Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/7jmf9BlNbV-fUUbiGDuTogUiPEo.roa
File: 7jmf9BlNbV-fUUbiGDuTogUiPEo.roa (raw, json)
Hash identifier: TRehU0GSo0OYFjBdQZcn/8kKiD62iX7mi6y4Y4CJ6lY=
Subject key identifier: EE:39:9F:F4:19:4D:6D:5F:9F:51:46:E2:18:3B:93:A2:05:22:3C:4A
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 019498418BACCD80D91C9020CC16DA28A6BD
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/7jmf9BlNbV-fUUbiGDuTogUiPEo.roa
Signing time: Fri 24 Jan 2025 12:20:19 +0000
ROA not before: Fri 24 Jan 2025 12:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43298
IP address blocks: 185.71.65.0/24 maxlen: 24
185.71.67.0/24 maxlen: 24
193.84.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:41:8b:ac:cd:80:d9:1c:90:20:cc:16:da:28:a6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jan 24 12:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee399ff4194d6d5f9f5146e2183b93a205223c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2a:77:78:d8:42:dd:cd:b6:7e:de:59:a9:75:
ce:06:8a:fb:32:36:bc:16:65:59:da:ff:bb:1d:de:
b2:fb:71:78:68:b7:b9:6e:02:9f:48:db:e6:dc:00:
47:50:8d:39:1b:90:53:77:02:ee:48:8a:ff:aa:ff:
ec:af:8f:35:ca:81:19:96:2a:cc:30:d1:2e:11:6f:
bd:7a:88:f7:37:4d:68:d1:94:45:f5:fd:c0:cd:c6:
1d:40:47:b3:d1:a7:94:2f:bc:ec:06:14:b8:3c:a6:
7c:ff:4f:2b:1d:ce:87:78:04:f7:87:e6:a7:21:11:
d6:37:6e:55:0e:46:a8:c6:2f:57:55:b4:92:05:33:
2c:1e:f1:7a:55:e3:5f:a3:4b:f4:c7:d7:19:36:9d:
1b:df:1d:b1:3f:e7:e8:32:4f:0f:44:9d:91:e0:55:
70:00:6d:59:1b:ab:b9:ad:ea:db:ec:e9:29:db:d9:
37:19:56:f1:02:12:e8:5a:0a:f7:c0:86:bf:df:9e:
d5:da:65:21:91:74:d8:52:69:cb:0e:06:d7:02:d9:
72:ee:f8:09:f0:9e:24:0e:5a:7c:4e:ed:7b:f0:8c:
43:f2:96:e0:ac:a2:cd:55:ef:71:e2:d6:8b:cb:74:
f4:8d:a2:0d:3e:89:64:4f:bb:0d:be:88:6b:51:47:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:9F:F4:19:4D:6D:5F:9F:51:46:E2:18:3B:93:A2:05:22:3C:4A
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/7jmf9BlNbV-fUUbiGDuTogUiPEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.65.0/24
185.71.67.0/24
193.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d2:a6:d0:aa:8d:ab:1b:74:03:7c:69:4b:db:f7:2a:6d:0f:
b9:da:34:dd:5d:41:ac:10:92:9c:46:c5:04:34:ce:d3:25:1d:
93:c4:41:0d:51:53:be:8f:70:1b:14:ee:f7:df:ec:67:46:ba:
cd:a5:db:61:16:da:91:fd:b3:5a:36:28:c8:46:ad:0b:4b:ca:
6e:2f:08:58:21:dc:2b:0c:8c:66:ee:eb:7c:08:db:75:eb:18:
26:41:f2:e2:4d:55:95:73:cf:ba:5b:28:e3:39:f2:ac:11:e2:
c9:d0:e4:15:55:74:0b:e5:57:5e:c4:d0:69:55:9b:b0:cc:29:
7d:37:f9:1f:23:14:fc:2c:48:99:0f:82:60:4d:36:fd:71:e9:
4b:5a:fa:bd:c0:37:a1:18:d3:f4:8e:c8:7e:c6:0a:58:ba:e8:
e3:e7:a3:ab:df:48:84:4c:58:3f:85:4f:db:fa:30:52:2f:aa:
a4:6d:5b:a9:ac:21:de:e5:ee:66:81:14:2e:0a:05:48:ba:95:
7e:ed:68:08:a3:80:8d:42:7a:cb:3f:3c:77:2b:ce:df:61:5a:
e1:62:0a:8c:f9:68:87:c0:e3:ac:0a:15:73:3d:9b:70:a9:ab:
eb:61:d6:ba:46:77:17:d5:4e:bf:48:26:98:d5:8c:f9:df:8f:
6b:68:4b:d0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZSYQYuszYDZHJAgzBbaKKa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjUwMTI0MTIyMDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTM5OWZmNDE5NGQ2ZDVmOWY1MTQ2ZTIxODNiOTNhMjA1MjIzYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yp3eNhC3c22ft5ZqXXOBor7Mja8
FmVZ2v+7Hd6y+3F4aLe5bgKfSNvm3ABHUI05G5BTdwLuSIr/qv/sr481yoEZlirM
MNEuEW+9eoj3N01o0ZRF9f3AzcYdQEez0aeUL7zsBhS4PKZ8/08rHc6HeAT3h+an
IRHWN25VDkaoxi9XVbSSBTMsHvF6VeNfo0v0x9cZNp0b3x2xP+foMk8PRJ2R4FVw
AG1ZG6u5rerb7Okp29k3GVbxAhLoWgr3wIa/357V2mUhkXTYUmnLDgbXAtly7vgJ
8J4kDlp8Tu178IxD8pbgrKLNVe9x4taLy3T0jaINPolkT7sNvohrUUd/XQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO45n/QZTW1fn1FG4hg7k6IFIjxKMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvN2ptZjlCbE5iVi1mVVViaUdEdVRvZ1VpUEVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuUdBAwQA
uUdDAwQAwVROMA0GCSqGSIb3DQEBCwUAA4IBAQAX0qbQqo2rG3QDfGlL2/cqbQ+5
2jTdXUGsEJKcRsUENM7TJR2TxEENUVO+j3AbFO733+xnRrrNpdthFtqR/bNaNijI
Rq0LS8puLwhYIdwrDIxm7ut8CNt16xgmQfLiTVWVc8+6WyjjOfKsEeLJ0OQVVXQL
5VdexNBpVZuwzCl9N/kfIxT8LEiZD4JgTTb9celLWvq9wDehGNP0jsh+xgpYuujj
56Or30iETFg/hU/b+jBSL6qkbVuprCHe5e5mgRQuCgVIupV+7WgIo4CNQnrLPzx3
K87fYVrhYgqM+WiHwOOsChVzPZtwqavrYda6RncX1U6/SCaY1Yz5349raEvQ
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:36:51 2025 by rpki-client