Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/09034a-3a1e-4f74-aace-ae122389b860/1/7X1I2UyxH3vsWXO-lX3xlE6vMJg.roa
File: 7X1I2UyxH3vsWXO-lX3xlE6vMJg.roa (raw, json)
Hash identifier: I2tges/AVAz/uZgF4LBvFttkCawYhJU9O94hl8sSVK8=
Subject key identifier: ED:7D:48:D9:4C:B1:1F:7B:EC:59:73:BE:95:7D:F1:94:4E:AF:30:98
Certificate issuer: /CN=38e3cc164a2fe940bc36dc30c4a308f467079bfd
Certificate serial: 0183CD4DCDE8AC0E1AF5A46FA583732D6354
Authority key identifier: 38:E3:CC:16:4A:2F:E9:40:BC:36:DC:30:C4:A3:08:F4:67:07:9B:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOPMFkov6UC8NtwwxKMI9GcHm_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/09034a-3a1e-4f74-aace-ae122389b860/1/7X1I2UyxH3vsWXO-lX3xlE6vMJg.roa
Signing time: Wed 12 Oct 2022 17:46:11 +0000
ROA not before: Wed 12 Oct 2022 17:46:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.231.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:4d:cd:e8:ac:0e:1a:f5:a4:6f:a5:83:73:2d:63:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e3cc164a2fe940bc36dc30c4a308f467079bfd
Validity
Not Before: Oct 12 17:46:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed7d48d94cb11f7bec5973be957df1944eaf3098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:ea:4c:30:63:35:a2:f7:ce:84:30:1c:80:
59:7a:53:63:07:ac:0b:3e:2f:6f:e8:b2:48:cd:94:
b2:e5:e8:ac:25:2b:89:18:4f:ba:e4:5d:2a:d8:30:
6a:0e:93:0d:43:1f:13:67:be:18:bb:a3:a5:09:8f:
c3:2f:84:d8:d9:d1:df:1b:0d:c6:35:62:10:d2:01:
6c:57:02:8e:7f:fd:aa:f0:d3:fd:b5:24:47:88:49:
bc:6e:0e:97:6c:11:16:01:70:6f:90:f4:21:fd:bd:
54:25:39:76:96:90:37:00:a8:8a:34:d6:d5:2d:e9:
63:43:f9:7a:39:44:46:89:b6:d2:97:de:5f:4a:98:
3d:78:90:5a:40:cd:f4:78:dd:c9:2f:d9:df:82:42:
2f:45:90:04:de:5c:32:19:08:01:fa:26:0c:5c:63:
4a:9c:6d:9e:7c:9f:f5:a3:a7:f2:3d:d5:c6:be:bb:
18:2a:b6:9d:e6:4c:fd:4c:b1:f0:cc:3a:ec:d7:b3:
b8:6e:4d:c2:1b:45:17:4b:d8:33:70:e9:66:ab:a4:
86:65:ac:8c:3f:0c:2d:3f:51:19:5b:7f:e6:c5:a6:
66:6a:71:4d:9d:e5:ec:c1:02:67:0c:e5:2a:50:ac:
c4:e6:c7:6e:ae:fb:58:a3:35:2a:52:53:53:3b:0e:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7D:48:D9:4C:B1:1F:7B:EC:59:73:BE:95:7D:F1:94:4E:AF:30:98
X509v3 Authority Key Identifier:
keyid:38:E3:CC:16:4A:2F:E9:40:BC:36:DC:30:C4:A3:08:F4:67:07:9B:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOPMFkov6UC8NtwwxKMI9GcHm_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/09034a-3a1e-4f74-aace-ae122389b860/1/7X1I2UyxH3vsWXO-lX3xlE6vMJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/09034a-3a1e-4f74-aace-ae122389b860/1/OOPMFkov6UC8NtwwxKMI9GcHm_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.224.0/22
Signature Algorithm: sha256WithRSAEncryption
04:8f:53:03:d4:9f:77:2a:00:27:57:45:27:2b:2f:f2:9a:cf:
c2:b8:7f:16:26:ca:68:d1:21:9f:84:e9:f3:b5:16:1a:93:c4:
65:49:61:6e:48:7e:9e:55:45:72:1c:fe:40:b2:7e:61:25:b7:
e7:75:30:f9:62:c6:5b:ec:1e:e6:7e:c5:ea:8b:1d:fc:3e:7a:
cf:36:56:b4:9d:de:47:41:46:25:eb:dc:f3:04:72:62:4e:4c:
07:6b:8a:5c:bd:f4:26:bb:b7:9c:b2:ce:61:56:46:14:e1:dd:
33:2c:13:67:0e:41:e8:85:54:55:d0:75:9d:ca:ce:fe:77:95:
f0:02:16:1c:ad:cc:87:e6:7f:41:06:4b:95:fc:0f:30:fd:43:
58:bf:d2:26:d9:bf:04:7e:fb:a7:b9:54:66:92:99:b3:17:bc:
1c:41:0f:7e:43:29:b4:f8:60:ca:48:a8:b0:98:40:ce:ad:30:
93:f2:67:50:7c:2f:a7:fe:9e:5c:a9:46:ee:7e:b5:92:a6:2a:
35:8c:5d:94:63:39:a4:e6:f1:8a:c2:bc:f5:98:c9:d6:81:d8:
9e:e4:7d:fa:32:c8:73:63:ca:a9:a8:57:c3:a1:9d:bd:78:6c:
cc:3a:c0:69:f5:48:0f:4a:62:c3:71:d0:0f:43:65:ef:48:90:
b0:57:03:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPNTc3orA4a9aRvpYNzLWNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTNjYzE2NGEyZmU5NDBiYzM2ZGMzMGM0YTMwOGY0Njcw
NzliZmQwHhcNMjIxMDEyMTc0NjExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDdkNDhkOTRjYjExZjdiZWM1OTczYmU5NTdkZjE5NDRlYWYzMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaPqTDBjNaL3zoQwHIBZelNjB6wL
Pi9v6LJIzZSy5eisJSuJGE+65F0q2DBqDpMNQx8TZ74Yu6OlCY/DL4TY2dHfGw3G
NWIQ0gFsVwKOf/2q8NP9tSRHiEm8bg6XbBEWAXBvkPQh/b1UJTl2lpA3AKiKNNbV
LeljQ/l6OURGibbSl95fSpg9eJBaQM30eN3JL9nfgkIvRZAE3lwyGQgB+iYMXGNK
nG2efJ/1o6fyPdXGvrsYKrad5kz9TLHwzDrs17O4bk3CG0UXS9gzcOlmq6SGZayM
PwwtP1EZW3/mxaZmanFNneXswQJnDOUqUKzE5sdurvtYozUqUlNTOw5RKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO19SNlMsR977FlzvpV98ZROrzCYMB8GA1UdIwQY
MBaAFDjjzBZKL+lAvDbcMMSjCPRnB5v9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09QTUZrb3Y2VUM4TnR3d3hLTUk5R2NIbV8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wOTAzNGEtM2ExZS00Zjc0LWFhY2Ut
YWUxMjIzODliODYwLzEvN1gxSTJVeXhIM3ZzV1hPLWxYM3hsRTZ2TUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8wOTAzNGEtM2ExZS00Zjc0LWFhY2UtYWUxMjIzODliODYw
LzEvT09QTUZrb3Y2VUM4TnR3d3hLTUk5R2NIbV8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuefgMA0G
CSqGSIb3DQEBCwUAA4IBAQAEj1MD1J93KgAnV0UnKy/yms/CuH8WJspo0SGfhOnz
tRYak8RlSWFuSH6eVUVyHP5Asn5hJbfndTD5YsZb7B7mfsXqix38PnrPNla0nd5H
QUYl69zzBHJiTkwHa4pcvfQmu7ecss5hVkYU4d0zLBNnDkHohVRV0HWdys7+d5Xw
AhYcrcyH5n9BBkuV/A8w/UNYv9Im2b8EfvunuVRmkpmzF7wcQQ9+Qym0+GDKSKiw
mEDOrTCT8mdQfC+n/p5cqUbufrWSpio1jF2UYzmk5vGKwrz1mMnWgdie5H36Mshz
Y8qpqFfDoZ29eGzMOsBp9UgPSmLDcdAPQ2XvSJCwVwNo
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:13:24 2025 by rpki-client