Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/ilRpOqqhCRrukRL5kvILbezdwjw.roa
File: ilRpOqqhCRrukRL5kvILbezdwjw.roa (raw, json)
Hash identifier: 09XWT+P0AZf+EnMM2PlCmZMY0UVdVh5S35frUm5Llew=
Subject key identifier: 8A:54:69:3A:AA:A1:09:1A:EE:91:12:F9:92:F2:0B:6D:EC:DD:C2:3C
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 0194214454B97C00E999D5DF5659D967C62F
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/ilRpOqqhCRrukRL5kvILbezdwjw.roa
Signing time: Wed 01 Jan 2025 09:48:33 +0000
ROA not before: Wed 01 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207356
IP address blocks: 185.16.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:54:b9:7c:00:e9:99:d5:df:56:59:d9:67:c6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a54693aaaa1091aee9112f992f20b6decddc23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:a9:78:2a:d2:1c:86:14:bb:bb:43:7d:b8:
e7:94:3c:ed:5a:54:6a:99:1a:78:d8:6a:b4:aa:1a:
98:c0:2a:84:25:f7:7b:6e:30:31:cd:9d:36:46:16:
a6:55:8e:bc:70:6e:3c:c0:07:85:66:b4:96:c0:60:
56:ad:f5:94:be:3c:a9:44:12:a0:21:36:98:cb:35:
a6:45:21:cb:2e:53:5a:dc:38:07:a5:3d:9d:f3:fe:
f5:8f:6d:45:3a:6b:92:03:c0:64:df:6a:b6:8a:7b:
c2:ab:bf:50:6d:7a:87:46:bf:ea:48:74:d0:1c:e9:
f0:67:cd:75:66:28:67:d8:30:34:b9:42:bd:99:90:
69:a2:73:2c:c7:92:99:f9:31:0d:d4:b4:68:85:93:
f3:4d:b3:ef:98:c7:56:c8:03:3d:0e:ad:4d:96:d8:
b7:40:65:6b:29:f7:d4:1b:4b:4b:8c:b1:ca:e8:47:
c1:8c:19:16:c2:6e:4a:b0:c0:64:13:39:f3:b3:30:
85:23:e5:dc:a4:33:10:9f:7c:a7:b2:be:8d:4b:5a:
27:dc:5c:a8:48:5d:02:b3:e6:4d:3f:ee:56:42:d2:
f9:c3:da:04:76:7c:ec:c8:4f:59:c6:f9:68:49:90:
4e:bc:ce:33:c2:9e:46:0a:71:d1:b6:9b:a5:0a:db:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:54:69:3A:AA:A1:09:1A:EE:91:12:F9:92:F2:0B:6D:EC:DD:C2:3C
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/ilRpOqqhCRrukRL5kvILbezdwjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:c5:cc:5c:68:a2:d9:b7:48:9e:f8:c7:c1:67:a3:3f:68:c8:
cc:2e:42:e3:1d:04:57:e1:c3:fd:24:e1:f1:b9:a2:d0:82:c5:
93:d5:0b:bf:60:de:e5:fa:80:48:7c:50:35:15:49:a4:a3:42:
75:b6:6e:ba:33:07:35:da:8d:e7:83:f9:4e:1f:2a:65:70:86:
31:01:ba:38:25:b1:9a:64:c9:d1:33:61:54:9f:ab:0c:c2:03:
cc:0c:97:69:b3:b2:2f:1b:f3:e1:4c:c9:90:b9:65:d6:da:14:
2b:4f:06:7d:99:68:95:f6:f8:dd:af:5a:e0:c5:1e:bd:21:10:
54:ee:15:97:a9:aa:e9:ad:25:7a:d5:cc:7a:89:78:46:e8:df:
c7:e6:01:1f:80:d0:0e:67:c0:89:89:53:9c:33:ea:fb:c1:44:
02:93:9d:d0:bd:6f:75:bd:4c:29:ec:16:d0:52:2d:ae:e2:bc:
08:0d:28:22:26:ed:8d:28:5f:ce:62:45:6b:1a:80:27:cc:dd:
c1:aa:6f:89:06:e6:32:1e:34:fe:f1:24:c3:03:4f:4b:bc:da:
c9:6f:eb:05:89:e1:d7:c4:a8:55:c5:a3:92:7a:bc:e1:7a:9e:
b5:f8:48:b1:df:2a:d5:c9:03:aa:24:8e:d1:9e:06:14:2d:3e:
d8:11:0f:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRFS5fADpmdXfVlnZZ8YvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZjBmNzVjYWVkM2YyNjg4NWFjNjU2MzBmZmFhZWU3N2E3
MGViZDkwHhcNMjUwMTAxMDk0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTU0NjkzYWFhYTEwOTFhZWU5MTEyZjk5MmYyMGI2ZGVjZGRjMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8ypeCrSHIYUu7tDfbjnlDztWlRq
mRp42Gq0qhqYwCqEJfd7bjAxzZ02RhamVY68cG48wAeFZrSWwGBWrfWUvjypRBKg
ITaYyzWmRSHLLlNa3DgHpT2d8/71j21FOmuSA8Bk32q2invCq79QbXqHRr/qSHTQ
HOnwZ811Zihn2DA0uUK9mZBponMsx5KZ+TEN1LRohZPzTbPvmMdWyAM9Dq1Nlti3
QGVrKffUG0tLjLHK6EfBjBkWwm5KsMBkEznzszCFI+XcpDMQn3ynsr6NS1on3Fyo
SF0Cs+ZNP+5WQtL5w9oEdnzsyE9ZxvloSZBOvM4zwp5GCnHRtpulCtsSbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpUaTqqoQka7pES+ZLyC23s3cI8MB8GA1UdIwQY
MBaAFATw91yu0/JohaxlYw/6rud6cOvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlBEM1hLN1Q4bWlGckdWakRfcXU1M3B3NjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hYzg1ODctZGIwZC00ZmUxLWEzOWQt
NDUyZWY2YWJlMDBmLzEvaWxScE9xcWhDUnJ1a1JMNWt2SUxiZXpkd2p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hYzg1ODctZGIwZC00ZmUxLWEzOWQtNDUyZWY2YWJlMDBm
LzEvQlBEM1hLN1Q4bWlGckdWakRfcXU1M3B3NjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRD4MA0G
CSqGSIb3DQEBCwUAA4IBAQC5xcxcaKLZt0ie+MfBZ6M/aMjMLkLjHQRX4cP9JOHx
uaLQgsWT1Qu/YN7l+oBIfFA1FUmko0J1tm66Mwc12o3ng/lOHyplcIYxAbo4JbGa
ZMnRM2FUn6sMwgPMDJdps7IvG/PhTMmQuWXW2hQrTwZ9mWiV9vjdr1rgxR69IRBU
7hWXqarprSV61cx6iXhG6N/H5gEfgNAOZ8CJiVOcM+r7wUQCk53QvW91vUwp7BbQ
Ui2u4rwIDSgiJu2NKF/OYkVrGoAnzN3Bqm+JBuYyHjT+8STDA09LvNrJb+sFieHX
xKhVxaOSerzhep61+Eix3yrVyQOqJI7RngYULT7YEQ8I
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net