Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/lQ18vrtnyimUFObX1R64Isy8WQ0.roa
File: lQ18vrtnyimUFObX1R64Isy8WQ0.roa (raw, json)
Hash identifier: BzWH/UlUlz2BKAUFqsxOZAyWvuR1krCSBlWy9O7KU4k=
Subject key identifier: 95:0D:7C:BE:BB:67:CA:29:94:14:E6:D7:D5:1E:B8:22:CC:BC:59:0D
Certificate issuer: /CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Certificate serial: 018DDC69A84F36DB5AFABDBCD38CF10B8133
Authority key identifier: 82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/lQ18vrtnyimUFObX1R64Isy8WQ0.roa
Signing time: Sat 24 Feb 2024 18:38:48 +0000
ROA not before: Sat 24 Feb 2024 18:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24875
IP address blocks: 185.84.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dc:69:a8:4f:36:db:5a:fa:bd:bc:d3:8c:f1:0b:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Validity
Not Before: Feb 24 18:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=950d7cbebb67ca299414e6d7d51eb822ccbc590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:fb:cf:32:b7:a1:fd:c2:8b:b3:cc:7f:2a:
c6:76:9f:42:73:0f:c0:e0:c6:58:b8:d1:a0:39:c9:
a1:bc:86:68:36:f0:3a:52:f6:c7:1e:79:ba:59:19:
3b:3b:5b:3e:9e:17:bf:b7:5b:fb:26:78:26:50:7c:
f8:8a:7b:a4:68:df:29:1b:73:c4:79:ed:06:65:7e:
0a:b0:39:1f:3a:54:e1:53:9e:24:c4:4d:c1:60:ee:
91:dd:90:e0:d6:f9:78:7e:85:55:d4:df:55:c3:67:
18:03:3f:92:6b:41:b4:b1:f1:b3:84:2d:ac:ff:a5:
e8:bb:31:04:3a:49:30:dc:73:a4:39:27:6a:bf:16:
f2:cf:9d:64:1c:f7:f3:b8:62:07:b0:d3:3f:b3:7b:
93:f9:a1:02:61:cd:a1:1f:b1:58:eb:a6:78:85:9b:
a9:af:1e:83:66:bd:94:37:f3:9d:1d:95:5a:3e:77:
b4:03:41:d6:cb:3a:d8:4d:11:55:32:10:83:7d:5b:
d4:77:bb:3e:b8:d9:43:1b:a3:12:8d:f7:34:d8:1b:
a6:20:a2:48:70:27:34:5a:71:c8:4c:3f:06:b0:95:
ca:4a:8b:90:80:42:03:3f:04:0f:e0:c3:da:14:69:
15:d9:47:d6:35:21:11:d5:2a:4e:bd:45:76:57:a7:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0D:7C:BE:BB:67:CA:29:94:14:E6:D7:D5:1E:B8:22:CC:BC:59:0D
X509v3 Authority Key Identifier:
keyid:82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/lQ18vrtnyimUFObX1R64Isy8WQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.156.0/22
Signature Algorithm: sha256WithRSAEncryption
80:00:de:cc:90:2b:d9:51:cb:3e:e5:0e:b1:61:3b:21:d2:09:
89:f7:0c:58:64:d9:07:9c:33:9d:e1:b3:7d:eb:5e:53:1b:52:
ec:23:57:10:0e:3c:db:59:eb:97:6d:43:c6:42:1a:c9:17:ee:
e4:f4:00:d2:e1:3a:b6:27:4f:fa:83:b3:a0:dd:09:57:fc:76:
82:cd:bb:4e:52:8b:c4:24:90:12:43:79:c3:23:d3:ba:02:e9:
72:01:e1:40:48:c3:29:eb:59:1a:ea:29:3c:24:13:5b:72:7f:
7f:60:d1:77:46:f2:b9:e9:21:71:23:23:bf:f5:24:db:99:7c:
f8:f5:7d:99:c3:e7:f8:64:04:fd:97:fb:4e:31:da:13:9e:86:
0d:21:31:af:d4:16:e7:e7:97:a6:1a:fc:3c:59:57:cb:80:54:
00:98:5a:fe:cd:13:b4:1a:e4:a0:78:87:9c:46:84:2b:c2:56:
41:79:8c:d0:30:64:e8:04:dd:b7:dc:1b:53:1b:20:2c:74:ec:
be:4f:f0:6d:d4:04:e6:71:e4:ce:5b:e9:4c:89:b0:7f:3a:d8:
36:81:d5:8c:7b:7c:75:ee:90:e3:73:8c:84:5d:0b:ac:91:d7:
89:e7:61:02:ca:c7:8a:94:d2:b9:5b:ba:53:3e:c0:8d:b9:4a:
da:03:c8:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3caahPNtta+r2804zxC4EzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmQ2Y2U4NWU5MTlhYjliZmFkM2YzMmRkOTgwOGY2MTQw
MDlkYzAwHhcNMjQwMjI0MTgzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTBkN2NiZWJiNjdjYTI5OTQxNGU2ZDdkNTFlYjgyMmNjYmM1OTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm77zzK3of3Ci7PMfyrGdp9Ccw/A
4MZYuNGgOcmhvIZoNvA6UvbHHnm6WRk7O1s+nhe/t1v7JngmUHz4inukaN8pG3PE
ee0GZX4KsDkfOlThU54kxE3BYO6R3ZDg1vl4foVV1N9Vw2cYAz+Sa0G0sfGzhC2s
/6XouzEEOkkw3HOkOSdqvxbyz51kHPfzuGIHsNM/s3uT+aECYc2hH7FY66Z4hZup
rx6DZr2UN/OdHZVaPne0A0HWyzrYTRFVMhCDfVvUd7s+uNlDG6MSjfc02BumIKJI
cCc0WnHITD8GsJXKSouQgEIDPwQP4MPaFGkV2UfWNSER1SpOvUV2V6fLIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJUNfL67Z8oplBTm19UeuCLMvFkNMB8GA1UdIwQY
MBaAFIL9bOhekZq5v60/Mt2YCPYUAJ3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3YxczZGNlJtcm1fclQ4eTNaZ0k5aFFBbmNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NTQ4NzYtZDQ1Yy00NjY5LWExY2Qt
NmNiYzM4ZDRlYTRjLzEvbFExOHZydG55aW1VRk9iWDFSNjRJc3k4V1EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85NTQ4NzYtZDQ1Yy00NjY5LWExY2QtNmNiYzM4ZDRlYTRj
LzEvZ3YxczZGNlJtcm1fclQ4eTNaZ0k5aFFBbmNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVScMA0G
CSqGSIb3DQEBCwUAA4IBAQCAAN7MkCvZUcs+5Q6xYTsh0gmJ9wxYZNkHnDOd4bN9
615TG1LsI1cQDjzbWeuXbUPGQhrJF+7k9ADS4Tq2J0/6g7Og3QlX/HaCzbtOUovE
JJASQ3nDI9O6AulyAeFASMMp61ka6ik8JBNbcn9/YNF3RvK56SFxIyO/9STbmXz4
9X2Zw+f4ZAT9l/tOMdoTnoYNITGv1Bbn55emGvw8WVfLgFQAmFr+zRO0GuSgeIec
RoQrwlZBeYzQMGToBN233BtTGyAsdOy+T/Bt1ATmceTOW+lMibB/Otg2gdWMe3x1
7pDjc4yEXQuskdeJ52ECyseKlNK5W7pTPsCNuUraA8i8
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:39:21 2025 by rpki-client