Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/7HdLAdcKePjmy7EfJiQgoeZJeL0.roa
File: 7HdLAdcKePjmy7EfJiQgoeZJeL0.roa (raw, json)
Hash identifier: b+OFFFOFuhOJh0QC9lyAjr2RQXCfNyskMWPJoVSy19g=
Subject key identifier: EC:77:4B:01:D7:0A:78:F8:E6:CB:B1:1F:26:24:20:A1:E6:49:78:BD
Certificate issuer: /CN=bb40290d0e6b0d8f556bde10519e135ffc098621
Certificate serial: 056268D3
Authority key identifier: BB:40:29:0D:0E:6B:0D:8F:55:6B:DE:10:51:9E:13:5F:FC:09:86:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/7HdLAdcKePjmy7EfJiQgoeZJeL0.roa
Signing time: Sat 01 Jan 2022 07:54:19 +0000
ROA not before: Sat 01 Jan 2022 07:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203641
IP address blocks: 185.218.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90335443 (0x56268d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb40290d0e6b0d8f556bde10519e135ffc098621
Validity
Not Before: Jan 1 07:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec774b01d70a78f8e6cbb11f262420a1e64978bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:09:7a:08:10:fd:54:7a:32:ea:23:b1:d2:
df:20:02:cc:23:c9:52:35:5c:fc:9a:1b:8b:4a:bd:
fa:6e:a8:12:7e:ff:cb:c0:2e:48:5c:ce:de:89:6c:
8e:d7:05:18:72:d7:55:da:03:da:af:8a:02:d9:c7:
81:1a:4a:c1:1a:5c:4d:08:cc:b3:4b:2a:33:e3:4b:
f2:67:50:8e:92:bd:aa:2e:7e:29:6c:52:46:53:c9:
57:a6:42:da:e6:da:70:5a:f1:e6:bc:88:85:e5:a5:
f5:2f:86:7b:e0:47:17:ba:bb:4d:ea:cb:bf:ec:84:
b1:35:80:64:77:ba:7f:94:ca:d5:46:da:80:b7:53:
a2:1b:f9:1f:ee:e5:be:6f:ed:bb:84:b3:c2:57:31:
64:11:79:a0:45:0e:a2:38:67:4c:0b:9c:ac:ca:d0:
ef:54:4b:ec:42:9f:43:5a:be:2b:f9:08:53:f6:9c:
ff:6d:d1:6c:7d:2a:46:6a:31:92:63:3f:06:dd:cf:
d9:42:5c:26:85:88:9a:84:07:42:18:5f:84:3d:fa:
85:f1:be:d0:aa:8d:75:ee:67:c2:42:5b:46:4f:a1:
95:08:ef:f6:1a:e2:9d:04:f9:d8:d5:a8:62:b0:09:
ea:2f:32:39:88:07:f7:47:66:4d:ea:73:17:33:15:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:4B:01:D7:0A:78:F8:E6:CB:B1:1F:26:24:20:A1:E6:49:78:BD
X509v3 Authority Key Identifier:
keyid:BB:40:29:0D:0E:6B:0D:8F:55:6B:DE:10:51:9E:13:5F:FC:09:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/7HdLAdcKePjmy7EfJiQgoeZJeL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:41:18:cd:c3:12:8d:9c:c0:e8:84:0b:b4:4d:1e:ad:83:21:
d8:3d:90:ac:05:92:ee:c5:34:84:ca:36:3d:3c:d8:97:54:24:
59:15:1d:eb:c7:68:df:41:e0:fe:5c:99:31:71:46:7c:32:1a:
1a:ef:e8:90:11:85:2f:c2:83:c7:91:96:23:59:e9:62:b6:a8:
00:55:f4:e1:13:3b:c1:e7:0e:d3:60:73:dc:ba:25:b9:c3:a7:
db:ec:70:47:32:57:88:72:90:26:9a:8b:36:8b:45:71:d7:1c:
ee:d8:0b:b2:54:38:72:87:00:82:b9:6a:49:d7:bd:55:6a:ff:
85:66:6d:5a:cb:c2:4f:6e:e6:99:d6:30:a6:25:27:1c:b4:cd:
41:cd:52:a0:6a:aa:74:e9:ce:c6:42:71:4a:3f:90:3f:e6:51:
48:40:85:ee:4c:b7:05:bf:4f:e2:7b:40:18:27:c0:80:da:6d:
f4:d2:ff:6c:79:7c:25:16:a2:52:26:85:b1:67:0c:10:fa:00:
3d:4f:34:69:29:96:b0:79:e7:e0:eb:59:ff:db:c7:d6:fe:69:
4b:5a:1c:fd:98:0e:98:83:22:c6:b6:c7:38:97:83:f7:33:ed:
eb:7d:d6:59:2c:f5:b7:64:5a:3d:a7:db:1c:e4:08:6e:72:85:
7d:17:f9:23
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBWJo0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YjQwMjkwZDBlNmIwZDhmNTU2YmRlMTA1MTllMTM1ZmZjMDk4NjIxMB4XDTIyMDEw
MTA3NTQxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWM3NzRiMDFkNzBh
NzhmOGU2Y2JiMTFmMjYyNDIwYTFlNjQ5NzhiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANcCCXoIEP1UejLqI7HS3yACzCPJUjVc/Jobi0q9+m6oEn7/
y8AuSFzO3olsjtcFGHLXVdoD2q+KAtnHgRpKwRpcTQjMs0sqM+NL8mdQjpK9qi5+
KWxSRlPJV6ZC2ubacFrx5ryIheWl9S+Ge+BHF7q7TerLv+yEsTWAZHe6f5TK1Uba
gLdTohv5H+7lvm/tu4SzwlcxZBF5oEUOojhnTAucrMrQ71RL7EKfQ1q+K/kIU/ac
/23RbH0qRmoxkmM/Bt3P2UJcJoWImoQHQhhfhD36hfG+0KqNde5nwkJbRk+hlQjv
9hrinQT52NWoYrAJ6i8yOYgH90dmTepzFzMV7fUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTsd0sB1wp4+ObLsR8mJCCh5kl4vTAfBgNVHSMEGDAWgBS7QCkNDmsNj1Vr
3hBRnhNf/AmGITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3UwQXBEUTVyRFk5VmE5NFFVWjRUWF93SmhpRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzIvYzZmM2RjLTJlZmMtNGFjOC1hYzkyLWFkYWFhM2U1MTA2Yi8x
LzdIZExBZGNLZVBqbXk3RWZKaVFnb2VaSmVMMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIv
YzZmM2RjLTJlZmMtNGFjOC1hYzkyLWFkYWFhM2U1MTA2Yi8xL3UwQXBEUTVyRFk5
VmE5NFFVWjRUWF93SmhpRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArna/DANBgkqhkiG9w0BAQsFAAOC
AQEAuUEYzcMSjZzA6IQLtE0erYMh2D2QrAWS7sU0hMo2PTzYl1QkWRUd68do30Hg
/lyZMXFGfDIaGu/okBGFL8KDx5GWI1npYraoAFX04RM7wecO02Bz3LolucOn2+xw
RzJXiHKQJpqLNotFcdcc7tgLslQ4cocAgrlqSde9VWr/hWZtWsvCT27mmdYwpiUn
HLTNQc1SoGqqdOnOxkJxSj+QP+ZRSECF7ky3Bb9P4ntAGCfAgNpt9NL/bHl8JRai
UiaFsWcMEPoAPU80aSmWsHnn4OtZ/9vH1v5pS1oc/ZgOmIMixrbHOJeD9zPt633W
WSz1t2RaPafbHOQIbnKFfRf5Iw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:34:16 2025 by rpki-client