Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa
File: 7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa (raw, json)
Hash identifier: l6jtovWx9ge466onVKmeSTTNETL8X/SNcFUw3TEBnWE=
Subject key identifier: ED:69:12:34:C7:8A:A3:78:60:04:E3:63:76:55:99:E3:17:86:66:D0
Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial: 019422FB95BE969E7E080F45A571D1DF4856
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58253
IP address blocks: 185.150.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:95:be:96:9e:7e:08:0f:45:a5:71:d1:df:48:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed691234c78aa3786004e363765599e3178666d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:40:d8:9c:e3:26:f2:d1:31:35:17:cd:e3:
9e:ca:58:5d:35:ca:31:61:a3:a8:ea:65:9b:b5:53:
d2:af:7d:d9:ce:d0:74:c5:31:c7:57:b4:19:20:12:
23:ad:59:6f:e4:d3:b3:cf:ac:d6:de:48:52:6d:d9:
71:a5:73:8a:ac:ec:4d:90:6c:bb:5d:56:c3:85:36:
7b:94:61:7b:fb:d3:6c:0e:a3:17:c0:2f:e7:56:80:
ba:21:22:06:15:c5:8a:c8:8a:19:38:f9:b1:ba:66:
09:6d:6f:8d:06:80:ca:b1:de:50:76:5d:d4:a6:af:
1d:ef:78:b1:ac:f4:2a:d7:0c:3d:1f:f9:f1:32:5d:
f3:0e:0d:58:f6:ea:58:04:15:44:56:f7:86:e9:7c:
7b:6d:73:18:7b:9e:e2:ca:ac:49:2d:0b:85:9c:a0:
55:4e:20:d3:0f:6b:88:f5:1d:bf:df:30:39:68:49:
ff:c5:6f:9e:73:9b:1b:cf:ff:8b:d4:25:13:db:dc:
db:e2:f3:b3:e8:07:6f:3a:d5:1c:87:cf:d8:a8:20:
da:4c:a7:59:c3:53:91:bc:4f:ba:3e:27:c1:fe:0b:
c3:13:30:ac:f9:96:c8:6f:0a:90:a4:4c:10:65:4d:
b0:72:25:4d:07:7e:59:a0:1c:19:79:12:d7:a6:c8:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:69:12:34:C7:8A:A3:78:60:04:E3:63:76:55:99:E3:17:86:66:D0
X509v3 Authority Key Identifier:
keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.64.0/22
Signature Algorithm: sha256WithRSAEncryption
86:2b:a1:92:e4:cf:bf:2c:0e:b3:9a:4f:b0:67:b8:62:2f:f3:
a7:a4:88:52:e6:ad:aa:29:a4:0e:ce:60:94:d6:be:2a:ba:ec:
cd:a4:a0:bf:fb:c3:87:01:64:fe:a8:9c:f6:1e:1f:a0:0d:42:
67:4a:f6:6b:06:61:1f:71:7c:29:4a:41:10:64:5c:cc:ed:1e:
1e:83:aa:73:4d:77:c6:50:71:57:ba:44:ff:f0:2e:83:31:cb:
05:ae:79:cd:cb:62:66:1d:6e:4b:ab:c4:5b:05:63:62:57:04:
5a:9a:44:f2:af:76:75:46:7a:57:42:d5:e1:7f:c3:a3:ac:a3:
86:be:0b:33:c2:8d:d5:eb:68:1a:86:a3:e1:cc:04:6d:b9:dc:
19:de:5b:1a:5a:9b:51:aa:db:c4:35:a3:ae:1c:a2:d7:3d:63:
8f:9f:b0:21:1a:fc:12:c3:6d:34:2f:25:f0:6f:dc:57:9b:96:
ba:c8:e2:e0:08:20:51:ce:fb:1e:85:30:0c:1e:f0:07:f7:cc:
6e:f3:94:a5:ef:85:1a:7f:81:3c:13:34:e9:4c:e2:52:ef:7f:
d3:ef:65:09:0d:fd:d3:cb:a5:09:12:66:82:76:99:cf:65:41:
f4:95:03:66:e5:87:cf:70:60:de:f6:00:2c:0d:24:4e:b8:5d:
01:68:f9:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+5W+lp5+CA9FpXHR30hWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTVhM2E4ZmM4ZGQzNGRkNmYzYzk1MGM2NjFmNGIyMTI3
MTc1YTUwHhcNMjUwMTAxMTc0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDY5MTIzNGM3OGFhMzc4NjAwNGUzNjM3NjU1OTllMzE3ODY2NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kZA2JzjJvLRMTUXzeOeylhdNcox
YaOo6mWbtVPSr33ZztB0xTHHV7QZIBIjrVlv5NOzz6zW3khSbdlxpXOKrOxNkGy7
XVbDhTZ7lGF7+9NsDqMXwC/nVoC6ISIGFcWKyIoZOPmxumYJbW+NBoDKsd5Qdl3U
pq8d73ixrPQq1ww9H/nxMl3zDg1Y9upYBBVEVveG6Xx7bXMYe57iyqxJLQuFnKBV
TiDTD2uI9R2/3zA5aEn/xW+ec5sbz/+L1CUT29zb4vOz6AdvOtUch8/YqCDaTKdZ
w1ORvE+6PifB/gvDEzCs+ZbIbwqQpEwQZU2wciVNB35ZoBwZeRLXpsjbmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO1pEjTHiqN4YATjY3ZVmeMXhmbQMB8GA1UdIwQY
MBaAFBOVo6j8jdNN1vPJUMZh9LIScXWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzIt
ZjA0OGE5MjY2ZmNmLzEvN1drU05NZUtvM2hnQk9OamRsV1o0eGVHWnRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzItZjA0OGE5MjY2ZmNm
LzEvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZZAMA0G
CSqGSIb3DQEBCwUAA4IBAQCGK6GS5M+/LA6zmk+wZ7hiL/OnpIhS5q2qKaQOzmCU
1r4quuzNpKC/+8OHAWT+qJz2Hh+gDUJnSvZrBmEfcXwpSkEQZFzM7R4eg6pzTXfG
UHFXukT/8C6DMcsFrnnNy2JmHW5Lq8RbBWNiVwRamkTyr3Z1RnpXQtXhf8OjrKOG
vgszwo3V62gahqPhzARtudwZ3lsaWptRqtvENaOuHKLXPWOPn7AhGvwSw200LyXw
b9xXm5a6yOLgCCBRzvsehTAMHvAH98xu85Sl74Uaf4E8EzTpTOJS73/T72UJDf3T
y6UJEmaCdpnPZUH0lQNm5YfPcGDe9gAsDSROuF0BaPmS
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:05 2025 by rpki-client