Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/erhlDHo6u2N8SbRRVUL49trJG0Q.roa
File: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (raw, json)
Hash identifier: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=
Subject key identifier: 7A:B8:65:0C:7A:3A:BB:63:7C:49:B4:51:55:42:F8:F6:DA:C9:1B:44
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 019421B225551A5A0B7013BEAAF18EF8DB9D
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/erhlDHo6u2N8SbRRVUL49trJG0Q.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209543
IP address blocks: 185.150.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:25:55:1a:5a:0b:70:13:be:aa:f1:8e:f8:db:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ab8650c7a3abb637c49b4515542f8f6dac91b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:48:9d:78:96:a2:03:0e:9f:02:6a:b7:8e:
99:58:80:75:3e:53:2a:f8:7b:0b:06:69:1c:98:6d:
7b:f8:cf:f3:36:15:27:36:95:37:63:99:f9:c9:54:
ce:11:0e:17:d6:25:39:78:b4:4f:d0:86:b6:b5:1f:
30:fd:68:89:db:3c:4d:ae:c4:3c:3e:c1:fa:c3:9d:
33:0e:ff:e0:e3:9c:47:e2:f6:d6:66:61:c6:75:34:
05:db:c1:74:92:e3:5c:90:84:bf:7b:a0:67:fb:c6:
32:a7:70:c0:81:8e:75:d7:ef:dc:7d:94:92:40:2d:
72:b8:e8:09:5c:27:98:00:b3:32:e5:b5:3d:dd:14:
d5:a2:19:9d:fa:ba:db:e7:14:61:cf:25:de:d1:47:
a5:0d:8e:6e:fd:82:21:f4:48:47:03:70:9d:1e:fb:
e0:c1:d9:dc:9b:e1:53:3f:ad:0a:44:67:4f:03:63:
b5:2a:4e:05:7b:ff:5e:84:3d:08:eb:0c:db:45:6d:
9d:da:67:ca:13:f2:0e:83:5c:9f:26:35:ee:fe:7c:
79:d9:89:4a:54:e3:dc:76:f8:82:8d:bc:0c:dd:94:
f1:44:2f:4b:f6:e2:4a:a5:ab:c6:2c:ce:61:1e:64:
08:fa:2d:c9:50:d0:ff:d8:93:24:98:38:22:9e:7b:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:65:0C:7A:3A:BB:63:7C:49:B4:51:55:42:F8:F6:DA:C9:1B:44
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/erhlDHo6u2N8SbRRVUL49trJG0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.36.0/22
Signature Algorithm: sha256WithRSAEncryption
83:91:dc:a4:d0:77:84:68:38:ba:c3:68:51:ce:6e:8f:26:bd:
ae:e2:dd:8f:be:2a:bf:68:21:24:21:ce:7a:39:b2:4b:a7:54:
d1:92:5d:16:ed:d1:98:ef:a4:e9:76:2d:6b:32:ca:18:4b:64:
f2:b1:5c:4e:9a:f7:d6:6f:ec:f6:1e:da:5b:d8:24:5b:73:9b:
d1:b5:78:27:26:83:7c:a1:f7:50:00:7b:c4:b8:15:78:e6:91:
45:90:f8:52:de:d9:d9:4e:49:df:7e:dd:e9:ff:36:b9:f8:71:
7a:4c:3c:96:1e:01:82:4e:ce:72:0b:41:f0:1a:e1:88:b4:84:
8a:a7:5d:31:60:24:ce:77:01:c3:f7:51:c8:c8:bb:2b:23:ae:
15:54:2e:f9:de:36:c0:4e:a6:03:80:c6:14:1c:46:c2:88:e5:
50:f1:a0:14:47:f4:31:bc:10:45:4b:23:6f:22:c6:18:b0:0e:
51:aa:97:55:e9:98:e0:f2:65:6b:fb:e3:42:5c:91:d5:1a:9a:
5e:81:7c:0d:da:80:84:e0:03:7a:58:f6:28:ab:9d:1a:9c:f2:
14:69:9d:4f:f7:81:5d:c2:8e:0c:ec:58:94:da:cf:87:0c:25:
77:96:5f:be:b8:08:d4:dc:7d:9f:fd:d5:cb:f3:5f:17:01:c1:
f4:f2:e7:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsiVVGloLcBO+qvGO+NudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTUyZTljOTY0ZGU2ZmY1NGUwOTljNzExNTVjMWExZGVj
OGE3MzAwHhcNMjUwMTAxMTE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWI4NjUwYzdhM2FiYjYzN2M0OWI0NTE1NTQyZjhmNmRhYzkxYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHZInXiWogMOnwJqt46ZWIB1PlMq
+HsLBmkcmG17+M/zNhUnNpU3Y5n5yVTOEQ4X1iU5eLRP0Ia2tR8w/WiJ2zxNrsQ8
PsH6w50zDv/g45xH4vbWZmHGdTQF28F0kuNckIS/e6Bn+8Yyp3DAgY511+/cfZSS
QC1yuOgJXCeYALMy5bU93RTVohmd+rrb5xRhzyXe0UelDY5u/YIh9EhHA3CdHvvg
wdncm+FTP60KRGdPA2O1Kk4Fe/9ehD0I6wzbRW2d2mfKE/IOg1yfJjXu/nx52YlK
VOPcdviCjbwM3ZTxRC9L9uJKpavGLM5hHmQI+i3JUND/2JMkmDginnupbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHq4ZQx6OrtjfEm0UVVC+PbayRtEMB8GA1UdIwQY
MBaAFDdVLpyWTeb/VOCZxxFVwaHeyKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDIt
ZWUyOGE2NWM4YTIyLzEvZXJobERIbzZ1Mk44U2JSUlZVTDQ5dHJKRzBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDItZWUyOGE2NWM4YTIy
LzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZYkMA0G
CSqGSIb3DQEBCwUAA4IBAQCDkdyk0HeEaDi6w2hRzm6PJr2u4t2Pviq/aCEkIc56
ObJLp1TRkl0W7dGY76Tpdi1rMsoYS2TysVxOmvfWb+z2Htpb2CRbc5vRtXgnJoN8
ofdQAHvEuBV45pFFkPhS3tnZTknfft3p/za5+HF6TDyWHgGCTs5yC0HwGuGItISK
p10xYCTOdwHD91HIyLsrI64VVC753jbATqYDgMYUHEbCiOVQ8aAUR/QxvBBFSyNv
IsYYsA5RqpdV6Zjg8mVr++NCXJHVGppegXwN2oCE4AN6WPYoq50anPIUaZ1P94Fd
wo4M7FiU2s+HDCV3ll++uAjU3H2f/dXL818XAcH08uek
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:59 2025 by rpki-client