Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa
File: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (raw, json)
Hash identifier: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=
Subject key identifier: 23:41:FB:A9:2A:90:D0:0C:CB:49:2A:62:5E:A8:87:D4:44:22:EF:E4
Certificate issuer: /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial: 019421B1919D59F307C6F4BD28992577D09E
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49024
IP address blocks: 185.154.28.0/22 maxlen: 24
2a02:c49::/32 maxlen: 32
2a02:c4a::/31 maxlen: 31
2a02:c4a::/32 maxlen: 32
2a02:c4c::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:91:9d:59:f3:07:c6:f4:bd:28:99:25:77:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2341fba92a90d00ccb492a625ea887d44422efe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:98:20:74:b4:2b:02:1a:14:75:ea:78:13:
f5:ba:07:85:ec:01:71:f9:85:a8:dd:9d:33:04:12:
14:a0:1e:10:c7:c8:93:b9:97:cc:2e:6a:5c:4c:94:
75:65:1f:4c:2c:5c:18:95:b7:5d:b7:72:0f:6c:1f:
32:cf:26:b9:0c:0d:c3:f5:3e:75:aa:a9:76:42:9f:
9b:e6:e5:c0:7c:ab:c7:2a:5a:08:bf:02:4b:ab:23:
19:67:c3:a1:d5:da:c4:9c:30:d2:aa:ad:d0:24:84:
12:87:72:01:48:06:ee:3c:6f:c2:c1:fa:37:ef:bb:
18:4f:e0:cf:2d:bf:90:5c:93:92:0e:fb:30:3c:53:
c9:17:70:f9:c1:48:21:60:10:0b:3e:f3:a9:ec:ce:
8c:1d:52:30:5a:72:e3:c2:66:06:8a:6b:6a:7b:b1:
d4:9c:be:83:35:a8:0f:72:1e:36:43:cf:d7:83:d7:
48:81:9c:13:be:48:e4:40:d1:a8:1a:b7:c1:03:f2:
38:ef:51:a6:22:60:f2:10:3d:66:38:14:d3:03:00:
81:a1:65:26:60:c1:27:86:07:bb:6a:33:02:3d:a3:
40:28:bc:87:cf:00:37:44:36:45:f8:46:8c:19:fe:
6e:cb:be:09:f6:fc:4e:b7:61:f4:34:2d:65:e2:86:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:41:FB:A9:2A:90:D0:0C:CB:49:2A:62:5E:A8:87:D4:44:22:EF:E4
X509v3 Authority Key Identifier:
keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.28.0/22
IPv6:
2a02:c49::-2a02:c4f:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:cd:da:4e:01:83:be:b5:ac:2e:bb:28:d9:84:cf:bb:dc:b8:
ce:95:8b:71:1f:ad:d3:a1:8e:30:6e:6d:a7:5d:d1:fc:08:00:
60:b7:88:4f:19:12:e9:f0:98:23:ce:d5:04:b5:9b:eb:43:f6:
58:98:fd:0f:99:fd:5e:75:a3:f3:ce:1f:9b:56:d1:20:a0:35:
cb:c3:0e:5b:ac:23:55:77:8f:75:76:20:72:83:95:6e:d6:a1:
0d:8e:f8:05:ac:39:19:f3:8d:f5:c4:95:ee:77:55:e3:d8:14:
61:2b:83:f4:61:92:33:b3:71:99:e5:b4:b5:a5:1b:7b:94:18:
33:1b:27:ea:2e:0e:3e:bd:8d:72:61:31:74:fd:69:0d:12:9f:
38:29:75:c5:bf:de:fb:9d:d2:b2:a1:09:4b:75:08:c3:0a:fa:
a3:6f:fd:71:ca:e0:38:38:0f:80:e6:12:22:62:67:05:5e:f5:
49:ee:fd:da:b2:36:8c:75:d3:db:ca:31:d3:3b:4e:48:96:22:
fc:e5:a3:4e:22:17:f6:d1:5e:d9:c4:4d:2f:f1:6f:df:34:02:
e8:17:15:d3:46:09:d9:61:9e:53:2a:6a:c2:1e:34:c2:0c:f0:
bf:a8:c2:ad:e5:45:1a:cf:a5:17:bb:46:40:b0:23:e2:a5:b4:
b0:ac:90:38
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQhsZGdWfMHxvS9KJkld9CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMmY1OWVjYTY0MjkzZDJjOTE2ZTdhYmIwOWUwNTJlMmNi
MWNiNjMwHhcNMjUwMTAxMTE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzQxZmJhOTJhOTBkMDBjY2I0OTJhNjI1ZWE4ODdkNDQ0MjJlZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXiYIHS0KwIaFHXqeBP1ugeF7AFx
+YWo3Z0zBBIUoB4Qx8iTuZfMLmpcTJR1ZR9MLFwYlbddt3IPbB8yzya5DA3D9T51
qql2Qp+b5uXAfKvHKloIvwJLqyMZZ8Oh1drEnDDSqq3QJIQSh3IBSAbuPG/Cwfo3
77sYT+DPLb+QXJOSDvswPFPJF3D5wUghYBALPvOp7M6MHVIwWnLjwmYGimtqe7HU
nL6DNagPch42Q8/Xg9dIgZwTvkjkQNGoGrfBA/I471GmImDyED1mOBTTAwCBoWUm
YMEnhge7ajMCPaNAKLyHzwA3RDZF+EaMGf5uy74J9vxOt2H0NC1l4obonwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCNB+6kqkNAMy0kqYl6oh9REIu/kMB8GA1UdIwQY
MBaAFMAvWeymQpPSyRbnq7CeBS4ssctjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81OGIyMGEtNDUyYi00ZjJiLWFhYjUt
N2QxM2MwNzJkOTZiLzEvSTBIN3FTcVEwQXpMU1NwaVhxaUgxRVFpNy1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS81OGIyMGEtNDUyYi00ZjJiLWFhYjUtN2QxM2MwNzJkOTZi
LzEvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuZocMBYE
AgACMBAwDgMFACoCDEkDBQQqAgxAMA0GCSqGSIb3DQEBCwUAA4IBAQA0zdpOAYO+
tawuuyjZhM+73LjOlYtxH63ToY4wbm2nXdH8CABgt4hPGRLp8JgjztUEtZvrQ/ZY
mP0Pmf1edaPzzh+bVtEgoDXLww5brCNVd491diByg5Vu1qENjvgFrDkZ8431xJXu
d1Xj2BRhK4P0YZIzs3GZ5bS1pRt7lBgzGyfqLg4+vY1yYTF0/WkNEp84KXXFv977
ndKyoQlLdQjDCvqjb/1xyuA4OA+A5hIiYmcFXvVJ7v3asjaMddPbyjHTO05IliL8
5aNOIhf20V7ZxE0v8W/fNALoFxXTRgnZYZ5TKmrCHjTCDPC/qMKt5UUaz6UXu0ZA
sCPipbSwrJA4
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:49 2025 by rpki-client