Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/cHCcPH0sTsoVeQvPNjr4F-v6pdk.roa
File: cHCcPH0sTsoVeQvPNjr4F-v6pdk.roa (raw, json)
Hash identifier: ZU0tGbeZyiLeaZ6kaj1s8GJf3FuM5JQJwKTD0CloP/c=
Subject key identifier: 70:70:9C:3C:7D:2C:4E:CA:15:79:0B:CF:36:3A:F8:17:EB:FA:A5:D9
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 0195C7E070DFBE3999F28F13E66A786D21F0
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/cHCcPH0sTsoVeQvPNjr4F-v6pdk.roa
Signing time: Mon 24 Mar 2025 11:18:49 +0000
ROA not before: Mon 24 Mar 2025 11:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203618
IP address blocks: 185.92.230.0/23 maxlen: 23
185.92.230.0/24 maxlen: 24
185.92.231.0/24 maxlen: 24
202.92.212.0/24 maxlen: 24
2a03:8d60::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:e0:70:df:be:39:99:f2:8f:13:e6:6a:78:6d:21:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Mar 24 11:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70709c3c7d2c4eca15790bcf363af817ebfaa5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:4e:5e:cd:35:9d:7e:91:8e:0d:bd:75:10:
f3:81:e0:4b:ee:8b:ff:ce:7b:13:7d:bf:0a:08:ec:
7c:52:af:f6:39:b1:73:9f:40:02:7d:b2:c8:ec:26:
f6:d2:72:39:30:e1:30:44:86:bc:0f:ea:cc:69:6f:
c2:f4:07:e5:f2:a0:c5:67:d0:bd:c9:89:ec:5f:bd:
b6:bd:35:9a:f6:15:1c:3d:bd:e6:9b:5d:a2:13:77:
61:2a:a0:c8:0d:8f:d5:57:11:5c:aa:a5:17:fb:1e:
c5:9f:0c:0f:5f:18:6a:ac:f2:4e:ae:71:ab:e0:75:
45:86:d9:81:09:f6:d5:03:5b:75:7c:5f:66:ba:44:
54:b1:b3:ee:be:3c:b1:c9:8f:1c:c7:79:22:a6:14:
6f:70:7a:8a:33:fd:93:6e:18:84:35:e5:4d:f4:56:
99:38:84:64:74:6a:d5:e5:36:67:8f:f0:e8:1f:8e:
44:77:28:af:29:3d:2e:bc:a7:9b:33:8e:66:12:75:
0a:85:5c:d6:0b:a6:17:05:d1:83:26:08:63:f4:65:
57:55:6b:14:37:1d:81:5f:07:67:b8:15:86:9d:3e:
cb:50:3f:57:30:b3:4b:3c:96:9d:dc:b8:f5:6e:7e:
68:83:15:17:4a:b2:c3:ec:37:7e:a7:0b:bf:69:30:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:70:9C:3C:7D:2C:4E:CA:15:79:0B:CF:36:3A:F8:17:EB:FA:A5:D9
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/cHCcPH0sTsoVeQvPNjr4F-v6pdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.230.0/23
202.92.212.0/24
IPv6:
2a03:8d60::/48
Signature Algorithm: sha256WithRSAEncryption
12:63:b2:5b:e9:40:71:ba:b0:87:61:34:3a:88:f0:ea:74:34:
46:0a:1e:8e:82:f2:b8:05:1c:b6:f0:6a:13:e1:54:21:ec:9a:
1f:93:ab:db:2e:25:b9:cf:58:38:a4:42:18:9c:37:90:37:ec:
45:f9:c9:d6:ca:0b:1c:c0:82:e8:77:72:7e:c0:fb:ee:e8:6f:
25:9d:aa:9a:d5:48:be:e2:dc:f1:0c:f4:5e:50:a5:26:0a:84:
28:dc:41:e8:37:36:58:21:38:7a:d0:5f:50:12:51:de:9a:5a:
40:eb:b7:b2:32:b7:34:96:0e:0c:31:50:7e:71:0a:73:77:b7:
82:49:f9:a1:89:7a:99:cf:8b:99:22:36:b2:53:8a:6e:3e:c0:
f1:4b:2a:01:5c:98:9e:fe:b7:e8:a3:5d:b9:fc:ec:59:36:41:
17:2b:98:bb:63:2b:fd:fd:76:94:4b:57:a4:79:79:32:fd:0d:
18:3b:f5:0b:83:cf:34:95:43:76:7e:8f:40:7f:b1:9f:ae:66:
17:02:d8:ae:8f:2a:2f:be:7e:e8:a4:38:a7:b7:98:34:03:59:
a1:c4:77:3f:c2:c8:2d:04:7c:78:a3:55:87:19:74:f8:97:1c:
55:86:97:c0:d6:ea:c2:3f:ad:6f:06:cf:cc:c7:a6:9c:7f:a8:
86:06:2c:da
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZXH4HDfvjmZ8o8T5mp4bSHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YmQ3Zjc4YjdhMDQ0YWUxMzRjODhiNjI0ZTgzMWE3NjEx
NDNiNzkwHhcNMjUwMzI0MTExODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDcwOWMzYzdkMmM0ZWNhMTU3OTBiY2YzNjNhZjgxN2ViZmFhNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7FOXs01nX6Rjg29dRDzgeBL7ov/
znsTfb8KCOx8Uq/2ObFzn0ACfbLI7Cb20nI5MOEwRIa8D+rMaW/C9Afl8qDFZ9C9
yYnsX722vTWa9hUcPb3mm12iE3dhKqDIDY/VVxFcqqUX+x7FnwwPXxhqrPJOrnGr
4HVFhtmBCfbVA1t1fF9mukRUsbPuvjyxyY8cx3kiphRvcHqKM/2TbhiENeVN9FaZ
OIRkdGrV5TZnj/DoH45EdyivKT0uvKebM45mEnUKhVzWC6YXBdGDJghj9GVXVWsU
Nx2BXwdnuBWGnT7LUD9XMLNLPJad3Lj1bn5ogxUXSrLD7Dd+pwu/aTB74QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHBwnDx9LE7KFXkLzzY6+Bfr+qXZMB8GA1UdIwQY
MBaAFBW9f3i3oESuE0yItiToMadhFDt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmIxX2VMZWdSSzRUVElpMkpPZ3hwMkVVTzNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jNmViOTctNDhlOC00ZTViLTk3Y2Qt
ZDVkOGUwNGU1OTc1LzEvY0hDY1BIMHNUc29WZVF2UE5qcjRGLXY2cGRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jNmViOTctNDhlOC00ZTViLTk3Y2QtZDVkOGUwNGU1OTc1
LzEvRmIxX2VMZWdSSzRUVElpMkpPZ3hwMkVVTzNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBuVzmAwQA
ylzUMA8EAgACMAkDBwAqA41gAAAwDQYJKoZIhvcNAQELBQADggEBABJjslvpQHG6
sIdhNDqI8Op0NEYKHo6C8rgFHLbwahPhVCHsmh+Tq9suJbnPWDikQhicN5A37EX5
ydbKCxzAguh3cn7A++7obyWdqprVSL7i3PEM9F5QpSYKhCjcQeg3NlghOHrQX1AS
Ud6aWkDrt7IytzSWDgwxUH5xCnN3t4JJ+aGJepnPi5kiNrJTim4+wPFLKgFcmJ7+
t+ijXbn87Fk2QRcrmLtjK/39dpRLV6R5eTL9DRg79QuDzzSVQ3Z+j0B/sZ+uZhcC
2K6PKi++fuikOKe3mDQDWaHEdz/CyC0EfHijVYcZdPiXHFWGl8DW6sI/rW8Gz8zH
ppx/qIYGLNo=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net