Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/P-wj_vrRcbXiIB_5K8UUWmn7wtA.roa
File: P-wj_vrRcbXiIB_5K8UUWmn7wtA.roa (raw, json)
Hash identifier: DBiwTIAVoLlTcU9IX3rDmcOWHkGERlsL2UhqGoUcwKc=
Subject key identifier: 3F:EC:23:FE:FA:D1:71:B5:E2:20:1F:F9:2B:C5:14:5A:69:FB:C2:D0
Certificate issuer: /CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Certificate serial: 0194236A48C114605FEB4DB699FC59A07939
Authority key identifier: C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/P-wj_vrRcbXiIB_5K8UUWmn7wtA.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61001
IP address blocks: 185.19.40.0/22 maxlen: 22
185.19.40.0/24 maxlen: 24
185.19.41.0/24 maxlen: 24
2a04:1000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:48:c1:14:60:5f:eb:4d:b6:99:fc:59:a0:79:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fec23fefad171b5e2201ff92bc5145a69fbc2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:b9:f8:ac:10:ae:af:4d:31:97:f7:50:34:
4a:9f:33:bf:4e:ef:22:a7:76:a8:84:99:85:6c:21:
b5:04:f7:63:7c:34:89:e9:a2:0f:42:3a:97:67:52:
2d:78:ee:01:41:42:cf:45:54:99:f3:a3:3d:26:20:
c3:28:ad:3d:c6:c2:6c:70:14:86:b4:2b:b3:68:aa:
ed:55:c0:8f:57:6c:2f:eb:04:6b:c2:ff:b4:a1:f4:
f3:b5:40:5a:0d:ec:82:16:bb:bc:57:4c:f8:ce:19:
5c:21:0f:ec:ed:aa:26:5a:3a:d4:af:3a:8d:3a:64:
f5:0c:69:96:03:3c:b1:99:e6:f8:be:54:8e:1b:73:
66:27:29:64:8e:a2:57:1b:47:a7:95:e1:b1:05:83:
8a:5c:3e:8e:c0:3f:20:20:b4:4d:37:47:f6:b9:bf:
9a:33:47:68:fc:d2:b6:56:5b:fd:0c:4d:8f:a1:f1:
ca:96:21:06:54:f2:98:5f:33:cf:14:52:e3:8f:a2:
64:f2:8b:75:8e:f0:20:31:cc:e7:e2:20:d7:32:d8:
f7:71:0c:32:ee:da:56:99:d8:e9:eb:16:83:5c:ed:
c4:f3:fd:42:77:8b:ac:fd:a6:9b:de:4e:1a:e2:8b:
b6:98:57:37:36:83:ed:9a:1f:20:84:3c:1d:7a:bd:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:23:FE:FA:D1:71:B5:E2:20:1F:F9:2B:C5:14:5A:69:FB:C2:D0
X509v3 Authority Key Identifier:
keyid:C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/P-wj_vrRcbXiIB_5K8UUWmn7wtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.40.0/22
IPv6:
2a04:1000::/29
Signature Algorithm: sha256WithRSAEncryption
7e:86:dc:4d:24:69:d7:db:dc:ba:62:00:4c:b0:7d:9c:60:c7:
41:b3:c5:0a:12:09:1a:89:b7:a1:b2:4c:b2:64:07:e0:a9:ec:
f4:30:33:74:3a:66:f2:25:27:4c:27:62:b7:73:c9:59:18:7c:
cc:30:22:de:78:2a:c9:13:5c:3a:9f:ea:2f:2c:42:52:f7:bc:
36:a3:0f:76:7b:8a:bf:f0:e5:00:af:62:a1:e3:d7:72:84:95:
b9:49:c9:94:d2:6e:eb:f4:e3:cc:82:5d:f9:50:48:74:18:7d:
b7:59:94:ac:07:3b:e2:eb:34:88:29:3f:12:18:b8:df:b3:8c:
6e:76:f5:56:6a:a0:99:2a:4a:bc:52:68:7c:96:4c:6f:16:58:
fb:ed:0d:38:ac:54:91:53:97:33:d5:57:41:1f:f5:b2:55:51:
20:8d:de:b6:f9:c3:a4:8e:09:60:af:b3:66:b8:94:5e:cb:5a:
3f:6b:b0:b0:49:2e:ab:17:ae:0f:9d:fd:82:69:28:9e:65:9b:
8f:b8:61:46:e5:9d:72:3c:10:df:d7:19:f4:96:3c:61:8b:1e:
56:ed:e6:c5:76:d5:a5:22:a8:bc:68:5c:14:f7:13:c5:de:b4:
b3:03:90:2b:2a:7c:7d:ca:7b:3d:b8:4a:a8:35:8b:00:a8:ea:
90:e3:67:6d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjakjBFGBf6022mfxZoHk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGI5OTg2YzA1M2FiNzk0OGExMmMzZDBjODRjZWViOTNh
NmQ2M2QwHhcNMjUwMTAxMTk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmVjMjNmZWZhZDE3MWI1ZTIyMDFmZjkyYmM1MTQ1YTY5ZmJjMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN65+KwQrq9NMZf3UDRKnzO/Tu8i
p3aohJmFbCG1BPdjfDSJ6aIPQjqXZ1IteO4BQULPRVSZ86M9JiDDKK09xsJscBSG
tCuzaKrtVcCPV2wv6wRrwv+0ofTztUBaDeyCFru8V0z4zhlcIQ/s7aomWjrUrzqN
OmT1DGmWAzyxmeb4vlSOG3NmJylkjqJXG0enleGxBYOKXD6OwD8gILRNN0f2ub+a
M0do/NK2Vlv9DE2PofHKliEGVPKYXzPPFFLjj6Jk8ot1jvAgMczn4iDXMtj3cQwy
7tpWmdjp6xaDXO3E8/1Cd4us/aab3k4a4ou2mFc3NoPtmh8ghDwder0/hQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD/sI/760XG14iAf+SvFFFpp+8LQMB8GA1UdIwQY
MBaAFMfbmYbAU6t5SKEsPQyEzuuTptY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDl1WmhzQlRxM2xJb1N3OURJVE82NU9tMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NzMzNWMtMzYyYy00N2FmLTlmYjkt
MTJjNmIwZmQ3ZjczLzEvUC13al92clJjYlhpSUJfNUs4VVVXbW43d3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82NzMzNWMtMzYyYy00N2FmLTlmYjktMTJjNmIwZmQ3Zjcz
LzEveDl1WmhzQlRxM2xJb1N3OURJVE82NU9tMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRMoMA0E
AgACMAcDBQMqBBAAMA0GCSqGSIb3DQEBCwUAA4IBAQB+htxNJGnX29y6YgBMsH2c
YMdBs8UKEgkaibehskyyZAfgqez0MDN0OmbyJSdMJ2K3c8lZGHzMMCLeeCrJE1w6
n+ovLEJS97w2ow92e4q/8OUAr2Kh49dyhJW5ScmU0m7r9OPMgl35UEh0GH23WZSs
Bzvi6zSIKT8SGLjfs4xudvVWaqCZKkq8Umh8lkxvFlj77Q04rFSRU5cz1VdBH/Wy
VVEgjd62+cOkjglgr7NmuJRey1o/a7CwSS6rF64Pnf2CaSieZZuPuGFG5Z1yPBDf
1xn0ljxhix5W7ebFdtWlIqi8aFwU9xPF3rSzA5ArKnx9yns9uEqoNYsAqOqQ42dt
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net