Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/2Xe9sowkB8RhnpSVvsjXsjTURKI.roa
File: 2Xe9sowkB8RhnpSVvsjXsjTURKI.roa (raw, json)
Hash identifier: R4El3uNzRSIuc6RZC9bjzisB8oNQwNrwoEu3U0VL8Nc=
Subject key identifier: D9:77:BD:B2:8C:24:07:C4:61:9E:94:95:BE:C8:D7:B2:34:D4:44:A2
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 033720BC
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/2Xe9sowkB8RhnpSVvsjXsjTURKI.roa
Signing time: Sat 01 Jan 2022 05:03:16 +0000
ROA not before: Sat 01 Jan 2022 05:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 185.213.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53944508 (0x33720bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 05:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d977bdb28c2407c4619e9495bec8d7b234d444a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:ea:a0:60:4b:b4:1d:31:99:fb:3e:ae:2f:
4f:06:f5:f6:ed:67:9a:e4:8d:3a:88:7c:5f:74:5a:
39:c8:77:4b:5c:7c:08:e6:63:0d:de:2d:56:cb:4b:
2a:bf:dd:96:2c:e4:84:91:87:02:e5:82:c8:a9:80:
ed:18:a0:69:c5:c5:42:68:e9:6e:3b:a9:d1:a9:34:
a3:9c:b9:75:be:02:98:34:f5:68:a1:6b:08:3e:35:
91:87:86:27:95:c9:2f:09:c0:73:80:f9:0c:48:55:
d1:4e:e3:52:64:b1:4f:e5:98:2a:4d:0d:bf:07:e9:
ea:fc:64:c9:ac:e3:79:81:1e:d0:fe:30:38:21:05:
17:a3:1e:6e:fc:0a:12:d1:0c:55:32:ee:77:6e:ec:
79:84:e3:09:d2:e9:7b:d5:9f:f7:c2:7a:7b:5f:ca:
0c:97:e9:0b:d0:54:1c:fc:c0:fc:2a:5b:7f:5d:29:
f7:d0:36:f2:e2:62:0b:e5:9c:fe:0a:46:29:3a:93:
5c:30:71:87:7b:b8:cb:f2:1e:a1:6b:27:4b:12:90:
47:ab:57:15:e7:45:45:64:20:4a:b3:62:b8:6d:5c:
25:90:89:90:a5:e6:09:b8:50:47:00:73:7e:fa:fc:
ef:b7:8e:05:94:00:fa:0e:08:d2:4d:6e:86:07:38:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:BD:B2:8C:24:07:C4:61:9E:94:95:BE:C8:D7:B2:34:D4:44:A2
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/2Xe9sowkB8RhnpSVvsjXsjTURKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.242.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c6:7c:9a:ac:a1:df:ce:3c:7a:24:8f:af:1a:b7:0f:08:12:
0f:93:d0:ed:b3:6b:75:4a:9b:60:34:34:aa:ec:f0:8b:69:76:
69:a2:94:2a:01:d1:49:10:96:d9:e9:bb:ef:3e:e1:06:71:5b:
e4:b1:ae:04:b7:9f:c0:9f:0b:98:93:89:3d:b1:cc:e8:b9:bc:
a7:14:6b:ee:54:88:4a:15:47:52:6c:b9:27:f7:bd:b1:68:8c:
c5:c7:7d:cf:26:33:ac:a4:b0:dc:90:1f:3f:03:6b:2d:b7:e0:
82:4f:15:bb:34:c9:f3:dd:9a:5d:40:16:fe:02:6d:a1:d9:80:
00:b9:4e:c1:92:0b:04:63:4f:fb:74:4f:04:4d:c5:67:be:8c:
ac:31:bd:da:1d:19:81:85:2f:70:12:bf:ee:0c:86:cc:b5:75:
02:0c:6a:36:a9:6a:63:29:84:1a:73:b6:0f:f5:f6:7c:94:c4:
b1:b8:87:f5:d1:aa:df:12:3b:34:f4:a9:96:ac:d2:1c:44:cf:
76:d1:95:15:bd:15:cf:46:a5:5f:b6:b5:65:91:64:ed:79:21:
32:d5:03:47:5b:45:84:79:32:08:6b:74:dd:1f:eb:4f:94:8e:
5c:72:c6:d1:85:67:de:08:d6:70:f8:1e:b5:27:63:1f:5a:37:
9e:05:6f:ba
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAzcgvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDg1Mzk3ZjI2YTA0NGNhZWY2YTZiNjY5Mjg3MzMxYWE0ZDY4NjQ1MB4XDTIyMDEw
MTA1MDMxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk3N2JkYjI4YzI0
MDdjNDYxOWU5NDk1YmVjOGQ3YjIzNGQ0NDRhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMPg6qBgS7QdMZn7Pq4vTwb19u1nmuSNOoh8X3RaOch3S1x8
COZjDd4tVstLKr/dlizkhJGHAuWCyKmA7RigacXFQmjpbjup0ak0o5y5db4CmDT1
aKFrCD41kYeGJ5XJLwnAc4D5DEhV0U7jUmSxT+WYKk0Nvwfp6vxkyazjeYEe0P4w
OCEFF6MebvwKEtEMVTLud27seYTjCdLpe9Wf98J6e1/KDJfpC9BUHPzA/Cpbf10p
99A28uJiC+Wc/gpGKTqTXDBxh3u4y/IeoWsnSxKQR6tXFedFRWQgSrNiuG1cJZCJ
kKXmCbhQRwBzfvr877eOBZQA+g4I0k1uhgc4XzMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTZd72yjCQHxGGelJW+yNeyNNREojAfBgNVHSMEGDAWgBRghTl/JqBEyu9q
a2aShzMapNaGRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lJVTVmeWFnUk1ydmFtdG1rb2N6R3FUV2hrVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvMTEyNWEyLTQ0MzItNDgzZi1hMDBiLTYxNmQ5N2E3N2JkNi8x
LzJYZTlzb3drQjhSaG5wU1Z2c2pYc2pUVVJLSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
MTEyNWEyLTQ0MzItNDgzZi1hMDBiLTYxNmQ5N2E3N2JkNi8xL1lJVTVmeWFnUk1y
dmFtdG1rb2N6R3FUV2hrVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV8jANBgkqhkiG9w0BAQsFAAOC
AQEAQsZ8mqyh3848eiSPrxq3DwgSD5PQ7bNrdUqbYDQ0quzwi2l2aaKUKgHRSRCW
2em77z7hBnFb5LGuBLefwJ8LmJOJPbHM6Lm8pxRr7lSIShVHUmy5J/e9sWiMxcd9
zyYzrKSw3JAfPwNrLbfggk8VuzTJ892aXUAW/gJtodmAALlOwZILBGNP+3RPBE3F
Z76MrDG92h0ZgYUvcBK/7gyGzLV1AgxqNqlqYymEGnO2D/X2fJTEsbiH9dGq3xI7
NPSplqzSHETPdtGVFb0Vz0alX7a1ZZFk7XkhMtUDR1tFhHkyCGt03R/rT5SOXHLG
0YVn3gjWcPgetSdjH1o3ngVvug==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:52 2025 by rpki-client