Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/heGVk36ucrG4MWNpzqidvrKZ7YQ.roa
File: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (raw, json)
Hash identifier: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=
Subject key identifier: 85:E1:95:93:7E:AE:72:B1:B8:31:63:69:CE:A8:9D:BE:B2:99:ED:84
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019623C7649EE1382F102A0EB086473DEF91
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/heGVk36ucrG4MWNpzqidvrKZ7YQ.roa
Signing time: Fri 11 Apr 2025 07:36:32 +0000
ROA not before: Fri 11 Apr 2025 07:36:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203714
IP address blocks: 176.53.180.0/23 maxlen: 23
176.53.182.0/23 maxlen: 23
185.53.104.0/23 maxlen: 23
185.53.104.0/24 maxlen: 24
185.207.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:c7:64:9e:e1:38:2f:10:2a:0e:b0:86:47:3d:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Apr 11 07:36:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85e195937eae72b1b8316369cea89dbeb299ed84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:ff:89:68:85:46:01:72:0f:77:be:fc:4e:
8e:6a:5d:81:64:d5:99:e7:69:bd:09:99:1f:25:c9:
fd:d3:ae:d7:22:db:16:61:f1:48:e3:60:40:d0:24:
75:f8:7c:2b:de:ce:08:ff:11:d4:8a:36:c4:25:bd:
e8:52:87:31:8b:81:17:77:c7:22:1b:4d:f4:16:b0:
fa:a7:ba:3b:fd:b8:ae:8f:2c:fd:8e:c2:e9:6c:87:
5b:63:4c:7c:20:78:76:87:75:cb:b1:d2:63:c2:5d:
e5:8a:71:23:58:cf:7e:f4:4c:42:41:48:ea:6e:2f:
c3:32:6e:8a:f5:66:30:25:e5:9d:a6:e0:d7:a1:44:
da:ae:67:3b:b6:5a:1c:1f:02:cb:b1:f3:44:f9:87:
a8:95:c2:f6:09:5c:a3:66:7c:1f:ce:69:22:b7:03:
74:4b:44:b7:86:5a:bb:65:79:94:af:57:58:0a:f4:
22:d1:82:ae:33:51:95:97:a5:56:6c:c7:b3:d9:f9:
e9:00:b0:70:23:c3:00:75:ca:d4:8c:a0:32:8c:cc:
42:c7:7f:30:83:1b:f2:7c:09:dc:7c:f6:4c:3c:d2:
8c:49:37:f3:e8:8d:ce:66:ce:08:c0:92:7b:24:42:
47:a3:06:a0:17:6f:7e:3d:36:e7:57:f5:8a:0f:d2:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:95:93:7E:AE:72:B1:B8:31:63:69:CE:A8:9D:BE:B2:99:ED:84
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/heGVk36ucrG4MWNpzqidvrKZ7YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.180.0/22
185.53.104.0/23
185.207.2.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3d:fd:87:0e:59:5f:a9:39:b5:19:e1:76:e4:71:31:3b:84:
49:21:95:b5:48:38:dc:f2:8d:e5:30:cb:52:5b:6f:9d:ee:ca:
64:28:7b:ea:62:7b:54:7d:2b:e6:7f:b0:98:86:d6:75:a6:15:
32:9e:17:f2:5d:89:40:ee:09:84:51:31:22:0b:af:09:21:c6:
d6:9c:aa:3f:21:9a:2f:9e:3d:12:a1:42:a6:de:39:5f:10:01:
94:9e:d3:23:71:f8:a7:40:eb:ff:fe:da:fc:42:8a:33:65:59:
c5:2d:76:04:f5:c5:47:17:62:2c:ca:08:dc:13:42:23:72:50:
84:1a:5d:c1:07:9a:bf:30:64:2c:c1:ef:46:2d:4c:2d:13:12:
1c:e4:7d:29:bd:2f:c4:bf:6a:13:b4:aa:28:1a:60:ea:47:46:
ec:99:69:4d:3e:e5:57:2a:b4:31:83:fa:d7:d6:2c:dd:c9:61:
30:6f:75:c4:d0:03:3b:8c:a7:d4:81:3d:bb:97:0f:6a:db:3c:
25:8a:13:41:1f:5d:ac:8d:bc:8a:87:16:2b:d5:8f:a6:22:8e:
59:4f:54:13:84:99:0b:73:63:57:4f:8b:90:02:fe:57:e8:ad:
3e:80:f6:8c:c6:94:b0:a4:b4:2c:7f:cb:1c:e9:c1:da:8c:03:
96:a5:c7:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZYjx2Se4TgvECoOsIZHPe+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm
NzQxY2IwHhcNMjUwNDExMDczNjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWUxOTU5MzdlYWU3MmIxYjgzMTYzNjljZWE4OWRiZWIyOTllZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JH/iWiFRgFyD3e+/E6Oal2BZNWZ
52m9CZkfJcn9067XItsWYfFI42BA0CR1+Hwr3s4I/xHUijbEJb3oUocxi4EXd8ci
G030FrD6p7o7/biujyz9jsLpbIdbY0x8IHh2h3XLsdJjwl3linEjWM9+9ExCQUjq
bi/DMm6K9WYwJeWdpuDXoUTarmc7tlocHwLLsfNE+YeolcL2CVyjZnwfzmkitwN0
S0S3hlq7ZXmUr1dYCvQi0YKuM1GVl6VWbMez2fnpALBwI8MAdcrUjKAyjMxCx38w
gxvyfAncfPZMPNKMSTfz6I3OZs4IwJJ7JEJHowagF29+PTbnV/WKD9KxwQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIXhlZN+rnKxuDFjac6onb6yme2EMB8GA1UdIwQY
MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et
MGE3NzBmMGM3NjA4LzEvaGVHVmszNnVjckc0TVdOcHpxaWR2cktaN1lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4
LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCsDW0AwQB
uTVoAwQAuc8CMA0GCSqGSIb3DQEBCwUAA4IBAQAnPf2HDllfqTm1GeF25HExO4RJ
IZW1SDjc8o3lMMtSW2+d7spkKHvqYntUfSvmf7CYhtZ1phUynhfyXYlA7gmEUTEi
C68JIcbWnKo/IZovnj0SoUKm3jlfEAGUntMjcfinQOv//tr8QoozZVnFLXYE9cVH
F2IsygjcE0IjclCEGl3BB5q/MGQswe9GLUwtExIc5H0pvS/Ev2oTtKooGmDqR0bs
mWlNPuVXKrQxg/rX1izdyWEwb3XE0AM7jKfUgT27lw9q2zwlihNBH12sjbyKhxYr
1Y+mIo5ZT1QThJkLc2NXT4uQAv5X6K0+gPaMxpSwpLQsf8sc6cHajAOWpcfv
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net