Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/G360gFy4hArdtm-jkiJRtGBejNc.roa
File: G360gFy4hArdtm-jkiJRtGBejNc.roa (raw, json)
Hash identifier: G49Xfk3OJo144fdez5oFVMa2scqtTtfms4KPpU2BGq0=
Subject key identifier: 1B:7E:B4:80:5C:B8:84:0A:DD:B6:6F:A3:92:22:51:B4:60:5E:8C:D7
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 01941F8C3944974A471A6213E219FF3ECD09
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/G360gFy4hArdtm-jkiJRtGBejNc.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209281
IP address blocks: 185.163.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:39:44:97:4a:47:1a:62:13:e2:19:ff:3e:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b7eb4805cb8840addb66fa3922251b4605e8cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:f2:99:7d:f1:ca:83:ec:a1:52:1e:b3:d5:
47:3e:37:2d:28:a3:84:e4:51:15:93:cc:44:d2:c0:
e8:03:b8:72:b7:70:b0:88:24:db:f3:12:cf:79:80:
38:07:3a:af:04:16:5e:2e:20:f3:51:cb:8c:d5:81:
1a:96:df:3a:10:0d:34:14:79:2d:49:c0:41:6b:72:
f1:b4:5d:13:21:0c:01:a4:37:29:57:18:49:9d:90:
f9:7b:93:1e:2f:ee:2a:c3:2f:d3:f4:ec:f7:b3:8b:
72:fd:c3:58:2d:ae:fa:b1:1f:44:15:02:c3:80:74:
e2:10:52:53:6a:90:1a:2b:d9:2a:69:b4:b1:ff:57:
62:db:ce:73:fa:15:cb:47:2f:db:d2:c9:f1:35:41:
6e:73:00:97:7f:c1:56:39:1d:25:33:cf:25:13:6b:
2b:ed:ab:7d:be:f2:43:42:d9:6a:82:72:df:0a:6b:
1d:7f:77:aa:e0:c2:f7:db:16:09:50:02:a5:9f:75:
aa:81:54:7c:2f:4d:90:e3:b0:4d:df:9e:4b:e9:87:
10:ef:e8:ed:a7:8c:5c:f0:c7:d9:64:a6:f4:ac:71:
5e:06:95:96:b2:00:86:8c:39:cd:1e:30:94:9f:51:
8a:0c:ff:e3:c9:db:8d:28:65:53:f8:6a:9f:36:8e:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:B4:80:5C:B8:84:0A:DD:B6:6F:A3:92:22:51:B4:60:5E:8C:D7
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/G360gFy4hArdtm-jkiJRtGBejNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.132.0/22
Signature Algorithm: sha256WithRSAEncryption
70:03:d9:66:94:46:11:a3:48:c8:69:19:2f:f4:88:7e:c5:32:
f0:0d:0e:81:56:b3:cd:a7:ea:34:67:94:aa:d4:c1:72:08:20:
c3:51:65:9f:2a:04:7b:61:97:8f:c9:63:bb:f4:fd:fb:be:10:
cc:2e:c1:9e:40:bd:bf:c6:5e:a2:71:30:05:7c:7b:4d:9c:18:
7d:44:af:8c:21:5b:23:be:f1:62:9f:2f:b5:6c:9b:6e:28:03:
5b:a4:7b:a7:bc:39:7c:1a:2b:42:bf:8b:03:8b:dc:a1:49:e0:
35:24:06:4c:67:0d:e0:78:d2:19:6a:ef:dd:f7:93:3a:55:58:
84:50:6f:43:7d:0f:d1:5f:d9:9d:85:10:07:4d:d2:64:4b:0d:
17:a1:23:03:ac:3e:31:51:bd:21:05:30:58:9c:5c:46:33:ee:
90:a6:cc:54:3a:e3:52:58:cd:34:f1:f2:04:9b:1a:e0:fc:bb:
9f:79:55:e7:a4:fb:6b:9d:41:e0:22:29:ba:97:d4:4d:02:91:
a1:03:f5:da:e7:00:c2:e6:03:24:c1:f5:1b:f3:67:f3:c0:ef:
cb:79:ce:06:14:6f:10:c6:c0:79:eb:05:29:d0:7a:15:be:a0:
e4:21:38:f6:ea:2c:31:a6:d2:aa:4d:5d:0c:e6:8f:dc:0e:11:
7e:64:3b:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDlEl0pHGmIT4hn/Ps0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWEyNzQ0NDU4MjZlM2Q3OTVjM2VkMThjMjc3MDBlZWFj
MWNhNjIwHhcNMjUwMTAxMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjdlYjQ4MDVjYjg4NDBhZGRiNjZmYTM5MjIyNTFiNDYwNWU4Y2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIrymX3xyoPsoVIes9VHPjctKKOE
5FEVk8xE0sDoA7hyt3CwiCTb8xLPeYA4BzqvBBZeLiDzUcuM1YEalt86EA00FHkt
ScBBa3LxtF0TIQwBpDcpVxhJnZD5e5MeL+4qwy/T9Oz3s4ty/cNYLa76sR9EFQLD
gHTiEFJTapAaK9kqabSx/1di285z+hXLRy/b0snxNUFucwCXf8FWOR0lM88lE2sr
7at9vvJDQtlqgnLfCmsdf3eq4ML32xYJUAKln3WqgVR8L02Q47BN355L6YcQ7+jt
p4xc8MfZZKb0rHFeBpWWsgCGjDnNHjCUn1GKDP/jyduNKGVT+GqfNo4mowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBt+tIBcuIQK3bZvo5IiUbRgXozXMB8GA1UdIwQY
MBaAFNyqJ0RFgm49eVw+0YwncA7qwcpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTIt
OWE4MjQzZTg0ZTU0LzEvRzM2MGdGeTRoQXJkdG0tamtpSlJ0R0Jlak5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTItOWE4MjQzZTg0ZTU0
LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaOEMA0G
CSqGSIb3DQEBCwUAA4IBAQBwA9lmlEYRo0jIaRkv9Ih+xTLwDQ6BVrPNp+o0Z5Sq
1MFyCCDDUWWfKgR7YZePyWO79P37vhDMLsGeQL2/xl6icTAFfHtNnBh9RK+MIVsj
vvFiny+1bJtuKANbpHunvDl8GitCv4sDi9yhSeA1JAZMZw3geNIZau/d95M6VViE
UG9DfQ/RX9mdhRAHTdJkSw0XoSMDrD4xUb0hBTBYnFxGM+6QpsxUOuNSWM008fIE
mxrg/LufeVXnpPtrnUHgIim6l9RNApGhA/Xa5wDC5gMkwfUb82fzwO/Lec4GFG8Q
xsB56wUp0HoVvqDkITj26iwxptKqTV0M5o/cDhF+ZDtW
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:57 2025 by rpki-client