Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/XWu-Cy3k4bG46jzu68jWDU2BUlE.roa
File: XWu-Cy3k4bG46jzu68jWDU2BUlE.roa (raw, json)
Hash identifier: oYNAZflFkpftatNeWIk412xMRJVARxZKG+FJn7voe4M=
Subject key identifier: 5D:6B:BE:0B:2D:E4:E1:B1:B8:EA:3C:EE:EB:C8:D6:0D:4D:81:52:51
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 01942444CA4C136A4261A5B283EEC2E3FBEB
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/XWu-Cy3k4bG46jzu68jWDU2BUlE.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64462
IP address blocks: 185.83.110.0/24 maxlen: 24
185.83.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ca:4c:13:6a:42:61:a5:b2:83:ee:c2:e3:fb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d6bbe0b2de4e1b1b8ea3ceeebc8d60d4d815251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:89:5c:d2:e9:37:08:6c:92:c6:81:f2:22:
0b:8b:b1:8b:7f:3d:43:f3:82:25:8c:92:cf:eb:6c:
71:bd:04:06:cf:64:47:f2:5d:46:09:5d:d3:f9:46:
07:17:e1:6d:db:71:b1:e1:f8:84:e5:d5:44:d2:29:
cf:8c:71:fc:73:68:76:1f:6f:18:5f:94:62:19:f9:
8b:07:3a:97:7c:7a:ac:b0:96:14:50:7f:d1:62:3d:
6b:b9:24:76:3e:b1:5e:fa:68:13:d0:b5:01:93:c3:
7d:1c:3f:9a:45:75:3e:4a:fd:cf:e0:f9:52:71:ac:
e2:9d:44:f6:0b:0e:19:e5:27:fc:f8:f2:11:7b:86:
41:55:9b:84:56:d7:e2:10:7f:5d:e7:dc:1b:ba:95:
75:f7:99:55:41:b7:da:9f:b8:a3:db:44:0c:12:91:
ea:c7:9f:ae:3a:76:95:38:7d:5f:ce:e5:cc:f1:8f:
1c:18:7c:ad:dc:6a:2a:7e:9b:32:9c:61:d8:ae:e1:
b3:7d:ad:a4:19:1c:b4:70:0d:7c:3c:ec:05:8d:70:
26:b2:7c:6a:0b:90:b0:e9:25:11:a3:60:39:85:64:
07:1e:63:5f:0e:a0:15:8c:0f:84:54:4f:c4:03:9e:
03:69:f4:2e:f1:a9:74:37:02:0d:e3:34:37:27:bc:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:BE:0B:2D:E4:E1:B1:B8:EA:3C:EE:EB:C8:D6:0D:4D:81:52:51
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/XWu-Cy3k4bG46jzu68jWDU2BUlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.110.0/23
Signature Algorithm: sha256WithRSAEncryption
79:84:1c:96:97:d7:b1:13:bb:ef:4c:e9:8d:3f:97:e8:49:a3:
b9:c0:fc:d7:5c:32:bd:ff:9f:9a:51:33:b4:ed:17:db:9a:26:
a3:89:b1:fd:26:83:d6:4a:80:7d:4f:b4:f8:e3:c0:ce:34:06:
5c:14:80:11:ab:b8:2f:16:fc:97:45:14:6a:6d:e6:d0:1a:8f:
21:d4:7e:ef:cf:f4:7f:6e:fc:df:42:28:68:b1:da:41:52:d9:
8d:21:f2:e3:90:5d:91:1b:a9:4e:fc:aa:d5:92:e8:d0:73:94:
86:7b:a1:6e:b0:6a:d0:17:70:22:b9:01:e2:3b:84:52:40:9b:
6a:79:fa:9a:1a:4f:78:e2:0f:38:19:05:a2:31:cd:f5:eb:c4:
b0:a6:91:d2:99:66:4b:af:e4:68:7d:38:96:ac:69:d4:14:b1:
3c:33:13:c2:18:11:35:58:1c:53:aa:e2:3a:a8:70:18:ee:57:
83:47:c3:ed:2d:10:00:a9:97:c8:b1:c2:3e:48:e6:3f:84:b7:
94:76:14:e7:6d:03:03:f7:68:83:19:dc:31:92:c4:d5:f7:06:
83:61:46:d5:64:18:99:b6:73:9d:40:ea:c9:95:dc:7b:d0:5e:
5a:81:f7:73:ec:0d:8f:73:e2:00:62:a3:ad:f9:21:0d:c1:3c:
9f:de:a5:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRMpME2pCYaWyg+7C4/vrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi
MjJiOTEwHhcNMjUwMTAxMjM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDZiYmUwYjJkZTRlMWIxYjhlYTNjZWVlYmM4ZDYwZDRkODE1MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOmJXNLpNwhsksaB8iILi7GLfz1D
84IljJLP62xxvQQGz2RH8l1GCV3T+UYHF+Ft23Gx4fiE5dVE0inPjHH8c2h2H28Y
X5RiGfmLBzqXfHqssJYUUH/RYj1ruSR2PrFe+mgT0LUBk8N9HD+aRXU+Sv3P4PlS
cazinUT2Cw4Z5Sf8+PIRe4ZBVZuEVtfiEH9d59wbupV195lVQbfan7ij20QMEpHq
x5+uOnaVOH1fzuXM8Y8cGHyt3GoqfpsynGHYruGzfa2kGRy0cA18POwFjXAmsnxq
C5Cw6SURo2A5hWQHHmNfDqAVjA+EVE/EA54DafQu8al0NwIN4zQ3J7xsKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1rvgst5OGxuOo87uvI1g1NgVJRMB8GA1UdIwQY
MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt
NzQzNzY1YmQwZjNlLzEvWFd1LUN5M2s0Ykc0Nmp6dTY4aldEVTJCVWxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl
LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVNuMA0G
CSqGSIb3DQEBCwUAA4IBAQB5hByWl9exE7vvTOmNP5foSaO5wPzXXDK9/5+aUTO0
7RfbmiajibH9JoPWSoB9T7T448DONAZcFIARq7gvFvyXRRRqbebQGo8h1H7vz/R/
bvzfQihosdpBUtmNIfLjkF2RG6lO/KrVkujQc5SGe6FusGrQF3AiuQHiO4RSQJtq
efqaGk944g84GQWiMc3168SwppHSmWZLr+RofTiWrGnUFLE8MxPCGBE1WBxTquI6
qHAY7leDR8PtLRAAqZfIscI+SOY/hLeUdhTnbQMD92iDGdwxksTV9waDYUbVZBiZ
tnOdQOrJldx70F5agfdz7A2Pc+IAYqOt+SENwTyf3qVt
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net