Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/7qOMu3yFy5L_PC9XAcQ9_HgfbZs.roa
File: 7qOMu3yFy5L_PC9XAcQ9_HgfbZs.roa (raw, json)
Hash identifier: 6M67VtfjG+wb0iCiRczP6Uu4OLvOaqrlNXORDbT6o+I=
Subject key identifier: EE:A3:8C:BB:7C:85:CB:92:FF:3C:2F:57:01:C4:3D:FC:78:1F:6D:9B
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 01883655124CEA6B450C18592A50B92E2815
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/7qOMu3yFy5L_PC9XAcQ9_HgfbZs.roa
Signing time: Fri 19 May 2023 23:25:24 +0000
ROA not before: Fri 19 May 2023 23:25:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204971
IP address blocks: 185.222.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:36:55:12:4c:ea:6b:45:0c:18:59:2a:50:b9:2e:28:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: May 19 23:25:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eea38cbb7c85cb92ff3c2f5701c43dfc781f6d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:54:fd:de:0e:70:50:dd:4c:3e:0a:ff:a7:
dd:ee:52:d8:4c:56:b4:25:92:c0:11:3f:30:1f:71:
45:76:00:35:23:14:87:89:91:84:fd:30:87:e7:3e:
e8:72:51:bf:1b:c1:ec:f7:ba:79:31:9b:cf:74:76:
75:27:1b:8b:b8:e8:93:96:a6:b2:1c:71:d8:0e:93:
56:af:3f:67:16:8c:63:d9:66:67:53:2f:50:06:6a:
35:21:c6:47:7c:5d:6c:50:7a:9b:22:5c:6b:91:e1:
cb:ec:5b:12:fc:5a:10:2f:18:85:55:92:32:78:0e:
b3:4c:b7:3e:53:c2:23:90:01:3e:49:98:82:48:dd:
b8:b4:1f:46:ab:ab:02:a1:06:0a:a4:11:d4:e9:25:
21:57:7f:2a:45:1d:1a:eb:5f:44:39:5f:0a:b5:1e:
fe:55:c2:d4:2f:13:3f:3f:e2:ff:f1:67:c9:45:46:
c7:00:52:d4:7d:42:f9:91:1a:93:88:a9:e5:c8:6a:
9a:18:75:f1:69:c9:4a:7a:be:88:83:5c:51:c9:50:
33:af:7c:5f:57:e2:c1:d8:88:38:c8:33:26:3e:bb:
f9:18:29:82:53:46:9e:b5:b6:ee:0f:09:50:d8:b5:
21:d4:27:1e:04:77:06:9a:cf:ec:aa:73:37:66:72:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:8C:BB:7C:85:CB:92:FF:3C:2F:57:01:C4:3D:FC:78:1F:6D:9B
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/7qOMu3yFy5L_PC9XAcQ9_HgfbZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.7.0/24
Signature Algorithm: sha256WithRSAEncryption
54:23:f2:46:63:17:67:de:ce:12:f9:e4:85:2a:c3:58:05:ca:
bb:4e:fe:cd:d2:ad:83:7a:49:73:b9:f5:4d:32:d9:6f:f5:3b:
4d:e5:6c:7d:5e:a8:4b:dc:99:58:19:f0:81:c2:02:6d:4f:d0:
ce:87:dc:ff:3b:29:0d:f9:81:c7:63:ce:88:b2:b8:7e:aa:d3:
d5:bb:99:75:2f:01:b4:b3:ab:d0:81:2d:b3:e6:97:10:fb:02:
a5:6e:99:d5:4d:ab:b7:3c:03:57:f7:4f:bf:ee:8f:17:28:5e:
dd:24:03:42:a0:f7:65:b4:95:ce:12:41:45:40:59:f0:1f:6e:
50:3f:85:01:c9:f5:24:f8:bc:98:60:b6:01:5f:59:4e:6d:98:
98:d8:fe:34:25:c2:22:c8:d1:48:88:da:f3:ed:1e:52:40:6f:
37:c6:44:ae:18:c8:41:74:59:af:98:b9:f2:c2:61:01:19:71:
de:16:c7:73:b1:cf:a3:62:95:13:63:62:93:3f:a6:4d:0f:eb:
6f:c8:59:78:91:ee:95:f4:a2:e1:29:12:0d:99:96:00:66:0c:
62:d0:7c:6c:59:c0:78:e8:9d:0a:8d:9a:9a:a6:49:18:51:31:
7d:45:83:f3:4d:ed:9c:f1:d4:84:29:c2:86:1f:76:ee:43:86:
3a:be:15:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYg2VRJM6mtFDBhZKlC5LigVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MWVjYzFhNzRjZjkyYWI2MTljNWY3MTAxMjM5MzdjZTUw
ZDljNDMwHhcNMjMwNTE5MjMyNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWEzOGNiYjdjODVjYjkyZmYzYzJmNTcwMWM0M2RmYzc4MWY2ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCpU/d4OcFDdTD4K/6fd7lLYTFa0
JZLAET8wH3FFdgA1IxSHiZGE/TCH5z7oclG/G8Hs97p5MZvPdHZ1JxuLuOiTlqay
HHHYDpNWrz9nFoxj2WZnUy9QBmo1IcZHfF1sUHqbIlxrkeHL7FsS/FoQLxiFVZIy
eA6zTLc+U8IjkAE+SZiCSN24tB9Gq6sCoQYKpBHU6SUhV38qRR0a619EOV8KtR7+
VcLULxM/P+L/8WfJRUbHAFLUfUL5kRqTiKnlyGqaGHXxaclKer6Ig1xRyVAzr3xf
V+LB2Ig4yDMmPrv5GCmCU0aetbbuDwlQ2LUh1CceBHcGms/sqnM3ZnIDsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO6jjLt8hcuS/zwvVwHEPfx4H22bMB8GA1UdIwQY
MBaAFFgezBp0z5KrYZxfcQEjk3zlDZxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYt
ZGE4OGI2YmRiMzE2LzEvN3FPTXUzeUZ5NUxfUEM5WEFjUTlfSGdmYlpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYtZGE4OGI2YmRiMzE2
LzEvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud4HMA0G
CSqGSIb3DQEBCwUAA4IBAQBUI/JGYxdn3s4S+eSFKsNYBcq7Tv7N0q2DeklzufVN
Mtlv9TtN5Wx9XqhL3JlYGfCBwgJtT9DOh9z/OykN+YHHY86Isrh+qtPVu5l1LwG0
s6vQgS2z5pcQ+wKlbpnVTau3PANX90+/7o8XKF7dJANCoPdltJXOEkFFQFnwH25Q
P4UByfUk+LyYYLYBX1lObZiY2P40JcIiyNFIiNrz7R5SQG83xkSuGMhBdFmvmLny
wmEBGXHeFsdzsc+jYpUTY2KTP6ZND+tvyFl4ke6V9KLhKRINmZYAZgxi0HxsWcB4
6J0KjZqapkkYUTF9RYPzTe2c8dSEKcKGH3buQ4Y6vhWq
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:06 2025 by rpki-client