Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/Misdpg6iWwUm88Ty_fc4pFhMjYc.roa
File: Misdpg6iWwUm88Ty_fc4pFhMjYc.roa (raw, json)
Hash identifier: cciFC3d1gK2Xqhaij9/j0Cvs/RVlR1idmhLYdfWiw1Q=
Subject key identifier: 32:2B:1D:A6:0E:A2:5B:05:26:F3:C4:F2:FD:F7:38:A4:58:4C:8D:87
Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial: 019420D5ABADF5094D956FDFD3E1EBDE6FF0
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/Misdpg6iWwUm88Ty_fc4pFhMjYc.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29017
IP address blocks: 91.197.228.0/22 maxlen: 24
185.181.116.0/22 maxlen: 24
2a0a:cb80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ab:ad:f5:09:4d:95:6f:df:d3:e1:eb:de:6f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=322b1da60ea25b0526f3c4f2fdf738a4584c8d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:96:fe:29:73:27:59:f0:b4:7d:c1:45:1a:
d7:d3:ec:77:c3:bb:e1:9d:58:10:1d:7b:cf:a7:4c:
18:7b:41:c4:2a:ed:1a:c3:06:f7:55:ad:d3:ff:cd:
8e:b6:3d:f7:f1:40:c2:3f:f1:87:07:61:f4:ca:9c:
07:ad:c6:96:fe:10:7d:e4:a2:24:0a:25:38:58:c3:
50:50:f4:05:2a:80:58:f0:72:5c:d3:c5:08:5f:f6:
01:61:8e:53:79:45:62:45:8f:cd:d7:d7:b5:b4:45:
78:d4:49:02:e2:7c:96:b4:94:5f:e1:fc:99:a0:34:
24:6d:d7:39:c7:b3:d3:6e:5a:95:54:e7:af:3d:7e:
ba:48:50:dd:e2:b0:91:db:0d:01:d7:29:90:b9:2a:
00:86:48:5b:0b:9c:1a:06:12:31:ca:49:ba:5e:13:
f1:fc:fb:c0:b1:98:60:69:04:4b:40:4f:16:b3:16:
dd:67:46:01:52:46:fb:77:24:fb:a2:18:d8:0a:01:
18:63:bc:3c:d1:fd:85:89:04:c9:71:47:32:96:45:
2b:56:43:85:a7:a4:e0:35:e7:a3:71:58:5f:8e:3b:
be:f8:db:f4:04:73:e1:cb:41:2b:9a:1b:06:83:53:
d7:32:55:63:98:e6:be:fb:56:1b:2a:f1:ed:74:c3:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:1D:A6:0E:A2:5B:05:26:F3:C4:F2:FD:F7:38:A4:58:4C:8D:87
X509v3 Authority Key Identifier:
keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/Misdpg6iWwUm88Ty_fc4pFhMjYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.228.0/22
185.181.116.0/22
IPv6:
2a0a:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
3c:f0:18:ad:49:f0:7b:7b:20:98:52:91:08:7d:19:7f:93:8e:
40:3c:49:28:28:76:fc:67:85:9c:b3:7e:88:02:83:ff:fb:58:
83:ce:06:7e:e9:eb:3c:e7:42:b2:2f:47:48:40:3f:db:ca:7e:
34:6a:97:cd:22:02:dc:af:0e:06:4f:07:24:6b:11:87:a5:ab:
67:99:d3:0f:64:56:02:20:f7:cc:f1:ab:62:1f:6e:98:00:97:
ed:0e:7b:f2:76:6f:aa:e9:e6:d8:a7:73:c8:7d:82:9b:28:92:
cf:93:e8:f5:99:32:06:88:86:63:17:8d:44:13:86:8a:70:ca:
d1:a4:11:10:1b:d2:9f:6e:64:83:3e:a8:08:e3:7c:ae:ce:dc:
81:f4:fe:76:50:01:6d:e7:70:0c:79:1b:25:8f:7a:66:24:7d:
bc:e0:2b:32:29:00:24:4a:92:3c:55:78:54:5d:66:8a:a3:4e:
f1:8c:5f:4f:45:ba:ef:aa:f7:cc:2f:69:15:95:77:61:2c:37:
da:b8:f8:f3:e6:20:9a:c2:f1:f3:12:fb:13:36:d2:a9:28:13:
c7:cb:0e:32:85:b5:6c:69:e8:0e:e3:95:8f:b1:f4:a3:8e:8e:
eb:d6:6b:23:75:98:c3:5b:90:ee:8c:87:66:f2:2d:89:57:ef:
37:0c:d7:7b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQg1aut9QlNlW/f0+Hr3m/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTI4OWViZTkzMzUxMjM2YTU1ODBlYjViNzAxMDJjZjNm
MTFkZmMwHhcNMjUwMTAxMDc0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjJiMWRhNjBlYTI1YjA1MjZmM2M0ZjJmZGY3MzhhNDU4NGM4ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6+W/ilzJ1nwtH3BRRrX0+x3w7vh
nVgQHXvPp0wYe0HEKu0awwb3Va3T/82Otj338UDCP/GHB2H0ypwHrcaW/hB95KIk
CiU4WMNQUPQFKoBY8HJc08UIX/YBYY5TeUViRY/N19e1tEV41EkC4nyWtJRf4fyZ
oDQkbdc5x7PTblqVVOevPX66SFDd4rCR2w0B1ymQuSoAhkhbC5waBhIxykm6XhPx
/PvAsZhgaQRLQE8WsxbdZ0YBUkb7dyT7ohjYCgEYY7w80f2FiQTJcUcylkUrVkOF
p6TgNeejcVhfjju++Nv0BHPhy0ErmhsGg1PXMlVjmOa++1YbKvHtdMMHDwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDIrHaYOolsFJvPE8v33OKRYTI2HMB8GA1UdIwQY
MBaAFHuiievpM1EjalWA61twECzz8R38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMt
ZDE2M2I1NDk5ZTY4LzEvTWlzZHBnNmlXd1VtODhUeV9mYzRwRmhNalljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMtZDE2M2I1NDk5ZTY4
LzEvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8XkAwQC
ubV0MA0EAgACMAcDBQAqCsuAMA0GCSqGSIb3DQEBCwUAA4IBAQA88BitSfB7eyCY
UpEIfRl/k45APEkoKHb8Z4Wcs36IAoP/+1iDzgZ+6es850KyL0dIQD/byn40apfN
IgLcrw4GTwckaxGHpatnmdMPZFYCIPfM8atiH26YAJftDnvydm+q6ebYp3PIfYKb
KJLPk+j1mTIGiIZjF41EE4aKcMrRpBEQG9KfbmSDPqgI43yuztyB9P52UAFt53AM
eRslj3pmJH284CsyKQAkSpI8VXhUXWaKo07xjF9PRbrvqvfML2kVlXdhLDfauPjz
5iCawvHzEvsTNtKpKBPHyw4yhbVsaegO45WPsfSjjo7r1msjdZjDW5DujIdm8i2J
V+83DNd7
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:50 2025 by rpki-client