Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/pTwzFC29LPXNKIBj8fs94m0Kbbg.roa
File: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (raw, json)
Hash identifier: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=
Subject key identifier: A5:3C:33:14:2D:BD:2C:F5:CD:28:80:63:F1:FB:3D:E2:6D:0A:6D:B8
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 019426D9658956BFE4A542BABEBBF8F0DDF2
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/pTwzFC29LPXNKIBj8fs94m0Kbbg.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 185.21.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:65:89:56:bf:e4:a5:42:ba:be:bb:f8:f0:dd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a53c33142dbd2cf5cd288063f1fb3de26d0a6db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:f1:4f:8f:78:59:92:47:5b:bb:43:8b:b9:
e4:9a:02:11:b8:5f:84:b8:0b:e3:1d:40:fe:79:4d:
e5:cd:c9:3c:e3:60:04:89:ee:38:53:77:e0:49:30:
e5:c2:ef:04:e3:e7:57:18:17:2f:1f:fe:df:03:0a:
70:67:85:f5:67:ba:b2:71:59:53:c9:b2:de:f7:3a:
91:34:9f:a2:66:be:95:8c:5c:aa:6e:e2:25:20:06:
98:4f:28:ce:3f:29:e9:0b:f9:be:28:27:5d:93:56:
68:2a:f2:ef:2c:10:27:92:d2:fe:7d:e0:4a:fd:57:
7d:86:5c:6f:fd:28:f9:41:f0:44:44:83:87:da:77:
02:2e:22:ad:eb:64:28:a5:5d:05:21:77:95:a9:ec:
bb:5e:9e:f5:9c:6a:c0:9b:64:2b:66:43:6a:1f:d0:
2e:8e:e9:e6:93:31:d2:4b:04:cd:6e:eb:55:71:82:
0c:cf:61:06:d3:96:60:60:e5:88:a2:66:d8:b4:a9:
f5:3e:78:eb:1e:92:90:34:73:90:9d:65:d7:8f:0b:
db:21:d4:e6:82:6b:04:03:56:da:33:5e:da:a5:fb:
46:30:e7:b5:bb:13:b0:f3:1c:80:9a:8e:6f:39:bf:
93:fa:93:43:73:33:7c:50:a1:ca:c7:a0:a7:6d:6a:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3C:33:14:2D:BD:2C:F5:CD:28:80:63:F1:FB:3D:E2:6D:0A:6D:B8
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/pTwzFC29LPXNKIBj8fs94m0Kbbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2f:fa:35:e2:37:d8:5d:bb:63:13:e4:43:d2:b2:e1:d5:e1:
6c:2a:7a:2f:99:97:2b:b6:bf:05:bc:a9:53:75:e1:c0:5b:d5:
07:e5:76:24:65:e3:31:66:f6:5c:50:93:0e:8b:a6:bd:83:b2:
c6:f7:c4:18:6c:e3:4c:3d:e8:0b:5d:3b:47:5b:50:cf:82:db:
ae:1f:d7:f3:d0:52:16:5d:f6:8a:25:a1:19:8e:80:dd:64:bf:
f0:3d:84:72:c3:69:98:48:86:11:27:b5:a8:eb:29:09:bc:98:
d2:6e:09:00:7c:00:2c:51:28:dd:7d:87:7d:17:c7:d9:8b:0b:
f9:3a:dc:2b:7e:42:6f:27:7c:27:ac:96:15:d5:96:58:4e:eb:
d3:aa:f5:11:ae:4f:c2:90:cc:04:d4:71:41:39:db:f7:38:a6:
3b:c2:df:09:2c:97:6e:65:8d:82:ee:2f:3c:59:12:35:f6:a5:
d7:53:23:04:12:64:92:8a:f8:0b:9f:86:0d:4f:04:fc:67:d2:
0b:bb:6b:2c:cd:6c:ca:fe:ba:a3:73:ca:12:43:d8:32:04:8e:
e8:06:48:02:e0:9a:4f:87:85:83:66:b0:bf:1f:3b:55:d9:05:
2f:69:07:b5:af:70:94:53:db:9f:a9:33:d0:9a:bf:67:f5:18:
60:03:36:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2WWJVr/kpUK6vrv48N3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz
OGVhYzEwHhcNMjUwMTAyMTE0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTNjMzMxNDJkYmQyY2Y1Y2QyODgwNjNmMWZiM2RlMjZkMGE2ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSDxT494WZJHW7tDi7nkmgIRuF+E
uAvjHUD+eU3lzck842AEie44U3fgSTDlwu8E4+dXGBcvH/7fAwpwZ4X1Z7qycVlT
ybLe9zqRNJ+iZr6VjFyqbuIlIAaYTyjOPynpC/m+KCddk1ZoKvLvLBAnktL+feBK
/Vd9hlxv/Sj5QfBERIOH2ncCLiKt62QopV0FIXeVqey7Xp71nGrAm2QrZkNqH9Au
junmkzHSSwTNbutVcYIMz2EG05ZgYOWIombYtKn1PnjrHpKQNHOQnWXXjwvbIdTm
gmsEA1baM17apftGMOe1uxOw8xyAmo5vOb+T+pNDczN8UKHKx6CnbWpDvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKU8MxQtvSz1zSiAY/H7PeJtCm24MB8GA1UdIwQY
MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt
MmZhZDlhMmZjM2VmLzEvcFR3ekZDMjlMUFhOS0lCajhmczk0bTBLYmJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm
LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRWAMA0G
CSqGSIb3DQEBCwUAA4IBAQCsL/o14jfYXbtjE+RD0rLh1eFsKnovmZcrtr8FvKlT
deHAW9UH5XYkZeMxZvZcUJMOi6a9g7LG98QYbONMPegLXTtHW1DPgtuuH9fz0FIW
XfaKJaEZjoDdZL/wPYRyw2mYSIYRJ7Wo6ykJvJjSbgkAfAAsUSjdfYd9F8fZiwv5
OtwrfkJvJ3wnrJYV1ZZYTuvTqvURrk/CkMwE1HFBOdv3OKY7wt8JLJduZY2C7i88
WRI19qXXUyMEEmSSivgLn4YNTwT8Z9ILu2sszWzK/rqjc8oSQ9gyBI7oBkgC4JpP
h4WDZrC/HztV2QUvaQe1r3CUU9ufqTPQmr9n9RhgAzbh
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:55 2025 by rpki-client