Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/7wV-Otm3jTO0yh6FjQ35BqCnGFU.roa
File: 7wV-Otm3jTO0yh6FjQ35BqCnGFU.roa (raw, json)
Hash identifier: 9MJWK1oG+o2nnFXhrhg2fQWCd8ktBrfnOyE2RpG71ro=
Subject key identifier: EF:05:7E:3A:D9:B7:8D:33:B4:CA:1E:85:8D:0D:F9:06:A0:A7:18:55
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019546DC1313C96CD90D123DEEE0D6C7310A
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/7wV-Otm3jTO0yh6FjQ35BqCnGFU.roa
Signing time: Thu 27 Feb 2025 10:03:02 +0000
ROA not before: Thu 27 Feb 2025 10:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.121.140.0/24 maxlen: 24
185.121.141.0/24 maxlen: 24
185.121.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:dc:13:13:c9:6c:d9:0d:12:3d:ee:e0:d6:c7:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Feb 27 10:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef057e3ad9b78d33b4ca1e858d0df906a0a71855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:fc:09:cc:43:0b:8e:49:b5:ac:0d:d4:f1:
87:62:46:02:e3:3e:f4:26:bc:00:61:f1:c8:24:f3:
52:05:09:61:af:83:13:54:6e:db:d2:44:83:f2:77:
5d:a3:36:fb:71:76:12:c9:62:86:59:c0:d8:e2:e5:
c6:f7:cb:08:2e:25:db:2d:b4:46:79:38:8d:1a:1c:
fc:20:9c:eb:d5:1f:86:bc:dc:46:ef:f2:f7:b2:ae:
2a:ad:5e:c2:62:13:52:2d:fa:2c:ff:80:8e:00:dd:
19:52:db:87:c4:93:d3:9a:a4:55:1f:95:79:23:12:
4a:21:b2:f3:a2:44:d3:cf:58:c4:54:2d:f8:39:cf:
8d:db:71:af:89:cb:c5:36:a0:27:bb:1d:e4:2a:11:
2e:8d:53:88:15:c7:6d:85:ce:07:8e:16:27:f7:ad:
7f:7e:82:52:6a:3e:67:97:3a:d6:e7:62:51:ce:0d:
b0:13:d2:e2:31:82:72:6e:e9:f0:77:1f:e8:12:7c:
2f:8e:d1:a5:5d:bd:af:d0:ba:a2:7b:79:4c:10:8c:
a7:cf:f6:b8:cc:12:0e:84:e1:6e:13:ec:d7:3e:9c:
15:c5:c2:b4:9d:12:55:93:f6:65:d3:96:40:4f:2d:
0a:eb:80:e0:0f:51:bc:ea:fc:c3:c6:25:89:3b:3b:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:05:7E:3A:D9:B7:8D:33:B4:CA:1E:85:8D:0D:F9:06:A0:A7:18:55
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/7wV-Otm3jTO0yh6FjQ35BqCnGFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.140.0/23
185.121.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a1:98:d9:2d:00:73:a8:f3:83:77:1d:39:be:08:bd:34:f4:
a0:71:b2:9c:1e:7c:1b:48:30:60:08:4a:cb:90:ea:75:7f:07:
c9:14:eb:8f:f8:40:18:ee:df:01:c0:92:62:9f:a1:f1:ae:3a:
93:d2:ca:0b:87:1c:7a:6c:9a:9b:7f:40:d8:8b:73:5e:03:4f:
32:ce:0a:bd:23:db:69:ec:25:eb:20:a9:91:5b:ec:d7:74:e7:
0c:15:ce:94:b3:05:70:1a:89:2d:be:61:8e:89:81:7c:2b:dd:
ce:f3:12:4e:0f:af:18:d4:cf:30:e7:b4:64:71:c0:2d:08:ea:
7c:d2:73:11:7a:d3:8f:da:15:3b:88:a6:de:be:25:51:0e:00:
8f:3e:e2:ab:47:db:f7:c7:f6:34:8a:f2:83:03:8a:bf:65:23:
7b:b3:e2:7d:0d:6c:0d:aa:70:39:1b:0c:13:2a:8a:e6:29:00:
4f:01:15:fc:1e:ff:17:45:62:fa:20:13:56:70:0e:24:42:7b:
b0:64:40:b4:0e:6d:57:d3:0b:f5:bd:cf:d9:8e:fe:19:e8:69:
48:be:c8:6b:31:53:a4:4a:58:42:da:0e:db:79:d9:30:c2:a1:
cb:5e:68:3d:f9:b3:7e:51:d9:e4:70:96:31:ba:aa:47:6c:aa:
df:67:b2:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZVG3BMTyWzZDRI97uDWxzEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy
N2Y2NzUwHhcNMjUwMjI3MTAwMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjA1N2UzYWQ5Yjc4ZDMzYjRjYTFlODU4ZDBkZjkwNmEwYTcxODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gn8CcxDC45JtawN1PGHYkYC4z70
JrwAYfHIJPNSBQlhr4MTVG7b0kSD8nddozb7cXYSyWKGWcDY4uXG98sILiXbLbRG
eTiNGhz8IJzr1R+GvNxG7/L3sq4qrV7CYhNSLfos/4COAN0ZUtuHxJPTmqRVH5V5
IxJKIbLzokTTz1jEVC34Oc+N23GvicvFNqAnux3kKhEujVOIFcdthc4HjhYn961/
foJSaj5nlzrW52JRzg2wE9LiMYJybunwdx/oEnwvjtGlXb2v0Lqie3lMEIynz/a4
zBIOhOFuE+zXPpwVxcK0nRJVk/Zl05ZATy0K64DgD1G86vzDxiWJOzsDDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO8FfjrZt40ztMoehY0N+QagpxhVMB8GA1UdIwQY
MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt
OTRhYzhhZjFiZmNmLzEvN3dWLU90bTNqVE8weWg2RmpRMzVCcUNuR0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm
LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXmMAwQA
uXmPMA0GCSqGSIb3DQEBCwUAA4IBAQCPoZjZLQBzqPODdx05vgi9NPSgcbKcHnwb
SDBgCErLkOp1fwfJFOuP+EAY7t8BwJJin6HxrjqT0soLhxx6bJqbf0DYi3NeA08y
zgq9I9tp7CXrIKmRW+zXdOcMFc6UswVwGoktvmGOiYF8K93O8xJOD68Y1M8w57Rk
ccAtCOp80nMRetOP2hU7iKbeviVRDgCPPuKrR9v3x/Y0ivKDA4q/ZSN7s+J9DWwN
qnA5GwwTKormKQBPARX8Hv8XRWL6IBNWcA4kQnuwZEC0Dm1X0wv1vc/Zjv4Z6GlI
vshrMVOkSlhC2g7bedkwwqHLXmg9+bN+UdnkcJYxuqpHbKrfZ7L0
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:31 2025 by rpki-client on console.sobornost.net