Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/eqJAEOy6NaY4mZwa5RQJfzteBn0.roa
File: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (raw, json)
Hash identifier: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=
Subject key identifier: 7A:A2:40:10:EC:BA:35:A6:38:99:9C:1A:E5:14:09:7F:3B:5E:06:7D
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019426D909E690243C268D9A74A2A53B08D5
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/eqJAEOy6NaY4mZwa5RQJfzteBn0.roa
Signing time: Thu 02 Jan 2025 11:49:05 +0000
ROA not before: Thu 02 Jan 2025 11:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201241
IP address blocks: 185.237.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:09:e6:90:24:3c:26:8d:9a:74:a2:a5:3b:08:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Jan 2 11:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aa24010ecba35a638999c1ae514097f3b5e067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:ae:b7:1d:54:ea:67:b5:17:6e:9d:95:56:
f8:4f:46:4e:95:03:98:0e:7b:98:26:15:63:17:27:
a5:55:0f:74:e5:53:cc:04:e3:3a:4e:a4:ba:fa:46:
b9:e5:13:eb:5f:ba:e9:9b:09:55:63:e9:95:64:7c:
ea:dc:6b:e9:02:70:e1:a6:4c:a9:5c:7b:75:95:77:
2d:16:fe:9d:32:d8:d9:1a:50:45:8d:fb:a0:cc:e4:
4d:e7:5d:b3:06:cf:7d:07:6e:d3:ea:ce:d1:2e:15:
f5:5f:32:3b:d7:6f:02:fe:79:aa:91:27:85:2a:fc:
76:a0:26:76:29:ba:39:8f:b9:18:02:ac:28:5f:6d:
67:8e:49:a4:c5:15:f6:ee:02:66:21:ec:2a:34:51:
d0:bc:14:43:ef:22:35:dd:1a:49:47:33:2f:50:00:
99:12:ab:61:d4:5a:e5:e8:e9:61:a8:86:7b:e2:10:
dd:d4:63:e1:19:64:3d:21:dc:29:5d:a7:77:85:e7:
09:7e:9e:b0:08:b3:71:32:05:dc:d5:fc:0f:5a:ce:
3d:3d:14:33:c2:cc:3c:6f:c9:5a:97:e9:cb:da:9b:
1f:26:ac:97:d9:d3:59:8b:56:10:b7:29:f1:ff:eb:
cf:bf:e7:65:cb:1f:9f:ff:34:49:8f:41:c1:f4:85:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A2:40:10:EC:BA:35:A6:38:99:9C:1A:E5:14:09:7F:3B:5E:06:7D
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/eqJAEOy6NaY4mZwa5RQJfzteBn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:c2:99:60:d9:58:ec:2f:81:46:44:b4:1b:3c:00:72:55:19:
43:2f:6b:ac:0d:cf:4d:e6:9f:fa:81:fd:6c:16:9c:59:95:c0:
05:b3:fc:de:16:56:8b:a2:8a:a2:5e:f7:c2:6d:7f:31:e5:ef:
9d:8c:c4:b5:e9:f1:b8:7f:ed:6c:b5:73:73:0b:19:75:89:71:
f3:41:f1:b0:3c:a9:fe:2c:5a:91:a7:2a:e2:ba:b0:97:05:47:
5f:73:6b:ac:a9:eb:2c:54:91:ff:cd:7c:10:5c:d0:93:f0:32:
e2:6b:a4:26:32:41:59:c9:c4:e8:40:e2:e1:45:3a:1c:23:d3:
7e:bd:33:d8:c2:c6:24:40:55:b9:e0:49:38:3e:40:93:b6:b4:
99:56:eb:6d:c2:76:13:2f:a5:30:88:84:cd:6b:da:fa:0c:d0:
b3:86:dc:11:07:94:37:07:10:30:f2:8f:6b:ff:b9:29:16:d3:
cd:29:1d:34:bc:e3:90:ee:d6:d0:9c:ec:29:e7:a8:78:c4:aa:
68:77:5e:a5:fb:6a:10:1a:91:0e:7c:d7:6b:78:73:8d:61:bc:
e7:84:83:99:12:97:d9:8b:b3:03:02:6c:7c:a4:4e:f3:f7:c2:
47:21:90:7b:ce:1a:7d:f7:64:95:0f:c2:6d:18:20:36:03:93:
12:4b:38:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2QnmkCQ8Jo2adKKlOwjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz
MWVmZDAwHhcNMjUwMTAyMTE0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWEyNDAxMGVjYmEzNWE2Mzg5OTljMWFlNTE0MDk3ZjNiNWUwNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C6utx1U6me1F26dlVb4T0ZOlQOY
DnuYJhVjFyelVQ905VPMBOM6TqS6+ka55RPrX7rpmwlVY+mVZHzq3GvpAnDhpkyp
XHt1lXctFv6dMtjZGlBFjfugzORN512zBs99B27T6s7RLhX1XzI7128C/nmqkSeF
Kvx2oCZ2Kbo5j7kYAqwoX21njkmkxRX27gJmIewqNFHQvBRD7yI13RpJRzMvUACZ
Eqth1Frl6OlhqIZ74hDd1GPhGWQ9IdwpXad3hecJfp6wCLNxMgXc1fwPWs49PRQz
wsw8b8lal+nL2psfJqyX2dNZi1YQtynx/+vPv+dlyx+f/zRJj0HB9IUNpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqiQBDsujWmOJmcGuUUCX87XgZ9MB8GA1UdIwQY
MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt
OTIzY2I1MGFiZTJlLzEvZXFKQUVPeTZOYVk0bVp3YTVSUUpmenRlQm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl
LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue3kMA0G
CSqGSIb3DQEBCwUAA4IBAQCOwplg2VjsL4FGRLQbPAByVRlDL2usDc9N5p/6gf1s
FpxZlcAFs/zeFlaLooqiXvfCbX8x5e+djMS16fG4f+1stXNzCxl1iXHzQfGwPKn+
LFqRpyriurCXBUdfc2usqessVJH/zXwQXNCT8DLia6QmMkFZycToQOLhRTocI9N+
vTPYwsYkQFW54Ek4PkCTtrSZVuttwnYTL6UwiITNa9r6DNCzhtwRB5Q3BxAw8o9r
/7kpFtPNKR00vOOQ7tbQnOwp56h4xKpod16l+2oQGpEOfNdreHONYbznhIOZEpfZ
i7MDAmx8pE7z98JHIZB7zhp992SVD8JtGCA2A5MSSzhT
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:44 2025 by rpki-client