Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/KzHfiiDg2EcCwKAmppKJC7QdUFA.roa
File: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (raw, json)
Hash identifier: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=
Subject key identifier: 2B:31:DF:8A:20:E0:D8:47:02:C0:A0:26:A6:92:89:0B:B4:1D:50:50
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 0194258F62046744B13BAD604D7CDBEC4E96
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/KzHfiiDg2EcCwKAmppKJC7QdUFA.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206893
IP address blocks: 185.172.228.0/24 maxlen: 24
185.172.229.0/24 maxlen: 24
185.172.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:62:04:67:44:b1:3b:ad:60:4d:7c:db:ec:4e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b31df8a20e0d84702c0a026a692890bb41d5050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:8a:9b:ca:dd:6a:4d:e8:b2:69:0a:7f:ab:
cf:3e:44:71:54:69:a1:03:02:19:18:e0:fe:0a:ea:
89:cc:5e:8e:43:f5:c9:78:fa:a6:15:1c:64:66:21:
c7:c8:ef:63:8d:40:4a:14:76:37:b5:c5:bc:9f:23:
19:46:3c:42:07:6d:89:96:aa:bd:0b:45:eb:4f:ba:
16:ba:89:e9:c6:81:b4:55:43:61:c0:22:ca:bb:fa:
92:11:3d:e9:5d:6f:4f:5b:62:cb:f4:b1:b4:0b:c5:
ec:56:2d:a4:25:66:3d:2b:50:af:3c:1f:e6:95:bc:
9f:49:d1:7a:62:66:fe:cd:9b:a7:7e:fc:94:c7:c1:
6c:75:52:5a:e0:bf:2a:56:4f:0c:02:1b:9f:07:d4:
fd:dc:57:92:86:13:29:21:5c:0a:d0:7b:71:fc:36:
49:99:ea:f2:7d:e5:e5:1d:20:1d:05:e0:6b:85:63:
ac:a6:11:8c:98:cf:e8:8f:57:c2:70:3c:cd:d1:1c:
26:d4:49:94:47:52:04:9d:f5:90:79:e3:02:00:76:
94:2e:8a:6e:5a:21:d2:2e:72:1f:9f:7a:95:dc:28:
82:83:91:10:fd:c6:db:d2:ff:44:43:9c:be:9d:ef:
eb:9e:ef:5b:29:b7:e9:ae:57:14:ec:18:82:e3:28:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:DF:8A:20:E0:D8:47:02:C0:A0:26:A6:92:89:0B:B4:1D:50:50
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/KzHfiiDg2EcCwKAmppKJC7QdUFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.228.0-185.172.230.255
Signature Algorithm: sha256WithRSAEncryption
9e:a0:79:55:17:a2:c1:02:f3:16:eb:19:78:e2:d5:af:f5:ba:
72:26:eb:d9:40:e7:f0:85:d8:d1:1d:68:fd:0b:06:5c:81:0a:
f3:e0:f1:77:84:31:da:43:4e:c1:c2:fe:f5:df:3e:77:61:3f:
0f:93:df:b2:f9:20:04:71:23:11:00:0f:03:44:17:49:ef:15:
88:ab:45:df:e3:33:d5:bd:d3:ed:64:a9:d0:c0:d3:35:1f:ef:
77:b0:79:56:bf:01:59:37:2c:3d:97:5c:4a:15:20:3d:d9:87:
6f:8c:c2:fb:62:4d:3e:0c:41:2e:8d:f9:e9:c3:29:68:71:1e:
0e:ab:f8:80:16:02:bc:c4:b6:de:be:34:01:a8:5e:7c:44:7b:
89:93:3b:48:5a:ac:1c:c0:6a:b1:24:90:1e:30:8d:79:03:db:
29:0f:37:38:33:7b:6f:b4:56:ce:ee:b2:76:56:f6:d0:a6:ed:
b1:f0:39:e8:29:52:72:51:59:9e:a0:bd:63:0c:99:13:fa:3a:
b1:12:f3:60:e0:f0:2d:0c:bc:91:48:19:84:86:0e:bb:28:9d:
dd:ff:e2:78:01:db:c8:d1:0a:88:4a:56:4a:22:83:c5:80:75:
25:f2:ec:3b:df:22:9b:a5:b6:a9:91:e4:c0:6c:56:55:c8:6f:
cb:e0:9c:bd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQlj2IEZ0SxO61gTXzb7E6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4
OWE1YzIwHhcNMjUwMTAyMDU0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjMxZGY4YTIwZTBkODQ3MDJjMGEwMjZhNjkyODkwYmI0MWQ1MDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOWKm8rdak3osmkKf6vPPkRxVGmh
AwIZGOD+CuqJzF6OQ/XJePqmFRxkZiHHyO9jjUBKFHY3tcW8nyMZRjxCB22Jlqq9
C0XrT7oWuonpxoG0VUNhwCLKu/qSET3pXW9PW2LL9LG0C8XsVi2kJWY9K1CvPB/m
lbyfSdF6Ymb+zZunfvyUx8FsdVJa4L8qVk8MAhufB9T93FeShhMpIVwK0Htx/DZJ
meryfeXlHSAdBeBrhWOsphGMmM/oj1fCcDzN0Rwm1EmUR1IEnfWQeeMCAHaULopu
WiHSLnIfn3qV3CiCg5EQ/cbb0v9EQ5y+ne/rnu9bKbfprlcU7BiC4ygkXQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCsx34og4NhHAsCgJqaSiQu0HVBQMB8GA1UdIwQY
MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt
YWIzMDgxYjJhYmE0LzEvS3pIZmlpRGcyRWNDd0tBbXBwS0pDN1FkVUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0
LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5rOQD
BAC5rOYwDQYJKoZIhvcNAQELBQADggEBAJ6geVUXosEC8xbrGXji1a/1unIm69lA
5/CF2NEdaP0LBlyBCvPg8XeEMdpDTsHC/vXfPndhPw+T37L5IARxIxEADwNEF0nv
FYirRd/jM9W90+1kqdDA0zUf73eweVa/AVk3LD2XXEoVID3Zh2+MwvtiTT4MQS6N
+enDKWhxHg6r+IAWArzEtt6+NAGoXnxEe4mTO0harBzAarEkkB4wjXkD2ykPNzgz
e2+0Vs7usnZW9tCm7bHwOegpUnJRWZ6gvWMMmRP6OrES82Dg8C0MvJFIGYSGDrso
nd3/4ngB28jRCohKVkoig8WAdSXy7DvfIpultqmR5MBsVlXIb8vgnL0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net