Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/7YnguZFCscIVCR1qcbAyO2GHzOQ.roa
File: 7YnguZFCscIVCR1qcbAyO2GHzOQ.roa (raw, json)
Hash identifier: gCFoN4X0MxnRAt8OliIEiqBfBqdWfYQstQ5L9Rx1eok=
Subject key identifier: ED:89:E0:B9:91:42:B1:C2:15:09:1D:6A:71:B0:32:3B:61:87:CC:E4
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018A318A916A01B3974B3C837CDEB7DFAE07
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/7YnguZFCscIVCR1qcbAyO2GHzOQ.roa
Signing time: Sat 26 Aug 2023 11:11:19 +0000
ROA not before: Sat 26 Aug 2023 11:11:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.21.131.0/24 maxlen: 24
195.225.98.0/24 maxlen: 24
185.25.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:8a:91:6a:01:b3:97:4b:3c:83:7c:de:b7:df:ae:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Aug 26 11:11:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed89e0b99142b1c215091d6a71b0323b6187cce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:c6:e9:95:9a:80:e6:05:c4:cd:00:70:00:
1a:cc:2f:23:e5:df:c4:2e:69:11:cc:86:f2:e8:61:
bb:df:98:8d:54:43:8e:a9:a9:a5:71:86:26:5a:e3:
f1:91:71:92:37:37:ec:24:b5:e4:98:b5:c2:c0:ca:
88:a3:b6:27:2f:46:3d:ea:20:ea:67:2e:3d:8a:d3:
7b:d1:2a:8a:da:35:01:fd:43:4f:c8:dc:52:92:5c:
af:e4:41:49:60:21:87:31:87:a4:27:72:46:8a:4d:
87:5e:bd:6b:35:be:3c:31:5e:38:5f:2c:ff:b5:42:
1e:ea:19:7c:8d:35:95:dd:98:13:df:c4:2c:40:fe:
41:20:3c:94:7d:5d:bc:c2:f8:2b:46:c7:b4:57:a5:
30:8f:28:63:12:a3:8b:bd:41:a5:1a:cd:d5:9f:0f:
40:0f:30:53:33:99:47:e8:8c:fc:64:a8:32:cd:ba:
43:c3:20:53:24:90:23:c1:54:99:b9:cc:be:1b:09:
e6:d9:72:b7:54:81:e2:22:88:12:c5:c1:48:30:eb:
d9:d3:83:c7:b2:d2:64:2b:2e:31:3c:56:0f:fd:b1:
51:b7:d8:1a:8d:93:85:d3:84:e0:ba:a5:74:f2:5f:
99:a4:23:d7:af:27:f8:ec:aa:2d:74:11:03:44:c8:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:E0:B9:91:42:B1:C2:15:09:1D:6A:71:B0:32:3B:61:87:CC:E4
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/7YnguZFCscIVCR1qcbAyO2GHzOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.131.0/24
185.25.104.0/24
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9e:9b:bc:0a:c9:29:28:4e:8e:ff:29:ed:0f:f1:5a:f2:92:
b8:94:e9:99:1f:90:05:c8:3f:0d:48:4f:94:9b:12:ce:f1:78:
6e:7c:b0:5e:6c:a5:58:b8:f6:c6:d9:49:1e:07:31:16:db:14:
47:1b:5d:c7:65:17:d7:89:60:ad:f4:13:56:f7:61:21:86:63:
b0:8a:c1:c3:12:0e:ab:f8:d2:c3:9e:96:1f:4b:fd:2a:6c:5a:
60:ae:29:83:19:a9:7d:c4:ee:ca:08:31:19:c1:89:15:cf:c8:
80:79:15:66:60:ab:bf:de:66:3e:9a:a5:21:9a:39:42:fa:70:
7a:0e:f2:5e:2a:a8:2e:bf:d6:16:d4:b1:ba:69:1c:05:ab:b9:
e3:f2:cf:fe:59:e8:8a:d8:fe:0b:ca:07:ef:58:a3:2f:84:ac:
16:98:72:82:00:f7:ef:f4:28:0e:d9:72:1d:f0:3f:57:70:9b:
db:ac:ae:be:53:6d:ba:81:30:99:0d:41:43:e2:e9:61:c1:15:
6e:85:58:37:68:81:4c:ea:09:43:8b:1e:bc:be:93:53:08:48:
39:73:f6:4f:4f:fd:60:04:91:c1:b3:0a:36:86:9f:2f:e2:e7:
1c:01:c4:f2:be:3c:84:67:28:ea:e2:51:10:19:28:e5:2b:16:
77:ab:15:2c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYoxipFqAbOXSzyDfN63364HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjMwODI2MTExMTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDg5ZTBiOTkxNDJiMWMyMTUwOTFkNmE3MWIwMzIzYjYxODdjY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdzG6ZWagOYFxM0AcAAazC8j5d/E
LmkRzIby6GG735iNVEOOqamlcYYmWuPxkXGSNzfsJLXkmLXCwMqIo7YnL0Y96iDq
Zy49itN70SqK2jUB/UNPyNxSklyv5EFJYCGHMYekJ3JGik2HXr1rNb48MV44Xyz/
tUIe6hl8jTWV3ZgT38QsQP5BIDyUfV28wvgrRse0V6UwjyhjEqOLvUGlGs3Vnw9A
DzBTM5lH6Iz8ZKgyzbpDwyBTJJAjwVSZucy+Gwnm2XK3VIHiIogSxcFIMOvZ04PH
stJkKy4xPFYP/bFRt9gajZOF04TguqV08l+ZpCPXryf47KotdBEDRMhn9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO2J4LmRQrHCFQkdanGwMjthh8zkMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvN1luZ3VaRkNzY0lWQ1IxcWNiQXlPMkdIek9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuRWDAwQA
uRloAwQAw+FiMA0GCSqGSIb3DQEBCwUAA4IBAQB6npu8CskpKE6O/yntD/Fa8pK4
lOmZH5AFyD8NSE+UmxLO8XhufLBebKVYuPbG2UkeBzEW2xRHG13HZRfXiWCt9BNW
92EhhmOwisHDEg6r+NLDnpYfS/0qbFpgrimDGal9xO7KCDEZwYkVz8iAeRVmYKu/
3mY+mqUhmjlC+nB6DvJeKqguv9YW1LG6aRwFq7nj8s/+WeiK2P4LygfvWKMvhKwW
mHKCAPfv9CgO2XId8D9XcJvbrK6+U226gTCZDUFD4ulhwRVuhVg3aIFM6glDix68
vpNTCEg5c/ZPT/1gBJHBswo2hp8v4uccAcTyvjyEZyjq4lEQGSjlKxZ3qxUs
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:01 2025 by rpki-client