Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa
File: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (raw, json)
Hash identifier: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=
Subject key identifier: EC:30:B7:32:0E:2D:F9:63:B1:85:76:DA:20:F1:FA:32:D1:92:7D:3D
Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial: 0194228E29B5A7A6E10FF6BE6539B4FDDF39
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57358
IP address blocks: 185.236.50.0/23 maxlen: 23
2001:67c:5f8::/48 maxlen: 48
2a13:9d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:29:b5:a7:a6:e1:0f:f6:be:65:39:b4:fd:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec30b7320e2df963b18576da20f1fa32d1927d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8c:b9:c1:a0:91:fd:5f:5a:2b:57:29:30:37:
3d:3f:33:01:da:0f:2e:be:6e:35:4c:f1:d6:dd:f7:
00:8d:b6:e0:b1:9d:eb:be:77:82:51:e7:86:8b:7f:
0c:4e:01:05:08:2e:70:2a:fd:7e:8b:81:2a:cc:a5:
53:0e:2a:61:9e:91:f8:3d:44:9b:56:e6:24:b0:e8:
ab:4a:4f:7e:2b:5e:5b:58:82:60:ab:d6:f6:c1:fe:
50:d8:6f:3d:07:93:f5:dc:9d:b9:21:17:8f:33:46:
12:18:03:c3:ff:69:ff:68:d7:f6:38:b5:2c:57:47:
9b:0c:b2:de:05:1f:83:5b:ca:91:cd:73:be:75:42:
b3:59:09:5b:fe:4f:7f:d7:25:7b:13:a6:3c:e9:2f:
d9:10:a7:97:66:2d:0d:34:48:70:2e:cd:50:bd:fb:
ff:31:a5:97:a6:eb:ba:dd:7e:86:b2:b1:8e:3c:df:
22:e8:80:2f:d4:cd:85:7d:fe:62:aa:cf:16:ab:83:
62:7d:d1:9d:8e:58:26:36:e9:08:05:b1:a3:e2:56:
1a:fd:32:4d:b8:9b:7b:8a:cb:af:c2:d8:1a:b0:1b:
8a:77:28:a8:21:8d:04:16:dc:f4:13:30:d8:27:f1:
ce:11:a8:be:bd:07:3c:18:ef:18:a1:07:65:a6:f3:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:30:B7:32:0E:2D:F9:63:B1:85:76:DA:20:F1:FA:32:D1:92:7D:3D
X509v3 Authority Key Identifier:
keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.50.0/23
IPv6:
2001:67c:5f8::/48
2a13:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:86:3d:e7:2f:82:c0:99:b9:5b:0f:fa:04:62:ad:a7:a8:cd:
97:e8:69:80:92:70:12:3c:bc:21:5b:b5:5d:d3:f9:2c:7c:ea:
4e:a6:fe:e0:d3:8f:18:ea:cd:34:dc:b4:8e:61:76:e6:e8:ea:
1c:64:46:f0:06:6c:dc:02:83:b0:18:6f:fe:f9:7d:b8:75:0f:
22:c3:af:55:60:92:2d:02:b7:ed:b5:45:69:9c:87:83:a6:61:
b8:a4:6d:43:19:20:92:49:6d:d9:02:4a:8a:d8:5f:d1:0d:a0:
68:f2:3b:b0:e3:5e:52:32:ca:46:31:63:8f:57:67:b8:07:fe:
58:fa:ec:dc:7c:7a:7a:ec:d9:aa:d8:73:0d:94:1e:65:fc:90:
86:cc:4a:11:81:5c:fa:31:0b:38:09:fd:39:17:1b:24:aa:91:
68:7b:74:f8:79:12:42:13:47:59:c0:84:91:52:4b:97:39:4a:
08:29:f0:d8:14:08:43:11:5f:2c:f4:18:c4:6a:dd:02:b0:4c:
0e:a9:a5:42:e1:e7:cb:b5:bd:b9:e3:2d:86:2b:43:22:99:09:
60:a8:d9:e2:87:a8:a9:47:04:9c:06:d6:35:a4:9d:0a:3b:00:
0f:94:9d:0f:bb:0d:21:52:67:30:cb:0c:58:88:3e:9a:43:85:
f7:e7:a4:48
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQijim1p6bhD/a+ZTm0/d85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDNlNWRlMzljMjFmOGE3OGJlNmE0NTdhM2I4NmQ1ODIy
YmMxN2MwHhcNMjUwMTAxMTU0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzMwYjczMjBlMmRmOTYzYjE4NTc2ZGEyMGYxZmEzMmQxOTI3ZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oy5waCR/V9aK1cpMDc9PzMB2g8u
vm41TPHW3fcAjbbgsZ3rvneCUeeGi38MTgEFCC5wKv1+i4EqzKVTDiphnpH4PUSb
VuYksOirSk9+K15bWIJgq9b2wf5Q2G89B5P13J25IRePM0YSGAPD/2n/aNf2OLUs
V0ebDLLeBR+DW8qRzXO+dUKzWQlb/k9/1yV7E6Y86S/ZEKeXZi0NNEhwLs1Qvfv/
MaWXpuu63X6GsrGOPN8i6IAv1M2Fff5iqs8Wq4NifdGdjlgmNukIBbGj4lYa/TJN
uJt7isuvwtgasBuKdyioIY0EFtz0EzDYJ/HOEai+vQc8GO8YoQdlpvPF5wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOwwtzIOLfljsYV22iDx+jLRkn09MB8GA1UdIwQY
MBaAFGdD5d45wh+KeL5qRXo7htWCK8F8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEt
N2FhZTUyMTc2ZDhiLzEvN0RDM01nNHQtV094aFhiYUlQSDZNdEdTZlQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEtN2FhZTUyMTc2ZDhi
LzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQBuewyMBYE
AgACMBADBwAgAQZ8BfgDBQMqE51AMA0GCSqGSIb3DQEBCwUAA4IBAQANhj3nL4LA
mblbD/oEYq2nqM2X6GmAknASPLwhW7Vd0/ksfOpOpv7g048Y6s003LSOYXbm6Ooc
ZEbwBmzcAoOwGG/++X24dQ8iw69VYJItArfttUVpnIeDpmG4pG1DGSCSSW3ZAkqK
2F/RDaBo8juw415SMspGMWOPV2e4B/5Y+uzcfHp67Nmq2HMNlB5l/JCGzEoRgVz6
MQs4Cf05FxskqpFoe3T4eRJCE0dZwISRUkuXOUoIKfDYFAhDEV8s9BjEat0CsEwO
qaVC4efLtb254y2GK0MimQlgqNnih6ipRwScBtY1pJ0KOwAPlJ0Puw0hUmcwywxY
iD6aQ4X356RI
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:10 2025 by rpki-client on console.sobornost.net