Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa
File: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (raw, json)
Hash identifier: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=
Subject key identifier: 17:EA:8C:66:CA:D8:16:E5:AC:DE:6A:B1:56:EC:B9:51:CF:D0:6A:32
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019424B39F4E61669808C5D4F53AF4F8B3A9
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48492
IP address blocks: 185.56.192.0/22 maxlen: 22
185.56.192.0/24 maxlen: 24
185.56.193.0/24 maxlen: 24
185.56.194.0/24 maxlen: 24
185.56.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9f:4e:61:66:98:08:c5:d4:f5:3a:f4:f8:b3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17ea8c66cad816e5acde6ab156ecb951cfd06a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:f6:dc:f1:97:75:39:c5:5b:f4:a4:38:d8:
81:f2:b9:fc:99:69:7d:3f:56:4b:80:a3:59:68:4d:
a9:02:bc:dd:f7:02:09:76:37:17:5c:87:2a:6b:df:
1d:b1:e4:e4:1c:9a:79:36:cc:aa:55:eb:b4:f1:74:
c1:1d:dd:2c:fb:c4:61:af:4d:3c:f1:46:e4:d1:ce:
dd:23:ad:22:3d:fe:69:8a:ac:5a:0d:c1:e4:3e:a1:
8c:f1:f4:e5:1a:fd:27:d0:12:c4:28:bb:a7:40:0e:
08:5a:a0:9d:8d:e5:c4:40:39:72:65:67:ac:a8:a3:
00:d8:3f:9c:3e:cb:79:8a:eb:dc:42:ff:c3:ed:7a:
db:fd:80:bb:4a:ae:0f:a7:ec:ab:d5:93:cc:ae:15:
1c:e1:fb:03:98:f6:d7:1a:5d:63:f3:9d:cc:3b:65:
a2:0b:ad:26:8e:c5:34:b3:9d:08:9a:f4:dd:0e:b4:
45:60:3c:71:8c:61:98:dc:dd:ce:e0:67:ee:9c:10:
fc:60:45:14:10:93:1d:9b:db:e7:b5:ef:3b:57:31:
c6:32:00:73:1b:15:21:5a:db:de:8f:43:85:cb:d7:
8e:cb:95:ff:10:1d:0f:ee:1b:90:5b:a5:84:30:19:
c1:fa:3e:89:7f:d6:e3:60:cc:2a:6a:5f:74:04:a8:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:8C:66:CA:D8:16:E5:AC:DE:6A:B1:56:EC:B9:51:CF:D0:6A:32
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:c3:81:04:db:30:b8:09:a5:a6:e8:23:e6:72:2e:b1:b1:4e:
f4:89:4f:41:0f:df:4e:e3:00:33:07:15:ac:c5:dc:56:ca:f6:
a4:80:36:5f:6c:3e:e2:58:c6:f3:97:2c:c7:c9:22:5a:93:55:
70:11:13:a8:1f:bd:0d:0d:7e:3a:07:3b:3f:26:d5:4d:02:62:
44:cc:6e:14:c8:bc:38:36:1c:84:fd:a4:84:93:98:54:f1:36:
16:28:b6:88:08:fb:9f:2d:0a:f0:12:a8:1d:c2:e2:81:43:32:
6c:b1:8e:5c:62:ed:b9:9f:9e:f2:3e:92:78:54:60:1f:ce:7d:
54:b4:88:df:a8:e8:4d:2c:d9:97:97:07:08:f6:5a:d2:32:a0:
fc:f2:1f:c8:54:f4:c3:76:da:34:55:5f:68:70:b4:ad:79:54:
ca:d7:93:68:12:3d:2c:74:c7:1f:4a:c9:27:74:b4:40:01:9e:
b2:2b:ba:e5:b0:9b:3e:9e:8f:23:fc:99:c3:71:bd:44:0f:7f:
9f:cb:64:e7:c8:aa:b2:9f:83:89:75:56:74:72:ea:72:04:56:
f4:65:58:5a:1b:a3:44:a8:47:72:c3:76:10:6c:93:e1:de:d4:
b7:7d:3b:7c:70:67:e4:9a:ce:58:d6:09:ed:5a:b1:cc:69:a6:
84:50:24:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks59OYWaYCMXU9Tr0+LOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzFkZGVmMjVkOTZjODRiMDAxYTJhYzUwNDdiMDRlMDYw
YTBhYzMwHhcNMjUwMTAyMDE0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2VhOGM2NmNhZDgxNmU1YWNkZTZhYjE1NmVjYjk1MWNmZDA2YTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsn23PGXdTnFW/SkONiB8rn8mWl9
P1ZLgKNZaE2pArzd9wIJdjcXXIcqa98dseTkHJp5NsyqVeu08XTBHd0s+8Rhr008
8Ubk0c7dI60iPf5piqxaDcHkPqGM8fTlGv0n0BLEKLunQA4IWqCdjeXEQDlyZWes
qKMA2D+cPst5iuvcQv/D7Xrb/YC7Sq4Pp+yr1ZPMrhUc4fsDmPbXGl1j853MO2Wi
C60mjsU0s50ImvTdDrRFYDxxjGGY3N3O4GfunBD8YEUUEJMdm9vnte87VzHGMgBz
GxUhWtvej0OFy9eOy5X/EB0P7huQW6WEMBnB+j6Jf9bjYMwqal90BKjwNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBfqjGbK2BblrN5qsVbsuVHP0GoyMB8GA1UdIwQY
MBaAFP4x3e8l2WyEsAGirFBHsE4GCgrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUt
YjRkOGMyYjdhMTAzLzEvRi1xTVpzcllGdVdzM21xeFZ1eTVVY19RYWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUtYjRkOGMyYjdhMTAz
LzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTjAMA0G
CSqGSIb3DQEBCwUAA4IBAQCkw4EE2zC4CaWm6CPmci6xsU70iU9BD99O4wAzBxWs
xdxWyvakgDZfbD7iWMbzlyzHySJak1VwEROoH70NDX46Bzs/JtVNAmJEzG4UyLw4
NhyE/aSEk5hU8TYWKLaICPufLQrwEqgdwuKBQzJssY5cYu25n57yPpJ4VGAfzn1U
tIjfqOhNLNmXlwcI9lrSMqD88h/IVPTDdto0VV9ocLSteVTK15NoEj0sdMcfSskn
dLRAAZ6yK7rlsJs+no8j/JnDcb1ED3+fy2TnyKqyn4OJdVZ0cupyBFb0ZVhaG6NE
qEdyw3YQbJPh3tS3fTt8cGfkms5Y1gntWrHMaaaEUCRZ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net