Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/tpwCcvQj5buTsmFRUmHDkFF9loo.roa
File: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (raw, json)
Hash identifier: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=
Subject key identifier: B6:9C:02:72:F4:23:E5:BB:93:B2:61:51:52:61:C3:90:51:7D:96:8A
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 01942823A5D0AF58C0337515E12F76B2B3C3
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/tpwCcvQj5buTsmFRUmHDkFF9loo.roa
Signing time: Thu 02 Jan 2025 17:50:12 +0000
ROA not before: Thu 02 Jan 2025 17:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208374
IP address blocks: 185.215.68.0/24 maxlen: 24
185.215.69.0/24 maxlen: 24
2a0b:880:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a5:d0:af:58:c0:33:75:15:e1:2f:76:b2:b3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Jan 2 17:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b69c0272f423e5bb93b261515261c390517d968a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:d7:5e:f6:3f:90:28:e0:ac:a3:9b:52:2a:
5d:8a:13:af:4f:1b:e6:89:65:aa:a8:5d:27:f7:ea:
01:8b:7f:ba:15:e8:e3:79:c5:78:b4:1a:30:b9:98:
69:a9:ac:0a:23:ee:21:89:64:b4:2c:32:03:2a:ab:
65:b8:42:21:73:8a:18:88:00:ea:08:b8:c0:95:08:
d6:20:88:0d:82:9e:d6:01:ff:c9:19:4b:44:8f:ab:
c6:cc:4e:a7:d5:90:11:a0:03:73:68:87:c8:f8:43:
de:43:e0:d8:70:05:9e:8d:48:3e:90:4a:a4:dd:fc:
d7:c3:d2:16:d0:7d:0d:0c:ae:c6:7e:20:b9:20:bf:
aa:83:c7:95:97:20:d4:5a:70:20:5c:45:a6:ed:52:
54:e6:98:6d:0a:23:5f:f1:c9:02:b3:f1:00:54:12:
cc:6c:72:84:d9:7e:12:6e:c7:b1:83:85:04:ca:a2:
68:e1:df:3e:25:b8:17:1f:da:1e:53:f4:df:a9:61:
1c:6d:54:b1:51:c2:73:17:ee:0a:f4:87:fa:a5:1f:
66:19:6b:d4:62:c6:cd:bc:9b:f7:40:76:1b:37:0e:
c0:ba:8d:a4:b9:65:6a:a2:58:d6:09:9a:71:90:6b:
56:e4:03:1c:38:43:19:84:0a:95:0e:eb:53:f1:b6:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:02:72:F4:23:E5:BB:93:B2:61:51:52:61:C3:90:51:7D:96:8A
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/tpwCcvQj5buTsmFRUmHDkFF9loo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.68.0/23
IPv6:
2a0b:880:f000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:72:e1:a3:92:fa:fa:18:4a:eb:97:2d:bb:18:af:85:ce:35:
e7:fa:c0:4e:5a:ad:a3:52:5d:27:3d:aa:58:cb:fc:1e:e7:f0:
db:f2:e4:f3:7b:a4:4d:c8:48:eb:04:26:ac:ac:24:10:6e:19:
03:2a:c1:87:14:d0:73:3d:a7:e4:4b:97:a1:17:d3:c2:3b:21:
44:ad:ac:81:ee:fc:5e:84:c2:4f:13:90:ba:b6:9a:0f:28:62:
0c:5c:43:17:1c:e1:a2:de:42:84:3e:cf:92:a2:e6:b3:70:3f:
8b:f4:41:2e:cd:c3:3e:1c:b8:5a:27:d5:f6:47:69:da:15:9f:
84:97:20:5f:c5:49:b9:d3:57:54:ea:16:2a:11:22:8f:86:7a:
54:81:17:e3:b9:fa:04:31:cc:d8:bd:b2:9c:60:9c:67:59:8d:
af:46:ce:ac:08:90:75:99:b3:f4:aa:71:a0:a5:cf:b3:a8:ea:
38:04:ab:e6:54:7d:c5:1d:45:c9:0a:81:4a:4a:94:93:f9:27:
25:a5:f2:6e:4b:81:20:a3:7b:49:72:9f:14:1a:dc:73:a0:92:
04:32:a2:d1:13:37:65:77:6c:49:56:6e:68:ba:ac:7f:15:33:
4d:40:9e:f4:41:56:c2:0c:b0:bd:7c:9e:63:d1:49:26:d1:d4:
36:e8:cb:d7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQoI6XQr1jAM3UV4S92srPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTVjYjg2NTg2Y2JmZDI0NjJhZmEwNTJjOTZhMjVjMTYy
ODMwYTgwHhcNMjUwMTAyMTc1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjljMDI3MmY0MjNlNWJiOTNiMjYxNTE1MjYxYzM5MDUxN2Q5NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKLXXvY/kCjgrKObUipdihOvTxvm
iWWqqF0n9+oBi3+6FejjecV4tBowuZhpqawKI+4hiWS0LDIDKqtluEIhc4oYiADq
CLjAlQjWIIgNgp7WAf/JGUtEj6vGzE6n1ZARoANzaIfI+EPeQ+DYcAWejUg+kEqk
3fzXw9IW0H0NDK7GfiC5IL+qg8eVlyDUWnAgXEWm7VJU5phtCiNf8ckCs/EAVBLM
bHKE2X4Sbsexg4UEyqJo4d8+JbgXH9oeU/TfqWEcbVSxUcJzF+4K9If6pR9mGWvU
YsbNvJv3QHYbNw7Auo2kuWVqoljWCZpxkGtW5AMcOEMZhAqVDutT8ba7gQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFLacAnL0I+W7k7JhUVJhw5BRfZaKMB8GA1UdIwQY
MBaAFNaVy4ZYbL/SRir6BSyWolwWKDCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTkt
YTVjZDgxYjVlMDBiLzEvdHB3Q2N2UWo1YnVUc21GUlVtSERrRkY5bG9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZGJmZWItYjJlMi00ODE2LTliYTktYTVjZDgxYjVlMDBi
LzEvMXBYTGhsaHN2OUpHS3ZvRkxKYWlYQllvTUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuddEMA4E
AgACMAgDBgQqCwiA8DANBgkqhkiG9w0BAQsFAAOCAQEAG3Lho5L6+hhK65ctuxiv
hc415/rATlqto1JdJz2qWMv8Hufw2/Lk83ukTchI6wQmrKwkEG4ZAyrBhxTQcz2n
5EuXoRfTwjshRK2sge78XoTCTxOQuraaDyhiDFxDFxzhot5ChD7PkqLms3A/i/RB
Ls3DPhy4WifV9kdp2hWfhJcgX8VJudNXVOoWKhEij4Z6VIEX47n6BDHM2L2ynGCc
Z1mNr0bOrAiQdZmz9KpxoKXPs6jqOASr5lR9xR1FyQqBSkqUk/knJaXybkuBIKN7
SXKfFBrcc6CSBDKi0RM3ZXdsSVZuaLqsfxUzTUCe9EFWwgywvXyeY9FJJtHUNujL
1w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net