Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/K7vtqU5nwBrWrYGE84SkV2JAUIo.roa
File: K7vtqU5nwBrWrYGE84SkV2JAUIo.roa (raw, json)
Hash identifier: N6HHz4RiPDtYKsQWCFmHSEMV9LmnE+WexTKJKPxUBlw=
Subject key identifier: 2B:BB:ED:A9:4E:67:C0:1A:D6:AD:81:84:F3:84:A4:57:62:40:50:8A
Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial: 0194228DCECFACF38703920F569F84BDA7A0
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/K7vtqU5nwBrWrYGE84SkV2JAUIo.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48016
IP address blocks: 185.57.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ce:cf:ac:f3:87:03:92:0f:56:9f:84:bd:a7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bbbeda94e67c01ad6ad8184f384a4576240508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:23:46:b4:37:26:66:87:f8:7a:9f:bf:1b:
ff:98:53:e9:b4:94:83:50:69:65:69:10:78:8d:d7:
41:83:14:dc:66:a9:2b:fc:a2:06:f1:a9:55:d1:48:
f7:00:f3:df:da:e1:5d:bb:6c:a7:34:e2:67:83:a7:
74:7c:27:e5:7d:ed:6c:20:c4:39:b4:b8:1f:1b:94:
ae:34:48:2f:10:ae:41:02:dd:82:c5:a0:8a:fb:14:
df:dd:a9:35:19:b9:63:c3:88:2e:d1:e9:e3:0f:1f:
da:15:1e:1e:eb:43:15:d7:2b:59:55:ae:25:85:1d:
5f:ec:bd:4a:d4:7b:e7:31:52:96:32:c0:01:a9:b9:
15:03:26:bc:77:3b:ba:f1:fc:1b:69:0e:ce:1b:60:
a9:d9:66:e2:b3:11:9f:54:2a:99:a1:98:71:58:ab:
c5:b0:d9:ab:06:a8:1a:51:85:57:5a:b2:db:05:9a:
6c:ed:96:49:ca:c9:82:82:46:cf:02:b2:1e:9a:5a:
9c:01:d7:95:cd:b4:06:31:94:7b:20:c7:71:ee:af:
05:24:7f:b1:da:3a:2b:82:2c:65:0d:58:fd:c8:e1:
d4:a2:b7:c9:15:34:c4:6e:a6:65:8a:71:72:74:94:
56:c6:f7:ea:ae:b4:00:5d:f8:14:e6:41:a8:f7:ef:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:ED:A9:4E:67:C0:1A:D6:AD:81:84:F3:84:A4:57:62:40:50:8A
X509v3 Authority Key Identifier:
keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/K7vtqU5nwBrWrYGE84SkV2JAUIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.18.0/24
Signature Algorithm: sha256WithRSAEncryption
26:34:7a:f9:fa:13:9a:ed:81:7f:13:3e:51:f6:e9:ea:7d:a4:
0f:ae:24:4f:f3:98:f4:e8:8c:f0:64:e0:22:e7:9e:74:e7:0c:
e8:26:70:2c:de:f9:a5:3e:00:21:31:0c:0b:90:14:b7:78:32:
83:7b:95:5b:f1:33:e4:69:1e:cd:d1:18:7b:cb:86:a2:cd:d9:
8a:34:1b:c0:d9:2d:fb:8a:9c:21:75:b7:cd:18:e3:f6:2d:fe:
d1:ea:a4:10:bb:6e:a6:eb:e1:9f:70:ac:d7:4e:f2:8a:d6:98:
6a:a6:8b:cc:e6:20:08:29:20:05:d5:20:7e:1c:04:9c:ee:ef:
d2:10:5c:ea:b5:ac:f7:58:29:f8:c4:5c:43:9d:52:d8:93:a5:
02:7c:0e:2c:14:32:f4:13:7e:b5:34:bd:da:ee:14:b4:85:93:
56:0c:86:59:71:78:85:41:a4:a7:83:8d:17:7c:4a:1a:f1:0c:
d4:08:e4:71:88:3a:40:27:22:9d:ea:f7:f0:d3:58:cc:67:e4:
aa:e4:d2:f7:8d:c1:a3:2b:25:c5:69:bf:72:7c:d8:ad:4e:2d:
f6:26:d8:c6:b2:81:4d:0a:06:a3:c7:f4:8a:34:f3:aa:c6:1d:
3b:37:46:58:06:8a:d2:0c:e6:13:b9:7b:c8:68:5d:e5:d0:c8:
a4:4a:98:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijc7PrPOHA5IPVp+EvaegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0
YTlhMTMwHhcNMjUwMTAxMTU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmJiZWRhOTRlNjdjMDFhZDZhZDgxODRmMzg0YTQ1NzYyNDA1MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBYjRrQ3JmaH+Hqfvxv/mFPptJSD
UGllaRB4jddBgxTcZqkr/KIG8alV0Uj3APPf2uFdu2ynNOJng6d0fCflfe1sIMQ5
tLgfG5SuNEgvEK5BAt2CxaCK+xTf3ak1Gbljw4gu0enjDx/aFR4e60MV1ytZVa4l
hR1f7L1K1HvnMVKWMsABqbkVAya8dzu68fwbaQ7OG2Cp2WbisxGfVCqZoZhxWKvF
sNmrBqgaUYVXWrLbBZps7ZZJysmCgkbPArIemlqcAdeVzbQGMZR7IMdx7q8FJH+x
2jorgixlDVj9yOHUorfJFTTEbqZlinFydJRWxvfqrrQAXfgU5kGo9++KiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCu77alOZ8Aa1q2BhPOEpFdiQFCKMB8GA1UdIwQY
MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt
NTNhYjg4YzVmMmM3LzEvSzd2dHFVNW53QnJXcllHRTg0U2tWMkpBVUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAtNTNhYjg4YzVmMmM3
LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTkSMA0G
CSqGSIb3DQEBCwUAA4IBAQAmNHr5+hOa7YF/Ez5R9unqfaQPriRP85j06IzwZOAi
55505wzoJnAs3vmlPgAhMQwLkBS3eDKDe5Vb8TPkaR7N0Rh7y4aizdmKNBvA2S37
ipwhdbfNGOP2Lf7R6qQQu26m6+GfcKzXTvKK1phqpovM5iAIKSAF1SB+HASc7u/S
EFzqtaz3WCn4xFxDnVLYk6UCfA4sFDL0E361NL3a7hS0hZNWDIZZcXiFQaSng40X
fEoa8QzUCORxiDpAJyKd6vfw01jMZ+Sq5NL3jcGjKyXFab9yfNitTi32JtjGsoFN
Cgajx/SKNPOqxh07N0ZYBorSDOYTuXvIaF3l0MikSphW
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net