Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/xR8xED9U8VqfE8a-nFMwQ6bBH9U.roa
File: xR8xED9U8VqfE8a-nFMwQ6bBH9U.roa (raw, json)
Hash identifier: 592+gyP1CdCtREDz1B9taXXAe3MCqzO7w4kjNqsob5Y=
Subject key identifier: C5:1F:31:10:3F:54:F1:5A:9F:13:C6:BE:9C:53:30:43:A6:C1:1F:D5
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 019420D62D02AFC95848C97CF5D8E47F51B3
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/xR8xED9U8VqfE8a-nFMwQ6bBH9U.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204834
IP address blocks: 185.237.84.0/24 maxlen: 24
185.237.86.0/23 maxlen: 23
185.237.86.0/24 maxlen: 24
185.237.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2d:02:af:c9:58:48:c9:7c:f5:d8:e4:7f:51:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c51f31103f54f15a9f13c6be9c533043a6c11fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:a1:07:a6:cb:eb:b5:5b:e7:78:1b:5f:02:
0e:6b:32:e3:ac:25:b5:40:59:27:ec:d1:b0:0f:af:
e9:ae:e2:fb:e8:70:c1:99:5f:bb:ea:4d:fd:40:4c:
a9:8d:95:5b:b2:5a:a9:5a:8e:e6:67:6c:39:08:ee:
c4:c4:2f:65:56:cf:6b:77:8a:45:a1:dd:7b:c9:ec:
2f:71:36:fe:65:dd:68:6b:d3:6b:b5:53:4d:b3:4e:
7d:7b:00:7a:c1:a8:00:4b:71:4a:db:ff:69:a7:f5:
78:5c:4f:ce:e0:d8:88:2d:9f:31:30:c3:0d:0a:9c:
a9:9e:69:0e:d1:cf:b1:90:54:f2:c3:2e:f3:cf:5d:
13:04:20:8d:1f:1f:00:7f:a2:30:0f:c8:74:f8:c8:
31:e0:06:82:94:ed:5f:bb:7c:8a:7d:3d:aa:b6:92:
35:bb:d9:34:15:7c:1a:43:db:2d:bd:6e:1d:b9:4f:
bc:a4:85:98:27:11:70:62:c5:ae:d2:65:3f:a9:3a:
56:da:8a:b3:c2:46:a8:8a:3b:77:57:df:d7:ef:14:
3c:b8:bb:ad:e2:d6:ce:4d:b0:41:86:c8:1d:20:4b:
90:d3:bf:01:b7:00:19:af:11:60:23:92:41:f7:0f:
e4:ee:3b:e8:2b:c1:47:f6:4f:3b:da:20:01:55:d9:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:31:10:3F:54:F1:5A:9F:13:C6:BE:9C:53:30:43:A6:C1:1F:D5
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/xR8xED9U8VqfE8a-nFMwQ6bBH9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.84.0/24
185.237.86.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:61:69:28:ab:56:7c:13:d9:7d:3c:62:5d:b3:63:d9:4b:ee:
c5:ef:b6:7e:7b:c6:ef:e0:ea:1b:df:ea:44:80:d5:6a:9e:3b:
38:3b:f5:f9:44:b9:a5:2d:17:01:0b:cf:19:ab:90:52:1c:9c:
35:74:ad:a5:9d:a7:09:3a:c7:77:bb:bd:3b:aa:f9:2e:4a:69:
b6:33:a9:ad:f0:df:0a:e7:9a:3c:91:bb:33:50:d5:11:16:a6:
51:a2:7c:27:af:32:8e:42:40:18:15:de:58:32:f9:76:af:0f:
6e:a0:af:cf:01:ed:18:9e:a4:9a:72:3f:5f:4c:27:ff:4b:78:
83:8a:c8:5b:a1:d7:a9:e0:3b:1f:ec:c9:19:6a:07:af:68:60:
a7:c4:b5:d5:43:26:02:02:e9:0f:fc:31:66:41:ce:54:6e:3e:
0c:5f:88:98:b2:3f:2d:d1:5f:bf:2e:3e:06:62:4c:71:d4:1d:
ce:fc:41:72:d1:2e:eb:49:2d:4b:ea:f3:09:67:b2:57:73:10:
6e:2c:59:5e:d3:2e:03:bc:fd:ce:d1:4f:2e:e8:32:b5:cf:4d:
0c:7e:55:df:83:2a:1f:25:76:96:9d:ea:57:36:99:74:0e:3d:
c8:23:2e:f5:65:b5:50:82:11:dc:45:dd:27:c5:90:40:7e:6e:
89:e6:90:5e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQg1i0Cr8lYSMl89djkf1GzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy
OWQ2MjQwHhcNMjUwMTAxMDc0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTFmMzExMDNmNTRmMTVhOWYxM2M2YmU5YzUzMzA0M2E2YzExZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl22hB6bL67Vb53gbXwIOazLjrCW1
QFkn7NGwD6/pruL76HDBmV+76k39QEypjZVbslqpWo7mZ2w5CO7ExC9lVs9rd4pF
od17yewvcTb+Zd1oa9NrtVNNs059ewB6wagAS3FK2/9pp/V4XE/O4NiILZ8xMMMN
CpypnmkO0c+xkFTywy7zz10TBCCNHx8Af6IwD8h0+Mgx4AaClO1fu3yKfT2qtpI1
u9k0FXwaQ9stvW4duU+8pIWYJxFwYsWu0mU/qTpW2oqzwkaoijt3V9/X7xQ8uLut
4tbOTbBBhsgdIEuQ078BtwAZrxFgI5JB9w/k7jvoK8FH9k872iABVdl6TQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMUfMRA/VPFanxPGvpxTMEOmwR/VMB8GA1UdIwQY
MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx
LTZmMjA3OTUxYzRiMi8xL3hSOHhFRDlVOFZxZkU4YS1uRk13UTZiQkg5VS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYxLTZmMjA3OTUxYzRi
Mi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC57VQD
BAG57VYwDQYJKoZIhvcNAQELBQADggEBAA9haSirVnwT2X08Yl2zY9lL7sXvtn57
xu/g6hvf6kSA1WqeOzg79flEuaUtFwELzxmrkFIcnDV0raWdpwk6x3e7vTuq+S5K
abYzqa3w3wrnmjyRuzNQ1REWplGifCevMo5CQBgV3lgy+XavD26gr88B7RiepJpy
P19MJ/9LeIOKyFuh16ngOx/syRlqB69oYKfEtdVDJgIC6Q/8MWZBzlRuPgxfiJiy
Py3RX78uPgZiTHHUHc78QXLRLutJLUvq8wlnsldzEG4sWV7TLgO8/c7RTy7oMrXP
TQx+Vd+DKh8ldpad6lc2mXQOPcgjLvVltVCCEdxF3SfFkEB+bonmkF4=
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:04 2025 by rpki-client on console.sobornost.net