Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa
File: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (raw, json)
Hash identifier: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=
Subject key identifier: FA:7B:C4:39:E1:7F:F3:EB:1E:AA:8D:F6:41:8A:F1:E9:94:D5:05:B4
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 019423D6E065AAF20B0845E143126751AC08
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205118
IP address blocks: 185.229.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e0:65:aa:f2:0b:08:45:e1:43:12:67:51:ac:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa7bc439e17ff3eb1eaa8df6418af1e994d505b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:97:75:a3:0a:00:e7:a6:25:b5:0b:c6:ef:
f1:54:f0:b5:12:72:71:7f:a1:49:9a:d6:42:b1:8e:
d8:db:40:73:63:5c:29:10:b8:83:9d:d2:05:69:2e:
82:38:cb:ff:64:0c:7e:bd:c3:36:1e:9c:50:f5:fb:
f3:7f:d5:9e:8b:df:0e:81:96:38:d1:84:49:a2:aa:
f6:2f:b4:3e:9d:ec:80:80:fe:82:07:d2:18:4e:32:
56:76:b9:d8:3d:bd:7d:1f:9f:6a:e0:24:66:33:e9:
0d:97:2d:49:b9:7f:3d:0c:85:cb:9b:54:07:36:78:
f7:73:14:e4:4a:58:93:a2:6a:05:d7:13:62:86:0e:
28:d8:0a:c6:e8:a1:7f:57:06:97:fb:3a:a3:d2:cb:
28:48:7a:bf:22:93:9b:cf:b6:be:65:21:a7:f3:7a:
e3:5d:4e:95:94:59:16:a6:b8:0d:84:e5:b5:7e:77:
40:15:55:a0:12:c8:b6:c9:3c:7c:e3:99:ad:d0:a0:
e2:a9:78:3f:35:8b:10:3d:a2:21:cd:b0:c0:65:59:
83:78:3d:0d:16:d9:0c:16:5c:1d:50:01:e8:59:d2:
1c:f2:2b:65:53:e3:59:e3:53:cd:bf:db:66:53:41:
1b:a4:44:c8:fb:9c:c7:17:1c:e7:0c:f5:7f:de:d3:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:C4:39:E1:7F:F3:EB:1E:AA:8D:F6:41:8A:F1:E9:94:D5:05:B4
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f9:95:d9:bf:6d:06:11:41:c8:2b:5d:af:b7:e8:f2:76:15:
ad:39:10:9e:c1:e0:42:ea:8f:0a:9a:b2:40:c3:2b:fb:2e:b4:
7a:42:b9:3d:b4:6e:43:cf:6a:f4:a8:fc:c2:1d:67:cb:16:54:
7b:22:5e:b0:76:c4:f8:72:a2:c9:81:fd:75:08:6a:21:b3:db:
92:98:80:bf:d9:29:28:52:fd:e1:51:64:83:07:03:b6:f6:b8:
1b:49:66:a5:aa:a4:34:d6:f2:7d:20:2e:eb:01:8e:52:26:d7:
1c:eb:9c:49:01:53:69:38:d1:6f:81:4e:ad:05:2d:3c:08:67:
fe:ed:eb:43:d8:da:b5:95:c3:8e:eb:b3:ee:ec:7a:0f:f1:29:
39:46:af:90:4a:c1:a5:79:55:3e:3e:ec:07:a5:b4:3f:e4:6a:
35:0b:12:fe:50:76:4f:87:67:b9:96:bb:fd:00:e6:a1:13:17:
81:3c:5c:1b:59:de:82:b3:f0:5d:ec:ce:17:f8:6f:36:05:05:
92:d1:5d:11:e1:8e:f8:e9:6b:15:58:9f:62:35:4a:e6:1c:21:
11:8d:14:fd:6a:f8:29:30:8f:09:69:c0:64:d0:85:1c:89:c6:
51:9d:0e:53:1e:df:3a:dc:71:44:89:96:88:1b:ad:34:c9:46:
64:73:2f:02
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQj1uBlqvILCEXhQxJnUawIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0
YmI2Y2MwHhcNMjUwMTAxMjE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTdiYzQzOWUxN2ZmM2ViMWVhYThkZjY0MThhZjFlOTk0ZDUwNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvROXdaMKAOemJbULxu/xVPC1EnJx
f6FJmtZCsY7Y20BzY1wpELiDndIFaS6COMv/ZAx+vcM2HpxQ9fvzf9Wei98OgZY4
0YRJoqr2L7Q+neyAgP6CB9IYTjJWdrnYPb19H59q4CRmM+kNly1JuX89DIXLm1QH
Nnj3cxTkSliTomoF1xNihg4o2ArG6KF/VwaX+zqj0ssoSHq/IpObz7a+ZSGn83rj
XU6VlFkWprgNhOW1fndAFVWgEsi2yTx845mt0KDiqXg/NYsQPaIhzbDAZVmDeD0N
FtkMFlwdUAHoWdIc8itlU+NZ41PNv9tmU0EbpETI+5zHFxznDPV/3tO59wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPp7xDnhf/PrHqqN9kGK8emU1QW0MB8GA1UdIwQY
MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt
MWQ1NWQ1OTI5Y2VjLzEvMS1udkVPZUZfOC1zZXFvMzJRWXJ4NlpUVkJiUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmMvMzNiNjlkLWY0Y2EtNDNhYS05NzgwLTFkNTVkNTkyOWNl
Yy8xL3g2dHJJbFRrVnpDcS1rV3JVWmN5QTJGTHRzdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnlAzAN
BgkqhkiG9w0BAQsFAAOCAQEADfmV2b9tBhFByCtdr7fo8nYVrTkQnsHgQuqPCpqy
QMMr+y60ekK5PbRuQ89q9Kj8wh1nyxZUeyJesHbE+HKiyYH9dQhqIbPbkpiAv9kp
KFL94VFkgwcDtva4G0lmpaqkNNbyfSAu6wGOUibXHOucSQFTaTjRb4FOrQUtPAhn
/u3rQ9jatZXDjuuz7ux6D/EpOUavkErBpXlVPj7sB6W0P+RqNQsS/lB2T4dnuZa7
/QDmoRMXgTxcG1negrPwXezOF/hvNgUFktFdEeGO+OlrFVifYjVK5hwhEY0U/Wr4
KTCPCWnAZNCFHInGUZ0OUx7fOtxxRImWiButNMlGZHMvAg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:08 2025 by rpki-client