Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/ackszuiJCTUVf3NL6BGlMWZR6mU.roa
File: ackszuiJCTUVf3NL6BGlMWZR6mU.roa (raw, json)
Hash identifier: eS/ev9znkjBG3HaRk+tKGqjX3/CUPsNsHqj4Rs2K9+I=
Subject key identifier: 69:C9:2C:CE:E8:89:09:35:15:7F:73:4B:E8:11:A5:31:66:51:EA:65
Certificate issuer: /CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Certificate serial: 0194258F788ED26450B2F72F556ABC8E2A2F
Authority key identifier: 1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/ackszuiJCTUVf3NL6BGlMWZR6mU.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207681
IP address blocks: 185.199.88.0/22 maxlen: 24
185.199.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:78:8e:d2:64:50:b2:f7:2f:55:6a:bc:8e:2a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c92ccee8890935157f734be811a5316651ea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:2b:c8:e7:50:55:a2:cf:d5:3c:cc:cb:df:
a1:f2:67:a3:17:88:d7:0f:bc:d6:5b:8b:73:64:39:
49:fd:2a:c6:de:8a:8a:3b:d2:06:81:c4:45:6e:61:
07:0a:bb:97:44:6e:19:61:87:b9:5a:bf:9d:1c:72:
ce:88:92:66:48:f5:d1:7f:0a:b5:28:02:d0:6d:9f:
71:03:95:5c:0f:6b:4a:0e:31:6b:92:8c:7c:09:96:
dd:e3:41:50:5b:3c:78:17:0e:0c:81:89:9d:c4:b0:
bc:43:5b:c5:87:8a:59:02:ae:37:e9:1a:6a:b7:93:
ee:ac:64:87:5e:40:f5:35:a2:22:02:6d:76:24:ed:
aa:3f:5f:77:c5:dd:13:43:a6:87:ef:51:68:c1:4b:
04:0d:36:c3:78:b5:27:b3:0f:30:97:b4:99:09:e7:
2e:70:bf:e0:ce:0f:c8:69:95:9d:89:22:17:3c:b8:
93:89:75:0c:3f:e0:54:ad:22:f0:55:39:fa:84:fa:
31:42:14:36:3d:0f:38:12:c3:23:5e:74:38:09:50:
b5:40:1a:f5:7f:f8:43:5b:65:b4:81:8a:78:c4:c7:
ed:a4:02:c9:ed:6a:a3:3c:9c:5d:06:02:41:ed:07:
5d:ed:86:f2:56:e6:b0:1f:b5:6f:54:35:03:4e:2a:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C9:2C:CE:E8:89:09:35:15:7F:73:4B:E8:11:A5:31:66:51:EA:65
X509v3 Authority Key Identifier:
keyid:1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/ackszuiJCTUVf3NL6BGlMWZR6mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:2a:c1:ec:e2:4b:ad:aa:51:f3:d2:01:9d:f9:27:02:38:eb:
9d:a1:18:e3:04:cb:aa:c4:3c:9b:a8:2c:ad:3e:e7:ec:0c:84:
ce:34:44:6b:57:96:de:4a:90:33:e3:84:a9:a4:74:a8:60:a1:
ed:68:92:1f:07:cf:b7:56:0c:88:cf:37:38:af:bd:60:34:f1:
03:06:17:30:ea:de:c6:46:0a:16:33:33:24:94:81:6b:b4:f6:
7a:a7:70:26:4f:0a:7d:ae:ed:5b:94:cb:ae:6b:db:47:a2:bc:
d7:0c:1d:78:b1:f0:f7:64:51:a7:da:bb:0b:7b:00:21:04:98:
0b:c8:c4:85:07:6b:8e:c1:3d:73:1d:c9:ca:e7:ba:ef:92:00:
dd:d6:86:d2:1b:91:0c:e0:34:e6:b0:98:40:c0:68:33:dc:f2:
5e:f2:8e:c8:01:62:5c:85:70:ee:b8:4e:eb:5e:fc:75:3a:0c:
22:c3:14:04:b8:65:07:e4:68:21:cd:0b:3e:8b:27:99:ae:e2:
96:b1:d6:79:82:78:54:ea:35:09:72:d9:02:97:6c:0d:70:50:
0e:60:0f:65:c1:9f:0d:4f:66:e2:94:1a:5c:b8:5a:86:e0:21:
11:1b:38:82:85:7e:38:55:00:69:2f:12:28:4c:16:18:12:8a:
49:13:69:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj3iO0mRQsvcvVWq8jiovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYWFkOTM5MDhhYWQ4ZDI0NmViNjlmN2U2NmFhNzBkZTVi
ZDVhMTcwHhcNMjUwMTAyMDU0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWM5MmNjZWU4ODkwOTM1MTU3ZjczNGJlODExYTUzMTY2NTFlYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sMryOdQVaLP1TzMy9+h8mejF4jX
D7zWW4tzZDlJ/SrG3oqKO9IGgcRFbmEHCruXRG4ZYYe5Wr+dHHLOiJJmSPXRfwq1
KALQbZ9xA5VcD2tKDjFrkox8CZbd40FQWzx4Fw4MgYmdxLC8Q1vFh4pZAq436Rpq
t5PurGSHXkD1NaIiAm12JO2qP193xd0TQ6aH71FowUsEDTbDeLUnsw8wl7SZCecu
cL/gzg/IaZWdiSIXPLiTiXUMP+BUrSLwVTn6hPoxQhQ2PQ84EsMjXnQ4CVC1QBr1
f/hDW2W0gYp4xMftpALJ7WqjPJxdBgJB7Qdd7YbyVuawH7VvVDUDTirzHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnJLM7oiQk1FX9zS+gRpTFmUeplMB8GA1UdIwQY
MBaAFByq2TkIqtjSRutp9+Zqpw3lvVoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEtyWk9RaXEyTkpHNjJuMzVtcW5EZVc5V2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hYmI2Y2EtMWExMS00YmE1LTllZTMt
YTc5OGJkYzczMTFmLzEvYWNrc3p1aUpDVFVWZjNOTDZCR2xNV1pSNm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9hYmI2Y2EtMWExMS00YmE1LTllZTMtYTc5OGJkYzczMTFm
LzEvSEtyWk9RaXEyTkpHNjJuMzVtcW5EZVc5V2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucdYMA0G
CSqGSIb3DQEBCwUAA4IBAQA8KsHs4kutqlHz0gGd+ScCOOudoRjjBMuqxDybqCyt
PufsDITONERrV5beSpAz44SppHSoYKHtaJIfB8+3VgyIzzc4r71gNPEDBhcw6t7G
RgoWMzMklIFrtPZ6p3AmTwp9ru1blMuua9tHorzXDB14sfD3ZFGn2rsLewAhBJgL
yMSFB2uOwT1zHcnK57rvkgDd1obSG5EM4DTmsJhAwGgz3PJe8o7IAWJchXDuuE7r
Xvx1OgwiwxQEuGUH5GghzQs+iyeZruKWsdZ5gnhU6jUJctkCl2wNcFAOYA9lwZ8N
T2bilBpcuFqG4CERGziChX44VQBpLxIoTBYYEopJE2nB
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:45 2025 by rpki-client