Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa
File: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (raw, json)
Hash identifier: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=
Subject key identifier: 34:0C:38:26:99:DD:E4:84:29:4B:F5:8D:DB:E1:9B:4E:68:0A:97:59
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 019428214F4E80EAF51ADB32DA03A0A31025
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa
Signing time: Thu 02 Jan 2025 17:47:39 +0000
ROA not before: Thu 02 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210927
IP address blocks: 185.178.228.0/24 maxlen: 24
185.178.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:4f:4e:80:ea:f5:1a:db:32:da:03:a0:a3:10:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Jan 2 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=340c382699dde484294bf58ddbe19b4e680a9759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:fc:47:7e:76:a5:a9:90:8a:57:ab:12:52:
8c:27:69:47:5b:37:a6:0e:8f:57:76:27:4b:c0:f9:
17:5b:c9:e5:8f:01:b7:11:4e:31:25:11:de:8e:ae:
8c:03:52:b6:5b:cf:df:7f:65:70:04:e5:be:ad:c3:
2c:8e:bc:37:6d:ce:28:24:49:11:72:e5:05:50:a5:
f7:71:7e:e4:ce:11:59:6b:f3:b7:73:6f:2d:52:2d:
1d:5d:e0:a2:cb:24:5b:99:c4:3c:86:88:69:d9:ad:
56:1d:39:aa:23:75:e6:3f:7a:14:44:9d:2c:04:8a:
fa:ad:e1:1e:bd:25:fb:66:47:75:13:36:6e:ec:61:
57:93:ab:33:43:03:4b:e4:0f:59:90:a1:a2:d4:1b:
7f:72:18:46:15:dc:eb:af:0f:9b:5c:07:dc:c9:e1:
18:b3:a5:d4:10:df:8a:76:c8:2f:d4:ef:12:81:ff:
73:80:4f:47:3b:66:31:39:43:1b:5a:57:88:56:75:
db:3d:76:09:50:c2:b8:e4:44:19:23:e8:3f:d7:49:
01:01:9d:63:55:bb:9f:57:a8:ae:3c:68:41:b0:09:
39:d8:2f:c7:80:ce:48:19:f8:04:17:e1:d7:a9:1f:
4a:f0:48:85:b3:22:e1:31:0e:4e:93:7b:f1:4f:42:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0C:38:26:99:DD:E4:84:29:4B:F5:8D:DB:E1:9B:4E:68:0A:97:59
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.228.0/23
Signature Algorithm: sha256WithRSAEncryption
97:21:94:37:e7:7c:9f:17:00:dd:43:6a:09:bd:e3:c8:a0:07:
36:f5:b8:e8:d6:7b:82:c1:8c:95:f9:69:0a:bd:be:8f:a6:60:
26:a1:80:83:1d:6b:64:c3:28:fc:9a:b5:57:78:87:8a:cb:ff:
cf:6e:88:eb:4a:c8:9f:24:8a:e4:c8:44:8f:ec:4f:8a:e5:67:
9c:36:68:d1:03:89:04:ac:ed:52:59:f8:e8:d0:7c:b0:e8:04:
66:85:3c:fb:f3:a5:c3:5c:45:d9:d7:21:ed:42:5b:a5:2a:12:
0d:7d:23:cc:16:5d:c6:87:84:d4:95:c5:39:0f:ca:37:38:55:
fb:6f:60:33:5c:cb:a9:02:13:e4:e5:b2:e6:86:e8:13:7a:04:
0b:fa:af:be:2b:b8:1e:0c:b4:ee:79:55:fe:16:9f:ec:02:7b:
ac:ce:ed:0b:64:88:2f:42:3f:95:a0:04:31:a6:09:13:26:f7:
8c:9a:63:6c:17:a2:c4:c0:b1:3b:53:7f:4c:6c:92:bf:02:04:
8e:17:b2:6e:99:97:a9:a4:5b:f6:ed:b0:a7:98:80:aa:d7:e7:
c3:a0:7e:08:a1:05:e2:b6:04:56:69:cd:92:44:b3:ce:e4:67:
b8:53:7f:a8:e4:87:d9:f2:a4:fa:e0:6b:19:05:88:5c:1f:64:
c9:c0:94:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoIU9OgOr1Gtsy2gOgoxAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0
Y2IxNzEwHhcNMjUwMTAyMTc0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDBjMzgyNjk5ZGRlNDg0Mjk0YmY1OGRkYmUxOWI0ZTY4MGE5NzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB38R352pamQilerElKMJ2lHWzem
Do9XdidLwPkXW8nljwG3EU4xJRHejq6MA1K2W8/ff2VwBOW+rcMsjrw3bc4oJEkR
cuUFUKX3cX7kzhFZa/O3c28tUi0dXeCiyyRbmcQ8hohp2a1WHTmqI3XmP3oURJ0s
BIr6reEevSX7Zkd1EzZu7GFXk6szQwNL5A9ZkKGi1Bt/chhGFdzrrw+bXAfcyeEY
s6XUEN+Kdsgv1O8Sgf9zgE9HO2YxOUMbWleIVnXbPXYJUMK45EQZI+g/10kBAZ1j
VbufV6iuPGhBsAk52C/HgM5IGfgEF+HXqR9K8EiFsyLhMQ5Ok3vxT0LVpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQMOCaZ3eSEKUv1jdvhm05oCpdZMB8GA1UdIwQY
MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt
MTI2Y2UwODE1MjlhLzEvTkF3NEpwbmQ1SVFwU19XTjItR2JUbWdLbDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh
LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubLkMA0G
CSqGSIb3DQEBCwUAA4IBAQCXIZQ353yfFwDdQ2oJvePIoAc29bjo1nuCwYyV+WkK
vb6PpmAmoYCDHWtkwyj8mrVXeIeKy//PbojrSsifJIrkyESP7E+K5WecNmjRA4kE
rO1SWfjo0Hyw6ARmhTz786XDXEXZ1yHtQlulKhINfSPMFl3Gh4TUlcU5D8o3OFX7
b2AzXMupAhPk5bLmhugTegQL+q++K7geDLTueVX+Fp/sAnuszu0LZIgvQj+VoAQx
pgkTJveMmmNsF6LEwLE7U39MbJK/AgSOF7JumZeppFv27bCnmICq1+fDoH4IoQXi
tgRWac2SRLPO5Ge4U3+o5IfZ8qT64GsZBYhcH2TJwJRV
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net