Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/IwWglmhS5Zmc1TAwKCoGnND82Hg.roa
File: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (raw, json)
Hash identifier: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=
Subject key identifier: 23:05:A0:96:68:52:E5:99:9C:D5:30:30:28:2A:06:9C:D0:FC:D8:78
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 0194266B816FE03D538DB8FE8E790CE33664
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/IwWglmhS5Zmc1TAwKCoGnND82Hg.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204521
IP address blocks: 185.168.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:81:6f:e0:3d:53:8d:b8:fe:8e:79:0c:e3:36:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2305a0966852e5999cd53030282a069cd0fcd878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:42:03:0c:2e:d6:4b:50:58:97:3a:76:f7:
d4:3b:bc:ab:84:c9:9c:ab:18:a8:99:6c:e6:69:32:
fe:a6:58:29:63:fc:d4:2f:ac:14:83:53:5e:90:98:
df:2e:67:bf:2d:aa:3d:8a:0c:98:7f:a5:62:45:04:
75:46:84:30:69:ee:ca:f2:84:b7:eb:b2:6c:a4:c1:
69:7a:7c:d4:25:e0:bc:a5:99:a7:24:52:22:18:b0:
16:da:91:03:02:38:76:46:db:49:ad:cf:f8:0c:93:
b9:67:1c:c2:6d:ff:9a:f5:51:76:f5:c1:ee:c7:ce:
6d:c9:7a:24:87:ea:05:e9:6b:55:08:5c:74:22:a2:
b3:c9:b6:a2:c7:a3:b7:c8:b2:bd:91:bd:92:c5:7a:
1e:28:18:8e:e2:e9:d2:f7:e9:2b:24:13:a3:3e:bf:
75:5e:0d:eb:95:4e:05:05:38:9d:5d:e8:4e:18:7b:
6e:55:1c:87:ed:b1:6e:cc:0b:74:32:9d:a9:85:36:
82:f7:fe:26:86:90:3e:9c:7b:68:ad:5d:ad:3e:0f:
d8:81:42:c2:9a:6f:83:00:99:08:c4:67:0e:c3:95:
10:ee:5d:2b:b6:20:9c:cc:20:0e:4e:3b:dd:1b:7b:
60:4c:ec:b7:b3:6b:f7:8e:ed:3b:19:4c:70:73:52:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:A0:96:68:52:E5:99:9C:D5:30:30:28:2A:06:9C:D0:FC:D8:78
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/IwWglmhS5Zmc1TAwKCoGnND82Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f7:47:6b:54:b8:9a:e6:c5:b7:d5:cf:fb:ab:e1:e3:24:dd:
8b:a8:bb:da:01:e8:6d:86:21:27:9e:78:f4:12:60:73:62:d4:
ac:6e:0f:05:a9:ae:79:c0:5a:83:54:0a:10:59:cc:1f:62:64:
3d:08:a3:36:36:9e:27:1c:48:fe:f9:fd:bb:5b:32:f2:f6:0c:
ce:11:25:42:96:22:c2:e3:d4:94:4a:f0:47:87:ab:a5:71:c3:
d8:88:07:3c:da:b2:a0:e5:61:a8:cd:62:5e:e9:00:f0:23:dd:
fc:62:49:1d:28:cd:0c:49:07:b8:fa:f9:bb:9c:6c:0a:5d:ad:
92:74:6e:7f:7a:88:30:b3:26:a8:88:99:c3:2b:b7:7c:25:9d:
14:1f:43:50:84:12:af:96:59:51:11:3f:ba:31:6d:85:e9:70:
b8:17:eb:be:ad:cd:d7:5e:e0:51:52:31:4f:4a:ef:a9:36:2c:
ef:11:a1:cd:2e:80:4f:c0:d5:5d:39:ca:dd:e3:a1:3b:3d:a4:
64:1c:42:41:81:1f:85:3e:10:5d:9b:3a:83:21:7f:da:0c:1c:
df:ba:51:15:29:9e:6e:f8:27:ce:4d:29:aa:59:b8:fe:31:43:
9b:2d:f9:1a:6c:5c:49:cd:41:fb:3b:e6:e0:81:44:6a:8f:d2:
e0:8a:c5:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma4Fv4D1Tjbj+jnkM4zZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTY1OTBhMGVhZjQ4ZGYyYjFhZTIzYjlkNTU5ZTljYWMy
NTk5N2UwHhcNMjUwMTAyMDk0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzA1YTA5NjY4NTJlNTk5OWNkNTMwMzAyODJhMDY5Y2QwZmNkODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZJCAwwu1ktQWJc6dvfUO7yrhMmc
qxiomWzmaTL+plgpY/zUL6wUg1NekJjfLme/Lao9igyYf6ViRQR1RoQwae7K8oS3
67JspMFpenzUJeC8pZmnJFIiGLAW2pEDAjh2RttJrc/4DJO5ZxzCbf+a9VF29cHu
x85tyXokh+oF6WtVCFx0IqKzybaix6O3yLK9kb2SxXoeKBiO4unS9+krJBOjPr91
Xg3rlU4FBTidXehOGHtuVRyH7bFuzAt0Mp2phTaC9/4mhpA+nHtorV2tPg/YgULC
mm+DAJkIxGcOw5UQ7l0rtiCczCAOTjvdG3tgTOy3s2v3ju07GUxwc1IR+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCMFoJZoUuWZnNUwMCgqBpzQ/Nh4MB8GA1UdIwQY
MBaAFFMWWQoOr0jfKxriO51VnpysJZl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mOWRkMWMtMzE3Yi00MWMxLThmY2It
N2Q5ZWFiZWUxNWFjLzEvSXdXZ2xtaFM1Wm1jMVRBd0tDb0duTkQ4MkhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mOWRkMWMtMzE3Yi00MWMxLThmY2ItN2Q5ZWFiZWUxNWFj
LzEvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuajYMA0G
CSqGSIb3DQEBCwUAA4IBAQCX90drVLia5sW31c/7q+HjJN2LqLvaAehthiEnnnj0
EmBzYtSsbg8Fqa55wFqDVAoQWcwfYmQ9CKM2Np4nHEj++f27WzLy9gzOESVCliLC
49SUSvBHh6ulccPYiAc82rKg5WGozWJe6QDwI938YkkdKM0MSQe4+vm7nGwKXa2S
dG5/eogwsyaoiJnDK7d8JZ0UH0NQhBKvlllRET+6MW2F6XC4F+u+rc3XXuBRUjFP
Su+pNizvEaHNLoBPwNVdOcrd46E7PaRkHEJBgR+FPhBdmzqDIX/aDBzfulEVKZ5u
+CfOTSmqWbj+MUObLfkabFxJzUH7O+bggURqj9LgisVG
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net