Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/DiRUXj-wMeKTJD3aUfG_fU2alsE.roa
File: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (raw, json)
Hash identifier: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=
Subject key identifier: 0E:24:54:5E:3F:B0:31:E2:93:24:3D:DA:51:F1:BF:7D:4D:9A:96:C1
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019424B3B6B29225AD290905C1F4EB1240E3
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/DiRUXj-wMeKTJD3aUfG_fU2alsE.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13097
IP address blocks: 185.208.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b6:b2:92:25:ad:29:09:05:c1:f4:eb:12:40:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e24545e3fb031e293243dda51f1bf7d4d9a96c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:8c:05:63:8d:f4:0e:df:c3:f3:d9:ef:15:
f3:63:96:03:c4:a6:87:a4:dd:5a:5e:3c:65:1d:f7:
f4:dd:aa:25:35:d3:f0:76:02:5a:93:23:71:54:a7:
3e:f1:7b:f1:fa:57:64:0a:ea:8e:53:47:49:7d:9b:
ce:56:27:16:65:e4:d1:85:24:b6:c2:66:12:88:f4:
6a:2d:45:65:c8:67:be:1b:fd:44:95:b6:a9:91:0c:
90:02:82:ee:6f:b8:9b:e5:57:cf:09:07:0e:97:26:
4d:79:dc:ed:ac:0d:c4:51:e5:2a:f4:87:60:74:e0:
2d:5e:cd:5f:c1:e9:3b:59:40:81:2f:3a:be:25:6c:
d4:c9:58:55:cc:9d:79:b4:84:ed:01:85:19:0a:31:
a7:73:7d:d4:12:0a:17:be:ff:07:20:33:a8:a0:c2:
04:e7:14:c5:e9:d7:98:89:25:46:7b:81:cc:c4:c7:
d1:d9:b0:89:91:30:3d:72:98:a3:9d:64:c7:52:64:
2a:c4:93:4b:7a:98:a4:e1:32:7a:21:96:7d:78:1e:
08:5c:39:18:10:aa:bc:43:8e:c2:d5:20:05:23:c0:
15:a7:bc:fc:26:d4:b6:1b:c6:20:0e:dd:6b:e7:31:
f5:6b:e6:03:28:d2:c3:fc:d4:3a:d7:f3:6a:de:60:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:24:54:5E:3F:B0:31:E2:93:24:3D:DA:51:F1:BF:7D:4D:9A:96:C1
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/DiRUXj-wMeKTJD3aUfG_fU2alsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:22:3b:66:73:cf:81:1e:d6:80:ca:a1:84:49:cb:2d:c8:01:
bc:80:e5:f4:06:aa:24:91:fc:19:01:0d:69:bf:df:b5:fa:ea:
a5:d8:d7:c9:f3:01:f0:01:c5:0d:86:fb:ee:2f:3e:d9:44:39:
11:64:cc:43:6d:f7:aa:11:1b:21:12:0d:60:b3:58:3f:40:8c:
80:b4:d1:87:85:29:38:3c:4e:eb:f0:23:d0:2f:9f:a3:11:88:
93:64:7a:c5:c2:25:97:96:8c:83:b6:24:54:18:e3:c8:f6:1e:
82:4a:67:2e:32:a5:0a:7a:11:cc:e2:02:98:f4:6d:ef:95:4b:
78:8b:d0:f3:e9:58:c4:5a:36:09:18:b6:d8:61:8e:0a:65:33:
34:f7:fe:8e:46:bd:7e:eb:af:dc:2a:9b:72:b1:21:e3:e1:be:
57:f0:5b:8b:36:25:0c:a6:05:fa:9f:c7:aa:66:22:57:51:48:
dd:ab:09:c7:4b:20:fb:cd:98:84:2a:67:d8:89:9e:40:59:dc:
ab:d0:04:9e:c7:0f:50:5f:d9:bb:23:e4:1f:58:71:84:52:db:
7d:85:68:72:dc:16:cb:d6:52:3c:6e:75:18:57:7a:a8:42:66:
ce:fe:22:cf:5d:e4:19:bd:66:dd:e3:6b:fc:c5:7b:66:e5:b8:
63:26:3c:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks7aykiWtKQkFwfTrEkDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi
YWZiMWIwHhcNMjUwMTAyMDE0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTI0NTQ1ZTNmYjAzMWUyOTMyNDNkZGE1MWYxYmY3ZDRkOWE5NmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIKMBWON9A7fw/PZ7xXzY5YDxKaH
pN1aXjxlHff03aolNdPwdgJakyNxVKc+8Xvx+ldkCuqOU0dJfZvOVicWZeTRhSS2
wmYSiPRqLUVlyGe+G/1ElbapkQyQAoLub7ib5VfPCQcOlyZNedztrA3EUeUq9Idg
dOAtXs1fwek7WUCBLzq+JWzUyVhVzJ15tITtAYUZCjGnc33UEgoXvv8HIDOooMIE
5xTF6deYiSVGe4HMxMfR2bCJkTA9cpijnWTHUmQqxJNLepik4TJ6IZZ9eB4IXDkY
EKq8Q47C1SAFI8AVp7z8JtS2G8YgDt1r5zH1a+YDKNLD/NQ61/Nq3mCjzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4kVF4/sDHikyQ92lHxv31NmpbBMB8GA1UdIwQY
MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt
NGY0Yjk5NGUwZWIyLzEvRGlSVVhqLXdNZUtUSkQzYVVmR19mVTJhbHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy
LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudCKMA0G
CSqGSIb3DQEBCwUAA4IBAQCKIjtmc8+BHtaAyqGEScstyAG8gOX0BqokkfwZAQ1p
v9+1+uql2NfJ8wHwAcUNhvvuLz7ZRDkRZMxDbfeqERshEg1gs1g/QIyAtNGHhSk4
PE7r8CPQL5+jEYiTZHrFwiWXloyDtiRUGOPI9h6CSmcuMqUKehHM4gKY9G3vlUt4
i9Dz6VjEWjYJGLbYYY4KZTM09/6ORr1+66/cKptysSHj4b5X8FuLNiUMpgX6n8eq
ZiJXUUjdqwnHSyD7zZiEKmfYiZ5AWdyr0ASexw9QX9m7I+QfWHGEUtt9hWhy3BbL
1lI8bnUYV3qoQmbO/iLPXeQZvWbd42v8xXtm5bhjJjzM
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net