Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ii7sXqAnw7f7NzbpJb_6oFMjhpc.roa
File: ii7sXqAnw7f7NzbpJb_6oFMjhpc.roa (raw, json)
Hash identifier: AOWTqxKX2+9CJPKTOXCl65iqher1a+VnhPVE2JqDlEg=
Subject key identifier: 8A:2E:EC:5E:A0:27:C3:B7:FB:37:36:E9:25:BF:FA:A0:53:23:86:97
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01942823997566B616A83C0528F2826E5275
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ii7sXqAnw7f7NzbpJb_6oFMjhpc.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215151
IP address blocks: 185.83.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:99:75:66:b6:16:a8:3c:05:28:f2:82:6e:52:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a2eec5ea027c3b7fb3736e925bffaa053238697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:b9:59:15:6f:ff:c1:18:7f:9f:72:26:49:
04:b6:c1:b1:c9:9d:cf:d9:43:bd:27:d8:f2:fa:74:
b2:e5:3f:ba:cc:df:25:36:7b:f8:48:7a:e8:ca:6c:
45:c7:52:98:4d:f6:ed:04:f6:fd:dc:1a:3b:89:2d:
58:ef:7d:10:8a:0b:18:e3:a0:fb:5e:01:b1:78:36:
e4:76:51:2d:ee:7e:a6:5b:1d:a0:ea:50:71:8a:1b:
2a:17:37:b1:ab:f4:f4:bc:a5:2c:36:9b:a6:78:21:
a6:29:e8:fa:9a:e5:83:80:94:7a:d2:43:62:d5:da:
63:eb:48:c2:51:84:37:21:05:a4:31:b9:42:83:93:
7d:5d:05:8f:73:be:a7:f3:7a:d4:c9:e3:04:ac:bc:
f4:35:51:90:0c:4f:d1:48:c9:34:5b:84:ca:f2:16:
c8:1a:85:24:73:d0:57:86:09:f8:97:8e:bc:49:df:
e5:0b:cc:88:6e:4e:cb:e4:cf:5e:c1:d2:6c:79:ff:
fc:50:cf:99:d5:8c:5c:95:e5:b6:a3:53:77:1e:2b:
0c:d7:2b:89:df:a7:12:a9:09:46:c8:8c:38:9e:44:
62:1c:17:45:77:8b:00:96:f7:7f:7c:99:83:02:b8:
ab:5f:e2:d4:e7:3d:ce:20:fe:79:96:37:80:4f:27:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2E:EC:5E:A0:27:C3:B7:FB:37:36:E9:25:BF:FA:A0:53:23:86:97
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ii7sXqAnw7f7NzbpJb_6oFMjhpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.202.0/23
Signature Algorithm: sha256WithRSAEncryption
60:9c:c3:c3:e8:c5:98:34:be:ea:15:91:ac:c7:43:13:01:e0:
62:88:45:45:fd:b7:e8:6e:71:c6:18:0c:16:4b:c9:ca:43:d9:
f9:73:62:3e:97:52:9c:e0:02:f2:03:6d:99:4e:1c:76:0b:26:
51:d8:b7:62:a0:57:71:c5:c6:05:d5:ed:2b:fb:1b:56:a9:3c:
b9:15:90:21:5e:0c:58:88:fa:54:2a:90:06:a7:59:0d:3c:94:
4e:c2:de:8e:7d:43:22:10:8d:39:b5:26:c7:4b:2a:a5:3b:d3:
59:72:08:f8:a3:b2:cf:0b:10:80:1c:44:4b:82:4b:04:45:03:
be:66:00:ae:c5:cd:7d:83:1e:fc:6e:17:91:f5:b7:ff:f6:54:
9b:d9:a2:9a:2e:03:2a:0b:81:ba:4b:e8:63:93:69:87:65:37:
aa:21:a3:6b:7b:5d:e4:e9:60:4c:f8:a0:1d:9e:08:a3:b7:1b:
9b:ee:ef:ff:eb:be:fd:14:4c:f7:8e:67:60:d4:11:e7:73:c7:
f8:34:98:67:e4:cb:f5:7c:58:26:eb:35:c6:77:16:40:e1:6e:
71:b7:ff:ad:b4:37:f0:17:38:96:6b:26:6b:7b:65:bb:66:eb:
c6:95:e0:f1:82:c5:9b:75:ea:e9:72:15:87:96:20:32:f8:a3:
c0:0b:e8:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI5l1ZrYWqDwFKPKCblJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjUwMTAyMTc1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTJlZWM1ZWEwMjdjM2I3ZmIzNzM2ZTkyNWJmZmFhMDUzMjM4Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtS5WRVv/8EYf59yJkkEtsGxyZ3P
2UO9J9jy+nSy5T+6zN8lNnv4SHroymxFx1KYTfbtBPb93Bo7iS1Y730QigsY46D7
XgGxeDbkdlEt7n6mWx2g6lBxihsqFzexq/T0vKUsNpumeCGmKej6muWDgJR60kNi
1dpj60jCUYQ3IQWkMblCg5N9XQWPc76n83rUyeMErLz0NVGQDE/RSMk0W4TK8hbI
GoUkc9BXhgn4l468Sd/lC8yIbk7L5M9ewdJsef/8UM+Z1YxcleW2o1N3HisM1yuJ
36cSqQlGyIw4nkRiHBdFd4sAlvd/fJmDArirX+LU5z3OIP55ljeATyfYlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIou7F6gJ8O3+zc26SW/+qBTI4aXMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvaWk3c1hxQW53N2Y3TnpicEpiXzZvRk1qaHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVPKMA0G
CSqGSIb3DQEBCwUAA4IBAQBgnMPD6MWYNL7qFZGsx0MTAeBiiEVF/bfobnHGGAwW
S8nKQ9n5c2I+l1Kc4ALyA22ZThx2CyZR2LdioFdxxcYF1e0r+xtWqTy5FZAhXgxY
iPpUKpAGp1kNPJROwt6OfUMiEI05tSbHSyqlO9NZcgj4o7LPCxCAHERLgksERQO+
ZgCuxc19gx78bheR9bf/9lSb2aKaLgMqC4G6S+hjk2mHZTeqIaNre13k6WBM+KAd
ngijtxub7u//6779FEz3jmdg1BHnc8f4NJhn5Mv1fFgm6zXGdxZA4W5xt/+ttDfw
FziWayZre2W7ZuvGleDxgsWbderpchWHliAy+KPAC+gc
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:50 2025 by rpki-client on console.sobornost.net