Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/IN75Wo0DtghUohhXp1U5nsAv_wI.roa
File: IN75Wo0DtghUohhXp1U5nsAv_wI.roa (raw, json)
Hash identifier: nJLnAhkfX/7UpoKrRsvnQaA4L9D5o2XedZEPGYHEFLA=
Subject key identifier: 20:DE:F9:5A:8D:03:B6:08:54:A2:18:57:A7:55:39:9E:C0:2F:FF:02
Certificate issuer: /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial: 019427B5CE35F245D79801E127E3DDF40ED6
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/IN75Wo0DtghUohhXp1U5nsAv_wI.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199657
IP address blocks: 185.7.20.0/22 maxlen: 24
2a03:11c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ce:35:f2:45:d7:98:01:e1:27:e3:dd:f4:0e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20def95a8d03b60854a21857a755399ec02fff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:bd:11:c7:90:56:b3:50:5c:69:f7:b4:16:
c7:9d:1a:bf:29:ee:37:ba:32:5e:f2:70:30:e7:91:
c4:65:46:3c:95:cd:f3:95:11:48:b0:b4:21:ef:7a:
9d:62:70:c6:03:50:6a:a4:d8:18:d5:55:33:99:c9:
09:f6:61:85:49:0c:6a:88:80:e7:e0:5f:23:9a:9d:
4d:af:3a:9f:d6:82:1c:62:67:c1:8a:81:59:0e:44:
5c:eb:e6:f3:a0:5d:ec:2d:2a:63:9d:24:80:32:43:
88:fc:04:4d:f9:26:c4:e3:3e:f8:b8:0b:1d:61:14:
83:cb:22:03:7d:39:8b:52:93:53:de:28:fc:f6:e3:
f4:70:6b:a7:be:49:57:b6:63:28:6c:e2:e4:03:54:
cf:4c:43:5a:c2:ba:99:e6:22:b9:be:39:8c:89:4d:
48:89:a8:9c:2c:01:9a:7f:57:9b:24:18:4e:74:5b:
28:83:6f:11:87:43:27:5f:3f:bc:3f:91:98:8a:aa:
08:f1:ff:80:4a:d6:64:07:db:3e:55:ca:9b:eb:91:
ba:16:0e:2e:0b:e1:f3:89:e5:93:a4:6c:4f:87:23:
15:33:ed:1a:4f:28:00:79:55:30:ee:5c:7f:db:cf:
64:3d:eb:43:49:07:5b:00:8c:db:0f:95:79:45:9d:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:F9:5A:8D:03:B6:08:54:A2:18:57:A7:55:39:9E:C0:2F:FF:02
X509v3 Authority Key Identifier:
keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/IN75Wo0DtghUohhXp1U5nsAv_wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.20.0/22
IPv6:
2a03:11c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:dd:52:72:4f:57:4a:46:2a:39:eb:63:21:f8:96:41:47:b6:
6b:98:29:81:4b:b5:67:e2:b8:6a:8c:e7:1a:89:de:f0:1f:3f:
6a:52:52:35:5d:cc:cd:18:ed:d8:1b:97:9f:13:14:2a:82:69:
42:29:6f:4f:5a:70:55:91:ac:d0:30:6e:98:51:c8:27:19:0f:
d1:e4:70:ec:a5:38:86:f1:ee:b3:60:19:06:13:6e:9e:07:c1:
a4:27:e6:a3:af:e8:7f:d4:5f:09:8c:08:23:a3:32:f1:36:18:
fc:3c:02:75:72:56:fb:ba:cc:31:60:d8:99:be:cb:fc:98:97:
0f:ff:10:fc:0e:0c:d5:8a:18:c2:e2:cd:12:f3:e1:f2:a5:7b:
2e:80:ac:83:bb:84:55:a2:18:98:f5:ad:0d:8e:c4:74:42:1d:
49:66:c3:14:74:78:0e:40:26:0b:56:3a:23:c4:be:75:30:76:
f3:74:5c:a5:21:7d:2a:98:50:41:83:cd:4e:64:22:52:3d:da:
3b:d6:49:b9:63:51:de:6d:42:fa:ea:29:bd:f3:99:18:c9:91:
76:e1:96:f5:99:c2:29:93:68:b4:cd:b8:3b:b6:da:1a:dc:f8:
09:10:32:1f:3d:de:e9:9d:00:8e:03:0b:e1:87:6c:83:27:b0:
13:6d:fe:69
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntc418kXXmAHhJ+Pd9A7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YmJiYzQ3YjFjNjdlNTU3YmVhYjBmMmM2ZDE4YmYwMjZj
MzA2ZTAwHhcNMjUwMTAyMTU1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGRlZjk1YThkMDNiNjA4NTRhMjE4NTdhNzU1Mzk5ZWMwMmZmZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE+9EceQVrNQXGn3tBbHnRq/Ke43
ujJe8nAw55HEZUY8lc3zlRFIsLQh73qdYnDGA1BqpNgY1VUzmckJ9mGFSQxqiIDn
4F8jmp1Nrzqf1oIcYmfBioFZDkRc6+bzoF3sLSpjnSSAMkOI/ARN+SbE4z74uAsd
YRSDyyIDfTmLUpNT3ij89uP0cGunvklXtmMobOLkA1TPTENawrqZ5iK5vjmMiU1I
iaicLAGaf1ebJBhOdFsog28Rh0MnXz+8P5GYiqoI8f+AStZkB9s+Vcqb65G6Fg4u
C+HzieWTpGxPhyMVM+0aTygAeVUw7lx/289kPetDSQdbAIzbD5V5RZ3yJQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCDe+VqNA7YIVKIYV6dVOZ7AL/8CMB8GA1UdIwQY
MBaAFFe7vEexxn5Ve+qw8sbRi/AmwwbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEt
YjdiM2FmZmM2ZWM5LzEvSU43NVdvMER0Z2hVb2hoWHAxVTVuc0F2X3dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEtYjdiM2FmZmM2ZWM5
LzEvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQcUMA0E
AgACMAcDBQAqAxHAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ3VJyT1dKRio562Mh+JZB
R7ZrmCmBS7Vn4rhqjOcaid7wHz9qUlI1XczNGO3YG5efExQqgmlCKW9PWnBVkazQ
MG6YUcgnGQ/R5HDspTiG8e6zYBkGE26eB8GkJ+ajr+h/1F8JjAgjozLxNhj8PAJ1
clb7uswxYNiZvsv8mJcP/xD8DgzVihjC4s0S8+HypXsugKyDu4RVohiY9a0NjsR0
Qh1JZsMUdHgOQCYLVjojxL51MHbzdFylIX0qmFBBg81OZCJSPdo71km5Y1HebUL6
6im985kYyZF24Zb1mcIpk2i0zbg7ttoa3PgJEDIfPd7pnQCOAwvhh2yDJ7ATbf5p
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:28:10 2025 by rpki-client