Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/7pYVLfxDyksCdUmiOhbgviOo3x8.roa
File: 7pYVLfxDyksCdUmiOhbgviOo3x8.roa (raw, json)
Hash identifier: QcPN759vJqixjDGU3gmMeZsCeSMWabiqP3hVma37vPU=
Subject key identifier: EE:96:15:2D:FC:43:CA:4B:02:75:49:A2:3A:16:E0:BE:23:A8:DF:1F
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 01942445A9368D019D132C2F0F2967B968DE
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/7pYVLfxDyksCdUmiOhbgviOo3x8.roa
Signing time: Wed 01 Jan 2025 23:48:52 +0000
ROA not before: Wed 01 Jan 2025 23:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209066
IP address blocks: 185.60.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a9:36:8d:01:9d:13:2c:2f:0f:29:67:b9:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jan 1 23:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee96152dfc43ca4b027549a23a16e0be23a8df1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:b7:85:82:02:eb:41:a0:f0:3f:4a:dc:90:
d8:b7:c6:fe:96:da:10:5f:35:9e:4b:20:2c:9a:78:
a2:13:3c:e8:01:7c:e3:a7:4d:a4:b2:be:26:61:3f:
21:be:66:d0:05:12:1c:c9:85:ce:c8:61:31:ff:03:
67:a7:a1:6e:52:f6:85:6f:92:25:10:dd:0e:84:76:
68:e3:1c:9b:52:20:7d:1f:45:26:1c:14:bd:36:78:
5a:44:9b:47:b2:a9:27:07:84:7a:a0:ab:96:96:b7:
1a:b8:c5:d2:f7:ef:67:be:e8:2a:f4:93:df:f8:68:
39:0c:20:29:8f:86:be:89:ae:bb:d8:e8:b9:31:a0:
36:98:af:9d:f7:34:e3:c9:e8:e3:fe:a0:2c:15:37:
32:e7:8f:35:16:f8:f7:fb:e8:06:b3:5d:72:c0:6d:
ef:a5:b8:f8:0a:10:4f:bc:b5:65:41:cd:80:4f:f6:
0b:ec:14:d6:a4:8d:5a:b8:b9:15:58:1c:7e:3b:ef:
18:af:ad:be:03:44:be:ba:c9:c8:7f:22:84:d2:fd:
ed:93:30:d2:26:24:62:40:d1:e3:3d:19:85:2f:1a:
44:f7:e1:d3:9c:c9:d2:61:ef:0a:ac:64:7f:e5:3d:
17:01:99:61:5b:71:3d:8f:ac:50:cc:fb:88:f2:af:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:15:2D:FC:43:CA:4B:02:75:49:A2:3A:16:E0:BE:23:A8:DF:1F
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/7pYVLfxDyksCdUmiOhbgviOo3x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:da:4d:21:5a:ca:53:89:92:70:f9:41:0e:e7:02:8b:54:46:
0b:9f:f8:ab:3d:88:52:c0:66:51:09:c1:d7:72:ae:be:82:a9:
f7:25:92:70:af:b7:6a:8c:18:74:8d:77:d8:bb:87:66:db:69:
0a:fb:0f:c8:97:aa:cc:b6:98:e2:2b:8b:fe:b1:66:51:fa:c5:
eb:9b:81:c2:ff:6d:b9:31:b1:d7:31:56:4d:0b:9b:05:7e:88:
5a:9f:c4:70:a9:7a:91:4e:c0:8d:d8:5f:55:1c:e4:23:c3:d8:
e5:85:6e:6e:46:45:7e:80:82:1a:27:e8:ee:b7:70:9a:22:64:
c1:fe:fc:39:db:8c:15:e4:6e:95:58:80:45:1f:4c:ac:40:a7:
fd:2a:74:92:6c:a8:c1:b5:86:4c:8b:a6:41:e7:f7:61:a2:f4:
42:f7:cb:ff:a1:38:2e:e0:e0:c9:3a:54:8c:74:8a:c5:f1:80:
7a:2a:0e:72:9d:c5:22:4f:dd:6d:d4:0f:eb:4e:d4:63:3a:5c:
83:b7:2b:00:11:19:c0:e7:2f:df:d9:ab:6f:22:26:af:e4:b6:
1f:72:d7:a9:47:78:ee:1b:c1:eb:b4:8a:76:74:4c:c7:c1:a0:
dd:0a:8b:49:26:a4:2c:7c:17:de:dc:35:fc:f8:de:46:24:8a:
35:c9:ef:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRak2jQGdEywvDylnuWjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0
MWE4ZDMwHhcNMjUwMTAxMjM0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTk2MTUyZGZjNDNjYTRiMDI3NTQ5YTIzYTE2ZTBiZTIzYThkZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd+3hYIC60Gg8D9K3JDYt8b+ltoQ
XzWeSyAsmniiEzzoAXzjp02ksr4mYT8hvmbQBRIcyYXOyGEx/wNnp6FuUvaFb5Il
EN0OhHZo4xybUiB9H0UmHBS9NnhaRJtHsqknB4R6oKuWlrcauMXS9+9nvugq9JPf
+Gg5DCApj4a+ia672Oi5MaA2mK+d9zTjyejj/qAsFTcy5481Fvj3++gGs11ywG3v
pbj4ChBPvLVlQc2AT/YL7BTWpI1auLkVWBx+O+8Yr62+A0S+usnIfyKE0v3tkzDS
JiRiQNHjPRmFLxpE9+HTnMnSYe8KrGR/5T0XAZlhW3E9j6xQzPuI8q9vTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO6WFS38Q8pLAnVJojoW4L4jqN8fMB8GA1UdIwQY
MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt
MjcxZDI1ZTIwNTc0LzEvN3BZVkxmeER5a3NDZFVtaU9oYmd2aU9vM3g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0
LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTzkMA0G
CSqGSIb3DQEBCwUAA4IBAQA+2k0hWspTiZJw+UEO5wKLVEYLn/irPYhSwGZRCcHX
cq6+gqn3JZJwr7dqjBh0jXfYu4dm22kK+w/Il6rMtpjiK4v+sWZR+sXrm4HC/225
MbHXMVZNC5sFfohan8RwqXqRTsCN2F9VHOQjw9jlhW5uRkV+gIIaJ+jut3CaImTB
/vw524wV5G6VWIBFH0ysQKf9KnSSbKjBtYZMi6ZB5/dhovRC98v/oTgu4ODJOlSM
dIrF8YB6Kg5yncUiT91t1A/rTtRjOlyDtysAERnA5y/f2atvIiav5LYfctepR3ju
G8HrtIp2dEzHwaDdCotJJqQsfBfe3DX8+N5GJIo1ye+Z
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:48 2025 by rpki-client