Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/7PCtQ5R_w0udczv79LfUn6Szs8E.roa
File: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (raw, json)
Hash identifier: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=
Subject key identifier: EC:F0:AD:43:94:7F:C3:4B:9D:73:3B:FB:F4:B7:D4:9F:A4:B3:B3:C1
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 019425FD3AB4CCF45A7A5B87E9AF50D118AD
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/7PCtQ5R_w0udczv79LfUn6Szs8E.roa
Signing time: Thu 02 Jan 2025 07:49:00 +0000
ROA not before: Thu 02 Jan 2025 07:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41032
IP address blocks: 185.181.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:3a:b4:cc:f4:5a:7a:5b:87:e9:af:50:d1:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Jan 2 07:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecf0ad43947fc34b9d733bfbf4b7d49fa4b3b3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:47:fe:f2:2f:38:b5:ce:65:31:ff:84:5f:
49:53:ee:cd:2e:70:07:1a:c5:69:1a:77:f7:93:e1:
8a:42:d8:8e:f4:b5:df:a9:d3:18:c9:cf:05:45:46:
d3:fd:cd:97:51:a1:69:d6:1d:51:5a:11:7b:bd:c4:
0d:22:53:26:bd:2f:a6:8b:85:78:95:e7:d5:48:cd:
fd:07:ff:86:46:78:1b:8b:57:02:45:38:15:53:53:
59:75:a8:48:bf:01:9d:45:42:b1:55:f8:10:67:69:
d6:03:f5:2d:4e:d7:a1:32:67:43:bd:7e:47:36:d7:
a9:b8:8e:88:a3:fc:ba:6a:fa:f3:68:73:da:f6:25:
2d:63:6f:d9:8c:6d:d1:6b:b6:cc:44:7a:02:c4:1f:
82:a9:3f:cd:6e:36:83:86:69:67:dd:60:f5:ca:df:
1a:45:ff:4f:fb:5d:4c:45:9b:d1:e3:df:6d:6a:c2:
d7:68:0d:99:91:80:7a:4d:63:84:87:f2:c8:cb:ed:
04:dc:63:56:2f:b6:e0:51:99:78:a2:e3:57:03:5a:
7c:b2:73:6a:e3:49:89:3e:4d:1d:2c:f8:1e:cb:6f:
7e:c7:cb:ff:3d:e8:39:61:69:a0:80:cc:c9:62:94:
73:29:b2:3f:92:00:e5:4c:05:be:b4:c9:1f:54:39:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F0:AD:43:94:7F:C3:4B:9D:73:3B:FB:F4:B7:D4:9F:A4:B3:B3:C1
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/7PCtQ5R_w0udczv79LfUn6Szs8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.109.0/24
Signature Algorithm: sha256WithRSAEncryption
63:34:b3:61:05:54:da:9c:d4:93:b6:da:4d:28:d2:c1:03:a0:
f4:c9:c2:24:8f:7b:73:d4:84:4e:a5:01:31:e4:6e:c1:4c:ae:
09:09:23:10:dc:4e:2f:42:25:a1:8e:2e:49:ac:76:6e:5d:d1:
33:13:c4:e8:46:e3:1c:37:53:ca:5c:69:7a:b0:ba:7a:d8:44:
7b:f9:73:3b:2a:c1:6b:07:5b:bc:83:a9:e0:53:cf:4f:5e:34:
dc:29:2a:8d:8e:5c:c3:81:ed:aa:9c:b1:59:3c:af:19:14:80:
b9:e0:7e:4f:92:27:38:f8:13:2f:49:0d:4c:87:ac:36:6b:50:
c7:e2:0f:67:9a:4f:9b:d2:6a:37:db:b6:a7:12:4a:d2:0c:b5:
9d:bd:55:ed:89:ae:27:1b:b4:ee:a4:f3:f2:96:fa:8e:de:97:
13:dd:e2:95:4f:27:76:69:b8:a2:3f:8f:4a:ac:06:86:5b:f6:
bd:b9:27:f4:92:13:f8:79:a9:9b:2a:8d:6b:f6:0a:fb:5b:16:
fe:d5:9a:88:26:7a:17:f8:7e:1b:e4:c0:34:95:81:7f:50:7f:
74:99:8b:d4:af:7a:15:52:c1:4d:6e:d9:47:ce:08:46:ba:7f:
c4:74:1a:91:8a:89:2e:0b:a5:c9:17:ac:62:f7:06:9b:c2:7e:
75:60:50:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/Tq0zPRaeluH6a9Q0RitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh
NTM3ZjkwHhcNMjUwMTAyMDc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2YwYWQ0Mzk0N2ZjMzRiOWQ3MzNiZmJmNGI3ZDQ5ZmE0YjNiM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5NH/vIvOLXOZTH/hF9JU+7NLnAH
GsVpGnf3k+GKQtiO9LXfqdMYyc8FRUbT/c2XUaFp1h1RWhF7vcQNIlMmvS+mi4V4
lefVSM39B/+GRngbi1cCRTgVU1NZdahIvwGdRUKxVfgQZ2nWA/UtTtehMmdDvX5H
NtepuI6Io/y6avrzaHPa9iUtY2/ZjG3Ra7bMRHoCxB+CqT/NbjaDhmln3WD1yt8a
Rf9P+11MRZvR499tasLXaA2ZkYB6TWOEh/LIy+0E3GNWL7bgUZl4ouNXA1p8snNq
40mJPk0dLPgey29+x8v/Peg5YWmggMzJYpRzKbI/kgDlTAW+tMkfVDnyaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOzwrUOUf8NLnXM7+/S31J+ks7PBMB8GA1UdIwQY
MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt
MTYzMjQ3ZWIwZTA3LzEvN1BDdFE1Ul93MHVkY3p2NzlMZlVuNlN6czhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3
LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubVtMA0G
CSqGSIb3DQEBCwUAA4IBAQBjNLNhBVTanNSTttpNKNLBA6D0ycIkj3tz1IROpQEx
5G7BTK4JCSMQ3E4vQiWhji5JrHZuXdEzE8ToRuMcN1PKXGl6sLp62ER7+XM7KsFr
B1u8g6ngU89PXjTcKSqNjlzDge2qnLFZPK8ZFIC54H5Pkic4+BMvSQ1Mh6w2a1DH
4g9nmk+b0mo327anEkrSDLWdvVXtia4nG7TupPPylvqO3pcT3eKVTyd2abiiP49K
rAaGW/a9uSf0khP4eambKo1r9gr7Wxb+1ZqIJnoX+H4b5MA0lYF/UH90mYvUr3oV
UsFNbtlHzghGun/EdBqRiokuC6XJF6xi9wabwn51YFCC
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net