Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Ew7W1lBVgJLIyCQCAyne42ycTas.roa
File: Ew7W1lBVgJLIyCQCAyne42ycTas.roa (raw, json)
Hash identifier: RysgKvdqvkqP0KlE1Qc3VG7a+JllwpBR7B1FiPMxjQ4=
Subject key identifier: 13:0E:D6:D6:50:55:80:92:C8:C8:24:02:03:29:DE:E3:6C:9C:4D:AB
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 01942369D7B767F074F0810938466A287EBD
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Ew7W1lBVgJLIyCQCAyne42ycTas.roa
Signing time: Wed 01 Jan 2025 19:48:46 +0000
ROA not before: Wed 01 Jan 2025 19:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211043
IP address blocks: 185.102.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d7:b7:67:f0:74:f0:81:09:38:46:6a:28:7e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 19:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=130ed6d650558092c8c824020329dee36c9c4dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:e6:4f:2b:1e:96:9f:08:8f:f4:d2:e2:08:
1b:5d:dd:0c:5d:1f:38:c7:11:15:3b:c8:19:78:a1:
ab:83:4a:67:1e:5e:62:01:45:2f:8d:81:e4:18:9b:
92:5f:77:20:15:40:97:ff:c3:f5:6b:84:72:98:3c:
77:ba:3d:22:96:91:0a:92:a3:93:17:d3:84:3f:8b:
a6:5d:60:ff:b4:c4:99:28:82:7a:d3:09:bb:74:73:
2a:9a:ca:c8:c8:98:93:e9:b7:e6:32:32:a8:c9:4f:
f8:bf:39:81:36:a5:a7:aa:f6:ac:49:c9:21:5e:19:
19:11:f8:8c:f8:c5:58:e6:aa:be:02:84:d0:07:88:
20:41:ed:92:af:e2:41:d2:e6:68:a1:02:0d:16:75:
c8:35:2e:ff:31:b2:fb:b3:a5:d3:4a:0f:7c:fa:e1:
04:b1:fb:a7:29:96:16:91:f7:26:8d:6b:ec:f2:fc:
79:e7:30:0c:14:29:67:98:0b:d5:61:28:58:3a:39:
99:30:f5:df:09:23:fd:b7:e3:c4:44:78:77:aa:8a:
50:90:9f:1f:08:ad:ca:6a:dc:4d:23:65:a2:bd:79:
fe:ba:e7:ae:2e:14:27:eb:39:03:65:1a:95:da:13:
1c:99:35:3b:af:01:12:1c:b1:b8:65:d3:b9:a9:72:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0E:D6:D6:50:55:80:92:C8:C8:24:02:03:29:DE:E3:6C:9C:4D:AB
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Ew7W1lBVgJLIyCQCAyne42ycTas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e6:3e:c3:9f:07:9c:9b:b2:3b:ca:3f:c5:cd:82:cd:64:02:
5b:1b:13:d5:b0:47:3e:95:11:38:d3:eb:c7:17:bf:8e:60:44:
f6:cd:93:61:d1:ee:0f:8a:67:02:0e:16:c9:aa:ad:26:de:cf:
b0:55:e9:eb:c8:04:7a:f3:c1:4d:ba:05:3e:1c:2d:e0:a4:28:
e0:6b:bf:d3:00:67:15:5c:2f:92:84:a5:2d:86:dc:2d:b9:68:
2b:bd:d1:1c:8b:ab:52:f4:46:10:e5:45:55:a8:49:7a:3c:4e:
f7:5a:c2:9b:ae:29:c6:79:8d:89:25:a4:2a:7d:38:61:a5:a5:
61:d6:dd:34:ec:99:2f:15:92:40:65:1f:73:67:38:ed:82:a4:
b2:1c:42:1e:bb:26:0c:1b:83:79:08:97:41:42:82:cb:8f:fa:
46:f1:86:48:72:b5:fb:36:eb:19:39:91:e6:46:7b:ab:ad:f4:
a7:31:16:1b:8d:ac:2e:a0:74:b5:bb:d1:ff:6c:03:54:3c:be:
16:09:e6:53:3c:06:33:73:26:3e:e2:59:68:15:6e:c6:3f:dd:
d0:fd:40:bf:eb:76:b7:81:36:1a:ee:6f:69:63:b9:d2:31:ef:
a1:64:c1:5d:06:67:e3:72:21:10:6e:30:ac:4d:0d:ca:d1:00:
54:08:d3:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjade3Z/B08IEJOEZqKH69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5
YmY3N2YwHhcNMjUwMTAxMTk0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzBlZDZkNjUwNTU4MDkyYzhjODI0MDIwMzI5ZGVlMzZjOWM0ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDmTyselp8Ij/TS4ggbXd0MXR84
xxEVO8gZeKGrg0pnHl5iAUUvjYHkGJuSX3cgFUCX/8P1a4RymDx3uj0ilpEKkqOT
F9OEP4umXWD/tMSZKIJ60wm7dHMqmsrIyJiT6bfmMjKoyU/4vzmBNqWnqvasSckh
XhkZEfiM+MVY5qq+AoTQB4ggQe2Sr+JB0uZooQINFnXINS7/MbL7s6XTSg98+uEE
sfunKZYWkfcmjWvs8vx55zAMFClnmAvVYShYOjmZMPXfCSP9t+PERHh3qopQkJ8f
CK3KatxNI2WivXn+uueuLhQn6zkDZRqV2hMcmTU7rwESHLG4ZdO5qXIbfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMO1tZQVYCSyMgkAgMp3uNsnE2rMB8GA1UdIwQY
MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt
MzQ3YTBmN2M1YjA4LzEvRXc3VzFsQlZnSkxJeUNRQ0F5bmU0MnljVGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4
LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWarMA0G
CSqGSIb3DQEBCwUAA4IBAQB65j7Dnwecm7I7yj/FzYLNZAJbGxPVsEc+lRE40+vH
F7+OYET2zZNh0e4PimcCDhbJqq0m3s+wVenryAR688FNugU+HC3gpCjga7/TAGcV
XC+ShKUthtwtuWgrvdEci6tS9EYQ5UVVqEl6PE73WsKbrinGeY2JJaQqfThhpaVh
1t007JkvFZJAZR9zZzjtgqSyHEIeuyYMG4N5CJdBQoLLj/pG8YZIcrX7NusZOZHm
RnurrfSnMRYbjawuoHS1u9H/bANUPL4WCeZTPAYzcyY+4lloFW7GP93Q/UC/63a3
gTYa7m9pY7nSMe+hZMFdBmfjciEQbjCsTQ3K0QBUCNOT
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:12 2025 by rpki-client