Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/mDj0VP-jqiKwJjt-lOQdn-slpWo.roa
File: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (raw, json)
Hash identifier: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=
Subject key identifier: 98:38:F4:54:FF:A3:AA:22:B0:26:3B:7E:94:E4:1D:9F:EB:25:A5:6A
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 019425FDD0678F6BF6F470DA14B44B28E1B8
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/mDj0VP-jqiKwJjt-lOQdn-slpWo.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64434
IP address blocks: 185.165.28.0/24 maxlen: 24
185.165.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d0:67:8f:6b:f6:f4:70:da:14:b4:4b:28:e1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9838f454ffa3aa22b0263b7e94e41d9feb25a56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e0:1a:15:c4:6e:65:35:90:35:a7:35:ce:b1:
a2:51:59:f9:86:b8:15:98:49:6c:ed:85:22:a6:ad:
7c:a4:1e:b9:be:6d:9c:f7:5d:c2:3a:56:84:2e:29:
9b:42:01:65:3f:51:3c:93:10:5d:93:86:d3:8b:a3:
73:ad:e9:ab:08:f5:f5:0b:7f:f3:47:19:e7:f3:f3:
f8:7c:dd:19:98:4e:b9:14:38:ce:56:18:78:d3:2a:
d8:eb:02:86:d7:c4:6f:f0:49:95:6f:90:36:ca:c8:
f7:18:73:84:92:99:33:d6:9e:02:1a:92:f7:50:95:
26:38:5f:e3:53:c9:20:12:f1:68:75:ef:32:62:e0:
d5:09:ff:24:62:ec:95:72:e6:0a:b2:2c:00:04:08:
d9:1a:1b:d5:7c:a6:fd:83:94:80:10:93:6c:c1:3a:
6d:9c:6b:46:4e:60:71:24:a8:85:1a:f1:5b:1a:d8:
06:4f:ea:c6:23:d4:f6:29:2f:6a:f8:f0:79:20:a7:
01:cf:c9:66:f2:d8:51:51:52:5a:40:22:80:69:a3:
af:e7:78:0e:12:e2:67:a0:ce:81:50:78:4a:b3:b8:
d3:5a:60:02:ec:37:bd:23:f6:b2:e3:e3:4e:64:66:
9f:97:ae:b0:38:13:bc:67:11:69:97:94:e6:49:d1:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:F4:54:FF:A3:AA:22:B0:26:3B:7E:94:E4:1D:9F:EB:25:A5:6A
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/mDj0VP-jqiKwJjt-lOQdn-slpWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.28.0/24
185.165.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:35:ef:d6:42:60:ef:4a:4b:e1:77:d9:8e:54:78:1c:77:30:
18:ec:d6:07:20:d9:74:03:23:5c:20:7e:85:fe:0f:96:5c:ec:
f6:12:f4:66:9e:97:b1:12:8f:ca:6d:e9:52:55:ef:5b:48:c7:
fe:ce:e3:02:db:49:f5:65:33:7c:c0:e7:c4:a1:06:ef:52:e8:
6f:6a:02:e6:5f:24:ef:74:24:7e:0b:a9:d0:3c:45:8d:47:1f:
86:b0:1b:42:58:29:63:69:dc:6e:ec:c4:78:cc:92:95:8c:27:
94:6e:c5:d5:fe:86:cd:9e:dc:24:45:08:44:75:02:ed:4e:8e:
aa:fd:63:38:24:59:ee:a8:db:6e:5e:2e:5d:b7:5d:a9:6a:2d:
98:2c:5d:ac:97:3f:21:c4:63:c4:47:50:50:28:0a:25:69:eb:
9c:9e:96:ca:77:34:ed:7c:0c:02:ea:d5:0c:08:42:ad:3b:cf:
44:f1:84:00:93:2d:13:a7:f9:bb:bc:68:15:c0:5f:a8:79:c2:
82:7c:af:62:e3:2e:d2:02:5d:b2:8f:10:e8:47:b2:dc:59:83:
56:9c:c2:a8:c4:dd:16:39:62:e0:14:cb:a0:d2:f5:62:2e:3a:
30:fc:78:f9:d2:46:e0:63:a0:ae:16:12:c6:89:69:ae:88:08:
97:92:2a:94
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/dBnj2v29HDaFLRLKOG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjUxMzQyZTA1ZDU4YjNiN2ZjOTNhMTVjYmExZWI3MWU1
NDIzODUwHhcNMjUwMTAyMDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODM4ZjQ1NGZmYTNhYTIyYjAyNjNiN2U5NGU0MWQ5ZmViMjVhNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOAaFcRuZTWQNac1zrGiUVn5hrgV
mEls7YUipq18pB65vm2c913COlaELimbQgFlP1E8kxBdk4bTi6NzremrCPX1C3/z
Rxnn8/P4fN0ZmE65FDjOVhh40yrY6wKG18Rv8EmVb5A2ysj3GHOEkpkz1p4CGpL3
UJUmOF/jU8kgEvFode8yYuDVCf8kYuyVcuYKsiwABAjZGhvVfKb9g5SAEJNswTpt
nGtGTmBxJKiFGvFbGtgGT+rGI9T2KS9q+PB5IKcBz8lm8thRUVJaQCKAaaOv53gO
EuJnoM6BUHhKs7jTWmAC7De9I/ay4+NOZGafl66wOBO8ZxFpl5TmSdGjeQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJg49FT/o6oisCY7fpTkHZ/rJaVqMB8GA1UdIwQY
MBaAFEElE0LgXVizt/yToVy6HrceVCOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGIt
YzM2NjhiNTAzYTFjLzEvbURqMFZQLWpxaUt3Smp0LWxPUWRuLXNscFdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGItYzM2NjhiNTAzYTFj
LzEvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaUcAwQA
uaUeMA0GCSqGSIb3DQEBCwUAA4IBAQBuNe/WQmDvSkvhd9mOVHgcdzAY7NYHINl0
AyNcIH6F/g+WXOz2EvRmnpexEo/KbelSVe9bSMf+zuMC20n1ZTN8wOfEoQbvUuhv
agLmXyTvdCR+C6nQPEWNRx+GsBtCWCljadxu7MR4zJKVjCeUbsXV/obNntwkRQhE
dQLtTo6q/WM4JFnuqNtuXi5dt12pai2YLF2slz8hxGPER1BQKAolaeucnpbKdzTt
fAwC6tUMCEKtO89E8YQAky0Tp/m7vGgVwF+oecKCfK9i4y7SAl2yjxDoR7LcWYNW
nMKoxN0WOWLgFMug0vViLjow/Hj50kbgY6CuFhLGiWmuiAiXkiqU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net