Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/b64Uii9JYXCMSIcDqVfd-guKolk.roa
File: b64Uii9JYXCMSIcDqVfd-guKolk.roa (raw, json)
Hash identifier: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=
Subject key identifier: 6F:AE:14:8A:2F:49:61:70:8C:48:87:03:A9:57:DD:FA:0B:8A:A2:59
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 01942520933D37D4E2232BEE1102CBD61672
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/b64Uii9JYXCMSIcDqVfd-guKolk.roa
Signing time: Thu 02 Jan 2025 03:47:59 +0000
ROA not before: Thu 02 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201806
IP address blocks: 185.60.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:93:3d:37:d4:e2:23:2b:ee:11:02:cb:d6:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Jan 2 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fae148a2f4961708c488703a957ddfa0b8aa259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:b3:81:eb:81:c1:3e:4d:49:be:92:5f:24:
83:32:59:09:79:0c:1a:9d:c7:48:7c:14:52:40:18:
82:6f:b3:12:7d:c8:3b:f0:d5:5e:a4:21:d0:fd:d9:
90:2f:5d:55:fa:8d:e0:13:6c:34:68:23:9c:1d:c6:
a2:06:72:b7:2e:c9:31:5c:b4:bf:be:04:55:9b:8c:
c1:48:11:34:fd:f7:05:f5:42:66:d2:50:74:59:b8:
0a:81:49:44:7a:a9:33:be:a1:9e:ad:5b:81:33:33:
65:5c:c2:6c:f3:61:18:21:ee:9b:58:be:e6:17:20:
bb:80:85:9b:ce:5c:54:d0:bb:7b:43:ce:7d:e5:c7:
be:a8:2a:71:c4:0c:17:a9:ff:1e:ec:62:18:63:4a:
72:09:22:9c:dc:13:3e:0f:8d:98:15:81:b4:9d:57:
80:bf:3c:c5:c8:d7:fe:64:4c:22:88:fe:2b:d7:f4:
2d:0e:84:5c:c2:0a:de:e7:f8:dd:0f:50:63:18:77:
2a:96:7f:f3:bf:1d:a5:41:2e:e2:e0:6f:b0:9c:7c:
0c:02:ac:e7:78:db:b9:07:dc:6a:5a:72:b5:62:68:
33:1d:d8:04:04:12:8a:40:b3:b9:ac:7d:38:39:65:
a9:d4:7b:64:0f:92:20:20:00:66:ea:c1:f2:d3:92:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AE:14:8A:2F:49:61:70:8C:48:87:03:A9:57:DD:FA:0B:8A:A2:59
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/b64Uii9JYXCMSIcDqVfd-guKolk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.140.0/22
Signature Algorithm: sha256WithRSAEncryption
04:2b:eb:ba:48:81:f2:62:58:f4:54:e1:0d:2a:5d:a7:4c:24:
03:a8:1b:1b:1a:cf:2d:55:0b:df:41:01:3b:e8:0f:68:d7:8d:
c1:40:d1:4f:88:a1:fc:c0:93:00:49:05:3d:08:02:f3:6e:c1:
9b:55:e9:d3:ae:01:c2:c1:4a:d5:fe:c0:ee:a1:c3:0a:3d:88:
14:3e:01:d4:91:fc:ec:53:a9:04:e1:56:8a:1e:79:63:8e:e9:
3c:d7:e2:c8:ef:eb:9e:5a:20:ac:11:04:5e:89:8c:68:68:06:
34:68:31:49:89:f6:c1:15:6a:e2:e6:e1:11:41:5c:e6:ee:0e:
7a:be:57:00:d1:e6:5d:ec:5b:a1:d5:2f:18:c1:d9:3f:d5:8d:
65:8c:66:5e:a3:cc:ee:85:6e:14:14:be:72:99:d5:c0:28:b2:
79:ef:de:96:ad:8b:e6:41:8b:f0:f3:d9:ea:7a:9e:c7:d6:2b:
84:31:f1:7e:0b:5c:90:ff:f4:59:61:77:a4:9c:0f:e8:1f:e7:
df:b2:54:0a:58:61:29:83:c1:58:d0:54:86:60:5d:37:42:d1:
17:2d:da:89:76:0e:81:20:ca:c2:a9:42:ea:78:7a:93:0d:b4:
76:8c:53:d8:77:22:b6:81:0a:08:4a:54:2e:e9:a3:cb:9a:95:
16:3c:cd:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIJM9N9TiIyvuEQLL1hZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Nzc0NDY3Y2M5ZjFlZDlkOTU3YjgzYWExN2EwOTBiMWRm
NzY5NDYwHhcNMjUwMTAyMDM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmFlMTQ4YTJmNDk2MTcwOGM0ODg3MDNhOTU3ZGRmYTBiOGFhMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yezgeuBwT5NSb6SXySDMlkJeQwa
ncdIfBRSQBiCb7MSfcg78NVepCHQ/dmQL11V+o3gE2w0aCOcHcaiBnK3LskxXLS/
vgRVm4zBSBE0/fcF9UJm0lB0WbgKgUlEeqkzvqGerVuBMzNlXMJs82EYIe6bWL7m
FyC7gIWbzlxU0Lt7Q8595ce+qCpxxAwXqf8e7GIYY0pyCSKc3BM+D42YFYG0nVeA
vzzFyNf+ZEwiiP4r1/QtDoRcwgre5/jdD1BjGHcqln/zvx2lQS7i4G+wnHwMAqzn
eNu5B9xqWnK1YmgzHdgEBBKKQLO5rH04OWWp1HtkD5IgIABm6sHy05LcRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+uFIovSWFwjEiHA6lX3foLiqJZMB8GA1UdIwQY
MBaAFCl3RGfMnx7Z2Ve4OqF6CQsd92lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGIt
ZDU1ZTM4ODY4YTUyLzEvYjY0VWlpOUpZWENNU0ljRHFWZmQtZ3VLb2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGItZDU1ZTM4ODY4YTUy
LzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTyMMA0G
CSqGSIb3DQEBCwUAA4IBAQAEK+u6SIHyYlj0VOENKl2nTCQDqBsbGs8tVQvfQQE7
6A9o143BQNFPiKH8wJMASQU9CALzbsGbVenTrgHCwUrV/sDuocMKPYgUPgHUkfzs
U6kE4VaKHnljjuk81+LI7+ueWiCsEQReiYxoaAY0aDFJifbBFWri5uERQVzm7g56
vlcA0eZd7Fuh1S8Ywdk/1Y1ljGZeo8zuhW4UFL5ymdXAKLJ5796WrYvmQYvw89nq
ep7H1iuEMfF+C1yQ//RZYXeknA/oH+ffslQKWGEpg8FY0FSGYF03QtEXLdqJdg6B
IMrCqULqeHqTDbR2jFPYdyK2gQoISlQu6aPLmpUWPM3s
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:47 2025 by rpki-client