fc:e0:ce:a6:4c:e5:6a:35:29:c4:d4:17:4d:02:38:43:
a6:62:bd:bd:e2:85:0e:fb:f6:f2:b5:82:d0:48:ef:e0:f3:e7:
73:0d:2a:41:ac:44:a1:df:07:b7:79:87:3f:02:49:22:92:d5:
a4:94:42:32:bd:a0:c0:2a:54:59:ef:c4:82:8d:aa:29:23:85:
df:79:88:52:0d:21:ed:b9:09:c8:27:b9:a3:10:7b:a9:fa:98:
77:9c:f0:99:c2:37:d1:ea:ab:91:85:a5:54:30:d0:98:7a:bc:
08:43:28:1b:03:0c:07:76:6a:fa:3b:17:7c:71:67:c8:86:16:
c7:46:e7:97:c9:7f:b2:0f:02:1c:ce:f2:b3:49:a5:0d:36:ee:
ff:77:1d:1a:bf:cf:2b:14:51:67:b9:47:75:7d:8a:6c:1f:ea:
48:a7:af:15:19:df:11:69:a6:a5:d7:8c:d8:11:61:dc:e0:6a:
3f:4e:a4:c4:cc:c3:d4:b8:d8:c1:f7:63:08:17:b7:9f:5a:2d:
85:26:3c:8c:a7:43:d4:7b:59:8a:ff:d1:e2:7c:8c:49:58:d0:
0d:b3:71:a5:8d:79:57:c9:98:6c:96:2c:c8:35:c5:62:86:8a:
e5:e2:11:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnteCagwC+YWh5U7qkd2LiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTVlZmJmNjU4OTcxNjBkNTVhNTJkYzNhMjJjMDE3ODc2
Y2QwNmMwHhcNMjUwMTAyMTU1MDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGJhMjI4MWYwN2RiZWIyMjc1YWFkZTcyNzQyN2I1YjE5OWZkMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B2OpcnnhifiNJLfaHMtS+PGNUm5
ZuT0fKspTfDvq3WWqpKhQsPbe8oWizIzz+OfHGeOzwDQswbseCF9Z6XRHHVJpRmO
wYnKterd/FmNOnDwItVxXn3wzS0P8ndAUz08j3O094gC7umP+FwqFHoqOPKOHmCQ
tbsThDth5zhfq1ORMQzF9eSr+B1h6jo8GwGAk6nvC640FTfhFEDTr0vDgzyNX/zZ
2DS+B1zO/hvXqTZqDfNgaadhCgmuHSODxCDSWQRYjNQvooXZpe9m26UX6bK/i5P0
NwPIz4ZPk+fj6odpUDCQZ8zSDs1zO84vObKZklzkUJl1FCU38NyX3wshhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJi6IoHwfb6yJ1qt5ydCe1sZn9LeMB8GA1UdIwQY
MBaAFB7l779liXFg1VpS3DoiwBeHbNBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUt
N2MwZGI3YmFlMTM1LzEvbUxvaWdmQjl2ckluV3EzbkowSjdXeG1mMHQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUtN2MwZGI3YmFlMTM1
LzEvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubSuMA0G
CSqGSIb3DQEBCwUAA4IBAQCR4U5cr0RpsiPbt98+DrDRxmWCAPzgzqZM5Wo1KcTU
F00COEOmYr294oUO+/bytYLQSO/g8+dzDSpBrESh3we3eYc/AkkiktWklEIyvaDA
KlRZ78SCjaopI4XfeYhSDSHtuQnIJ7mjEHup+ph3nPCZwjfR6quRhaVUMNCYerwI
QygbAwwHdmr6Oxd8cWfIhhbHRueXyX+yDwIczvKzSaUNNu7/dx0av88rFFFnuUd1
fYpsH+pIp68VGd8Raaal14zYEWHc4Go/TqTEzMPUuNjB92MIF7efWi2FJjyMp0PU
e1mK/9HifIxJWNANs3GljXlXyZhslizINcVihorl4hET
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:25 2025 by rpki-client