Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/x1uDU9Zoy9uOw-P8QajIkhafsls.roa
File: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (raw, json)
Hash identifier: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=
Subject key identifier: C7:5B:83:53:D6:68:CB:DB:8E:C3:E3:FC:41:A8:C8:92:16:9F:B2:5B
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 01942826D04EB052EB71C410D36CA6FA265F
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/x1uDU9Zoy9uOw-P8QajIkhafsls.roa
Signing time: Thu 02 Jan 2025 17:53:39 +0000
ROA not before: Thu 02 Jan 2025 17:53:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57348
IP address blocks: 185.67.148.0/24 maxlen: 24
185.67.149.0/24 maxlen: 24
185.67.150.0/24 maxlen: 24
185.67.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:d0:4e:b0:52:eb:71:c4:10:d3:6c:a6:fa:26:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Jan 2 17:53:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c75b8353d668cbdb8ec3e3fc41a8c892169fb25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:9f:9b:7d:cd:5f:fc:e6:9f:ff:11:a3:9d:
87:3c:bd:17:8e:fc:f1:5b:0c:9f:8c:f1:43:ac:53:
16:03:61:d2:91:36:b3:3e:74:16:b2:ac:65:45:c5:
26:d4:fc:7e:fe:2e:e9:89:02:3b:e9:fa:3c:ef:7a:
e1:a3:03:58:d9:c1:ef:07:0d:50:bd:da:59:12:f4:
a0:2a:03:e2:e7:08:28:4b:a2:21:d7:a2:04:2d:4a:
57:e0:56:86:77:68:ba:00:28:e0:8f:cf:9f:6d:99:
c4:a1:37:69:a4:3a:d6:bc:7b:ab:d7:db:a0:89:b2:
b3:30:5a:6b:67:2c:a1:61:69:b7:d7:79:7e:f2:3b:
e0:c6:c9:f7:0b:c6:53:42:11:d1:e3:c3:3f:26:32:
b5:bf:bf:64:73:d4:00:97:6b:25:29:8d:08:63:af:
27:0e:12:03:0c:3b:f7:40:6a:97:78:32:87:02:b0:
59:59:b8:27:d3:e9:f1:96:d7:84:c4:be:ab:d1:22:
a1:64:87:4a:c5:7c:03:81:de:4f:37:74:70:96:b5:
a8:04:1d:b0:11:89:ac:45:7a:0e:be:f2:80:12:46:
6c:dd:2c:15:b9:2f:1e:a4:40:79:5b:20:dc:4c:01:
61:46:39:05:cc:a3:93:07:53:93:fb:8e:da:35:72:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5B:83:53:D6:68:CB:DB:8E:C3:E3:FC:41:A8:C8:92:16:9F:B2:5B
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/x1uDU9Zoy9uOw-P8QajIkhafsls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.148.0/22
Signature Algorithm: sha256WithRSAEncryption
37:93:a4:08:f9:da:43:27:0a:62:a9:33:31:de:eb:b5:2c:61:
09:ec:89:3c:b2:d8:02:0d:46:9b:4c:61:f4:77:08:ae:24:89:
9f:cd:e0:53:15:cd:1e:b8:d9:e5:d7:e8:6b:d0:62:8b:a1:66:
93:54:eb:62:9e:b1:9b:b9:05:1b:8e:43:82:c2:fa:e9:c6:f6:
14:16:9d:63:6f:94:2c:89:89:85:bc:d6:b0:90:bd:16:af:21:
a1:b2:34:d8:64:eb:5b:af:18:66:34:c0:b4:7f:39:03:c4:be:
37:5d:d8:c1:c2:1e:83:d3:02:8c:c0:bf:47:04:aa:fa:9d:cb:
41:aa:77:d8:3a:c8:d2:e5:ec:f0:dc:bd:1e:4a:18:97:98:ac:
1e:ab:23:cf:da:b6:b4:d1:bd:87:f9:8d:5e:11:6a:b9:eb:81:
2a:a6:55:89:c2:25:f7:42:df:95:87:3c:9d:ac:d6:1b:72:23:
01:dc:90:3f:21:71:c7:7a:6d:73:1b:80:4e:a0:e4:db:04:4b:
f2:d5:28:4a:3b:10:89:05:66:49:af:bf:14:6b:2f:86:79:cb:
c9:96:3a:4f:40:bc:ad:09:2b:43:e7:db:e0:37:87:4e:6b:3b:
12:f9:a1:52:d6:75:13:01:d0:b0:f7:85:3e:eb:b2:8e:bc:35:
0b:94:b5:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJtBOsFLrccQQ02ym+iZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5
YTI2OTQwHhcNMjUwMTAyMTc1MzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzViODM1M2Q2NjhjYmRiOGVjM2UzZmM0MWE4Yzg5MjE2OWZiMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgWfm33NX/zmn/8Ro52HPL0Xjvzx
WwyfjPFDrFMWA2HSkTazPnQWsqxlRcUm1Px+/i7piQI76fo873rhowNY2cHvBw1Q
vdpZEvSgKgPi5wgoS6Ih16IELUpX4FaGd2i6ACjgj8+fbZnEoTdppDrWvHur19ug
ibKzMFprZyyhYWm313l+8jvgxsn3C8ZTQhHR48M/JjK1v79kc9QAl2slKY0IY68n
DhIDDDv3QGqXeDKHArBZWbgn0+nxlteExL6r0SKhZIdKxXwDgd5PN3RwlrWoBB2w
EYmsRXoOvvKAEkZs3SwVuS8epEB5WyDcTAFhRjkFzKOTB1OT+47aNXJt8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdbg1PWaMvbjsPj/EGoyJIWn7JbMB8GA1UdIwQY
MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt
ODM4ZWJmNDEyYTYxLzEveDF1RFU5Wm95OXVPdy1QOFFhaklraGFmc2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx
LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUOUMA0G
CSqGSIb3DQEBCwUAA4IBAQA3k6QI+dpDJwpiqTMx3uu1LGEJ7Ik8stgCDUabTGH0
dwiuJImfzeBTFc0euNnl1+hr0GKLoWaTVOtinrGbuQUbjkOCwvrpxvYUFp1jb5Qs
iYmFvNawkL0WryGhsjTYZOtbrxhmNMC0fzkDxL43XdjBwh6D0wKMwL9HBKr6nctB
qnfYOsjS5ezw3L0eShiXmKweqyPP2ra00b2H+Y1eEWq564EqplWJwiX3Qt+Vhzyd
rNYbciMB3JA/IXHHem1zG4BOoOTbBEvy1ShKOxCJBWZJr78Uay+GecvJljpPQLyt
CStD59vgN4dOazsS+aFS1nUTAdCw94U+67KOvDULlLXW
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:14 2025 by rpki-client