Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/eh5qADvOW9YooSFi9xWIhPqTZAE.roa
File: eh5qADvOW9YooSFi9xWIhPqTZAE.roa (raw, json)
Hash identifier: lzsm6FBwUN9N9FmksKmql4AQDvHpl7L4NMdpIGcKg2s=
Subject key identifier: 7A:1E:6A:00:3B:CE:5B:D6:28:A1:21:62:F7:15:88:84:FA:93:64:01
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 01942444B17D93E9EB17CD6F2C2EAC8E101B
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/eh5qADvOW9YooSFi9xWIhPqTZAE.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5484
IP address blocks: 185.46.216.0/24 maxlen: 24
185.46.217.0/24 maxlen: 24
185.46.218.0/24 maxlen: 24
185.46.219.0/24 maxlen: 24
185.128.152.0/24 maxlen: 24
185.128.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b1:7d:93:e9:eb:17:cd:6f:2c:2e:ac:8e:10:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a1e6a003bce5bd628a12162f7158884fa936401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:a5:86:a5:02:28:95:09:ec:7e:42:03:69:
57:49:e6:21:01:f9:20:37:f9:c0:f6:bb:47:1b:3b:
ce:7b:28:76:9b:7d:57:cf:59:28:49:4b:e1:23:ee:
95:19:c9:39:25:2e:91:76:a3:67:0a:18:95:60:1b:
e2:f8:91:60:5e:da:80:7f:f8:42:6b:b2:d4:1a:1e:
76:3a:88:fe:43:6b:5a:9c:75:0a:c2:de:e9:f5:03:
35:dd:7b:2f:16:63:9c:5f:98:07:67:ae:f0:c0:54:
4a:64:84:58:2a:21:71:28:13:9e:0a:fe:31:e6:f2:
a4:f1:8b:d5:ad:1c:71:da:6a:48:51:1c:35:33:38:
59:74:ee:33:88:64:ab:5a:51:21:5b:33:e0:4f:89:
39:6a:02:31:1d:d4:db:c6:96:5c:1e:d0:65:fd:07:
0a:e0:56:3d:57:59:be:e1:19:e3:ad:0e:d0:2e:48:
c1:3e:d1:4f:bb:4f:e0:af:7d:7a:ea:6f:fc:04:e1:
d2:82:c2:a6:18:50:bf:d8:06:ec:a7:98:7e:d5:3a:
06:8c:5e:f1:04:c3:f7:6d:7a:d2:7e:ba:c5:6d:4a:
89:ca:d3:b9:c2:cb:ba:5c:9c:4d:35:3a:42:7c:0a:
13:e3:8b:ef:b7:6d:e0:36:38:bd:6c:0f:09:49:0f:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:6A:00:3B:CE:5B:D6:28:A1:21:62:F7:15:88:84:FA:93:64:01
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/eh5qADvOW9YooSFi9xWIhPqTZAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.216.0/22
185.128.152.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:d3:a3:94:28:55:c0:f5:a7:0e:45:71:4f:38:8b:46:09:48:
02:39:e7:d1:e8:67:59:f8:b1:47:72:3a:ea:4e:83:df:c2:1a:
24:7f:c8:77:14:26:f2:e6:38:7e:c7:7b:84:b9:d0:a5:73:18:
1c:15:0c:c5:ff:a6:22:11:ef:6a:c2:da:77:09:b3:de:ef:0e:
bd:e6:d0:c7:03:15:83:7e:2e:df:66:24:49:2e:eb:bb:47:1c:
08:37:17:ab:2b:6f:98:2e:bd:75:1c:26:d4:fd:bd:d7:cf:82:
bb:f3:92:6d:d0:4c:0a:2b:c8:ec:72:36:66:8a:d9:52:53:89:
52:fc:19:14:05:38:2d:01:d5:2f:10:55:10:5c:74:94:e6:79:
9c:db:d4:a9:a5:b3:9a:f8:7a:aa:4c:85:cd:2b:c9:d6:17:73:
5e:21:66:f7:be:4a:f9:5b:6a:23:9f:c5:38:78:4b:17:97:7c:
b5:fb:7a:87:5e:19:47:83:f9:d2:79:0f:5f:f5:2e:47:27:a6:
e6:d5:0e:26:8b:20:06:a6:1e:05:48:c7:52:ce:94:d2:43:8f:
67:7e:c0:f8:ee:57:4c:2a:4c:77:86:10:c3:bb:a1:57:00:6d:
1b:fa:74:0f:80:be:67:e3:9c:99:a0:ec:6d:cc:7f:68:22:64:
a4:fe:53:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRLF9k+nrF81vLC6sjhAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTc5ZThmNjNlOTkxZGRmMTNlNmRlZjI3ZTAwODk5OWQ0
ZDRhZDkwHhcNMjUwMTAxMjM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTFlNmEwMDNiY2U1YmQ2MjhhMTIxNjJmNzE1ODg4NGZhOTM2NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvulhqUCKJUJ7H5CA2lXSeYhAfkg
N/nA9rtHGzvOeyh2m31Xz1koSUvhI+6VGck5JS6RdqNnChiVYBvi+JFgXtqAf/hC
a7LUGh52Ooj+Q2tanHUKwt7p9QM13XsvFmOcX5gHZ67wwFRKZIRYKiFxKBOeCv4x
5vKk8YvVrRxx2mpIURw1MzhZdO4ziGSrWlEhWzPgT4k5agIxHdTbxpZcHtBl/QcK
4FY9V1m+4RnjrQ7QLkjBPtFPu0/gr3166m/8BOHSgsKmGFC/2Absp5h+1ToGjF7x
BMP3bXrSfrrFbUqJytO5wsu6XJxNNTpCfAoT44vvt23gNji9bA8JSQ/CTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHoeagA7zlvWKKEhYvcViIT6k2QBMB8GA1UdIwQY
MBaAFK/nno9j6ZHd8T5t7yfgCJmdTUrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQt
NGNhN2I0YzAyYmU5LzEvZWg1cUFEdk9XOVlvb1NGaTl4V0loUHFUWkFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQtNGNhN2I0YzAyYmU5
LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuS7YAwQB
uYCYMA0GCSqGSIb3DQEBCwUAA4IBAQCo06OUKFXA9acORXFPOItGCUgCOefR6GdZ
+LFHcjrqToPfwhokf8h3FCby5jh+x3uEudClcxgcFQzF/6YiEe9qwtp3CbPe7w69
5tDHAxWDfi7fZiRJLuu7RxwINxerK2+YLr11HCbU/b3Xz4K785Jt0EwKK8jscjZm
itlSU4lS/BkUBTgtAdUvEFUQXHSU5nmc29SppbOa+HqqTIXNK8nWF3NeIWb3vkr5
W2ojn8U4eEsXl3y1+3qHXhlHg/nSeQ9f9S5HJ6bm1Q4miyAGph4FSMdSzpTSQ49n
fsD47ldMKkx3hhDDu6FXAG0b+nQPgL5n45yZoOxtzH9oImSk/lO4
-----END CERTIFICATE-----
Generated at Thu Jan 23 15:43:06 2025 by rpki-client on console.sobornost.net