Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/JkI7pyWBDDUChnbqI3ZdSdg57Xk.roa
File: JkI7pyWBDDUChnbqI3ZdSdg57Xk.roa (raw, json)
Hash identifier: QjU3QgXk8SUNm24DuR3wL30OyNycLV6fqkuAXc3LkRs=
Subject key identifier: 26:42:3B:A7:25:81:0C:35:02:86:76:EA:23:76:5D:49:D8:39:ED:79
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 018572CC9B064D1BC08E3BE10C25907031B4
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/JkI7pyWBDDUChnbqI3ZdSdg57Xk.roa
Signing time: Mon 02 Jan 2023 14:04:49 +0000
ROA not before: Mon 02 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199803
IP address blocks: 185.138.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9b:06:4d:1b:c0:8e:3b:e1:0c:25:90:70:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Jan 2 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26423ba725810c35028676ea23765d49d839ed79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:7b:64:0e:ee:e9:15:b5:58:6b:d6:66:df:
85:49:33:cf:0c:de:49:f1:3d:bf:ac:8e:d6:f5:9a:
93:fb:71:7f:06:a9:5d:a3:d5:90:73:4a:c8:d0:dc:
82:fb:a6:ae:45:03:5b:9d:60:4e:21:85:d3:05:62:
3a:d4:98:73:17:11:9b:90:47:3c:f4:9d:8c:4c:88:
8c:c4:9f:51:60:2a:18:a8:0d:b3:54:29:17:e0:de:
6b:7a:34:85:98:f1:e9:86:d2:b1:9f:50:77:d2:16:
8e:98:89:59:8b:a8:97:34:11:0f:a6:3d:3c:9a:b6:
7e:f4:52:51:95:09:d3:27:a7:00:7e:0b:17:e7:e1:
b9:02:3c:c8:b8:02:80:e0:a2:9c:4c:88:69:05:f6:
78:e7:e0:ca:62:c1:ef:f4:94:73:3d:10:35:9e:ed:
4e:65:17:31:a6:93:bf:ba:2b:d3:f2:88:69:80:7f:
68:43:6a:a8:bb:7c:cb:3f:48:5c:6f:94:01:f8:7b:
44:5f:5a:1e:e1:d3:3a:b8:85:0f:62:89:59:88:d7:
7c:0e:3c:2d:f3:28:53:67:2b:4a:f5:ad:e7:d6:8c:
80:4e:0a:3f:01:32:83:74:b3:a8:5d:b2:aa:9d:46:
36:a1:3c:26:7f:46:57:a9:0d:a5:db:03:61:3a:74:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:42:3B:A7:25:81:0C:35:02:86:76:EA:23:76:5D:49:D8:39:ED:79
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/JkI7pyWBDDUChnbqI3ZdSdg57Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.108.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:50:6b:cc:05:66:c5:2e:1e:34:84:a5:72:c5:f4:e6:e4:79:
3c:ba:e8:0a:29:8d:ee:6d:86:0a:9c:33:45:7f:21:3c:65:30:
77:89:e8:ee:b5:22:17:2b:c2:d1:72:38:27:db:97:2e:63:ef:
76:23:5c:41:0d:c0:78:b3:72:1a:cf:31:e4:bd:95:6b:dd:76:
8f:4a:c9:3f:63:33:9c:f3:27:74:18:3d:74:3b:35:ab:23:f3:
0e:e8:a6:dd:26:aa:ef:e9:15:b0:cf:5c:c1:ce:7a:f7:f2:61:
48:bb:8e:30:3b:40:29:a4:41:bd:e5:4e:44:bb:dc:d7:6e:bd:
ea:01:1d:ae:f2:9d:f0:2a:9d:2b:d9:1c:35:f5:2f:c7:fa:c6:
68:b2:95:3d:b0:7f:e1:06:af:0d:f2:a3:9a:a8:01:0a:b7:ea:
f3:ba:c6:ec:83:b5:a2:7a:63:07:fd:94:86:d3:08:57:f6:ea:
3b:30:19:f7:cb:de:cb:56:8b:a6:47:7f:f7:47:d2:bc:7e:4f:
0c:78:20:21:55:80:f3:99:2a:f9:56:70:f9:9a:cc:bb:82:83:
a4:ff:f8:03:95:8b:e2:e2:4b:42:35:08:37:9e:4d:07:c0:68:
7b:46:da:7e:53:1b:86:14:ed:3c:87:15:d5:54:b8:66:b8:8a:
b6:ba:a2:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyzJsGTRvAjjvhDCWQcDG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlODZkY2RlNzExZDU0NTM1Mzk3NGIzMzk1NTEwOGQ5ZGY0
MGI2ZTkwHhcNMjMwMTAyMTQwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQyM2JhNzI1ODEwYzM1MDI4Njc2ZWEyMzc2NWQ0OWQ4MzllZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicB7ZA7u6RW1WGvWZt+FSTPPDN5J
8T2/rI7W9ZqT+3F/Bqldo9WQc0rI0NyC+6auRQNbnWBOIYXTBWI61JhzFxGbkEc8
9J2MTIiMxJ9RYCoYqA2zVCkX4N5rejSFmPHphtKxn1B30haOmIlZi6iXNBEPpj08
mrZ+9FJRlQnTJ6cAfgsX5+G5AjzIuAKA4KKcTIhpBfZ45+DKYsHv9JRzPRA1nu1O
ZRcxppO/uivT8ohpgH9oQ2qou3zLP0hcb5QB+HtEX1oe4dM6uIUPYolZiNd8Djwt
8yhTZytK9a3n1oyATgo/ATKDdLOoXbKqnUY2oTwmf0ZXqQ2l2wNhOnSBuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZCO6clgQw1AoZ26iN2XUnYOe15MB8GA1UdIwQY
MBaAFH6G3N5xHVRTU5dLM5VRCNnfQLbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUt
MzVmMWE5MDg4YjQyLzEvSmtJN3B5V0JERFVDaG5icUkzWmRTZGc1N1hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUtMzVmMWE5MDg4YjQy
LzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYpsMA0G
CSqGSIb3DQEBCwUAA4IBAQCNUGvMBWbFLh40hKVyxfTm5Hk8uugKKY3ubYYKnDNF
fyE8ZTB3iejutSIXK8LRcjgn25cuY+92I1xBDcB4s3IazzHkvZVr3XaPSsk/YzOc
8yd0GD10OzWrI/MO6KbdJqrv6RWwz1zBznr38mFIu44wO0AppEG95U5Eu9zXbr3q
AR2u8p3wKp0r2Rw19S/H+sZospU9sH/hBq8N8qOaqAEKt+rzusbsg7WiemMH/ZSG
0whX9uo7MBn3y97LVoumR3/3R9K8fk8MeCAhVYDzmSr5VnD5msy7goOk//gDlYvi
4ktCNQg3nk0HwGh7Rtp+UxuGFO08hxXVVLhmuIq2uqJj
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:10 2025 by rpki-client