Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/x1Y8Tm66aISS-VZcnxcdePlrbTI.roa
File: x1Y8Tm66aISS-VZcnxcdePlrbTI.roa (raw, json)
Hash identifier: RuK7a4z/F98kTB6+gk63SmFKaLbun7sAKQuOC1MCK84=
Subject key identifier: C7:56:3C:4E:6E:BA:68:84:92:F9:56:5C:9F:17:1D:78:F9:6B:6D:32
Certificate issuer: /CN=b2d3f596ec50232eb092690a3586e835cf51b02e
Certificate serial: 01932C086D1FC325FFE384BAC3BDBAE62937
Authority key identifier: B2:D3:F5:96:EC:50:23:2E:B0:92:69:0A:35:86:E8:35:CF:51:B0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stP1luxQIy6wkmkKNYboNc9RsC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/x1Y8Tm66aISS-VZcnxcdePlrbTI.roa
Signing time: Thu 14 Nov 2024 18:56:09 +0000
ROA not before: Thu 14 Nov 2024 18:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 185.162.148.0/22 maxlen: 22
185.162.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:08:6d:1f:c3:25:ff:e3:84:ba:c3:bd:ba:e6:29:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d3f596ec50232eb092690a3586e835cf51b02e
Validity
Not Before: Nov 14 18:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7563c4e6eba688492f9565c9f171d78f96b6d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:fb:0f:2f:e3:bb:8d:07:ea:9c:0c:ed:42:
65:70:a1:2a:5c:60:16:ab:fc:6e:a0:19:98:c3:a0:
c5:6b:d8:bb:ef:1f:7b:61:79:28:f4:74:dc:b6:69:
2c:20:20:7c:83:0f:81:dc:ae:d1:45:d7:20:4b:40:
a5:60:56:af:5e:3d:5a:8a:29:32:bb:0f:e6:de:82:
5b:5d:30:b3:2e:eb:9a:55:c3:ce:4b:1e:d4:10:af:
ee:3f:6f:dc:52:e4:b7:17:2e:fb:2b:eb:63:75:9b:
47:3e:64:fa:a3:4a:98:e3:b5:78:ae:d4:b5:25:21:
fe:03:01:3a:e5:62:40:91:3e:27:f5:33:cc:e9:3f:
db:50:b5:a6:dd:40:9e:d9:ff:35:06:ed:b7:00:db:
e3:4e:e4:c9:c9:d8:9d:c0:d7:43:ca:69:b8:5e:2d:
27:42:db:b7:55:8f:e7:58:e9:69:ea:a6:4c:f7:ab:
a6:71:82:da:85:68:43:51:af:38:49:5b:05:d9:ad:
30:f6:81:9a:7d:1a:7f:69:50:d0:cb:97:3c:78:f0:
2b:bc:2b:e5:c6:01:29:37:61:03:bd:04:f6:93:49:
3e:97:1a:f9:1a:12:cf:96:df:1f:cf:01:27:89:8c:
c3:f6:68:75:d5:3f:bb:a3:38:df:9e:d2:01:a6:7e:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:3C:4E:6E:BA:68:84:92:F9:56:5C:9F:17:1D:78:F9:6B:6D:32
X509v3 Authority Key Identifier:
keyid:B2:D3:F5:96:EC:50:23:2E:B0:92:69:0A:35:86:E8:35:CF:51:B0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stP1luxQIy6wkmkKNYboNc9RsC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/x1Y8Tm66aISS-VZcnxcdePlrbTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2663fb-f421-4055-961c-e1ce38cd644f/1/stP1luxQIy6wkmkKNYboNc9RsC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
87:0d:89:83:03:14:b3:78:7a:df:4b:71:08:d9:4d:9f:bc:84:
8f:25:e7:d1:fe:6a:0c:cc:e1:6d:fc:c7:5d:96:2b:24:b6:66:
d4:90:03:e1:c5:eb:45:0a:6d:99:61:0f:e3:f9:95:80:3e:e9:
89:28:97:72:a2:47:ff:c2:d3:4c:c6:4b:5b:a0:59:2a:43:7b:
d4:06:92:bb:fe:2d:d2:62:f7:64:19:c3:8b:c6:43:da:63:d2:
c4:bf:68:75:ab:af:61:06:0b:11:e0:ba:59:f3:c6:99:43:ee:
e6:06:0b:f5:ab:27:99:cc:e1:fe:6d:05:86:36:a1:80:c7:a8:
91:c6:c0:e7:41:39:0a:ac:d2:71:0e:32:38:be:3d:ca:ab:74:
49:b7:81:4b:7d:6d:e6:28:df:6a:e4:e0:cb:56:30:82:dd:e6:
16:97:48:40:1e:6f:7d:61:c8:21:24:09:cc:4e:6f:c2:3b:9d:
b5:6d:ee:96:be:ef:84:9c:41:35:96:da:8d:db:40:3e:f2:aa:
b8:5e:3b:23:fc:92:37:d7:cd:7c:23:14:49:ed:5f:83:59:5a:
fb:c2:21:5c:04:a2:00:2e:88:2b:20:bf:0e:50:f8:7b:27:cc:
1b:76:ef:11:bf:69:3d:a5:ba:02:99:62:df:2d:a3:d8:49:c4:
92:f4:a6:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMsCG0fwyX/44S6w7265ik3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDNmNTk2ZWM1MDIzMmViMDkyNjkwYTM1ODZlODM1Y2Y1
MWIwMmUwHhcNMjQxMTE0MTg1NjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzU2M2M0ZTZlYmE2ODg0OTJmOTU2NWM5ZjE3MWQ3OGY5NmI2ZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjz7Dy/ju40H6pwM7UJlcKEqXGAW
q/xuoBmYw6DFa9i77x97YXko9HTctmksICB8gw+B3K7RRdcgS0ClYFavXj1aiiky
uw/m3oJbXTCzLuuaVcPOSx7UEK/uP2/cUuS3Fy77K+tjdZtHPmT6o0qY47V4rtS1
JSH+AwE65WJAkT4n9TPM6T/bULWm3UCe2f81Bu23ANvjTuTJydidwNdDymm4Xi0n
Qtu3VY/nWOlp6qZM96umcYLahWhDUa84SVsF2a0w9oGafRp/aVDQy5c8ePArvCvl
xgEpN2EDvQT2k0k+lxr5GhLPlt8fzwEniYzD9mh11T+7ozjfntIBpn4YSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdWPE5uumiEkvlWXJ8XHXj5a20yMB8GA1UdIwQY
MBaAFLLT9ZbsUCMusJJpCjWG6DXPUbAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RQMWx1eFFJeTZ3a21rS05ZYm9OYzlSc0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yNjYzZmItZjQyMS00MDU1LTk2MWMt
ZTFjZTM4Y2Q2NDRmLzEveDFZOFRtNjZhSVNTLVZaY254Y2RlUGxyYlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yNjYzZmItZjQyMS00MDU1LTk2MWMtZTFjZTM4Y2Q2NDRm
LzEvc3RQMWx1eFFJeTZ3a21rS05ZYm9OYzlSc0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaKUMA0G
CSqGSIb3DQEBCwUAA4IBAQCHDYmDAxSzeHrfS3EI2U2fvISPJefR/moMzOFt/Mdd
lisktmbUkAPhxetFCm2ZYQ/j+ZWAPumJKJdyokf/wtNMxktboFkqQ3vUBpK7/i3S
YvdkGcOLxkPaY9LEv2h1q69hBgsR4LpZ88aZQ+7mBgv1qyeZzOH+bQWGNqGAx6iR
xsDnQTkKrNJxDjI4vj3Kq3RJt4FLfW3mKN9q5ODLVjCC3eYWl0hAHm99YcghJAnM
Tm/CO521be6Wvu+EnEE1ltqN20A+8qq4Xjsj/JI31818IxRJ7V+DWVr7wiFcBKIA
LogrIL8OUPh7J8wbdu8Rv2k9pboCmWLfLaPYScSS9KbI
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:00:27 2025 by rpki-client