Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/mt1y2dL1OXUyfctCNUxKszagWVk.roa
File: mt1y2dL1OXUyfctCNUxKszagWVk.roa (raw, json)
Hash identifier: AmFe1bLh1CoLX3RBsndlSMtjqGoV6wl/eof2UX1ADY4=
Subject key identifier: 9A:DD:72:D9:D2:F5:39:75:32:7D:CB:42:35:4C:4A:B3:36:A0:59:59
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 0193D6C6A3EB22E1C21DF1DDDA45E185C112
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/mt1y2dL1OXUyfctCNUxKszagWVk.roa
Signing time: Tue 17 Dec 2024 22:39:22 +0000
ROA not before: Tue 17 Dec 2024 22:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204589
IP address blocks: 185.226.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d6:c6:a3:eb:22:e1:c2:1d:f1:dd:da:45:e1:85:c1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Dec 17 22:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9add72d9d2f53975327dcb42354c4ab336a05959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:fc:bf:0f:bc:74:18:de:65:a8:1e:65:0d:
82:0c:2b:d0:07:e0:86:f1:67:d8:07:21:98:32:3a:
2d:db:2a:40:8a:be:f2:5b:f9:15:b9:70:a7:43:00:
e3:c7:80:d8:3d:db:c8:82:dc:e0:b0:47:3c:55:48:
74:2c:b6:21:3a:17:8f:41:e7:06:ee:44:d4:97:9b:
41:e9:00:2f:66:59:27:e6:7f:f1:13:84:aa:72:8c:
6f:82:e6:7d:d2:11:f1:8d:b7:22:9d:82:7b:1f:eb:
63:51:39:56:1b:c2:34:2b:49:f5:c9:f1:ae:ec:5e:
46:4c:e9:5c:7f:3e:3c:fa:26:2d:bf:c2:27:4b:3c:
b4:29:a1:b9:c7:c0:48:3e:58:fc:de:f4:d9:12:18:
dd:62:0c:43:98:1f:2c:a6:0f:9a:5b:63:a9:6d:9d:
16:75:2c:9b:5b:61:57:8d:04:00:a8:ef:94:0a:e7:
89:61:b0:81:50:05:f3:d8:4f:f4:8a:23:8a:9a:ec:
45:26:ff:90:59:c4:d4:3c:49:e2:fb:99:2a:aa:f1:
35:ed:b3:65:24:4c:b8:e0:6c:bc:a4:34:81:ec:59:
b8:c3:a3:fd:c6:34:c1:f4:3d:2f:73:50:40:e0:92:
76:c4:4a:7e:27:a6:a9:89:c5:c9:42:3e:6a:25:26:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:72:D9:D2:F5:39:75:32:7D:CB:42:35:4C:4A:B3:36:A0:59:59
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/mt1y2dL1OXUyfctCNUxKszagWVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.139.0/24
Signature Algorithm: sha256WithRSAEncryption
12:49:6a:c7:c3:8c:70:c2:b5:bb:84:0c:8b:df:87:f3:be:cb:
44:85:18:ab:c4:ba:1f:aa:4c:97:6e:e0:48:2a:20:f3:3a:6c:
04:27:10:97:2b:13:97:4c:da:96:32:f7:e2:db:7f:a1:fb:e3:
e2:44:3e:fd:7d:c4:fd:ae:bc:bb:6f:ae:21:cf:6b:eb:c8:df:
04:f4:ff:37:3f:d3:bd:fe:06:8a:17:d7:0e:ad:3e:17:b5:0c:
0d:97:c5:4e:71:60:c4:f6:63:fc:e4:f2:2b:ec:28:92:68:63:
04:8d:72:28:52:ef:60:78:46:5f:59:43:6c:c0:00:51:1b:a7:
79:4c:ab:40:4c:a2:f7:58:96:81:05:46:b3:5d:41:0b:a9:8e:
bd:33:e8:e2:a1:b7:5a:74:e0:ff:ed:25:72:f4:b6:e2:a2:66:
79:fe:ee:1c:ef:b7:9f:f6:1f:58:af:d1:9a:3b:c3:5a:fc:ae:
98:f2:b4:0d:ee:93:50:3b:d3:9a:3d:9d:3e:22:fc:b1:24:ca:
ae:49:63:40:28:b8:18:ce:73:2d:09:f9:f3:71:25:3b:32:69:
54:e4:4e:af:bc:1d:4e:19:eb:9d:1f:a1:fa:15:8b:af:6c:03:
d1:c5:de:bc:64:90:c1:1b:50:2a:7a:16:16:6d:b7:cb:8b:5f:
51:c1:4a:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPWxqPrIuHCHfHd2kXhhcESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzg1ZTg2MTY3ZDVjY2MyMmZkODU4OTI1NjBhZTc2MGI1
ZjI4OTgwHhcNMjQxMjE3MjIzOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWRkNzJkOWQyZjUzOTc1MzI3ZGNiNDIzNTRjNGFiMzM2YTA1OTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+n8vw+8dBjeZageZQ2CDCvQB+CG
8WfYByGYMjot2ypAir7yW/kVuXCnQwDjx4DYPdvIgtzgsEc8VUh0LLYhOhePQecG
7kTUl5tB6QAvZlkn5n/xE4SqcoxvguZ90hHxjbcinYJ7H+tjUTlWG8I0K0n1yfGu
7F5GTOlcfz48+iYtv8InSzy0KaG5x8BIPlj83vTZEhjdYgxDmB8spg+aW2OpbZ0W
dSybW2FXjQQAqO+UCueJYbCBUAXz2E/0iiOKmuxFJv+QWcTUPEni+5kqqvE17bNl
JEy44Gy8pDSB7Fm4w6P9xjTB9D0vc1BA4JJ2xEp+J6apicXJQj5qJSb7jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJrdctnS9Tl1Mn3LQjVMSrM2oFlZMB8GA1UdIwQY
MBaAFHs4XoYWfVzMIv2FiSVgrnYLXyiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmIt
ZWE3ODhhZDMyOTZhLzEvbXQxeTJkTDFPWFV5ZmN0Q05VeEtzemFnV1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmItZWE3ODhhZDMyOTZh
LzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueKLMA0G
CSqGSIb3DQEBCwUAA4IBAQASSWrHw4xwwrW7hAyL34fzvstEhRirxLofqkyXbuBI
KiDzOmwEJxCXKxOXTNqWMvfi23+h++PiRD79fcT9rry7b64hz2vryN8E9P83P9O9
/gaKF9cOrT4XtQwNl8VOcWDE9mP85PIr7CiSaGMEjXIoUu9geEZfWUNswABRG6d5
TKtATKL3WJaBBUazXUELqY69M+jiobdadOD/7SVy9LbiomZ5/u4c77ef9h9Yr9Ga
O8Na/K6Y8rQN7pNQO9OaPZ0+IvyxJMquSWNAKLgYznMtCfnzcSU7MmlU5E6vvB1O
GeudH6H6FYuvbAPRxd68ZJDBG1AqehYWbbfLi19RwUra
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:28 2024 by rpki-client on console.sobornost.net