Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7koQuW05m6rssRUL_CpO9mu-Lvw.roa
File: 7koQuW05m6rssRUL_CpO9mu-Lvw.roa (raw, json)
Hash identifier: gSotWjJW2tvT/xoULXPK3SbRn9EL9mVwiHiyuxKhgZA=
Subject key identifier: EE:4A:10:B9:6D:39:9B:AA:EC:B1:15:0B:FC:2A:4E:F6:6B:BE:2E:FC
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0192B4BA8B171B2FDAF65AF4416385F3FE9D
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7koQuW05m6rssRUL_CpO9mu-Lvw.roa
Signing time: Tue 22 Oct 2024 14:56:17 +0000
ROA not before: Tue 22 Oct 2024 14:56:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62263
IP address blocks: 185.42.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:ba:8b:17:1b:2f:da:f6:5a:f4:41:63:85:f3:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Oct 22 14:56:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee4a10b96d399baaecb1150bfc2a4ef66bbe2efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:fc:08:98:1f:da:0e:b4:0f:09:57:f8:1d:
41:80:6f:7d:b0:bc:1a:04:29:43:7c:b2:30:a0:a4:
07:f1:b7:5d:f7:c7:46:28:35:10:13:2b:dd:19:73:
f7:fd:13:c6:1f:1c:1c:77:ea:92:a1:c1:39:f3:6c:
d3:a2:bd:dd:49:d6:57:d0:29:e1:c9:17:88:b1:94:
e3:52:f2:4c:1e:58:1a:a2:c8:6a:4c:db:93:e7:22:
bd:12:38:f2:18:44:2d:93:67:e6:4d:e8:93:22:38:
32:f4:38:57:16:1a:d1:23:aa:9e:27:78:e5:d2:78:
d3:8b:8d:81:a3:33:97:84:9b:3a:9d:42:c4:5c:34:
64:13:bb:2c:4e:0b:31:7f:4a:5a:0b:38:8e:d9:ee:
a3:06:10:76:8c:78:a0:fb:bb:b6:f6:5e:9d:26:98:
0e:0b:eb:4e:1a:4d:ef:ff:70:09:7b:5a:57:d2:2e:
a0:e4:ca:b5:b9:3f:e9:c1:79:27:b8:9e:cd:31:95:
ba:6f:f8:57:f1:22:54:a1:c5:6c:40:3f:09:04:58:
58:a8:44:1d:64:b1:f1:96:2c:54:1c:42:a7:7c:52:
48:98:26:36:8c:11:68:3f:1b:c4:7a:5c:e8:15:25:
8d:8b:f0:f7:35:1b:4b:4d:f0:14:d1:3c:4d:73:13:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:10:B9:6D:39:9B:AA:EC:B1:15:0B:FC:2A:4E:F6:6B:BE:2E:FC
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7koQuW05m6rssRUL_CpO9mu-Lvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1c:1c:64:0b:19:91:d2:20:02:d8:69:f4:dd:ba:8f:31:a8:
df:56:9a:3e:65:ba:11:a4:be:7d:01:2f:58:44:e4:78:0a:7b:
43:a8:bd:27:d3:0e:19:8b:ec:69:24:49:d8:90:3e:f5:dd:44:
cb:c6:31:3b:d1:50:e9:73:4a:0b:4c:58:ea:b0:32:d1:c7:69:
6a:5f:ac:28:fa:83:3d:b6:90:3f:24:04:19:67:28:65:73:93:
36:e4:9d:56:64:37:79:f4:61:98:0d:ba:aa:52:48:25:9c:9d:
8c:62:b4:07:4c:22:cc:99:31:aa:9c:60:33:82:e8:e6:e8:4b:
52:36:66:b6:59:53:20:9a:48:cf:b0:75:ed:6f:de:ec:87:0e:
60:54:f9:72:6c:fe:b3:5e:97:93:68:cd:1a:b3:27:a2:19:e2:
28:83:bb:64:7b:f1:11:61:bf:24:f4:17:1b:67:ac:d3:c2:fc:
cd:5f:5f:23:ad:f1:88:c8:cb:26:2d:d7:54:26:0f:1e:7e:55:
78:8a:36:ee:1d:2e:75:f8:02:24:e1:93:2c:b8:38:65:34:65:
bb:f7:84:7a:82:0c:19:a7:97:6b:31:a9:35:f3:3a:c8:a4:ca:
e6:39:db:ee:c5:f4:57:d8:b1:22:1b:d2:e5:f7:b2:72:ab:9a:
5b:d8:98:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK0uosXGy/a9lr0QWOF8/6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDFjNDQzODMxY2Y5MzBiNzQ3ODcwOGQ3NmEzY2Y0NGQ4
OWExNjIwHhcNMjQxMDIyMTQ1NjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTRhMTBiOTZkMzk5YmFhZWNiMTE1MGJmYzJhNGVmNjZiYmUyZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBb8CJgf2g60DwlX+B1BgG99sLwa
BClDfLIwoKQH8bdd98dGKDUQEyvdGXP3/RPGHxwcd+qSocE582zTor3dSdZX0Cnh
yReIsZTjUvJMHlgaoshqTNuT5yK9EjjyGEQtk2fmTeiTIjgy9DhXFhrRI6qeJ3jl
0njTi42BozOXhJs6nULEXDRkE7ssTgsxf0paCziO2e6jBhB2jHig+7u29l6dJpgO
C+tOGk3v/3AJe1pX0i6g5Mq1uT/pwXknuJ7NMZW6b/hX8SJUocVsQD8JBFhYqEQd
ZLHxlixUHEKnfFJImCY2jBFoPxvEelzoFSWNi/D3NRtLTfAU0TxNcxMYvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5KELltOZuq7LEVC/wqTvZrvi78MB8GA1UdIwQY
MBaAFN4BxEODHPkwt0eHCNdqPPRNiaFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUt
ZWU3MzI4YWRjYzdjLzEvN2tvUXVXMDVtNnJzc1JVTF9DcE85bXUtTHZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUtZWU3MzI4YWRjYzdj
LzEvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSobMA0G
CSqGSIb3DQEBCwUAA4IBAQAdHBxkCxmR0iAC2Gn03bqPMajfVpo+ZboRpL59AS9Y
ROR4CntDqL0n0w4Zi+xpJEnYkD713UTLxjE70VDpc0oLTFjqsDLRx2lqX6wo+oM9
tpA/JAQZZyhlc5M25J1WZDd59GGYDbqqUkglnJ2MYrQHTCLMmTGqnGAzgujm6EtS
Nma2WVMgmkjPsHXtb97shw5gVPlybP6zXpeTaM0asyeiGeIog7tke/ERYb8k9Bcb
Z6zTwvzNX18jrfGIyMsmLddUJg8eflV4ijbuHS51+AIk4ZMsuDhlNGW794R6ggwZ
p5drMak18zrIpMrmOdvuxfRX2LEiG9Ll97Jyq5pb2Jjb
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:09 2025 by rpki-client