Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/TvTxBLGF9a81RGikK2pVw5Qclrk.roa
File: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (raw, json)
Hash identifier: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=
Subject key identifier: 4E:F4:F1:04:B1:85:F5:AF:35:44:68:A4:2B:6A:55:C3:94:1C:96:B9
Certificate issuer: /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial: 01941F8C2EDC6056665AA54BF5DDBC163690
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/TvTxBLGF9a81RGikK2pVw5Qclrk.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203299
IP address blocks: 185.135.20.0/24 maxlen: 24
185.135.23.0/24 maxlen: 24
2a06:f080::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2e:dc:60:56:66:5a:a5:4b:f5:dd:bc:16:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ef4f104b185f5af354468a42b6a55c3941c96b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:02:a1:e6:73:1e:c3:c9:06:8e:39:ee:be:
28:91:ef:15:d4:c9:05:9a:97:4e:75:c7:c0:4b:0a:
c5:a5:34:4b:1a:e1:da:06:e0:bb:cb:34:c2:9c:89:
65:0a:f4:1e:14:5c:46:64:83:5b:fe:16:88:9c:9d:
b5:71:d1:f2:6c:e4:89:a1:fc:c0:c5:6c:f9:a0:14:
b7:9a:cb:5b:6f:62:bf:d4:d1:f4:b6:94:e8:28:ee:
ef:e3:aa:25:70:d5:c3:b3:10:23:c4:be:17:0f:89:
5c:a8:45:f1:57:77:fe:ee:a6:75:9f:a1:0c:a0:ca:
4c:ab:de:4b:51:5f:08:27:27:53:a6:6b:c4:b0:b8:
8d:8d:38:7a:74:02:45:24:20:bc:e8:0c:f0:1c:1d:
da:a6:c9:3b:81:0e:87:c8:10:af:a9:1a:5c:68:ea:
b5:06:02:0d:25:d7:23:21:1b:ab:f0:76:fb:00:a8:
65:e2:d9:64:80:4b:63:74:4f:c1:42:14:03:0e:14:
12:80:fc:f3:42:76:b7:29:3f:35:df:d3:9e:a5:3a:
cf:60:00:13:89:b8:7e:2c:e5:24:4d:f3:09:0d:58:
86:e7:09:7e:16:4f:97:52:5d:dc:bd:25:a1:0f:d0:
c5:eb:b3:cf:0a:5e:7e:f6:e3:f1:ac:98:76:7f:b0:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:F1:04:B1:85:F5:AF:35:44:68:A4:2B:6A:55:C3:94:1C:96:B9
X509v3 Authority Key Identifier:
keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/TvTxBLGF9a81RGikK2pVw5Qclrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.20.0/24
185.135.23.0/24
IPv6:
2a06:f080::/32
Signature Algorithm: sha256WithRSAEncryption
71:15:79:b6:a0:a3:86:98:03:a0:64:3f:ef:00:e3:71:5f:5e:
45:40:f6:9d:64:5e:88:e8:2b:ad:6e:f8:4a:87:e4:e6:d7:d3:
53:c1:2c:22:53:5c:c1:10:ec:bd:7e:cf:11:0f:b1:92:36:12:
ce:e3:a6:e4:b5:98:bb:75:82:28:e8:87:f8:39:cd:90:00:a2:
ba:2d:cd:5a:bb:e4:c9:b0:48:db:49:ae:b3:61:69:1b:20:e4:
b5:30:fd:b8:55:36:48:fa:41:aa:76:6c:07:11:6f:e4:32:c6:
f4:8f:e6:22:61:31:7b:cd:f8:c0:8a:6d:c4:13:90:41:52:c1:
84:f3:8a:e8:6e:49:5d:ff:a7:97:0a:7a:7e:bd:54:03:03:69:
e9:53:21:c5:d3:c0:17:d2:e4:2e:31:fd:0c:af:ad:b1:ba:c8:
7c:94:94:20:8b:16:4f:38:16:8f:ee:1d:a2:47:fd:7f:45:59:
8d:ce:64:75:76:e9:8b:67:e4:b0:6a:86:56:60:bf:dc:ac:04:
45:96:3f:1c:c4:ae:a8:5c:86:e5:f5:15:06:79:a1:b7:72:02:
ee:de:4b:18:60:08:f5:8a:a5:ab:cf:f0:94:f8:69:ba:9e:08:
e4:6f:4f:52:c9:d4:51:bc:f3:de:8b:d5:64:96:74:6b:d5:3c:
8c:5a:c5:b6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQfjC7cYFZmWqVL9d28FjaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDZmYTFkNzc5YzE5NmNlYjI4MDI5MTA2YjRlZjdkMTc1
NTNkMmIwHhcNMjUwMTAxMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWY0ZjEwNGIxODVmNWFmMzU0NDY4YTQyYjZhNTVjMzk0MWM5NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjMCoeZzHsPJBo457r4oke8V1MkF
mpdOdcfASwrFpTRLGuHaBuC7yzTCnIllCvQeFFxGZINb/haInJ21cdHybOSJofzA
xWz5oBS3mstbb2K/1NH0tpToKO7v46olcNXDsxAjxL4XD4lcqEXxV3f+7qZ1n6EM
oMpMq95LUV8IJydTpmvEsLiNjTh6dAJFJCC86AzwHB3apsk7gQ6HyBCvqRpcaOq1
BgINJdcjIRur8Hb7AKhl4tlkgEtjdE/BQhQDDhQSgPzzQna3KT8139OepTrPYAAT
ibh+LOUkTfMJDViG5wl+Fk+XUl3cvSWhD9DF67PPCl5+9uPxrJh2f7AlRwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFE708QSxhfWvNURopCtqVcOUHJa5MB8GA1UdIwQY
MBaAFD5G+h13nBls6ygCkQa0730XVT0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtiNkhYZWNHV3pyS0FLUkJyVHZmUmRWUFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wM2NiMzEtNjJmMi00OGM3LTliN2Yt
MGNkMWQyODk2NWQxLzEvVHZUeEJMR0Y5YTgxUkdpa0sycFZ3NVFjbHJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8wM2NiMzEtNjJmMi00OGM3LTliN2YtMGNkMWQyODk2NWQx
LzEvUGtiNkhYZWNHV3pyS0FLUkJyVHZmUmRWUFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuYcUAwQA
uYcXMA0EAgACMAcDBQAqBvCAMA0GCSqGSIb3DQEBCwUAA4IBAQBxFXm2oKOGmAOg
ZD/vAONxX15FQPadZF6I6CutbvhKh+Tm19NTwSwiU1zBEOy9fs8RD7GSNhLO46bk
tZi7dYIo6If4Oc2QAKK6Lc1au+TJsEjbSa6zYWkbIOS1MP24VTZI+kGqdmwHEW/k
Msb0j+YiYTF7zfjAim3EE5BBUsGE84robkld/6eXCnp+vVQDA2npUyHF08AX0uQu
Mf0Mr62xush8lJQgixZPOBaP7h2iR/1/RVmNzmR1dumLZ+SwaoZWYL/crARFlj8c
xK6oXIbl9RUGeaG3cgLu3ksYYAj1iqWrz/CU+Gm6ngjkb09SydRRvPPei9VklnRr
1TyMWsW2
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net