Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/bOtx3oGsVyYZ8WK4Oba37RiXn-E.roa
File: bOtx3oGsVyYZ8WK4Oba37RiXn-E.roa (raw, json)
Hash identifier: rpFOpP9ETvmJ5tdp+YEjStfm20gh+Ag3eew0mJpJc8w=
Subject key identifier: 6C:EB:71:DE:81:AC:57:26:19:F1:62:B8:39:B6:B7:ED:18:97:9F:E1
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019423698380BB9AAABD1CD1FCEE6B5396DF
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/bOtx3oGsVyYZ8WK4Oba37RiXn-E.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49127
IP address blocks: 185.219.6.0/24 maxlen: 24
193.37.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:83:80:bb:9a:aa:bd:1c:d1:fc:ee:6b:53:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ceb71de81ac572619f162b839b6b7ed18979fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:81:e6:83:05:da:90:97:5e:2d:61:ea:1c:
27:d2:27:d2:1d:fb:78:b9:9c:ce:a1:f7:6e:20:6e:
dd:cd:5d:d0:ce:e8:28:4d:c5:b1:3c:2e:26:33:1a:
a9:c8:d2:7b:4c:56:10:f8:4a:50:eb:56:ae:7c:e2:
d9:d5:dc:26:78:ea:99:7f:21:e5:94:8b:04:d7:03:
3a:67:ae:cc:f4:33:af:2a:ba:8b:67:f9:d1:00:bf:
73:7b:a0:65:95:a8:87:ee:00:f5:d1:04:74:7a:cc:
c3:06:dc:e6:7a:25:b4:7b:9f:5f:60:1a:34:b0:50:
68:5e:42:82:f6:ec:bd:d9:c5:07:d2:76:ba:35:55:
1f:89:fd:1c:1a:be:f8:07:94:88:94:a5:b9:85:7f:
01:30:1e:cc:05:1f:e5:f0:35:21:2f:fd:d9:a0:04:
9e:f3:03:07:06:44:c1:98:32:80:da:00:aa:32:eb:
81:7b:d1:32:10:64:eb:6c:2c:0b:a2:78:cc:8d:7b:
d0:34:81:1a:ee:16:04:68:42:98:cc:76:d6:ca:3b:
35:38:6b:f3:3c:10:98:bb:d2:8d:3c:0b:57:ff:bb:
ae:c0:81:82:68:04:95:2c:a4:44:bb:b0:e6:76:bd:
71:91:92:e6:c8:c5:13:be:18:72:b1:2d:8e:2d:89:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:71:DE:81:AC:57:26:19:F1:62:B8:39:B6:B7:ED:18:97:9F:E1
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/bOtx3oGsVyYZ8WK4Oba37RiXn-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.6.0/24
193.37.216.0/22
Signature Algorithm: sha256WithRSAEncryption
40:bd:cf:6e:37:74:58:ef:f8:5d:87:9b:56:01:5a:c3:b4:61:
ff:b0:a7:f6:85:e7:27:c1:4c:b4:b4:d1:15:a6:0c:32:c1:12:
60:64:72:75:7b:2c:35:29:1c:75:a9:f6:d2:b9:5c:3d:bc:e0:
7f:de:89:30:f6:e4:85:fd:ff:70:5e:b0:fd:9b:7e:b3:05:c5:
d3:5c:ce:ad:74:a1:8a:f8:95:62:c0:07:24:d5:d5:bc:cf:27:
33:e3:ec:5c:ec:c8:f8:d6:d3:fe:c6:f5:0d:6f:68:a2:10:9b:
2a:bd:5b:0a:e9:9a:54:d5:f0:a7:38:83:d4:c6:53:91:78:c1:
d5:b9:8a:ea:02:da:6b:82:6e:ce:5b:6e:8a:77:ab:27:29:34:
8e:89:f3:09:60:ad:67:57:bc:b8:81:9b:90:3c:7a:48:10:03:
c0:0e:aa:42:c1:92:28:04:78:b5:b1:db:b4:0a:89:76:fe:ac:
06:27:3a:78:2b:a7:bb:8e:54:45:58:1d:1a:81:14:49:88:77:
b6:3f:5a:e0:0b:c4:d2:ad:84:ed:93:9f:bf:37:1c:ee:41:22:
74:49:60:81:44:ca:1a:dc:51:b1:eb:3c:df:23:42:31:89:da:
bf:ea:69:4f:29:f7:24:f4:26:c3:e4:ce:a3:68:f7:83:d4:b0:
c4:d6:4b:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjaYOAu5qqvRzR/O5rU5bfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjUwMTAxMTk0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2ViNzFkZTgxYWM1NzI2MTlmMTYyYjgzOWI2YjdlZDE4OTc5ZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4eB5oMF2pCXXi1h6hwn0ifSHft4
uZzOofduIG7dzV3QzugoTcWxPC4mMxqpyNJ7TFYQ+EpQ61aufOLZ1dwmeOqZfyHl
lIsE1wM6Z67M9DOvKrqLZ/nRAL9ze6BllaiH7gD10QR0eszDBtzmeiW0e59fYBo0
sFBoXkKC9uy92cUH0na6NVUfif0cGr74B5SIlKW5hX8BMB7MBR/l8DUhL/3ZoASe
8wMHBkTBmDKA2gCqMuuBe9EyEGTrbCwLonjMjXvQNIEa7hYEaEKYzHbWyjs1OGvz
PBCYu9KNPAtX/7uuwIGCaASVLKREu7Dmdr1xkZLmyMUTvhhysS2OLYm71QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGzrcd6BrFcmGfFiuDm2t+0Yl5/hMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvYk90eDNvR3NWeVlaOFdLNE9iYTM3UmlYbi1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudsGAwQC
wSXYMA0GCSqGSIb3DQEBCwUAA4IBAQBAvc9uN3RY7/hdh5tWAVrDtGH/sKf2hecn
wUy0tNEVpgwywRJgZHJ1eyw1KRx1qfbSuVw9vOB/3okw9uSF/f9wXrD9m36zBcXT
XM6tdKGK+JViwAck1dW8zycz4+xc7Mj41tP+xvUNb2iiEJsqvVsK6ZpU1fCnOIPU
xlOReMHVuYrqAtprgm7OW26Kd6snKTSOifMJYK1nV7y4gZuQPHpIEAPADqpCwZIo
BHi1sdu0Col2/qwGJzp4K6e7jlRFWB0agRRJiHe2P1rgC8TSrYTtk5+/NxzuQSJ0
SWCBRMoa3FGx6zzfI0Ixidq/6mlPKfck9CbD5M6jaPeD1LDE1ksT
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net