Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/R2-GAax-KT1qCEjDDbUwaoUFHaY.roa
File: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (raw, json)
Hash identifier: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=
Subject key identifier: 47:6F:86:01:AC:7E:29:3D:6A:08:48:C3:0D:B5:30:6A:85:05:1D:A6
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 019420D600E391BBAB4B7E0AB9C4F3A29BE5
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/R2-GAax-KT1qCEjDDbUwaoUFHaY.roa
Signing time: Wed 01 Jan 2025 07:48:03 +0000
ROA not before: Wed 01 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10393
IP address blocks: 185.39.236.0/24 maxlen: 24
185.39.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:00:e3:91:bb:ab:4b:7e:0a:b9:c4:f3:a2:9b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jan 1 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=476f8601ac7e293d6a0848c30db5306a85051da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:2e:29:95:c4:5b:bd:b6:dd:29:62:76:88:
29:e2:35:58:b5:d8:81:bf:04:cf:71:39:28:7c:68:
61:28:ab:8d:0c:97:0a:ef:5a:89:58:1b:61:16:1d:
72:37:dc:aa:56:bf:d2:09:d2:4e:ae:e4:c9:dd:55:
ce:c9:96:ca:43:54:58:c1:bb:1a:df:c3:f1:9a:f5:
c4:3e:4d:b9:55:50:52:f0:47:43:43:a5:cf:da:17:
32:46:39:61:e4:94:de:93:65:8d:9f:f3:b8:32:9f:
6f:b0:ea:18:fc:00:16:51:7f:8c:dc:2d:7a:fc:34:
86:e2:dd:83:12:57:3e:91:5d:05:ea:cb:dd:10:4c:
c7:c5:f9:c0:d7:b1:af:0c:32:b9:28:de:af:c6:cd:
ba:4a:bf:39:16:07:dd:14:79:f0:ac:f5:bd:33:6b:
be:ce:9f:b1:d5:86:90:c3:e3:af:e8:11:63:d5:6c:
c8:fe:29:35:29:ee:a0:bd:1c:67:4a:bc:00:74:13:
66:54:60:34:c7:3f:5f:a9:46:d7:26:3b:b8:60:6b:
7d:56:b2:af:87:35:68:d4:1e:c8:aa:ea:de:86:c4:
29:7e:d7:a5:b5:9c:be:f0:02:cf:dd:d9:70:45:f2:
87:90:2a:5e:bd:52:9e:9e:98:45:67:b7:23:5f:3f:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6F:86:01:AC:7E:29:3D:6A:08:48:C3:0D:B5:30:6A:85:05:1D:A6
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/R2-GAax-KT1qCEjDDbUwaoUFHaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.236.0/23
Signature Algorithm: sha256WithRSAEncryption
11:b2:fd:7c:b3:eb:3c:cf:dc:84:7a:61:91:46:4c:f3:74:5f:
a1:a3:13:86:9c:2e:50:56:b1:b3:20:63:14:a5:e8:c6:4e:ce:
6f:30:8b:f6:44:bc:ed:86:00:3a:c7:0e:30:e0:d7:3f:45:2d:
a3:06:d9:94:0c:c1:73:3f:e0:ec:7a:68:fd:88:2f:82:f0:43:
d5:73:57:b2:74:8d:76:87:bf:ca:64:b8:87:b4:85:01:c1:a3:
69:10:52:cb:e2:91:13:fe:d9:07:88:6b:64:d5:c0:73:a3:74:
4a:b3:23:ad:d0:02:7f:9f:ca:4d:46:99:3c:1a:fd:7b:18:11:
62:31:f8:77:b8:9e:d5:22:02:3a:89:62:d4:32:5f:ef:10:95:
12:47:49:a3:c0:b4:0a:14:1c:88:2b:44:ed:98:61:de:3b:fb:
6e:56:93:36:9b:9d:b4:28:8d:1d:18:49:07:37:41:ca:6b:66:
29:f5:fb:b1:67:5b:4c:24:7a:6c:3c:6f:f0:ae:3b:0b:b7:0f:
0f:2e:36:d0:30:97:10:89:0b:ec:a7:2b:2a:19:bc:1d:8e:b8:
63:ec:64:cd:31:1d:c1:ca:1f:b1:aa:93:7b:a0:ca:b9:57:a4:
1e:11:ed:84:b1:a7:95:0b:9b:85:66:f5:ac:8b:30:88:8e:ec:
ba:ec:25:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1gDjkburS34KucTzopvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx
MzZjYjAwHhcNMjUwMTAxMDc0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzZmODYwMWFjN2UyOTNkNmEwODQ4YzMwZGI1MzA2YTg1MDUxZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuokuKZXEW7223Slidogp4jVYtdiB
vwTPcTkofGhhKKuNDJcK71qJWBthFh1yN9yqVr/SCdJOruTJ3VXOyZbKQ1RYwbsa
38PxmvXEPk25VVBS8EdDQ6XP2hcyRjlh5JTek2WNn/O4Mp9vsOoY/AAWUX+M3C16
/DSG4t2DElc+kV0F6svdEEzHxfnA17GvDDK5KN6vxs26Sr85FgfdFHnwrPW9M2u+
zp+x1YaQw+Ov6BFj1WzI/ik1Ke6gvRxnSrwAdBNmVGA0xz9fqUbXJju4YGt9VrKv
hzVo1B7IqurehsQpfteltZy+8ALP3dlwRfKHkCpevVKenphFZ7cjXz/QYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEdvhgGsfik9aghIww21MGqFBR2mMB8GA1UdIwQY
MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt
ODI1N2Q1MTkyOGE5LzEvUjItR0FheC1LVDFxQ0VqRERiVXdhb1VGSGFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5
LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSfsMA0G
CSqGSIb3DQEBCwUAA4IBAQARsv18s+s8z9yEemGRRkzzdF+hoxOGnC5QVrGzIGMU
pejGTs5vMIv2RLzthgA6xw4w4Nc/RS2jBtmUDMFzP+Dsemj9iC+C8EPVc1eydI12
h7/KZLiHtIUBwaNpEFLL4pET/tkHiGtk1cBzo3RKsyOt0AJ/n8pNRpk8Gv17GBFi
Mfh3uJ7VIgI6iWLUMl/vEJUSR0mjwLQKFByIK0TtmGHeO/tuVpM2m520KI0dGEkH
N0HKa2Yp9fuxZ1tMJHpsPG/wrjsLtw8PLjbQMJcQiQvspysqGbwdjrhj7GTNMR3B
yh+xqpN7oMq5V6QeEe2EsaeVC5uFZvWsizCIjuy67CXZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:07 2025 by rpki-client