Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/dItGQTbmGZEaYwBU9Yq4YOVLqSI.roa
File: dItGQTbmGZEaYwBU9Yq4YOVLqSI.roa (raw, json)
Hash identifier: szU14ZY7TnY09k1Q8QSiZL5j1zx2tfwKt9z7Z7fdfRU=
Subject key identifier: 74:8B:46:41:36:E6:19:91:1A:63:00:54:F5:8A:B8:60:E5:4B:A9:22
Certificate issuer: /CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Certificate serial: 0194266BAFE3BE953C03F6E7DE592151F2E7
Authority key identifier: 30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/dItGQTbmGZEaYwBU9Yq4YOVLqSI.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.121.140.0/24 maxlen: 24
185.121.141.0/24 maxlen: 24
185.121.142.0/24 maxlen: 24
185.121.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:af:e3:be:95:3c:03:f6:e7:de:59:21:51:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3092b117062f6065faa1cdfd38915e4bb9c924bb
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=748b464136e619911a630054f58ab860e54ba922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c7:06:bc:1b:15:31:43:b7:6c:38:bc:8c:28:
b0:6e:61:1d:ed:49:b9:61:2b:dd:34:14:fc:a8:2d:
d1:89:38:3a:b3:51:75:a4:58:a7:38:0d:03:1d:28:
17:c4:05:66:7e:27:ea:08:bf:bf:49:6e:24:a8:bd:
41:77:67:25:50:cd:28:7d:2e:aa:68:b8:02:3a:7b:
9e:8c:e0:53:35:61:b8:db:82:64:ed:3a:0f:28:f8:
be:1f:c4:11:d6:3e:db:24:f9:23:60:4e:16:4d:3a:
9f:8f:b9:ac:b9:06:b6:b0:71:1b:a7:75:9c:ff:b4:
ad:be:a8:56:ad:6f:e9:ab:a2:c1:1a:5e:27:ad:e0:
73:1d:eb:08:10:ce:38:ef:bf:da:f7:47:c7:6f:e9:
91:0a:a5:95:e8:21:68:24:1b:1d:12:23:95:37:7d:
60:f9:dc:bb:e9:f1:73:50:d7:c0:17:96:f9:44:2a:
6f:a2:d2:31:2c:71:5a:1e:22:b9:0a:f2:80:33:af:
32:c0:79:26:09:93:7f:9d:88:db:d8:eb:4a:41:01:
20:de:c6:aa:b6:97:9d:6c:0b:cb:d3:c8:bd:a5:e7:
f7:b3:b7:e5:c1:8c:5c:54:64:25:70:fa:85:77:cc:
5e:4b:d8:52:7b:a0:4e:9d:c8:1f:a1:b4:d3:c3:fc:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8B:46:41:36:E6:19:91:1A:63:00:54:F5:8A:B8:60:E5:4B:A9:22
X509v3 Authority Key Identifier:
keyid:30:92:B1:17:06:2F:60:65:FA:A1:CD:FD:38:91:5E:4B:B9:C9:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJKxFwYvYGX6oc39OJFeS7nJJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/dItGQTbmGZEaYwBU9Yq4YOVLqSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e74b81-5ff7-4823-9267-0d3e662b0ee0/1/MJKxFwYvYGX6oc39OJFeS7nJJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.140.0/22
Signature Algorithm: sha256WithRSAEncryption
03:10:ba:01:46:4d:d8:c3:33:fd:c2:4f:c4:e0:f2:01:e9:ba:
12:15:95:80:31:26:20:13:8b:2b:af:65:89:9a:ac:48:ee:98:
fb:d9:88:9c:96:3b:87:b5:fe:33:28:cb:bb:28:e5:6e:06:6f:
ee:a9:02:d6:07:a0:13:6b:b7:2d:c7:b8:0e:1f:82:c6:21:a3:
dc:d5:86:48:75:52:18:5c:ba:19:7d:18:2b:e6:da:40:9b:48:
95:64:a8:7f:ed:cb:35:9a:12:8a:80:d3:c0:d5:fb:1e:d5:9d:
83:aa:3d:87:fb:7f:fd:7a:ae:eb:07:9a:95:93:a0:a2:a1:d6:
29:b2:f8:ef:c9:93:b9:cd:23:3a:22:99:97:23:b1:69:86:2f:
e1:4e:9d:4c:b9:0d:f3:5e:fb:3b:10:3d:30:a5:4d:cc:71:34:
c5:74:fd:d1:36:01:47:c8:37:df:4c:35:c1:8c:82:14:62:7d:
ee:37:20:9c:68:fa:7e:ac:b7:c8:4c:5a:1e:98:c7:c3:14:e3:
88:63:c3:79:42:b3:d8:ae:b9:71:e7:6f:0c:43:1d:7f:13:3d:
12:dc:bc:86:af:2b:b2:97:83:ee:82:03:13:cb:bb:0a:7c:e6:
54:f8:37:b9:8c:d8:29:70:9a:ca:e1:8a:8e:e7:49:b9:52:32:
dd:52:56:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma6/jvpU8A/bn3lkhUfLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwOTJiMTE3MDYyZjYwNjVmYWExY2RmZDM4OTE1ZTRiYjlj
OTI0YmIwHhcNMjUwMTAyMDk0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDhiNDY0MTM2ZTYxOTkxMWE2MzAwNTRmNThhYjg2MGU1NGJhOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8cGvBsVMUO3bDi8jCiwbmEd7Um5
YSvdNBT8qC3RiTg6s1F1pFinOA0DHSgXxAVmfifqCL+/SW4kqL1Bd2clUM0ofS6q
aLgCOnuejOBTNWG424Jk7ToPKPi+H8QR1j7bJPkjYE4WTTqfj7msuQa2sHEbp3Wc
/7StvqhWrW/pq6LBGl4nreBzHesIEM4477/a90fHb+mRCqWV6CFoJBsdEiOVN31g
+dy76fFzUNfAF5b5RCpvotIxLHFaHiK5CvKAM68ywHkmCZN/nYjb2OtKQQEg3saq
tpedbAvL08i9pef3s7flwYxcVGQlcPqFd8xeS9hSe6BOncgfobTTw/z/bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSLRkE25hmRGmMAVPWKuGDlS6kiMB8GA1UdIwQY
MBaAFDCSsRcGL2Bl+qHN/TiRXku5ySS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUpLeEZ3WXZZR1g2b2MzOU9KRmVTN25KSkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lNzRiODEtNWZmNy00ODIzLTkyNjct
MGQzZTY2MmIwZWUwLzEvZEl0R1FUYm1HWkVhWXdCVTlZcTRZT1ZMcVNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lNzRiODEtNWZmNy00ODIzLTkyNjctMGQzZTY2MmIwZWUw
LzEvTUpLeEZ3WXZZR1g2b2MzOU9KRmVTN25KSkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXmMMA0G
CSqGSIb3DQEBCwUAA4IBAQADELoBRk3YwzP9wk/E4PIB6boSFZWAMSYgE4srr2WJ
mqxI7pj72YicljuHtf4zKMu7KOVuBm/uqQLWB6ATa7ctx7gOH4LGIaPc1YZIdVIY
XLoZfRgr5tpAm0iVZKh/7cs1mhKKgNPA1fse1Z2Dqj2H+3/9eq7rB5qVk6CiodYp
svjvyZO5zSM6IpmXI7Fphi/hTp1MuQ3zXvs7ED0wpU3McTTFdP3RNgFHyDffTDXB
jIIUYn3uNyCcaPp+rLfITFoemMfDFOOIY8N5QrPYrrlx528MQx1/Ez0S3LyGryuy
l4PuggMTy7sKfOZU+De5jNgpcJrK4YqO50m5UjLdUlYg
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:00 2025 by rpki-client