Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Fj-Qou8a5ItwQxShSqX2sdgl3JI.roa
File: Fj-Qou8a5ItwQxShSqX2sdgl3JI.roa (raw, json)
Hash identifier: ZePxJ4bOXxPR0OedTec1w3tWjpptkRU8fjGK8pBHqF0=
Subject key identifier: 16:3F:90:A2:EF:1A:E4:8B:70:43:14:A1:4A:A5:F6:B1:D8:25:DC:92
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 019393582ED5BB7EBC840CC0F1BD200D6BB1
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Fj-Qou8a5ItwQxShSqX2sdgl3JI.roa
Signing time: Wed 04 Dec 2024 20:24:10 +0000
ROA not before: Wed 04 Dec 2024 20:24:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204798
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
185.133.224.0/24 maxlen: 24
185.133.225.0/24 maxlen: 24
185.133.226.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:58:2e:d5:bb:7e:bc:84:0c:c0:f1:bd:20:0d:6b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Dec 4 20:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=163f90a2ef1ae48b704314a14aa5f6b1d825dc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:b5:ee:c7:d9:bb:3d:aa:13:3c:03:12:c4:
08:51:73:fc:a1:04:f6:9c:53:62:c4:d4:2b:99:3b:
31:79:46:05:7f:8a:11:d2:c2:88:00:dd:f7:c0:79:
c8:c4:ce:72:dc:26:5a:02:4b:67:e9:aa:35:46:e7:
c7:59:14:29:72:1b:5f:b8:96:37:a5:c7:96:c7:45:
46:0a:ff:e0:b2:83:f0:4e:ca:e8:a2:89:4e:0d:cb:
ba:3c:95:e6:fc:2f:97:2d:33:34:59:a6:c4:cc:c8:
6d:b2:cf:5a:a2:d6:54:62:9f:a5:f4:f7:d6:1a:68:
6f:be:9d:83:eb:6a:80:74:07:13:e9:5b:33:aa:f4:
0a:af:2d:f2:de:63:34:71:0c:7c:0f:aa:78:38:06:
8a:f7:82:f6:38:9f:d1:dd:cc:cf:27:ca:12:3f:dd:
8f:f9:15:23:35:90:70:89:df:a3:0f:95:c1:c0:1d:
fe:e3:fe:f8:14:82:fe:0a:ef:cd:40:37:f5:08:59:
b4:1c:be:69:69:07:d5:91:ac:b5:62:38:46:c0:16:
5e:b6:fe:73:48:26:0f:ee:1b:71:74:66:25:d9:6b:
64:7f:3c:8e:f6:ad:3c:19:87:9d:c8:a1:cd:6f:1e:
19:36:b2:5d:19:4a:ef:ad:69:74:e5:ce:ef:8e:49:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3F:90:A2:EF:1A:E4:8B:70:43:14:A1:4A:A5:F6:B1:D8:25:DC:92
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Fj-Qou8a5ItwQxShSqX2sdgl3JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/24
185.122.255.0/24
185.133.224.0/22
Signature Algorithm: sha256WithRSAEncryption
df:b9:71:c4:00:b8:7f:8c:3b:06:54:62:ec:86:f1:a3:3c:27:
4c:9a:e0:dd:4f:68:dc:e6:a7:17:3a:f9:f3:13:06:c6:ba:55:
e0:31:f2:d5:6f:f4:e1:29:5a:a1:cc:7f:32:5d:2a:50:a8:64:
0a:74:2d:9c:48:3f:98:02:6a:cb:d1:9d:b7:0c:be:eb:1c:fd:
32:21:3c:8c:d2:11:8a:3d:70:1d:11:94:80:f9:fd:06:b2:1f:
13:c8:fc:fd:6d:d4:8e:a1:06:70:f5:a0:48:c7:e0:99:70:b6:
e7:f2:ab:1c:11:2b:f1:40:72:10:72:c0:b8:78:ec:52:f1:b7:
19:d0:61:f3:b3:fe:e1:2a:57:e6:0f:42:51:20:f1:09:52:0c:
7f:87:12:58:f5:cf:5d:6d:f9:a2:4a:37:77:49:00:7e:dd:5b:
89:59:e2:fb:fc:ae:21:dd:b5:98:e4:66:8f:e1:db:3d:ed:43:
bc:32:7a:ba:eb:1a:b5:74:e9:42:c4:82:a2:90:44:3d:28:ec:
08:cd:61:fc:41:db:77:83:f6:41:f6:6b:b4:6b:fc:43:95:27:
29:20:2d:cf:75:b5:d2:11:18:f8:78:e1:21:9b:73:f1:fc:0c:
64:83:bc:7d:a3:ae:81:8b:f5:f6:f2:ed:73:53:80:ed:18:2a:
76:02:49:9c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZOTWC7Vu368hAzA8b0gDWuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjQxMjA0MjAyNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjNmOTBhMmVmMWFlNDhiNzA0MzE0YTE0YWE1ZjZiMWQ4MjVkYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnm17sfZuz2qEzwDEsQIUXP8oQT2
nFNixNQrmTsxeUYFf4oR0sKIAN33wHnIxM5y3CZaAktn6ao1RufHWRQpchtfuJY3
pceWx0VGCv/gsoPwTsrooolODcu6PJXm/C+XLTM0WabEzMhtss9aotZUYp+l9PfW
Gmhvvp2D62qAdAcT6VszqvQKry3y3mM0cQx8D6p4OAaK94L2OJ/R3czPJ8oSP92P
+RUjNZBwid+jD5XBwB3+4/74FIL+Cu/NQDf1CFm0HL5paQfVkay1YjhGwBZetv5z
SCYP7htxdGYl2WtkfzyO9q08GYedyKHNbx4ZNrJdGUrvrWl05c7vjkltkwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBY/kKLvGuSLcEMUoUql9rHYJdySMB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvRmotUW91OGE1SXR3UXhTaFNxWDJzZGdsM0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuXr8AwQA
uXr/AwQCuYXgMA0GCSqGSIb3DQEBCwUAA4IBAQDfuXHEALh/jDsGVGLshvGjPCdM
muDdT2jc5qcXOvnzEwbGulXgMfLVb/ThKVqhzH8yXSpQqGQKdC2cSD+YAmrL0Z23
DL7rHP0yITyM0hGKPXAdEZSA+f0Gsh8TyPz9bdSOoQZw9aBIx+CZcLbn8qscESvx
QHIQcsC4eOxS8bcZ0GHzs/7hKlfmD0JRIPEJUgx/hxJY9c9dbfmiSjd3SQB+3VuJ
WeL7/K4h3bWY5GaP4ds97UO8Mnq66xq1dOlCxIKikEQ9KOwIzWH8Qdt3g/ZB9mu0
a/xDlScpIC3PdbXSERj4eOEhm3Px/Axkg7x9o66Bi/X28u1zU4DtGCp2Akmc
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net