Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/M2rblK01qjwSTGPswefrZLf_W3w.roa
File: M2rblK01qjwSTGPswefrZLf_W3w.roa (raw, json)
Hash identifier: MAqDyqWuxo6wQJTYganASc4WMKwvD9/izxqUpAWJU2U=
Subject key identifier: 33:6A:DB:94:AD:35:AA:3C:12:4C:63:EC:C1:E7:EB:64:B7:FF:5B:7C
Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial: 0194228DCFFB99C32295A6E69FDDB73412ED
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/M2rblK01qjwSTGPswefrZLf_W3w.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213180
IP address blocks: 185.57.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cf:fb:99:c3:22:95:a6:e6:9f:dd:b7:34:12:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336adb94ad35aa3c124c63ecc1e7eb64b7ff5b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:28:93:1b:85:03:05:32:68:13:22:5d:b0:
c1:ba:c4:ac:a8:69:b1:fb:23:9d:26:31:2b:2a:ce:
be:16:64:53:bf:28:d7:29:e0:49:0b:0f:bd:9e:70:
d4:9e:73:a0:bc:b3:97:d1:83:3c:56:24:07:26:99:
77:6b:73:24:99:5e:c4:89:a7:79:4e:2c:c8:3b:c7:
dc:ca:6d:08:db:d8:b2:67:8e:a7:b9:74:04:65:55:
b2:32:58:1e:57:c4:29:3e:85:00:d8:95:e1:8d:d4:
60:e5:e5:85:34:ec:cc:70:f6:6e:43:cb:36:94:9b:
68:77:15:cb:8c:67:b9:c2:4a:eb:33:c6:dc:1d:67:
8b:59:14:11:8e:7e:49:71:58:24:ba:99:78:cf:6e:
22:1c:d5:97:80:2a:ae:b0:da:b7:33:4f:ef:85:e1:
97:76:a2:d9:84:05:00:c8:35:a1:65:cd:2b:ca:c4:
21:26:bb:23:2b:9b:2c:53:76:13:b1:da:2c:67:4d:
af:ad:51:d7:fc:cb:ab:00:0c:b5:26:a0:8b:71:2b:
22:06:43:a4:78:5d:8f:40:11:27:9b:97:54:52:97:
c0:0d:9a:11:bc:45:75:a3:2e:cd:31:0c:d2:de:e0:
c5:71:6a:2d:ee:83:9f:36:1f:ba:f5:d0:e8:bc:7c:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6A:DB:94:AD:35:AA:3C:12:4C:63:EC:C1:E7:EB:64:B7:FF:5B:7C
X509v3 Authority Key Identifier:
keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/M2rblK01qjwSTGPswefrZLf_W3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:08:d4:53:4a:42:53:aa:7b:dd:a3:72:30:8a:1d:7f:ff:a6:
f3:95:5b:e2:ea:30:5b:87:dc:ed:63:7c:be:7a:d3:93:22:01:
a6:80:9d:e0:fd:ca:e8:37:d3:b9:3a:b6:b5:d8:7d:2f:55:80:
e2:61:f6:5d:5f:e4:fe:22:1a:c3:9c:e1:de:1e:71:87:fa:92:
11:ed:ff:7c:5b:b9:67:af:d1:00:bb:43:63:c4:6c:c4:bb:04:
1f:60:1a:b4:ba:fa:ed:73:24:a9:fb:17:3f:5c:b6:db:b3:d2:
f5:24:4f:8b:ff:fe:ee:f2:56:17:f3:13:21:12:83:4a:0b:7c:
46:61:54:7c:d3:80:04:97:3a:56:4e:30:29:41:f6:0d:48:09:
f3:8a:63:7f:e6:2c:ab:ab:cd:11:07:31:9b:13:2c:ec:51:6e:
3f:ca:ef:a4:ae:e4:f2:04:a8:e6:55:bc:de:a3:3f:7c:1f:be:
e9:be:2f:c3:73:32:cb:c7:37:0e:2d:62:5b:ce:7c:fd:69:7f:
51:19:d2:86:e0:e2:1d:76:2d:10:63:07:0e:51:d5:22:83:48:
5f:65:e5:a0:03:3f:45:67:ae:03:76:34:00:c3:05:09:a3:ba:
68:90:62:40:ed:32:8c:80:71:d6:68:2f:fd:8a:d0:ed:d4:29:
f8:95:02:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijc/7mcMilabmn923NBLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0
YTlhMTMwHhcNMjUwMTAxMTU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzZhZGI5NGFkMzVhYTNjMTI0YzYzZWNjMWU3ZWI2NGI3ZmY1YjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHkokxuFAwUyaBMiXbDBusSsqGmx
+yOdJjErKs6+FmRTvyjXKeBJCw+9nnDUnnOgvLOX0YM8ViQHJpl3a3MkmV7Eiad5
TizIO8fcym0I29iyZ46nuXQEZVWyMlgeV8QpPoUA2JXhjdRg5eWFNOzMcPZuQ8s2
lJtodxXLjGe5wkrrM8bcHWeLWRQRjn5JcVgkupl4z24iHNWXgCqusNq3M0/vheGX
dqLZhAUAyDWhZc0rysQhJrsjK5ssU3YTsdosZ02vrVHX/MurAAy1JqCLcSsiBkOk
eF2PQBEnm5dUUpfADZoRvEV1oy7NMQzS3uDFcWot7oOfNh+69dDovHx2CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNq25StNao8Ekxj7MHn62S3/1t8MB8GA1UdIwQY
MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt
NTNhYjg4YzVmMmM3LzEvTTJyYmxLMDFxandTVEdQc3dlZnJaTGZfVzN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAtNTNhYjg4YzVmMmM3
LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTkTMA0G
CSqGSIb3DQEBCwUAA4IBAQB6CNRTSkJTqnvdo3Iwih1//6bzlVvi6jBbh9ztY3y+
etOTIgGmgJ3g/croN9O5Ora12H0vVYDiYfZdX+T+IhrDnOHeHnGH+pIR7f98W7ln
r9EAu0NjxGzEuwQfYBq0uvrtcySp+xc/XLbbs9L1JE+L//7u8lYX8xMhEoNKC3xG
YVR804AElzpWTjApQfYNSAnzimN/5iyrq80RBzGbEyzsUW4/yu+kruTyBKjmVbze
oz98H77pvi/DczLLxzcOLWJbznz9aX9RGdKG4OIddi0QYwcOUdUig0hfZeWgAz9F
Z64DdjQAwwUJo7pokGJA7TKMgHHWaC/9itDt1Cn4lQLR
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net