Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/gR7sUG_8lonr2gVlkEM1ADj5WcE.roa
File: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (raw, json)
Hash identifier: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=
Subject key identifier: 81:1E:EC:50:6F:FC:96:89:EB:DA:05:65:90:43:35:00:38:F9:59:C1
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 0195FB98CD4F566CBD0A2A9E497DD08ECC05
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/gR7sUG_8lonr2gVlkEM1ADj5WcE.roa
Signing time: Thu 03 Apr 2025 12:20:49 +0000
ROA not before: Thu 03 Apr 2025 12:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209281
IP address blocks: 185.163.132.0/22 maxlen: 24
185.163.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:98:cd:4f:56:6c:bd:0a:2a:9e:49:7d:d0:8e:cc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Apr 3 12:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=811eec506ffc9689ebda05659043350038f959c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:76:94:02:96:d3:31:13:46:03:b0:30:d6:
de:bc:ca:7c:7e:05:f8:cd:49:22:0b:17:50:03:65:
57:d5:18:9e:a9:8f:25:37:1b:30:dc:80:3c:01:26:
0f:c4:13:f2:13:dc:48:0d:9b:44:3c:6e:24:bf:61:
e1:e6:9d:23:6a:83:44:7b:17:5c:21:6a:60:a5:57:
88:65:a1:41:9c:39:58:41:34:ff:16:44:1d:de:79:
0e:53:22:ff:c8:2e:d9:06:1f:2d:b7:eb:5e:29:a8:
0f:fc:12:a0:46:f1:b8:ba:c2:51:38:24:6b:c9:d8:
95:5a:97:38:46:6d:41:4c:50:ca:d1:7d:91:ab:75:
e3:39:e1:21:3c:db:35:7f:fd:97:99:4a:73:df:9d:
23:71:32:90:45:01:0a:2b:d3:d1:be:c1:22:83:f9:
cf:c4:53:46:b9:81:49:b1:6c:7c:02:f1:8c:8b:36:
46:9a:f1:8c:aa:6e:70:a3:33:7f:cc:3e:6c:6b:c9:
e4:d8:8a:8a:00:7e:d3:36:90:1f:31:39:49:0a:75:
a8:8d:ad:b0:67:c4:49:6c:46:35:33:ba:e5:ad:1f:
ec:4e:69:ab:0c:f8:42:d8:65:67:20:b7:66:5d:3a:
51:28:0c:12:42:7f:95:22:e6:61:06:1b:81:a8:4a:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:EC:50:6F:FC:96:89:EB:DA:05:65:90:43:35:00:38:F9:59:C1
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/gR7sUG_8lonr2gVlkEM1ADj5WcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.132.0/22
Signature Algorithm: sha256WithRSAEncryption
05:31:2c:27:8e:82:6a:1e:bd:f9:3d:97:7c:08:45:85:f3:63:
e4:c0:d8:93:f9:d1:9b:ad:5b:dd:b5:f2:a5:bd:4a:22:62:77:
d4:6f:1c:62:91:45:c4:67:51:90:98:d8:20:4a:e7:43:08:b2:
d8:69:7d:1b:57:77:7d:20:3a:46:e5:8f:ef:ed:5a:c8:91:b3:
94:e7:b1:eb:73:f0:3c:12:4b:8b:00:5e:5a:fb:97:4c:d6:a0:
58:91:94:d0:e3:cb:db:70:6b:b2:08:7d:95:e7:fc:d0:80:26:
61:e8:51:3a:cb:80:35:27:b2:25:33:68:76:26:dd:eb:05:6e:
cc:36:bd:d5:29:3c:5d:ed:72:f2:38:67:d2:e3:db:df:95:02:
e5:d4:63:ea:29:1a:bc:b1:67:77:d9:f9:ed:0d:02:0e:e3:52:
a9:42:af:0d:5e:c3:a0:20:d4:e1:ec:e2:7e:49:6c:85:7e:cf:
86:06:a0:36:78:29:8d:29:02:fe:c2:4f:11:2d:87:a0:19:3d:
10:30:39:ea:71:b0:ad:5b:c7:bc:c5:ac:e8:dd:48:0e:e1:6a:
e5:23:8a:bb:cd:ff:22:06:56:94:f8:2b:55:ea:ea:21:69:0b:
d9:b5:1d:3b:f6:d7:e9:a6:d1:1b:4b:33:5e:89:ad:1d:92:ac:
56:26:e3:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX7mM1PVmy9CiqeSX3QjswFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWEyNzQ0NDU4MjZlM2Q3OTVjM2VkMThjMjc3MDBlZWFj
MWNhNjIwHhcNMjUwNDAzMTIyMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTFlZWM1MDZmZmM5Njg5ZWJkYTA1NjU5MDQzMzUwMDM4Zjk1OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+F2lAKW0zETRgOwMNbevMp8fgX4
zUkiCxdQA2VX1RieqY8lNxsw3IA8ASYPxBPyE9xIDZtEPG4kv2Hh5p0jaoNEexdc
IWpgpVeIZaFBnDlYQTT/FkQd3nkOUyL/yC7ZBh8tt+teKagP/BKgRvG4usJROCRr
ydiVWpc4Rm1BTFDK0X2Rq3XjOeEhPNs1f/2XmUpz350jcTKQRQEKK9PRvsEig/nP
xFNGuYFJsWx8AvGMizZGmvGMqm5wozN/zD5sa8nk2IqKAH7TNpAfMTlJCnWoja2w
Z8RJbEY1M7rlrR/sTmmrDPhC2GVnILdmXTpRKAwSQn+VIuZhBhuBqEpr2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEe7FBv/JaJ69oFZZBDNQA4+VnBMB8GA1UdIwQY
MBaAFNyqJ0RFgm49eVw+0YwncA7qwcpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTIt
OWE4MjQzZTg0ZTU0LzEvZ1I3c1VHXzhsb25yMmdWbGtFTTFBRGo1V2NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTItOWE4MjQzZTg0ZTU0
LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaOEMA0G
CSqGSIb3DQEBCwUAA4IBAQAFMSwnjoJqHr35PZd8CEWF82PkwNiT+dGbrVvdtfKl
vUoiYnfUbxxikUXEZ1GQmNggSudDCLLYaX0bV3d9IDpG5Y/v7VrIkbOU57Hrc/A8
EkuLAF5a+5dM1qBYkZTQ48vbcGuyCH2V5/zQgCZh6FE6y4A1J7IlM2h2Jt3rBW7M
Nr3VKTxd7XLyOGfS49vflQLl1GPqKRq8sWd32fntDQIO41KpQq8NXsOgINTh7OJ+
SWyFfs+GBqA2eCmNKQL+wk8RLYegGT0QMDnqcbCtW8e8xazo3UgO4WrlI4q7zf8i
BlaU+CtV6uohaQvZtR079tfpptEbSzNeia0dkqxWJuPG
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net