Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa
File: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (raw, json)
Hash identifier: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=
Subject key identifier: 64:3D:92:E9:B6:81:4C:C6:F1:3C:E2:E3:43:19:8E:65:BF:51:7A:85
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 0194DC319DA3F63F4B8F449BB85DE5638DC2
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa
Signing time: Thu 06 Feb 2025 16:57:06 +0000
ROA not before: Thu 06 Feb 2025 16:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206291
IP address blocks: 185.90.150.0/23 maxlen: 23
185.188.44.0/22 maxlen: 22
2a0b:b780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:31:9d:a3:f6:3f:4b:8f:44:9b:b8:5d:e5:63:8d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Feb 6 16:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=643d92e9b6814cc6f13ce2e343198e65bf517a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:2f:c2:e6:e7:ea:05:3a:4e:6e:fa:5f:3e:
fa:fe:82:37:f1:6d:86:29:12:6b:31:be:6b:eb:fd:
e8:fb:d2:09:01:7c:35:7f:ff:ce:81:fd:3c:ab:12:
1b:1f:c4:fe:1c:dd:bf:0d:ee:99:fe:e1:ee:db:a6:
d9:9d:e0:14:76:61:46:26:ee:37:49:31:db:4c:02:
33:f8:2c:ff:9c:2e:66:ce:3c:fc:23:88:fc:4d:f3:
b6:f3:f2:a2:53:12:71:a3:83:c5:16:5f:4c:68:0e:
bd:41:6a:b5:dd:c6:53:c8:fe:f6:17:29:1e:a0:bc:
e7:4d:89:c2:a1:03:7c:e8:48:39:2c:fb:7d:5f:7f:
78:f6:58:81:63:bf:49:ec:e1:b5:bb:bd:76:a1:90:
96:37:d2:08:39:89:5b:a2:0a:4f:bf:7c:be:58:af:
ec:6f:ea:3a:84:ad:1c:58:a6:05:0b:2c:5a:96:84:
ae:1d:c7:85:72:a0:61:93:06:fc:b7:df:89:84:3c:
85:48:6d:f7:14:f4:bb:7d:6b:51:96:31:41:0a:f6:
80:6a:bd:4b:4e:d6:4b:a9:a8:a8:2e:dd:df:8f:02:
dd:4e:20:42:94:37:d1:df:05:2d:1b:d2:1a:80:e6:
32:6f:35:15:a8:da:37:f2:04:ad:a0:78:62:9b:f9:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3D:92:E9:B6:81:4C:C6:F1:3C:E2:E3:43:19:8E:65:BF:51:7A:85
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.150.0/23
185.188.44.0/22
IPv6:
2a0b:b780::/29
Signature Algorithm: sha256WithRSAEncryption
06:8b:dd:90:12:3c:be:c3:cc:5d:d3:fa:7c:1d:2e:3f:a4:a9:
a2:03:ff:e2:8f:7e:f7:73:53:35:c3:e6:c3:a5:4b:de:be:31:
d1:56:56:65:89:e3:60:23:9e:c8:66:b7:45:97:de:4c:e0:04:
4b:cc:29:51:90:64:98:c9:60:95:94:95:c6:d2:b4:70:99:21:
86:48:b5:b9:ef:06:43:35:ca:02:2d:a0:47:db:93:4a:06:00:
00:d1:b9:2b:96:bf:05:aa:4d:9c:1f:e9:0f:4e:fc:77:ed:c0:
c9:d1:94:71:ed:5c:10:ee:23:f1:6f:24:30:43:38:c0:ea:85:
ae:3c:7b:86:ae:c9:2c:9f:17:36:23:bf:79:33:4d:de:be:d9:
86:8e:d3:6f:cc:0e:3e:1a:8c:6b:9c:9c:03:05:42:22:c8:66:
4e:bf:b4:2f:9d:e2:8c:d7:00:5a:e8:3f:e1:1b:95:5c:76:81:
4c:e1:dd:92:65:e0:56:27:2a:7f:f3:8f:37:b5:0e:c2:05:ed:
bc:76:fe:49:01:d1:9c:3b:74:c2:f9:f2:89:90:8f:1e:f0:a2:
94:67:af:74:4e:59:70:e2:e7:ed:75:f8:56:30:da:5a:88:ac:
44:b1:85:d0:2c:51:48:d4:30:12:5d:d2:4e:60:e5:7e:9b:cf:
25:6f:95:4e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZTcMZ2j9j9Lj0SbuF3lY43CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNjFhNWZhMzdlNWNkMTAxNTA4NTI2M2VjMDI5ZTFhZmY3
OTM4ZDcwHhcNMjUwMjA2MTY1NzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDNkOTJlOWI2ODE0Y2M2ZjEzY2UyZTM0MzE5OGU2NWJmNTE3YTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNMvwubn6gU6Tm76Xz76/oI38W2G
KRJrMb5r6/3o+9IJAXw1f//Ogf08qxIbH8T+HN2/De6Z/uHu26bZneAUdmFGJu43
STHbTAIz+Cz/nC5mzjz8I4j8TfO28/KiUxJxo4PFFl9MaA69QWq13cZTyP72Fyke
oLznTYnCoQN86Eg5LPt9X3949liBY79J7OG1u712oZCWN9IIOYlbogpPv3y+WK/s
b+o6hK0cWKYFCyxaloSuHceFcqBhkwb8t9+JhDyFSG33FPS7fWtRljFBCvaAar1L
TtZLqaioLt3fjwLdTiBClDfR3wUtG9IagOYybzUVqNo38gStoHhim/kWzwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGQ9kum2gUzG8Tzi40MZjmW/UXqFMB8GA1UdIwQY
MBaAFPBhpfo35c0QFQhSY+wCnhr/eTjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYt
MThiMTI4YzhiNDg2LzEvWkQyUzZiYUJUTWJ4UE9MalF4bU9aYjlSZW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYtMThiMTI4YzhiNDg2
LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuVqWAwQC
ubwsMA0EAgACMAcDBQMqC7eAMA0GCSqGSIb3DQEBCwUAA4IBAQAGi92QEjy+w8xd
0/p8HS4/pKmiA//ij373c1M1w+bDpUvevjHRVlZlieNgI57IZrdFl95M4ARLzClR
kGSYyWCVlJXG0rRwmSGGSLW57wZDNcoCLaBH25NKBgAA0bkrlr8Fqk2cH+kPTvx3
7cDJ0ZRx7VwQ7iPxbyQwQzjA6oWuPHuGrsksnxc2I795M03evtmGjtNvzA4+Goxr
nJwDBUIiyGZOv7QvneKM1wBa6D/hG5VcdoFM4d2SZeBWJyp/8483tQ7CBe28dv5J
AdGcO3TC+fKJkI8e8KKUZ690Tllw4uftdfhWMNpaiKxEsYXQLFFI1DASXdJOYOV+
m88lb5VO
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net