Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/z7PePVyoKmIzeMwhDi3kZroNIOY.roa
File: z7PePVyoKmIzeMwhDi3kZroNIOY.roa (raw, json)
Hash identifier: 363AMor3+AuoMZq/InMNB8uyvrLDbKJVwHZWnAmT00Q=
Subject key identifier: CF:B3:DE:3D:5C:A8:2A:62:33:78:CC:21:0E:2D:E4:66:BA:0D:20:E6
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 027841B8
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/z7PePVyoKmIzeMwhDi3kZroNIOY.roa
Signing time: Sat 01 Jan 2022 15:57:46 +0000
ROA not before: Sat 01 Jan 2022 15:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207440
IP address blocks: 185.251.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41435576 (0x27841b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Jan 1 15:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfb3de3d5ca82a623378cc210e2de466ba0d20e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:ce:0c:b7:0a:7a:e7:83:fc:fe:e6:ad:ee:
e7:34:44:3b:c8:6a:4b:1c:15:9c:97:61:02:81:98:
8d:f5:88:8f:ce:8a:0f:28:b4:c7:32:12:b2:c5:02:
a1:7b:2b:07:48:f5:6c:88:54:c9:43:3d:0c:d0:64:
4a:90:63:81:76:03:a0:46:41:ee:33:e8:0b:5c:f3:
70:14:34:ab:0f:51:40:89:8f:cf:bf:10:ea:bb:c2:
9e:80:5e:20:2e:b6:58:6f:74:13:34:8f:6f:a8:94:
f4:fa:53:6a:41:7e:99:bc:1d:89:7d:41:41:d8:12:
6d:ff:02:b9:69:af:a5:53:a2:a6:28:9d:6b:d3:80:
40:f0:b3:ec:c3:24:10:b4:53:b9:a0:b8:8d:e3:2b:
0a:91:87:fe:d1:9b:25:3f:14:3d:df:d8:9e:a4:3b:
a1:b0:c2:e9:d0:8d:32:ac:99:fb:55:fa:37:4e:55:
43:b4:6f:e3:ed:40:37:a2:f1:d2:5e:63:9b:bd:3e:
4d:3a:74:a8:94:a2:82:2f:6b:b0:a1:9d:0a:5d:99:
61:d4:14:b2:f0:69:73:81:09:7b:7e:be:2f:c8:a1:
43:ea:31:63:bb:4d:77:ce:bb:c8:22:28:a8:09:9c:
03:8c:c3:ed:54:9f:c6:fa:3d:c1:4f:c0:96:a9:86:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:DE:3D:5C:A8:2A:62:33:78:CC:21:0E:2D:E4:66:BA:0D:20:E6
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/z7PePVyoKmIzeMwhDi3kZroNIOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:bc:5f:a9:cc:b0:1e:db:70:fa:0f:b4:9a:d3:95:29:0f:bd:
64:89:80:2f:87:c7:31:c7:c8:4a:a2:c5:27:66:80:e7:12:8b:
b1:63:18:7e:46:80:2b:e5:eb:cb:8a:6f:a6:e1:8a:4c:61:6e:
f8:07:43:08:b4:43:2e:59:2b:ff:0a:33:28:ab:e3:ed:1e:ae:
3c:d8:17:df:81:e3:8b:8a:cd:48:80:b1:b0:0b:1e:79:b0:a3:
2b:5f:4b:0c:bd:95:ef:2c:b1:17:ff:67:76:41:ca:67:84:7b:
73:c1:c5:23:2b:4a:7c:16:2b:49:39:07:f5:56:09:af:60:b0:
24:a1:90:d9:8d:e0:b0:79:f1:36:95:c9:46:1b:c3:d9:c3:e9:
45:84:d8:9c:0a:33:46:f3:b4:1b:e5:2a:30:e0:13:23:ce:1a:
13:fa:30:3c:01:6a:d8:e6:13:96:c5:ec:e3:41:a1:0c:6b:53:
12:25:b8:48:49:2b:aa:d2:e2:b0:ff:86:1a:22:99:86:0d:d5:
39:16:e0:5b:02:ae:88:8c:8c:dc:35:7e:5f:03:7b:47:ae:9c:
31:47:c7:94:75:3c:a4:0a:2c:a6:fc:7f:30:df:d5:fd:cd:37:
ab:5d:b4:0c:49:77:12:5c:2a:c0:37:a8:e5:2f:20:3a:19:fe:
d1:92:ce:ff
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAnhBuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZjY3ODQ2OTU3NGFjYzAzZDc4MmU2MzI4MWZmNDRmYWFhYjNmODQ3MB4XDTIyMDEw
MTE1NTc0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2ZiM2RlM2Q1Y2E4
MmE2MjMzNzhjYzIxMGUyZGU0NjZiYTBkMjBlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKpqzgy3Cnrng/z+5q3u5zREO8hqSxwVnJdhAoGYjfWIj86K
Dyi0xzISssUCoXsrB0j1bIhUyUM9DNBkSpBjgXYDoEZB7jPoC1zzcBQ0qw9RQImP
z78Q6rvCnoBeIC62WG90EzSPb6iU9PpTakF+mbwdiX1BQdgSbf8CuWmvpVOipiid
a9OAQPCz7MMkELRTuaC4jeMrCpGH/tGbJT8UPd/YnqQ7obDC6dCNMqyZ+1X6N05V
Q7Rv4+1AN6Lx0l5jm70+TTp0qJSigi9rsKGdCl2ZYdQUsvBpc4EJe36+L8ihQ+ox
Y7tNd867yCIoqAmcA4zD7VSfxvo9wU/AlqmGIWMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTPs949XKgqYjN4zCEOLeRmug0g5jAfBgNVHSMEGDAWgBTvZ4RpV0rMA9eC
5jKB/0T6qrP4RzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzcyZUVhVmRLekFQWGd1WXlnZjlFLXFxei1FYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvYjQ2NzNiLTIxMGItNGU1YS04NzZhLWRjMDU5ZTY5YjFkMC8x
L3o3UGVQVnlvS21JemVNd2hEaTNrWnJvTklPWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
YjQ2NzNiLTIxMGItNGU1YS04NzZhLWRjMDU5ZTY5YjFkMC8xLzcyZUVhVmRLekFQ
WGd1WXlnZjlFLXFxei1FYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn7JDANBgkqhkiG9w0BAQsFAAOC
AQEAsbxfqcywHttw+g+0mtOVKQ+9ZImAL4fHMcfISqLFJ2aA5xKLsWMYfkaAK+Xr
y4pvpuGKTGFu+AdDCLRDLlkr/wozKKvj7R6uPNgX34Hji4rNSICxsAseebCjK19L
DL2V7yyxF/9ndkHKZ4R7c8HFIytKfBYrSTkH9VYJr2CwJKGQ2Y3gsHnxNpXJRhvD
2cPpRYTYnAozRvO0G+UqMOATI84aE/owPAFq2OYTlsXs40GhDGtTEiW4SEkrqtLi
sP+GGiKZhg3VORbgWwKuiIyM3DV+XwN7R66cMUfHlHU8pAospvx/MN/V/c03q120
DEl3ElwqwDeo5S8gOhn+0ZLO/w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:55 2025 by rpki-client