Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/1g597y06foQbOFcS_h93SwkhNOQ.roa
File: 1g597y06foQbOFcS_h93SwkhNOQ.roa (raw, json)
Hash identifier: TZdC67NT8fkd1drCN7n7TEHOt/q1UG1cqUfoMBev2T4=
Subject key identifier: D6:0E:7D:EF:2D:3A:7E:84:1B:38:57:12:FE:1F:77:4B:09:21:34:E4
Certificate issuer: /CN=88a8d325f97b03713342682fc408d53368740e7d
Certificate serial: 019503A77C6B5D431D7B023063AE5DFBEB07
Authority key identifier: 88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/1g597y06foQbOFcS_h93SwkhNOQ.roa
Signing time: Fri 14 Feb 2025 08:51:02 +0000
ROA not before: Fri 14 Feb 2025 08:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60895
IP address blocks: 185.23.112.0/22 maxlen: 22
185.23.112.0/23 maxlen: 23
185.23.112.0/24 maxlen: 24
185.23.113.0/24 maxlen: 24
185.23.114.0/23 maxlen: 23
185.23.114.0/24 maxlen: 24
185.23.115.0/24 maxlen: 24
2a00:6d20::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:a7:7c:6b:5d:43:1d:7b:02:30:63:ae:5d:fb:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a8d325f97b03713342682fc408d53368740e7d
Validity
Not Before: Feb 14 08:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d60e7def2d3a7e841b385712fe1f774b092134e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:d9:99:b3:34:b1:44:e6:f1:28:58:a0:15:
3a:bd:ea:d0:ab:07:9c:05:04:5f:10:f4:62:ef:3b:
8c:05:64:bd:26:83:82:56:8f:1d:c0:cb:e5:dc:a4:
b9:0b:1d:e7:5e:61:31:e9:1e:9e:40:ca:b5:69:37:
70:fd:5f:a3:9e:2e:0c:47:7a:10:8e:2d:d1:90:ae:
35:15:90:b8:b3:fb:83:7e:c0:6b:05:3d:25:b2:ad:
98:6e:78:6d:e9:97:14:d8:b0:6a:fe:08:aa:5f:15:
21:a9:43:aa:0a:ff:20:e5:70:7e:6f:2d:d2:b1:66:
a5:3e:59:6f:fd:28:b5:41:dd:ed:bc:a8:a2:ea:f1:
66:5b:20:47:16:dd:91:a5:0c:09:3d:fe:5a:54:0d:
80:03:f8:0b:c0:39:33:66:fe:d1:6a:12:78:bd:c2:
35:4b:80:98:a7:80:10:cb:34:19:bf:3c:38:d5:89:
71:de:13:df:07:a8:10:ff:b8:c3:6b:72:c9:06:e4:
97:af:e7:3d:6f:f8:10:4d:1c:ff:1f:f0:a0:89:10:
1c:69:26:41:ca:3e:64:1d:6d:ce:d3:0c:b3:bc:d2:
5a:a4:c0:da:e8:9d:37:38:35:53:75:65:10:15:33:
53:7a:6f:a4:2d:e9:e6:2a:9f:28:2b:8c:ca:42:4e:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0E:7D:EF:2D:3A:7E:84:1B:38:57:12:FE:1F:77:4B:09:21:34:E4
X509v3 Authority Key Identifier:
keyid:88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/1g597y06foQbOFcS_h93SwkhNOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.112.0/22
IPv6:
2a00:6d20::/29
Signature Algorithm: sha256WithRSAEncryption
a6:cc:3f:10:d9:c1:9a:56:b0:c6:8a:74:8b:f8:e3:fd:4f:33:
95:15:5d:e5:04:e2:ca:2e:70:01:8b:67:6f:de:0a:5a:52:44:
89:32:4e:ce:65:b6:18:38:b9:da:38:84:c2:30:b4:38:1a:35:
4d:4f:b7:2a:b0:62:92:89:d1:4f:66:47:34:2a:59:7c:f8:3a:
6a:fc:6d:4c:bb:b9:3b:29:83:70:4d:9b:07:4f:95:72:c3:fe:
bf:4e:6a:2a:e3:a1:1c:94:5b:2f:d2:fe:dc:a5:4c:da:1c:89:
b2:60:30:a6:39:fe:fc:52:94:cc:2e:2f:70:cc:8d:94:27:ab:
89:49:80:e8:5b:6a:19:54:a4:11:94:7e:89:fb:e4:a2:94:83:
e3:48:d6:15:b4:30:cb:f0:18:03:52:22:4b:18:49:6a:80:2d:
64:8e:c7:87:fe:de:49:c1:e1:9c:8c:10:77:d2:d9:af:bc:4d:
5d:7d:99:56:b3:d3:29:fc:4d:f1:c4:52:bb:b7:f3:9e:7b:87:
45:ac:d6:10:c8:30:c6:74:74:76:f1:1e:4f:79:25:a0:9e:ca:
e6:77:72:b6:21:56:4b:02:3b:9a:78:7a:63:03:82:09:e1:d6:
a7:9a:50:8a:bb:8e:a2:dd:7d:e4:09:bb:24:8d:d7:4f:2b:da:
bc:83:55:2e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZUDp3xrXUMdewIwY65d++sHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YThkMzI1Zjk3YjAzNzEzMzQyNjgyZmM0MDhkNTMzNjg3
NDBlN2QwHhcNMjUwMjE0MDg1MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjBlN2RlZjJkM2E3ZTg0MWIzODU3MTJmZTFmNzc0YjA5MjEzNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXZmbM0sUTm8ShYoBU6verQqwec
BQRfEPRi7zuMBWS9JoOCVo8dwMvl3KS5Cx3nXmEx6R6eQMq1aTdw/V+jni4MR3oQ
ji3RkK41FZC4s/uDfsBrBT0lsq2Ybnht6ZcU2LBq/giqXxUhqUOqCv8g5XB+by3S
sWalPllv/Si1Qd3tvKii6vFmWyBHFt2RpQwJPf5aVA2AA/gLwDkzZv7RahJ4vcI1
S4CYp4AQyzQZvzw41Ylx3hPfB6gQ/7jDa3LJBuSXr+c9b/gQTRz/H/CgiRAcaSZB
yj5kHW3O0wyzvNJapMDa6J03ODVTdWUQFTNTem+kLenmKp8oK4zKQk7SvQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNYOfe8tOn6EGzhXEv4fd0sJITTkMB8GA1UdIwQY
MBaAFIio0yX5ewNxM0JoL8QI1TNodA59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtqVEpmbDdBM0V6UW1ndnhBalZNMmgwRG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82NDViYjItZmMzNC00MjliLWE3ZjAt
Y2YwM2ZhNGNhMDgzLzEvMWc1OTd5MDZmb1FiT0ZjU19oOTNTd2toTk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82NDViYjItZmMzNC00MjliLWE3ZjAtY2YwM2ZhNGNhMDgz
LzEvaUtqVEpmbDdBM0V6UW1ndnhBalZNMmgwRG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRdwMA0E
AgACMAcDBQMqAG0gMA0GCSqGSIb3DQEBCwUAA4IBAQCmzD8Q2cGaVrDGinSL+OP9
TzOVFV3lBOLKLnABi2dv3gpaUkSJMk7OZbYYOLnaOITCMLQ4GjVNT7cqsGKSidFP
Zkc0Kll8+Dpq/G1Mu7k7KYNwTZsHT5Vyw/6/Tmoq46EclFsv0v7cpUzaHImyYDCm
Of78UpTMLi9wzI2UJ6uJSYDoW2oZVKQRlH6J++SilIPjSNYVtDDL8BgDUiJLGElq
gC1kjseH/t5JweGcjBB30tmvvE1dfZlWs9Mp/E3xxFK7t/Oee4dFrNYQyDDGdHR2
8R5PeSWgnsrmd3K2IVZLAjuaeHpjA4IJ4danmlCKu46i3X3kCbskjddPK9q8g1Uu
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net