Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/dGdRoSzRNwwgNuzC_vN0UcbwYUU.roa
File: dGdRoSzRNwwgNuzC_vN0UcbwYUU.roa (raw, json)
Hash identifier: /XUb+pdlOpDTCR9dZFmlTwwxhFVaylZ1nsPCp//W0L4=
Subject key identifier: 74:67:51:A1:2C:D1:37:0C:20:36:EC:C2:FE:F3:74:51:C6:F0:61:45
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 0194252210067F8A4870D0A0D5359751206E
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/dGdRoSzRNwwgNuzC_vN0UcbwYUU.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57568
IP address blocks: 130.185.120.0/22 maxlen: 24
185.204.168.0/22 maxlen: 24
185.235.40.0/22 maxlen: 24
193.24.119.0/24 maxlen: 24
194.5.192.0/23 maxlen: 24
194.5.206.0/23 maxlen: 24
2a0f:94c0:100::/40 maxlen: 40
2a0f:94c0:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:10:06:7f:8a:48:70:d0:a0:d5:35:97:51:20:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746751a12cd1370c2036ecc2fef37451c6f06145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:08:c3:72:b8:2d:54:95:42:a6:dd:06:12:
1d:db:a1:e8:01:2b:16:16:68:aa:87:a6:1e:40:fb:
8a:95:24:4d:4d:9e:ac:37:ab:2c:8d:16:2e:e4:cd:
07:19:eb:48:92:cc:79:19:ec:bc:16:d4:d5:6c:44:
f8:40:3a:61:a8:85:a8:e8:00:cf:b2:1d:86:f3:b8:
bb:5e:bb:ef:4d:7d:20:29:04:4d:4d:75:d9:93:4e:
67:13:a4:1c:5b:5f:9b:3c:e6:74:0e:8c:a9:6d:9a:
3a:eb:87:80:d1:71:a6:9d:a0:bb:1d:2b:7c:80:42:
d1:d3:f1:e6:9b:dc:a3:fb:80:db:eb:ff:f9:e8:4e:
1f:61:ce:0f:57:0e:aa:74:cb:3f:f5:4b:8a:70:ee:
7c:a3:34:c5:8c:d1:7d:0a:b3:9e:7e:79:4b:e4:31:
47:80:7f:5d:c0:ce:ba:c2:f4:d5:31:27:cf:20:06:
7c:c6:e0:41:2e:5b:66:5e:14:db:ea:45:d8:b5:13:
57:63:f7:6b:45:d6:6f:96:ce:bd:25:96:d3:8e:c6:
01:0b:31:0c:3c:60:29:10:9b:6b:db:0c:1e:90:b2:
56:e9:c1:11:dc:6e:e2:fa:a7:31:61:3b:f4:12:ad:
90:1f:51:7e:c6:da:c6:3f:e4:c5:54:29:86:89:76:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:51:A1:2C:D1:37:0C:20:36:EC:C2:FE:F3:74:51:C6:F0:61:45
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/dGdRoSzRNwwgNuzC_vN0UcbwYUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.120.0/22
185.204.168.0/22
185.235.40.0/22
193.24.119.0/24
194.5.192.0/23
194.5.206.0/23
IPv6:
2a0f:94c0:100::-2a0f:94c0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:e4:ea:a7:da:b0:b9:8c:2b:87:35:bb:13:90:d9:02:a1:68:
9c:a2:2c:f7:fb:50:6d:b1:d5:90:b8:0d:5d:9f:6e:f6:4c:96:
51:20:83:0b:19:c8:c9:93:03:2e:6b:a6:4f:99:e2:df:72:6d:
15:8c:e7:fb:98:af:8b:6e:0c:5f:d2:52:b3:93:df:c3:e2:7e:
ef:1c:c8:f1:b0:22:e6:d8:d0:d5:fa:a1:b4:c0:54:91:57:bc:
ec:51:93:04:9b:46:70:37:fd:de:e2:9e:05:e1:68:f3:1b:6c:
95:89:91:df:a3:9f:9a:13:77:03:10:b3:45:8d:a5:27:1e:f8:
c4:36:be:43:4e:27:df:8b:f1:44:78:79:c9:dd:c7:b3:f7:bb:
56:f6:7d:46:db:d9:63:d0:d2:46:a7:ae:1d:95:bd:63:7f:c9:
39:b3:71:66:06:fb:60:b3:50:40:5b:68:c8:cb:ea:85:d1:86:
ac:b4:48:e4:8a:d4:3b:14:d4:5e:15:02:56:b1:00:d6:56:9f:
24:a1:d6:77:bc:41:37:7d:f6:c5:2b:9c:6d:6c:95:78:4f:3d:
1c:3f:d0:ae:d4:5b:dc:ca:89:f9:df:8d:a3:37:0e:9e:34:e9:
2f:2c:26:0b:25:87:d2:dd:bc:76:c2:03:84:05:63:7a:51:37:
f5:2f:8d:0f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZQlIhAGf4pIcNCg1TWXUSBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDU2NWY5OWZmNWUwZmZiNWJkZjk5OTVlZDdhODA4ZDQx
NDA2ZTUwHhcNMjUwMTAyMDM0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDY3NTFhMTJjZDEzNzBjMjAzNmVjYzJmZWYzNzQ1MWM2ZjA2MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm8Iw3K4LVSVQqbdBhId26HoASsW
Fmiqh6YeQPuKlSRNTZ6sN6ssjRYu5M0HGetIksx5Gey8FtTVbET4QDphqIWo6ADP
sh2G87i7XrvvTX0gKQRNTXXZk05nE6QcW1+bPOZ0DoypbZo664eA0XGmnaC7HSt8
gELR0/Hmm9yj+4Db6//56E4fYc4PVw6qdMs/9UuKcO58ozTFjNF9CrOefnlL5DFH
gH9dwM66wvTVMSfPIAZ8xuBBLltmXhTb6kXYtRNXY/drRdZvls69JZbTjsYBCzEM
PGApEJtr2wwekLJW6cER3G7i+qcxYTv0Eq2QH1F+xtrGP+TFVCmGiXat7wIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFHRnUaEs0TcMIDbswv7zdFHG8GFFMB8GA1UdIwQY
MBaAFHnVZfmf9eD/tb35mV7XqAjUFAblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQt
NmMzYjg3NDQzZTA2LzEvZEdkUm9TelJOd3dnTnV6Q192TjBVY2J3WVVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQtNmMzYjg3NDQzZTA2
LzEvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAqBAIAATAkAwQCgrl4AwQC
ucyoAwQCuesoAwQAwRh3AwQBwgXAAwQBwgXOMBgEAgACMBIwEAMGACoPlMABAwYA
Kg+UwAIwDQYJKoZIhvcNAQELBQADggEBAHTk6qfasLmMK4c1uxOQ2QKhaJyiLPf7
UG2x1ZC4DV2fbvZMllEggwsZyMmTAy5rpk+Z4t9ybRWM5/uYr4tuDF/SUrOT38Pi
fu8cyPGwIubY0NX6obTAVJFXvOxRkwSbRnA3/d7ingXhaPMbbJWJkd+jn5oTdwMQ
s0WNpSce+MQ2vkNOJ9+L8UR4ecndx7P3u1b2fUbb2WPQ0kanrh2VvWN/yTmzcWYG
+2CzUEBbaMjL6oXRhqy0SOSK1DsU1F4VAlaxANZWnySh1ne8QTd99sUrnG1slXhP
PRw/0K7UW9zKifnfjaM3Dp406S8sJgslh9LdvHbCA4QFY3pRN/UvjQ8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net