Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/7McjxupphmUTIDMB5hb0zSdkKPU.roa
File: 7McjxupphmUTIDMB5hb0zSdkKPU.roa (raw, json)
Hash identifier: EbiTg62JkmhMKsH+lFrkNiNAuLRjLLKFna7hKz3yDps=
Subject key identifier: EC:C7:23:C6:EA:69:86:65:13:20:33:01:E6:16:F4:CD:27:64:28:F5
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 0195B4F7232F7249601B4EF9E0CAC3665D86
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/7McjxupphmUTIDMB5hb0zSdkKPU.roa
Signing time: Thu 20 Mar 2025 19:10:50 +0000
ROA not before: Thu 20 Mar 2025 19:10:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213753
IP address blocks: 185.28.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:f7:23:2f:72:49:60:1b:4e:f9:e0:ca:c3:66:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Mar 20 19:10:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc723c6ea69866513203301e616f4cd276428f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:50:02:8d:66:4d:37:b2:fb:f2:14:87:c8:
49:63:26:30:3c:e2:d9:a0:6a:47:dd:f8:2c:0c:58:
89:5a:a3:82:1c:58:fa:51:cc:30:a3:6d:d1:c1:31:
39:db:d4:bc:34:49:e3:85:fc:c9:71:b9:0a:d5:a9:
58:7f:7e:56:ee:31:dc:59:96:dc:03:5c:9d:24:b8:
0d:aa:11:4f:6a:91:54:0f:8a:35:22:8f:6f:00:90:
98:e1:20:a0:89:06:19:47:1e:f6:3e:86:80:37:52:
2d:93:ee:91:a8:13:9b:45:cb:1d:6d:60:56:53:1b:
64:db:7d:24:8f:f9:2c:11:4f:cf:1d:8f:82:dc:99:
4b:00:c4:45:e1:d7:84:82:1d:19:64:69:0f:19:f6:
bd:0d:66:87:55:d5:75:b8:69:ba:b4:b4:9f:d2:c6:
8c:b7:e8:f4:83:58:34:59:68:e1:e7:1e:21:3f:c9:
2a:dd:da:9b:5d:b0:c5:32:5a:e7:40:2b:ce:e2:0d:
ac:71:6a:0f:2f:95:fd:95:b2:40:4c:d4:4c:12:e1:
51:25:b0:3a:a1:e1:bd:92:c5:45:f1:76:ac:05:83:
ba:5a:21:97:6f:24:52:56:fd:41:00:6d:02:53:50:
b3:fb:d1:95:86:7e:31:b1:8d:05:94:6b:0c:c9:f1:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:23:C6:EA:69:86:65:13:20:33:01:E6:16:F4:CD:27:64:28:F5
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/7McjxupphmUTIDMB5hb0zSdkKPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:8b:45:18:03:e1:06:1b:6e:b2:c0:87:f8:6f:71:66:ac:29:
b2:94:d6:db:cc:04:a8:55:2a:48:c1:b3:5b:92:45:d2:9a:da:
cf:a4:8f:5b:01:46:f8:ae:39:2d:99:ab:20:13:14:73:de:74:
ea:69:bf:ed:58:49:ca:16:ab:41:74:9a:b4:32:4f:d8:bb:c1:
21:fb:f2:cb:cf:dc:95:09:c9:f7:f9:5f:c0:27:ca:20:0e:87:
cb:ee:b5:63:7a:ed:c3:54:5c:7a:82:90:37:da:89:fd:a0:e6:
05:c8:97:3c:cd:be:a9:a6:eb:9b:6c:91:45:6a:8e:ee:d3:9c:
ed:80:63:ef:fc:d8:e1:e4:84:d0:6e:de:92:50:b7:28:96:34:
98:79:b9:97:78:53:32:13:3d:71:3b:9c:e6:22:50:07:ac:85:
30:88:f4:a6:d9:db:32:44:0d:15:43:cc:35:a0:25:78:17:91:
27:9c:47:78:f1:92:67:71:5c:80:01:f4:47:f3:07:6c:f6:56:
9a:82:6e:9d:b4:88:d9:ee:f2:dd:56:97:8e:b9:10:2b:c3:87:
70:66:95:fe:3f:a5:81:5f:d4:0e:71:87:5a:6a:6a:ba:68:7a:
8a:f4:23:4b:9a:c3:4d:bc:15:64:6b:b8:48:89:c1:a5:14:14:
ed:e1:6b:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZW09yMvcklgG0754MrDZl2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5
NzMzOTAwHhcNMjUwMzIwMTkxMDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2M3MjNjNmVhNjk4NjY1MTMyMDMzMDFlNjE2ZjRjZDI3NjQyOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufFQAo1mTTey+/IUh8hJYyYwPOLZ
oGpH3fgsDFiJWqOCHFj6Ucwwo23RwTE529S8NEnjhfzJcbkK1alYf35W7jHcWZbc
A1ydJLgNqhFPapFUD4o1Io9vAJCY4SCgiQYZRx72PoaAN1Itk+6RqBObRcsdbWBW
Uxtk230kj/ksEU/PHY+C3JlLAMRF4deEgh0ZZGkPGfa9DWaHVdV1uGm6tLSf0saM
t+j0g1g0WWjh5x4hP8kq3dqbXbDFMlrnQCvO4g2scWoPL5X9lbJATNRMEuFRJbA6
oeG9ksVF8XasBYO6WiGXbyRSVv1BAG0CU1Cz+9GVhn4xsY0FlGsMyfEZQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOzHI8bqaYZlEyAzAeYW9M0nZCj1MB8GA1UdIwQY
MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt
YWU5OTllZDdjNWQ0LzEvN01janh1cHBobVVUSURNQjVoYjB6U2RrS1BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0
LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRwmMA0G
CSqGSIb3DQEBCwUAA4IBAQCdi0UYA+EGG26ywIf4b3FmrCmylNbbzASoVSpIwbNb
kkXSmtrPpI9bAUb4rjktmasgExRz3nTqab/tWEnKFqtBdJq0Mk/Yu8Eh+/LLz9yV
Ccn3+V/AJ8ogDofL7rVjeu3DVFx6gpA32on9oOYFyJc8zb6ppuubbJFFao7u05zt
gGPv/Njh5ITQbt6SULcoljSYebmXeFMyEz1xO5zmIlAHrIUwiPSm2dsyRA0VQ8w1
oCV4F5EnnEd48ZJncVyAAfRH8wds9laagm6dtIjZ7vLdVpeOuRArw4dwZpX+P6WB
X9QOcYdaamq6aHqK9CNLmsNNvBVka7hIicGlFBTt4Wuw
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net