Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/EC7CG7vDGWKuQugmwYX02eAcLyQ.roa
File: EC7CG7vDGWKuQugmwYX02eAcLyQ.roa (raw, json)
Hash identifier: NeWqCf30d/nzXO3lh6RSwAe3lyCWu1HWylCk2It8npM=
Subject key identifier: 10:2E:C2:1B:BB:C3:19:62:AE:42:E8:26:C1:85:F4:D9:E0:1C:2F:24
Certificate issuer: /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial: 019427B606CCC131765A2448469725C67138
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/EC7CG7vDGWKuQugmwYX02eAcLyQ.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204541
IP address blocks: 185.239.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:06:cc:c1:31:76:5a:24:48:46:97:25:c6:71:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=102ec21bbbc31962ae42e826c185f4d9e01c2f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:88:ce:28:ee:87:2c:b1:45:e1:36:08:42:
0b:9e:eb:a1:35:b5:3a:dd:4e:0a:c5:b4:91:0f:57:
9d:8c:2f:e3:78:28:77:d7:1c:48:18:bd:1f:fd:bb:
d5:7c:82:57:32:58:3a:e1:0d:29:dc:fc:cb:4a:ff:
8e:68:14:38:5a:79:f8:37:6a:c0:0b:da:0f:c1:04:
f9:fd:ee:6c:c4:fd:49:34:77:0c:77:a6:90:53:c9:
64:68:ea:1a:ec:b8:26:c0:49:ec:3e:72:fe:d3:6c:
55:48:c4:b8:c2:8d:ea:14:e8:18:a3:28:02:2d:cb:
19:20:7d:93:ba:45:3c:07:37:db:a9:02:5e:cf:6d:
47:d1:e3:a2:c1:3c:a4:c3:93:89:46:bb:d3:95:be:
cd:42:40:1d:03:08:8e:7e:1d:9a:15:2d:0a:8c:d5:
a7:f4:4c:f6:21:5c:15:72:eb:c5:ef:98:bd:eb:e7:
70:ef:79:25:6a:82:6d:37:1f:bf:5a:72:d1:30:b2:
7d:df:35:5f:5b:17:fa:37:2e:57:e7:75:65:d2:21:
a7:46:54:6c:35:c1:0f:df:5e:98:22:98:86:51:20:
78:f5:77:e5:0e:8c:89:6a:4a:f3:d5:ce:99:14:35:
1a:2d:56:71:03:76:b2:57:1f:2f:e9:e1:77:17:87:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:C2:1B:BB:C3:19:62:AE:42:E8:26:C1:85:F4:D9:E0:1C:2F:24
X509v3 Authority Key Identifier:
keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/EC7CG7vDGWKuQugmwYX02eAcLyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.185.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d1:58:4c:04:89:ad:8a:cd:80:f8:5d:6b:6e:48:2b:c0:d0:
cd:2d:16:54:59:6b:54:91:c3:bf:b6:87:4d:0e:e1:09:19:dc:
e2:a6:aa:1e:45:25:1c:2a:78:07:e0:bb:98:04:16:a2:16:0a:
3b:63:63:23:3a:51:98:f5:da:c2:6f:b1:35:1a:21:5c:5e:e4:
d3:f1:3c:b4:b7:e4:00:0f:42:58:53:e4:c8:61:49:bc:76:51:
28:22:d9:61:46:e6:91:8f:0f:9f:8e:ad:15:c2:84:50:ca:c5:
1d:8e:7e:ab:04:b5:36:a1:a8:64:61:5c:2f:04:9c:d0:dc:88:
28:10:c1:1f:a4:23:43:ff:5f:f6:54:02:5c:e1:20:76:de:d7:
b9:9f:e0:78:f1:a0:ac:6e:9c:35:01:49:77:dd:bb:3d:13:8f:
b6:fb:43:ab:04:1c:12:13:a2:03:28:11:d9:4e:68:f1:8b:4f:
57:b9:32:2a:85:21:8c:07:0a:0f:24:22:1c:15:57:ee:5f:18:
b1:02:b4:5c:ac:1f:8c:45:5d:9c:4c:d7:d8:3b:16:b8:ed:5f:
d4:40:f7:f7:d4:ba:a3:3d:10:d8:ae:69:e3:ae:6f:4a:92:33:
d1:b4:cf:a2:8b:34:f2:1b:6d:06:ec:27:6b:99:61:4a:4b:a1:
f0:16:1d:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntgbMwTF2WiRIRpclxnE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzdiYzhlM2VjMjUwY2U4NWZiOTA5MTNjMmM0OTA1MTA0
M2ViYzUwHhcNMjUwMTAyMTU1MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDJlYzIxYmJiYzMxOTYyYWU0MmU4MjZjMTg1ZjRkOWUwMWMyZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEqIzijuhyyxReE2CEILnuuhNbU6
3U4KxbSRD1edjC/jeCh31xxIGL0f/bvVfIJXMlg64Q0p3PzLSv+OaBQ4Wnn4N2rA
C9oPwQT5/e5sxP1JNHcMd6aQU8lkaOoa7LgmwEnsPnL+02xVSMS4wo3qFOgYoygC
LcsZIH2TukU8BzfbqQJez21H0eOiwTykw5OJRrvTlb7NQkAdAwiOfh2aFS0KjNWn
9Ez2IVwVcuvF75i96+dw73klaoJtNx+/WnLRMLJ93zVfWxf6Ny5X53Vl0iGnRlRs
NcEP316YIpiGUSB49XflDoyJakrz1c6ZFDUaLVZxA3ayVx8v6eF3F4duVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAuwhu7wxlirkLoJsGF9NngHC8kMB8GA1UdIwQY
MBaAFOd3vI4+wlDOhfuQkTwsSQUQQ+vFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWIt
ZmFlMGU1ZDJlZWJmLzEvRUM3Q0c3dkRHV0t1UXVnbXdZWDAyZUFjTHlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJm
LzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue+5MA0G
CSqGSIb3DQEBCwUAA4IBAQBJ0VhMBImtis2A+F1rbkgrwNDNLRZUWWtUkcO/todN
DuEJGdzipqoeRSUcKngH4LuYBBaiFgo7Y2MjOlGY9drCb7E1GiFcXuTT8Ty0t+QA
D0JYU+TIYUm8dlEoItlhRuaRjw+fjq0VwoRQysUdjn6rBLU2oahkYVwvBJzQ3Igo
EMEfpCND/1/2VAJc4SB23te5n+B48aCsbpw1AUl33bs9E4+2+0OrBBwSE6IDKBHZ
Tmjxi09XuTIqhSGMBwoPJCIcFVfuXxixArRcrB+MRV2cTNfYOxa47V/UQPf31Lqj
PRDYrmnjrm9KkjPRtM+iizTyG20G7CdrmWFKS6HwFh1K
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:00 2025 by rpki-client