Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/FlOhwM63q5uT7aqavOHtoCPIxiA.roa
File: FlOhwM63q5uT7aqavOHtoCPIxiA.roa (raw, json)
Hash identifier: CII+st3ErTYXreHn6XwAid/3W1WLBVtyHJl2G4GqMT4=
Subject key identifier: 16:53:A1:C0:CE:B7:AB:9B:93:ED:AA:9A:BC:E1:ED:A0:23:C8:C6:20
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 019423D7887E5E29695C901366647383DA2E
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/FlOhwM63q5uT7aqavOHtoCPIxiA.roa
Signing time: Wed 01 Jan 2025 21:48:35 +0000
ROA not before: Wed 01 Jan 2025 21:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21211
IP address blocks: 185.184.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:88:7e:5e:29:69:5c:90:13:66:64:73:83:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Jan 1 21:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1653a1c0ceb7ab9b93edaa9abce1eda023c8c620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:91:b3:c5:15:81:0f:e9:69:ff:b3:0f:a4:
37:de:53:03:09:2e:07:d5:82:72:57:29:60:58:3d:
4f:a6:87:34:00:a9:11:23:0c:83:cd:a6:6d:77:6d:
e4:e1:15:20:b8:a0:c5:a7:93:9e:fa:74:96:6c:85:
43:d7:fb:47:13:fd:41:c4:37:4d:ab:b4:75:2f:36:
8f:ea:4a:ce:3a:49:2c:58:45:d8:ee:67:fa:ca:1c:
5f:9c:3e:66:e3:a0:cd:b4:d2:2a:81:4e:91:81:f2:
a5:f6:48:68:ce:55:a7:01:4b:37:64:3b:f8:6a:1b:
75:b5:de:c3:7d:1b:eb:5d:21:0f:90:f8:cb:e3:4f:
8e:14:8b:e6:3b:f0:2f:ed:2a:c4:d0:40:2c:a0:09:
8e:0c:9f:04:c8:1c:d9:4a:92:8d:f0:e5:ca:65:06:
66:cb:70:ae:d0:f9:84:08:66:9c:1f:e9:4d:08:a1:
d9:fa:d8:a6:f1:16:a5:fa:b7:0f:20:0c:08:b8:06:
a9:2b:70:0f:4a:6b:47:a6:d5:1b:4b:ae:8d:b8:1c:
e5:b1:6b:c4:bc:d7:ed:f0:5c:7b:c4:e1:be:4f:8a:
bd:33:4f:5b:78:0c:1e:85:03:1e:f4:e8:6c:4c:d2:
09:71:27:0c:49:97:3e:31:49:7d:2f:8f:dd:72:84:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:53:A1:C0:CE:B7:AB:9B:93:ED:AA:9A:BC:E1:ED:A0:23:C8:C6:20
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/FlOhwM63q5uT7aqavOHtoCPIxiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:27:c5:c6:d3:8b:8a:6e:9e:54:5c:bc:b6:9b:3a:e2:74:73:
07:42:51:71:a0:a8:f4:e8:52:31:4c:ff:43:9e:75:dd:b8:50:
7f:54:cd:f9:39:26:a1:11:6f:03:42:5e:d4:24:26:59:5e:dd:
90:81:7e:00:9a:c0:4d:53:8c:13:ea:4f:cd:82:87:9b:bd:2c:
63:13:3b:02:66:c5:04:f8:d1:c9:42:57:9b:99:1c:dc:2d:12:
ec:1a:0f:60:cd:8b:2a:ae:29:8e:1c:e0:52:04:bf:b1:80:42:
53:22:8b:ad:7c:fb:ea:d1:aa:71:65:98:c9:f6:f9:25:cb:9c:
b3:cd:bb:7c:18:e6:76:f1:30:c8:d4:14:51:60:c8:ab:c5:2d:
43:56:33:92:52:7d:3e:d0:df:a4:7c:91:61:45:0d:07:8c:54:
5c:b3:40:47:3f:be:40:06:60:03:ba:f4:5c:cd:cb:c4:5a:25:
57:57:56:3f:c6:df:20:2a:b7:b2:f4:ef:1a:e9:86:55:8d:6f:
3d:c3:91:16:ec:28:06:62:44:31:02:0b:e9:8d:89:3c:1d:58:
15:8c:cf:11:71:db:27:75:90:c8:14:4c:f7:ba:27:b8:cd:b6:
a6:1f:2b:ed:b5:10:c5:93:6e:5a:73:c7:dd:1a:e0:1e:18:03:
eb:32:f3:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj14h+XilpXJATZmRzg9ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWFjNzUzMzc5ZmQyMmZmNjUxNTAzM2Y1MTNkYzI4MjQ2
M2FkMmQwHhcNMjUwMTAxMjE0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjUzYTFjMGNlYjdhYjliOTNlZGFhOWFiY2UxZWRhMDIzYzhjNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGeRs8UVgQ/paf+zD6Q33lMDCS4H
1YJyVylgWD1Ppoc0AKkRIwyDzaZtd23k4RUguKDFp5Oe+nSWbIVD1/tHE/1BxDdN
q7R1LzaP6krOOkksWEXY7mf6yhxfnD5m46DNtNIqgU6RgfKl9khozlWnAUs3ZDv4
aht1td7DfRvrXSEPkPjL40+OFIvmO/Av7SrE0EAsoAmODJ8EyBzZSpKN8OXKZQZm
y3Cu0PmECGacH+lNCKHZ+tim8Ral+rcPIAwIuAapK3APSmtHptUbS66NuBzlsWvE
vNft8Fx7xOG+T4q9M09beAwehQMe9OhsTNIJcScMSZc+MUl9L4/dcoTa5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZTocDOt6ubk+2qmrzh7aAjyMYgMB8GA1UdIwQY
MBaAFJfqx1M3n9Iv9lFQM/UT3CgkY60tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQt
ZWY1OTBjMWM4ZTEyLzEvRmxPaHdNNjNxNXVUN2FxYXZPSHRvQ1BJeGlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQtZWY1OTBjMWM4ZTEy
LzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubiQMA0G
CSqGSIb3DQEBCwUAA4IBAQB9J8XG04uKbp5UXLy2mzridHMHQlFxoKj06FIxTP9D
nnXduFB/VM35OSahEW8DQl7UJCZZXt2QgX4AmsBNU4wT6k/NgoebvSxjEzsCZsUE
+NHJQlebmRzcLRLsGg9gzYsqrimOHOBSBL+xgEJTIoutfPvq0apxZZjJ9vkly5yz
zbt8GOZ28TDI1BRRYMirxS1DVjOSUn0+0N+kfJFhRQ0HjFRcs0BHP75ABmADuvRc
zcvEWiVXV1Y/xt8gKrey9O8a6YZVjW89w5EW7CgGYkQxAgvpjYk8HVgVjM8Rcdsn
dZDIFEz3uie4zbamHyvttRDFk25ac8fdGuAeGAPrMvMR
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net