Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/er1QgJh7xNJSoA52TxOlq1QndKU.roa
File: er1QgJh7xNJSoA52TxOlq1QndKU.roa (raw, json)
Hash identifier: atmDdIFz/beEhAQCKkF3L9wfAWpmXlD8ykXRe+JDLnA=
Subject key identifier: 7A:BD:50:80:98:7B:C4:D2:52:A0:0E:76:4F:13:A5:AB:54:27:74:A5
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE0B699E83E876BED67A7FAF8D0B0
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/er1QgJh7xNJSoA52TxOlq1QndKU.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210110
IP address blocks: 185.145.244.0/24 maxlen: 24
2a0e:aa07:e02f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e0:b6:99:e8:3e:87:6b:ed:67:a7:fa:f8:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7abd5080987bc4d252a00e764f13a5ab542774a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:09:99:31:df:3c:c6:17:ce:18:72:6a:7e:
f4:25:3b:72:5c:79:65:c0:02:42:86:de:4d:16:67:
26:0a:cb:d2:f6:0e:dc:52:ac:9f:15:59:98:9c:ee:
ef:2c:9a:e7:f7:27:85:51:1d:94:23:25:fb:7d:bd:
73:9c:f0:fb:b1:61:09:49:f0:7f:c2:45:19:33:0e:
17:5b:8a:1c:63:91:bc:a3:c1:c6:dd:78:bc:9a:66:
3e:bb:e2:ef:7c:fb:f8:c3:4f:28:99:c7:1b:04:51:
7d:f2:51:88:62:f5:76:62:e9:73:c7:45:83:cb:1f:
0d:d9:87:1f:93:95:de:1f:e8:d3:b3:60:fd:ce:d1:
be:1c:c1:42:9a:b9:d7:fd:8e:64:60:d5:81:b3:97:
a6:84:68:c2:63:90:37:66:98:e2:d1:b0:86:32:ab:
14:02:b2:0a:bf:fe:5c:cd:6d:0f:aa:32:b7:9f:cc:
14:97:cb:5a:13:1c:09:d4:5f:b0:2c:04:81:67:d6:
7b:1b:a9:16:0e:c7:07:9e:e6:34:67:bd:3e:8a:8d:
3b:88:9a:58:54:25:cc:94:13:d4:c4:63:f0:1f:90:
2c:aa:51:6e:11:9d:de:d1:17:80:d8:4f:05:02:b6:
a0:d7:99:b5:3b:38:a3:d2:1d:69:5a:5e:46:60:64:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BD:50:80:98:7B:C4:D2:52:A0:0E:76:4F:13:A5:AB:54:27:74:A5
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/er1QgJh7xNJSoA52TxOlq1QndKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.244.0/24
IPv6:
2a0e:aa07:e02f::/48
Signature Algorithm: sha256WithRSAEncryption
24:46:6f:a6:24:ec:b1:78:c1:61:0d:a7:ab:70:a8:f6:ef:09:
5f:31:ce:72:99:12:9e:3e:f8:05:c3:7f:3f:ce:05:76:b0:49:
12:69:9f:4f:15:e3:d2:57:3a:dd:02:3d:3a:ba:bc:7e:e3:d3:
e6:e5:aa:2f:77:e3:08:5b:02:b4:03:da:ed:13:64:56:ec:84:
5a:f6:38:91:56:0f:11:3b:f1:8e:08:dc:a8:18:e6:de:be:3e:
ec:9a:74:ec:03:e3:d5:65:72:80:b1:1f:d0:58:8a:dd:91:b6:
e6:8a:aa:d2:a1:b1:d9:f2:8d:eb:ef:de:78:2d:ae:09:ef:5e:
48:30:37:b2:19:47:a2:a6:77:5c:94:2a:14:eb:4a:c6:fe:7b:
41:4d:8e:2b:2a:71:b0:cb:63:69:07:0e:35:bd:b6:16:28:a7:
f8:49:40:66:92:39:a5:c5:4a:4c:e2:d6:94:6e:ed:14:17:25:
dd:fa:8e:c0:34:68:ef:40:ce:97:99:ad:d6:74:aa:35:91:4c:
b6:b5:b2:c9:85:08:ab:4a:11:7d:c3:6a:47:10:f5:6e:b8:9a:
b2:71:3d:f6:70:56:c6:b0:ad:99:1e:95:4e:4f:20:b9:49:3a:
54:b0:d6:44:f2:43:9f:53:f7:72:fb:0b:f7:27:79:be:9e:a5:
17:31:14:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQljuC2meg+h2vtZ6f6+NCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWJkNTA4MDk4N2JjNGQyNTJhMDBlNzY0ZjEzYTVhYjU0Mjc3NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6cJmTHfPMYXzhhyan70JTtyXHll
wAJCht5NFmcmCsvS9g7cUqyfFVmYnO7vLJrn9yeFUR2UIyX7fb1znPD7sWEJSfB/
wkUZMw4XW4ocY5G8o8HG3Xi8mmY+u+LvfPv4w08omccbBFF98lGIYvV2Yulzx0WD
yx8N2Ycfk5XeH+jTs2D9ztG+HMFCmrnX/Y5kYNWBs5emhGjCY5A3Zpji0bCGMqsU
ArIKv/5czW0PqjK3n8wUl8taExwJ1F+wLASBZ9Z7G6kWDscHnuY0Z70+io07iJpY
VCXMlBPUxGPwH5AsqlFuEZ3e0ReA2E8FArag15m1Ozij0h1pWl5GYGTshwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHq9UICYe8TSUqAOdk8TpatUJ3SlMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvZXIxUWdKaDd4TkpTb0E1MlR4T2xxMVFuZEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuZH0MA8E
AgACMAkDBwAqDqoH4C8wDQYJKoZIhvcNAQELBQADggEBACRGb6Yk7LF4wWENp6tw
qPbvCV8xznKZEp4++AXDfz/OBXawSRJpn08V49JXOt0CPTq6vH7j0+blqi934whb
ArQD2u0TZFbshFr2OJFWDxE78Y4I3KgY5t6+PuyadOwD49VlcoCxH9BYit2RtuaK
qtKhsdnyjevv3ngtrgnvXkgwN7IZR6Kmd1yUKhTrSsb+e0FNjisqcbDLY2kHDjW9
thYop/hJQGaSOaXFSkzi1pRu7RQXJd36jsA0aO9AzpeZrdZ0qjWRTLa1ssmFCKtK
EX3DakcQ9W64mrJxPfZwVsawrZkelU5PILlJOlSw1kTyQ59T93L7C/cneb6epRcx
FNU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:57:45 2025 by rpki-client