Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/69t4ycScmSEVfwKMv9ZrUxVH6n8.roa
File: 69t4ycScmSEVfwKMv9ZrUxVH6n8.roa (raw, json)
Hash identifier: NgdhmSKRQoTJLd++7uWr5cRp8eQSlZNhZHM2xj4/O6I=
Subject key identifier: EB:DB:78:C9:C4:9C:99:21:15:7F:02:8C:BF:D6:6B:53:15:47:EA:7F
Certificate issuer: /CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Certificate serial: 01879D2A018503F17F3E56059E028BD990FA
Authority key identifier: 7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/69t4ycScmSEVfwKMv9ZrUxVH6n8.roa
Signing time: Thu 20 Apr 2023 05:36:28 +0000
ROA not before: Thu 20 Apr 2023 05:36:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.83.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:2a:01:85:03:f1:7f:3e:56:05:9e:02:8b:d9:90:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Validity
Not Before: Apr 20 05:36:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebdb78c9c49c9921157f028cbfd66b531547ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:e0:c5:c1:57:fb:4c:2c:ed:dc:f2:ed:99:
fe:6e:35:a3:bd:35:0c:d6:37:41:98:72:d8:af:b3:
b4:3a:2e:bc:10:26:c2:fe:db:ec:cb:a6:0a:fd:16:
38:2e:df:ef:b6:d6:e4:7a:64:e8:eb:ba:6f:6b:41:
d0:93:02:f6:0c:f0:21:6f:2d:d3:1f:6b:16:bc:5b:
da:a4:05:66:21:d4:71:f7:68:62:92:eb:a6:24:bf:
27:64:f2:71:1a:34:fb:37:cb:21:fe:dd:a0:40:46:
a4:d5:e6:20:73:ae:76:f2:92:0a:ba:53:3b:ae:2c:
d3:77:d2:7e:98:29:64:2c:e7:8a:fe:7a:f7:19:ed:
04:a8:0c:9d:59:44:e6:76:17:25:e2:9f:7c:b7:27:
73:a8:04:ce:da:a3:c3:44:5a:2f:e3:38:1c:0f:cc:
d4:cc:68:02:ab:39:99:d6:b7:18:42:2d:ad:20:d1:
1b:2f:42:70:1e:d6:58:09:0b:9a:01:94:65:35:95:
53:16:47:ac:49:bb:d5:c1:02:81:cd:18:c1:6f:b6:
d7:5c:01:b4:a2:60:f2:b7:c0:44:30:db:50:56:0e:
d3:8b:3f:7d:24:81:dc:31:76:c4:01:b5:aa:e5:f8:
bb:e6:ff:ed:0d:0c:99:4e:ff:9f:b9:54:46:e4:26:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:78:C9:C4:9C:99:21:15:7F:02:8C:BF:D6:6B:53:15:47:EA:7F
X509v3 Authority Key Identifier:
keyid:7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/69t4ycScmSEVfwKMv9ZrUxVH6n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a7:5b:60:b1:81:a0:d4:87:33:4e:84:c1:d7:18:d8:1e:55:
b3:1a:9d:34:b7:5e:e7:a1:56:54:d0:e9:c1:0a:1b:6e:db:17:
6e:1b:14:6e:eb:83:9b:1f:01:9f:f2:1e:3c:29:d2:e9:26:27:
90:f9:d9:ab:1d:f4:61:fb:9b:79:d0:88:38:42:2a:3a:0b:09:
dc:2b:a4:a9:16:60:e9:1f:b0:72:82:22:cd:bc:14:0a:8e:2c:
85:63:eb:1b:9c:84:45:b7:cd:39:7e:16:4d:35:3c:8d:09:6c:
ef:54:49:f2:f1:da:43:d1:6d:75:34:e7:80:89:64:aa:cb:5e:
0c:ed:f5:4e:a6:dd:99:0f:20:ee:0d:fa:59:5e:96:7f:dc:3f:
5f:62:c6:44:32:68:c9:1a:26:50:fd:bb:2e:09:83:9e:1d:41:
03:f0:1c:25:38:6c:77:3a:9d:5e:85:7d:2a:d2:ea:db:24:1f:
6a:8e:60:46:04:0e:9f:61:59:39:c9:ae:7e:a2:05:7b:23:23:
7a:21:9a:af:49:36:58:86:70:c7:73:ef:a1:1d:9f:a9:a1:a9:
cf:51:55:d9:04:ea:a6:8d:85:f8:4f:e5:26:05:7c:12:87:80:
8f:3c:7d:d3:f9:ce:76:a6:8c:3c:a6:b2:e6:d6:80:30:17:23:
6f:2c:59:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYedKgGFA/F/PlYFngKL2ZD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNGUxZjYwMzBkNDczNTkwOWVjN2VmN2MzYTU2NDlmNzYy
YzQ5ZWYwHhcNMjMwNDIwMDUzNjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmRiNzhjOWM0OWM5OTIxMTU3ZjAyOGNiZmQ2NmI1MzE1NDdlYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxPgxcFX+0ws7dzy7Zn+bjWjvTUM
1jdBmHLYr7O0Oi68ECbC/tvsy6YK/RY4Lt/vttbkemTo67pva0HQkwL2DPAhby3T
H2sWvFvapAVmIdRx92hikuumJL8nZPJxGjT7N8sh/t2gQEak1eYgc6528pIKulM7
rizTd9J+mClkLOeK/nr3Ge0EqAydWUTmdhcl4p98tydzqATO2qPDRFov4zgcD8zU
zGgCqzmZ1rcYQi2tINEbL0JwHtZYCQuaAZRlNZVTFkesSbvVwQKBzRjBb7bXXAG0
omDyt8BEMNtQVg7Tiz99JIHcMXbEAbWq5fi75v/tDQyZTv+fuVRG5CZn/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvbeMnEnJkhFX8CjL/Wa1MVR+p/MB8GA1UdIwQY
MBaAFHtOH2Aw1HNZCex+98OlZJ92LEnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTA0ZllERFVjMWtKN0g3M3c2VmtuM1lzU2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lZTkyYzgtZWI4OS00ZTI0LTgwODMt
YzA3YjBkNzk2OTIzLzEvNjl0NHljU2NtU0VWZndLTXY5WnJVeFZINm44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9lZTkyYzgtZWI4OS00ZTI0LTgwODMtYzA3YjBkNzk2OTIz
LzEvZTA0ZllERFVjMWtKN0g3M3c2VmtuM1lzU2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVPnMA0G
CSqGSIb3DQEBCwUAA4IBAQArp1tgsYGg1IczToTB1xjYHlWzGp00t17noVZU0OnB
Chtu2xduGxRu64ObHwGf8h48KdLpJieQ+dmrHfRh+5t50Ig4Qio6CwncK6SpFmDp
H7BygiLNvBQKjiyFY+sbnIRFt805fhZNNTyNCWzvVEny8dpD0W11NOeAiWSqy14M
7fVOpt2ZDyDuDfpZXpZ/3D9fYsZEMmjJGiZQ/bsuCYOeHUED8BwlOGx3Op1ehX0q
0urbJB9qjmBGBA6fYVk5ya5+ogV7IyN6IZqvSTZYhnDHc++hHZ+poanPUVXZBOqm
jYX4T+UmBXwSh4CPPH3T+c52pow8prLm1oAwFyNvLFmr
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:09:02 2025 by rpki-client