Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/13f22e-de1d-4504-be3e-49c55bab28c6/1/0Rx6BK99815NpNUTqUKgkMBDnW8.roa
File: 0Rx6BK99815NpNUTqUKgkMBDnW8.roa (raw, json)
Hash identifier: QuR0R+2By7XdndJ17MUq1CytPl7B+zfVKt80/g0Fuq4=
Subject key identifier: D1:1C:7A:04:AF:7D:F3:5E:4D:A4:D5:13:A9:42:A0:90:C0:43:9D:6F
Certificate issuer: /CN=8ec628f588e2c4de648369ab8db27cf7cd16a367
Certificate serial: 039F9F98
Authority key identifier: 8E:C6:28:F5:88:E2:C4:DE:64:83:69:AB:8D:B2:7C:F7:CD:16:A3:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsYo9YjixN5kg2mrjbJ8980Wo2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/13f22e-de1d-4504-be3e-49c55bab28c6/1/0Rx6BK99815NpNUTqUKgkMBDnW8.roa
Signing time: Sat 01 Jan 2022 10:56:13 +0000
ROA not before: Sat 01 Jan 2022 10:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212722
IP address blocks: 185.169.7.0/24 maxlen: 24
2a10:42c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60792728 (0x39f9f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec628f588e2c4de648369ab8db27cf7cd16a367
Validity
Not Before: Jan 1 10:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d11c7a04af7df35e4da4d513a942a090c0439d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:8c:28:bf:53:64:e3:1a:46:99:aa:6f:e9:
48:eb:93:7d:50:92:9d:01:81:ec:14:c2:26:fb:ad:
2d:26:7a:97:c5:0f:fe:bb:41:55:d3:7c:6c:86:6f:
52:0b:08:e0:b1:b1:be:89:f5:94:8f:01:43:dc:ab:
e2:2b:b7:c9:f1:24:d4:11:93:d3:d8:bb:3a:21:82:
f9:61:cb:7b:20:56:0a:55:53:29:5a:f9:0f:00:94:
e5:20:b4:60:b4:8d:e8:97:57:54:a8:b5:a3:5c:27:
98:f7:22:70:ec:4e:8a:e0:ad:e7:78:72:cc:cd:55:
23:e4:e4:4a:8a:0a:7c:2c:d3:71:cd:3a:8d:a3:95:
16:35:83:17:ea:2a:a8:0e:0e:c9:4d:6f:04:79:46:
4d:11:93:19:27:01:ba:45:a8:d3:78:bb:20:ab:08:
b7:56:8e:4b:41:29:b1:8c:33:c7:f6:fb:64:73:1f:
d2:d1:98:5e:a0:5d:7a:78:e7:1d:cc:53:d6:58:8f:
95:cb:ed:04:f4:9b:b7:bb:e4:18:68:3b:eb:b0:07:
93:4d:51:d0:3d:fc:bf:cf:15:33:b2:c4:7b:c3:90:
f9:06:b9:7e:54:61:b2:da:20:b8:d1:b3:50:02:58:
bb:8e:0c:16:a8:f4:fd:a8:5b:22:25:18:41:a6:b5:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:7A:04:AF:7D:F3:5E:4D:A4:D5:13:A9:42:A0:90:C0:43:9D:6F
X509v3 Authority Key Identifier:
keyid:8E:C6:28:F5:88:E2:C4:DE:64:83:69:AB:8D:B2:7C:F7:CD:16:A3:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsYo9YjixN5kg2mrjbJ8980Wo2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/13f22e-de1d-4504-be3e-49c55bab28c6/1/0Rx6BK99815NpNUTqUKgkMBDnW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/13f22e-de1d-4504-be3e-49c55bab28c6/1/jsYo9YjixN5kg2mrjbJ8980Wo2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.7.0/24
IPv6:
2a10:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
43:ff:fc:64:5d:df:15:15:6e:b3:f9:f0:a7:18:f5:e3:e5:5b:
66:e3:34:89:69:9d:73:3d:72:2f:1f:3b:05:a4:ad:00:d2:6b:
24:ba:91:60:16:45:1d:5a:5b:13:5f:fe:5c:67:5b:eb:e2:1b:
89:26:23:10:c4:95:1d:62:19:b7:f5:1b:36:23:81:ce:26:40:
04:f5:aa:84:3b:9d:89:ba:34:ca:d3:af:b6:d3:c5:e7:a8:64:
0d:55:bb:c5:1a:93:93:a5:60:b7:d4:50:56:81:a0:18:5c:74:
3b:bf:1a:c0:37:b8:f1:ba:77:a1:b0:2d:c1:4b:97:78:7e:40:
a8:3d:34:89:84:c9:48:9c:31:a8:74:39:03:64:55:da:f3:83:
6d:81:ec:92:66:fd:eb:b5:4a:9e:f2:e2:f3:06:cf:7f:f7:ef:
78:c1:72:75:b9:ea:ea:c1:ad:03:aa:d6:3c:b5:6e:e7:e4:40:
e4:f3:69:0f:18:5a:53:12:07:69:d3:c3:db:47:5a:75:34:dc:
a5:00:0f:5e:8a:0c:ca:05:21:19:94:0b:93:34:ba:41:a6:2f:
af:b6:bc:49:9b:cd:a8:a8:2f:80:7c:50:cd:57:36:1f:9e:78:
bf:e0:43:ae:15:63:da:08:4a:30:3e:4f:e3:b9:e6:a5:83:ca:
c6:cc:40:9f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEA5+fmDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZWM2MjhmNTg4ZTJjNGRlNjQ4MzY5YWI4ZGIyN2NmN2NkMTZhMzY3MB4XDTIyMDEw
MTEwNTYxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDExYzdhMDRhZjdk
ZjM1ZTRkYTRkNTEzYTk0MmEwOTBjMDQzOWQ2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANTHjCi/U2TjGkaZqm/pSOuTfVCSnQGB7BTCJvutLSZ6l8UP
/rtBVdN8bIZvUgsI4LGxvon1lI8BQ9yr4iu3yfEk1BGT09i7OiGC+WHLeyBWClVT
KVr5DwCU5SC0YLSN6JdXVKi1o1wnmPcicOxOiuCt53hyzM1VI+TkSooKfCzTcc06
jaOVFjWDF+oqqA4OyU1vBHlGTRGTGScBukWo03i7IKsIt1aOS0EpsYwzx/b7ZHMf
0tGYXqBdenjnHcxT1liPlcvtBPSbt7vkGGg767AHk01R0D38v88VM7LEe8OQ+Qa5
flRhstoguNGzUAJYu44MFqj0/ahbIiUYQaa1O8UCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTRHHoEr33zXk2k1ROpQqCQwEOdbzAfBgNVHSMEGDAWgBSOxij1iOLE3mSD
aauNsnz3zRajZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pzWW85WWppeE41a2cybXJqYko4OTgwV28yYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvMTNmMjJlLWRlMWQtNDUwNC1iZTNlLTQ5YzU1YmFiMjhjNi8x
LzBSeDZCSzk5ODE1TnBOVVRxVUtna01CRG5XOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
MTNmMjJlLWRlMWQtNDUwNC1iZTNlLTQ5YzU1YmFiMjhjNi8xL2pzWW85WWppeE41
a2cybXJqYko4OTgwV28yYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALmpBzANBAIAAjAHAwUDKhBCwDAN
BgkqhkiG9w0BAQsFAAOCAQEAQ//8ZF3fFRVus/nwpxj14+VbZuM0iWmdcz1yLx87
BaStANJrJLqRYBZFHVpbE1/+XGdb6+IbiSYjEMSVHWIZt/UbNiOBziZABPWqhDud
ibo0ytOvttPF56hkDVW7xRqTk6Vgt9RQVoGgGFx0O78awDe48bp3obAtwUuXeH5A
qD00iYTJSJwxqHQ5A2RV2vODbYHskmb967VKnvLi8wbPf/fveMFydbnq6sGtA6rW
PLVu5+RA5PNpDxhaUxIHadPD20dadTTcpQAPXooMygUhGZQLkzS6QaYvr7a8SZvN
qKgvgHxQzVc2H554v+BDrhVj2ghKMD5P47nmpYPKxsxAnw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:31 2025 by rpki-client