Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/G6DPjeY_9qav4ZQjtAxmr4sCCCk.roa
File: G6DPjeY_9qav4ZQjtAxmr4sCCCk.roa (raw, json)
Hash identifier: T39rWQmJNE70lldr0pTcOGxN7CB18wByjccPAU0MZM4=
Subject key identifier: 1B:A0:CF:8D:E6:3F:F6:A6:AF:E1:94:23:B4:0C:66:AF:8B:02:08:29
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018D30E0BF18DCCACE92BD402A257DB1AB89
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/G6DPjeY_9qav4ZQjtAxmr4sCCCk.roa
Signing time: Mon 22 Jan 2024 11:14:11 +0000
ROA not before: Mon 22 Jan 2024 11:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 185.244.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:e0:bf:18:dc:ca:ce:92:bd:40:2a:25:7d:b1:ab:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 22 11:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ba0cf8de63ff6a6afe19423b40c66af8b020829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:7f:e5:b4:41:03:cb:6b:f5:51:2d:3d:fd:
81:9e:4a:da:e8:18:3d:b9:e3:54:de:2c:8f:b4:dd:
b2:25:79:81:65:6a:58:02:c2:58:32:3f:0c:a0:f7:
62:59:ab:4b:19:47:5e:42:d5:ca:91:ee:cd:b7:fd:
5c:45:5a:69:b0:a8:5c:d0:fa:07:c8:9b:ed:49:a5:
3c:b4:82:95:21:05:6f:ba:a5:8d:ff:85:4b:39:90:
7a:ad:aa:31:f3:41:12:d9:c6:3e:16:ab:1d:7f:78:
d7:19:15:80:d0:9c:a0:61:c5:13:e0:76:64:b1:e7:
e8:95:0a:6c:4c:a7:e2:a0:85:84:15:b4:9f:b2:0d:
53:de:bc:c5:79:6c:d0:20:13:01:90:68:63:f6:87:
4c:91:df:e2:2e:50:bc:ac:8b:58:a9:c0:b9:ac:44:
a3:34:09:48:b9:09:ab:03:20:ae:4c:1a:b2:e8:d5:
6c:81:3a:42:c6:ca:13:54:ed:0b:74:93:f0:5c:d4:
21:47:8a:57:54:ec:02:f4:e2:78:1c:10:50:d4:d2:
8e:7d:99:7f:d3:13:a1:3a:38:69:f7:54:70:9c:85:
68:4d:95:d3:0e:d3:6e:02:85:02:06:66:e8:a1:bc:
72:32:51:ac:1d:33:bf:f1:01:39:31:7e:56:12:64:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:CF:8D:E6:3F:F6:A6:AF:E1:94:23:B4:0C:66:AF:8B:02:08:29
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/G6DPjeY_9qav4ZQjtAxmr4sCCCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f9:3b:ff:0e:09:9c:fa:e7:51:4b:3b:10:f8:d4:32:c4:97:
b1:87:3e:31:58:d6:5b:26:ec:90:f0:cb:19:fb:ac:64:0a:57:
4a:de:c1:58:f5:7a:b4:6c:e6:03:ea:6a:5c:3b:12:d3:3d:70:
ad:fd:a5:7c:e1:53:28:e9:a9:12:a7:cc:ae:e8:0d:d1:58:cd:
39:d1:8f:5d:ad:14:c2:92:ea:25:72:4d:40:c9:14:4c:b6:2c:
76:06:50:5a:a1:1b:ec:59:36:0a:47:bb:84:e4:41:a7:ea:f3:
87:72:96:a9:df:d9:64:7b:82:6b:1d:a4:4a:6a:92:9b:f8:af:
f9:8d:65:ac:a2:71:4f:f0:ba:86:45:aa:44:3e:f8:7d:4d:ba:
74:ac:43:3c:68:7e:e3:08:14:8e:82:89:52:1a:cd:6a:4a:43:
b9:88:39:d6:2c:4e:5e:22:e9:34:31:cd:53:7a:a7:ec:8a:cd:
c4:bb:51:c4:f2:a4:fa:27:68:45:4c:00:59:bc:42:a0:f1:c3:
20:5d:1b:e7:02:69:cf:22:03:bb:16:df:f1:5b:ed:ea:b4:97:
48:9e:91:28:aa:e7:8e:22:d3:17:36:69:ac:18:f7:ea:19:61:
95:0d:31:4b:8c:25:ff:d8:b2:4d:4b:9e:e2:51:f5:fa:fc:0f:
3a:c1:27:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0w4L8Y3MrOkr1AKiV9sauJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjQwMTIyMTExNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmEwY2Y4ZGU2M2ZmNmE2YWZlMTk0MjNiNDBjNjZhZjhiMDIwODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZF/5bRBA8tr9VEtPf2Bnkra6Bg9
ueNU3iyPtN2yJXmBZWpYAsJYMj8MoPdiWatLGUdeQtXKke7Nt/1cRVppsKhc0PoH
yJvtSaU8tIKVIQVvuqWN/4VLOZB6raox80ES2cY+Fqsdf3jXGRWA0JygYcUT4HZk
sefolQpsTKfioIWEFbSfsg1T3rzFeWzQIBMBkGhj9odMkd/iLlC8rItYqcC5rESj
NAlIuQmrAyCuTBqy6NVsgTpCxsoTVO0LdJPwXNQhR4pXVOwC9OJ4HBBQ1NKOfZl/
0xOhOjhp91RwnIVoTZXTDtNuAoUCBmboobxyMlGsHTO/8QE5MX5WEmT+QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBugz43mP/amr+GUI7QMZq+LAggpMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvRzZEUGplWV85cWF2NFpRanRBeG1yNHNDQ0NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufRrMA0G
CSqGSIb3DQEBCwUAA4IBAQBO+Tv/Dgmc+udRSzsQ+NQyxJexhz4xWNZbJuyQ8MsZ
+6xkCldK3sFY9Xq0bOYD6mpcOxLTPXCt/aV84VMo6akSp8yu6A3RWM050Y9drRTC
kuolck1AyRRMtix2BlBaoRvsWTYKR7uE5EGn6vOHcpap39lke4JrHaRKapKb+K/5
jWWsonFP8LqGRapEPvh9Tbp0rEM8aH7jCBSOgolSGs1qSkO5iDnWLE5eIuk0Mc1T
eqfsis3Eu1HE8qT6J2hFTABZvEKg8cMgXRvnAmnPIgO7Ft/xW+3qtJdInpEoqueO
ItMXNmmsGPfqGWGVDTFLjCX/2LJNS57iUfX6/A86wSfi
-----END CERTIFICATE-----