Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/_SDGNnpAJAI5c9TTproSlcDE1Ew.roa
File: _SDGNnpAJAI5c9TTproSlcDE1Ew.roa (raw, json)
Hash identifier: FWM2UQvUNqFuHmMAV7nZEdUtqbqVwiTq2Q2yh+QWjTY=
Subject key identifier: FD:20:C6:36:7A:40:24:02:39:73:D4:D3:A6:BA:12:95:C0:C4:D4:4C
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 01942445842FC151968C91C738A766E79A78
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/_SDGNnpAJAI5c9TTproSlcDE1Ew.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206280
IP address blocks: 185.190.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:84:2f:c1:51:96:8c:91:c7:38:a7:66:e7:9a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd20c6367a4024023973d4d3a6ba1295c0c4d44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:c6:3e:d1:48:4c:8b:6b:bf:e8:95:fe:ca:
ec:6e:cb:f1:87:5b:ea:35:1c:60:9c:a8:7b:61:fc:
26:b7:fc:bc:68:66:56:dc:09:9c:a6:78:75:28:2c:
bb:3a:34:0a:dd:46:e1:73:a0:63:e9:ab:3b:2b:c1:
1f:f0:75:c5:53:c1:3c:bc:d4:f1:c8:ab:3a:9e:d6:
3d:a9:f6:8c:b7:98:87:c2:ef:e3:d9:dd:0d:b7:92:
65:5c:6d:d9:ce:d7:5e:67:a5:45:e8:93:27:f6:17:
4e:d6:66:4a:7e:3b:ea:b9:5a:a5:d9:dd:00:a5:59:
a9:4d:bd:f6:c0:78:51:67:35:fb:f2:3a:2c:36:76:
c0:02:99:71:13:36:e4:75:de:0f:6a:a1:bd:bd:f6:
c1:32:bb:43:19:e2:e8:b4:ad:89:a1:be:89:3a:00:
08:2c:e8:bf:78:6d:b5:be:68:1e:ac:91:bb:47:c0:
b4:0c:21:11:46:dd:39:90:1b:f5:ef:db:e4:fc:cf:
90:41:58:30:c5:b4:2e:e3:c3:6b:68:c9:31:6e:ca:
b0:37:a0:42:1a:bf:f1:29:9f:4f:ba:de:b7:30:b8:
06:d6:10:fb:d4:4d:7e:d7:e9:88:8a:96:2f:20:6a:
06:fb:38:11:ff:7d:cb:4e:7f:a4:58:e0:1d:13:5a:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:20:C6:36:7A:40:24:02:39:73:D4:D3:A6:BA:12:95:C0:C4:D4:4C
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/_SDGNnpAJAI5c9TTproSlcDE1Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.252.0/22
Signature Algorithm: sha256WithRSAEncryption
28:f7:46:bc:c9:ca:81:34:15:98:6b:8b:d2:6b:c4:2e:13:95:
0f:1f:02:64:2c:b5:f4:63:e8:f2:fd:bf:04:0d:87:53:ed:d2:
1d:d0:de:61:a2:63:6e:ce:72:64:9f:80:50:64:50:d1:6e:e4:
4d:89:44:bd:b8:82:61:46:21:55:6d:23:1d:9d:67:4a:69:86:
14:97:b8:1b:3a:71:c5:1c:9d:e1:91:65:1e:ce:52:66:a7:47:
c8:c9:31:4f:ea:ff:57:d8:59:a6:0f:14:8a:43:b6:8a:0d:87:
73:e9:c5:4c:14:c9:37:cc:fc:7f:fb:8b:81:ea:8a:cb:1c:9d:
e1:62:3e:1b:6d:5b:07:44:64:56:78:b2:3f:6f:61:86:9e:11:
f5:d7:75:1b:4a:d6:43:06:ca:81:b8:35:39:67:5c:90:61:f0:
a5:d0:a5:d8:c6:bd:cb:33:10:56:54:97:11:ac:e0:64:f8:a6:
8f:05:89:7d:4c:34:35:1f:e7:8e:47:5b:04:04:d8:0b:b2:b2:
ac:4f:99:17:16:34:42:2b:bd:b9:85:37:4b:00:70:a1:71:c7:
67:ff:75:ad:ee:65:7b:dc:c5:8d:af:f7:80:25:a2:e1:e8:a0:
49:6f:7f:16:49:0a:5d:79:f3:b0:0b:cd:db:05:af:79:57:5b:
da:85:a9:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRYQvwVGWjJHHOKdm55p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGEwM2Y4MGY2MmRhODY2MzUyZTE5OTA5OTdmMWQ0NmNl
YjJmYjAwHhcNMjUwMTAxMjM0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDIwYzYzNjdhNDAyNDAyMzk3M2Q0ZDNhNmJhMTI5NWMwYzRkNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlbGPtFITItrv+iV/srsbsvxh1vq
NRxgnKh7Yfwmt/y8aGZW3Amcpnh1KCy7OjQK3Ubhc6Bj6as7K8Ef8HXFU8E8vNTx
yKs6ntY9qfaMt5iHwu/j2d0Nt5JlXG3ZztdeZ6VF6JMn9hdO1mZKfjvquVql2d0A
pVmpTb32wHhRZzX78josNnbAAplxEzbkdd4PaqG9vfbBMrtDGeLotK2Job6JOgAI
LOi/eG21vmgerJG7R8C0DCERRt05kBv179vk/M+QQVgwxbQu48NraMkxbsqwN6BC
Gr/xKZ9Put63MLgG1hD71E1+1+mIipYvIGoG+zgR/33LTn+kWOAdE1pwRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP0gxjZ6QCQCOXPU06a6EpXAxNRMMB8GA1UdIwQY
MBaAFOJKA/gPYtqGY1LhmQmX8dRs6y+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODct
NDFiNTQ1MDBmZGNmLzEvX1NER05ucEFKQUk1YzlUVHByb1NsY0RFMUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODctNDFiNTQ1MDBmZGNm
LzEvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub78MA0G
CSqGSIb3DQEBCwUAA4IBAQAo90a8ycqBNBWYa4vSa8QuE5UPHwJkLLX0Y+jy/b8E
DYdT7dId0N5homNuznJkn4BQZFDRbuRNiUS9uIJhRiFVbSMdnWdKaYYUl7gbOnHF
HJ3hkWUezlJmp0fIyTFP6v9X2FmmDxSKQ7aKDYdz6cVMFMk3zPx/+4uB6orLHJ3h
Yj4bbVsHRGRWeLI/b2GGnhH113UbStZDBsqBuDU5Z1yQYfCl0KXYxr3LMxBWVJcR
rOBk+KaPBYl9TDQ1H+eOR1sEBNgLsrKsT5kXFjRCK725hTdLAHChccdn/3Wt7mV7
3MWNr/eAJaLh6KBJb38WSQpdefOwC83bBa95V1vahanz
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net