Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/_J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa
File: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (raw, json)
Hash identifier: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=
Subject key identifier: FC:9D:90:92:23:93:DF:06:57:8A:FF:A4:21:E4:35:BF:30:E3:19:02
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 0194266B53F4EF44DA7B43EFB6DD7565D967
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/_J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42468
IP address blocks: 185.83.208.0/24 maxlen: 24
185.83.209.0/24 maxlen: 24
185.83.210.0/24 maxlen: 24
185.83.211.0/24 maxlen: 24
2a03:6da0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:53:f4:ef:44:da:7b:43:ef:b6:dd:75:65:d9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc9d90922393df06578affa421e435bf30e31902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:63:18:c2:b7:ca:7d:e1:c4:03:5d:a0:7d:
5b:e4:ae:a5:57:15:3c:ab:c4:19:4d:6d:3b:82:26:
cf:dd:96:88:53:bf:a4:2f:cd:4b:ad:f3:55:23:ab:
06:b1:53:00:ef:a8:9c:d3:99:0e:e0:47:4e:f6:7a:
4c:a1:42:75:9a:db:c0:dc:74:ea:52:2c:2b:89:e0:
4c:ef:f4:2a:67:29:7c:43:8f:f5:b7:56:6c:4f:58:
d6:4b:55:74:f6:35:d8:90:85:84:00:a8:98:32:69:
bb:22:79:f2:1c:f3:e5:78:ab:90:36:a8:de:16:16:
b1:6e:45:a4:38:8d:fd:4c:fd:94:45:70:9d:8b:72:
66:a2:7b:8a:db:8b:b1:ae:3d:a8:d8:35:8c:97:5f:
1c:28:69:23:d2:b1:c4:c7:48:59:01:cc:b8:d3:60:
00:5f:b0:2a:65:ff:cb:67:05:9f:c9:ff:c3:b1:88:
3b:82:fe:f6:76:8e:7d:9a:7a:64:1c:47:33:0c:dc:
8e:23:81:95:f1:20:d5:1f:b3:dd:cc:40:0a:df:57:
4a:46:9f:9a:a5:0f:e6:c0:2c:85:1e:fe:eb:09:dd:
3a:8f:df:4b:a6:5b:c1:94:9e:dc:dd:c1:50:74:13:
e5:62:c2:92:28:98:d3:f1:83:fe:e8:f1:18:5c:18:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:90:92:23:93:DF:06:57:8A:FF:A4:21:E4:35:BF:30:E3:19:02
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/_J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.208.0/22
IPv6:
2a03:6da0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:5c:3f:49:33:ef:1b:b8:55:ee:c4:f1:2e:53:35:c4:f2:0a:
ef:a6:78:38:df:0a:de:9f:01:ca:23:62:cd:4f:76:2e:fa:23:
87:72:6d:d5:16:13:04:0b:d7:ab:f7:bf:2e:0e:78:d7:56:67:
24:27:03:04:b4:57:08:55:85:8f:d5:7a:64:04:7b:06:84:e4:
b8:ef:e9:ac:7b:ef:73:29:d6:c1:45:49:54:8b:d2:30:71:b3:
ed:41:0e:ee:1a:74:3f:ac:8b:ff:53:4b:39:77:9b:4e:5e:72:
16:14:f0:4f:15:7a:40:3f:cd:42:c6:5a:ba:60:77:03:4c:70:
9f:56:11:e5:f2:38:7f:70:df:ec:8a:77:46:11:0f:b1:81:92:
23:86:39:fc:e2:e6:33:f1:ef:48:1a:8f:58:68:4e:0f:83:ff:
77:6e:70:f8:c7:80:f5:70:93:8f:2f:58:fd:ff:a6:43:e1:1c:
01:4a:b2:0a:2e:19:b6:59:c8:ba:c8:f8:00:45:7c:91:c7:d1:
7a:cb:68:06:fd:0b:ee:9a:d9:4d:fc:b8:fd:8f:86:1c:bc:62:
98:2f:90:15:84:5a:e8:32:1e:62:b7:d6:47:f1:bb:ed:96:e2:
77:24:e2:84:a6:9c:27:80:b4:f7:79:32:61:6e:11:f3:67:f0:
4d:c0:8e:3e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQma1P070Tae0Pvtt11ZdlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDU4Mzc3NTEwYTNhOTI0NWNlNzJjYmU4OGUwZWZhMTk3
MTkyMDQwHhcNMjUwMTAyMDk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzlkOTA5MjIzOTNkZjA2NTc4YWZmYTQyMWU0MzViZjMwZTMxOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI1jGMK3yn3hxANdoH1b5K6lVxU8
q8QZTW07gibP3ZaIU7+kL81LrfNVI6sGsVMA76ic05kO4EdO9npMoUJ1mtvA3HTq
UiwrieBM7/QqZyl8Q4/1t1ZsT1jWS1V09jXYkIWEAKiYMmm7InnyHPPleKuQNqje
FhaxbkWkOI39TP2URXCdi3JmonuK24uxrj2o2DWMl18cKGkj0rHEx0hZAcy402AA
X7AqZf/LZwWfyf/DsYg7gv72do59mnpkHEczDNyOI4GV8SDVH7PdzEAK31dKRp+a
pQ/mwCyFHv7rCd06j99LplvBlJ7c3cFQdBPlYsKSKJjT8YP+6PEYXBjtkQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPydkJIjk98GV4r/pCHkNb8w4xkCMB8GA1UdIwQY
MBaAFH4Fg3dRCjqSRc5yy+iODvoZcZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQt
NzI4MjdmZTZkN2FmLzEvX0oyUWtpT1Qzd1pYaXYta0llUTF2ekRqR1FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQtNzI4MjdmZTZkN2Fm
LzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVPQMA0E
AgACMAcDBQAqA22gMA0GCSqGSIb3DQEBCwUAA4IBAQCqXD9JM+8buFXuxPEuUzXE
8grvpng43wrenwHKI2LNT3Yu+iOHcm3VFhMEC9er978uDnjXVmckJwMEtFcIVYWP
1XpkBHsGhOS47+mse+9zKdbBRUlUi9IwcbPtQQ7uGnQ/rIv/U0s5d5tOXnIWFPBP
FXpAP81Cxlq6YHcDTHCfVhHl8jh/cN/sindGEQ+xgZIjhjn84uYz8e9IGo9YaE4P
g/93bnD4x4D1cJOPL1j9/6ZD4RwBSrIKLhm2Wci6yPgARXyRx9F6y2gG/QvumtlN
/Lj9j4YcvGKYL5AVhFroMh5it9ZH8bvtluJ3JOKEppwngLT3eTJhbhHzZ/BNwI4+
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net