Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/7RI3DnnxQqwhCCRldhswrIK1inI.roa
File: 7RI3DnnxQqwhCCRldhswrIK1inI.roa (raw, json)
Hash identifier: hQi1fTPdcsgcBnwhvNjHy99LeW/Rq2BnKx68etOvfwk=
Subject key identifier: ED:12:37:0E:79:F1:42:AC:21:08:24:65:76:1B:30:AC:82:B5:8A:72
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 02FDB008
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/7RI3DnnxQqwhCCRldhswrIK1inI.roa
Signing time: Sat 01 Jan 2022 04:57:56 +0000
ROA not before: Sat 01 Jan 2022 04:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207737
IP address blocks: 185.216.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50180104 (0x2fdb008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jan 1 04:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed12370e79f142ac21082465761b30ac82b58a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:e0:3e:e9:a3:7b:c4:c6:1d:2b:28:89:dc:
d5:46:a6:b9:2f:8b:a7:0d:c9:24:6c:e8:1c:09:d3:
93:10:64:1d:0a:13:60:ec:25:88:91:dc:b7:32:55:
15:98:e7:a3:63:6a:07:a5:df:47:6c:7a:5b:1a:d2:
e6:cb:40:0a:c1:11:9f:ea:62:d6:5e:09:60:ba:cc:
19:4d:f4:3b:2d:0b:d1:34:e7:b7:15:9a:a2:b3:9e:
50:63:de:14:7e:6a:93:46:b1:81:74:61:02:bd:9b:
73:ff:8a:d7:04:f3:96:bd:eb:b0:27:29:e0:8b:1c:
16:7b:93:f2:17:cf:8c:9d:e5:7e:9d:a1:6d:ca:8d:
66:ef:50:f8:da:f9:ac:ec:77:05:17:f6:9a:6c:4d:
dc:94:c8:74:8a:e3:b4:e1:1a:cf:ac:06:cc:12:45:
95:fd:f9:e8:b1:ca:67:7d:e2:d1:d0:b7:7e:06:41:
17:91:c3:ee:21:e1:80:77:04:e4:fe:9c:30:79:6c:
07:1b:52:2c:57:de:57:cd:f3:8f:7c:68:12:20:8f:
c2:8d:a1:0a:ea:ff:30:78:c2:ac:f0:93:80:04:26:
86:5b:ad:66:26:34:5b:c4:95:4c:5e:9b:f3:9a:16:
db:ee:ce:2e:94:aa:ae:55:8f:16:58:eb:05:1b:7d:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:12:37:0E:79:F1:42:AC:21:08:24:65:76:1B:30:AC:82:B5:8A:72
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/7RI3DnnxQqwhCCRldhswrIK1inI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
87:64:b6:6a:d1:b8:e3:b9:ca:89:f6:7b:ee:ac:23:8f:36:93:
18:1a:b7:38:a4:b6:72:a8:61:6f:be:8c:e3:95:ad:b8:5b:66:
7a:7d:ad:e3:11:48:6b:50:ac:44:f7:bc:aa:25:67:0f:eb:b3:
07:01:0b:cf:03:eb:89:1d:f6:32:e3:a5:f1:b1:d7:43:4f:12:
c8:20:40:95:90:a7:8d:b8:3b:d7:30:ba:f3:11:2c:e5:ad:3e:
12:f9:61:8d:9e:28:74:c4:38:eb:cc:29:88:3b:fd:d9:e1:83:
18:e0:75:d4:44:23:4f:81:9d:5b:d1:f8:d9:46:6e:04:49:8a:
55:70:2c:10:45:da:9b:2c:83:0b:28:2a:43:db:26:4e:6c:16:
d1:71:5d:0d:c9:88:45:76:ae:ba:b2:df:c4:97:c0:1d:88:f8:
16:0a:6b:13:5f:84:d5:dd:3f:3c:97:a1:84:63:e1:0c:63:99:
02:7b:17:d8:71:e4:59:08:43:1e:f9:a4:9a:c2:dc:56:08:d0:
e7:f3:f9:3f:8d:ea:e1:de:5d:98:4f:19:db:b3:92:8c:4a:07:
45:e9:0e:7a:02:86:91:a8:7c:b7:08:4b:87:c5:90:84:7e:2a:
ca:74:e7:d9:d4:8f:11:70:a0:38:28:27:fa:f4:5e:34:0a:ae:
43:10:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:57:22 2025 by rpki-client