Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/AoJQyLrRBRpZ_gDY1m7bRvxAYUY.roa
File: AoJQyLrRBRpZ_gDY1m7bRvxAYUY.roa (raw, json)
Hash identifier: 5J+jBioVEuJ1wKO2r6seNSzCaTMuDx/IAuCbWxR32JU=
Subject key identifier: 02:82:50:C8:BA:D1:05:1A:59:FE:00:D8:D6:6E:DB:46:FC:40:61:46
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019625EFE1F911846ACA93BDED87B3A98669
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/AoJQyLrRBRpZ_gDY1m7bRvxAYUY.roa
Signing time: Fri 11 Apr 2025 17:39:59 +0000
ROA not before: Fri 11 Apr 2025 17:39:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 104.233.59.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:ef:e1:f9:11:84:6a:ca:93:bd:ed:87:b3:a9:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 11 17:39:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=028250c8bad1051a59fe00d8d66edb46fc406146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:27:de:67:02:62:33:6a:4c:7c:0e:e4:21:03:
28:76:10:03:67:e6:f5:b3:eb:fb:0d:4f:46:97:8e:
05:e6:a4:ae:25:9d:e7:85:3d:b8:97:9a:f1:c3:26:
b9:4f:a5:af:cd:61:8a:70:94:0b:48:47:a7:52:75:
b1:77:82:a0:55:ad:c2:95:cb:19:e4:47:5e:f5:ff:
f0:16:a5:56:56:b8:7d:ff:47:5a:71:21:d7:4f:39:
3c:a1:ae:7d:4e:57:54:99:36:5b:c8:27:64:d1:a0:
3a:8b:6a:69:0c:ce:52:ae:52:24:fe:4c:fe:70:db:
6d:35:1c:5e:11:d9:94:b4:97:f7:66:7c:f2:5c:5b:
04:32:d4:fe:e9:31:85:38:08:61:bb:0f:68:c9:66:
f0:68:50:d7:3e:ff:ac:cc:30:3a:8a:c8:0f:01:ad:
c5:71:1c:f1:b9:2c:dc:01:90:d3:87:fd:0e:17:30:
cc:1e:5b:78:aa:60:2c:7d:b0:4e:41:08:99:18:90:
ef:39:8f:a4:5a:c6:45:6c:67:11:87:72:0e:27:ba:
c0:ce:1a:e5:40:43:63:f1:fb:62:24:16:e9:34:ba:
d7:93:ea:b2:b0:32:bd:63:f2:f0:f5:0e:d3:02:2a:
83:64:67:7b:3e:37:21:04:f2:6c:c0:d3:f8:22:1a:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:50:C8:BA:D1:05:1A:59:FE:00:D8:D6:6E:DB:46:FC:40:61:46
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/AoJQyLrRBRpZ_gDY1m7bRvxAYUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.59.0/24
104.239.56.0/24
104.249.48.0/23
104.249.51.0-104.249.54.255
Signature Algorithm: sha256WithRSAEncryption
76:d9:b3:08:d3:13:e2:03:1b:fb:b3:00:87:d8:98:30:6a:af:
59:9f:1b:c1:3b:32:ea:08:7e:1a:d0:76:a9:82:dc:03:f2:4e:
b5:ba:47:99:f3:3e:9f:df:7b:54:7a:08:6e:ec:52:88:67:48:
6f:88:bf:db:5d:84:80:5c:1d:c4:b0:c5:a5:58:f5:aa:7c:a6:
19:a0:64:4b:b0:08:b1:94:5e:f7:28:ec:db:e6:d2:ac:a4:0f:
2e:7b:9d:dd:d8:69:06:fd:91:55:ea:34:4e:5a:0a:30:fd:d2:
a6:59:b5:c0:1d:39:ef:1b:c1:90:89:e3:a2:4d:f4:b9:58:d5:
d4:2a:a8:d5:8f:f0:0b:60:12:49:fb:c4:e2:a7:21:1a:89:97:
be:1c:7b:3e:6b:01:2d:ca:e8:6f:66:6b:73:ab:b6:93:53:a8:
32:4e:f2:2f:79:c0:04:15:1d:be:5f:bd:6b:44:b7:22:8e:95:
bc:d4:14:5f:6e:29:93:fe:c5:71:40:dc:93:2b:cf:f6:fd:7c:
5c:d8:9f:a0:09:4b:54:39:fa:6c:a7:5c:fc:96:fd:b4:49:5e:
29:80:86:b1:a2:3b:02:90:3b:4a:14:0e:96:5e:bb:91:d5:bf:
95:3c:94:45:ab:54:85:7b:52:08:62:b2:ff:1b:02:f9:4b:4a:
63:dd:25:4c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZYl7+H5EYRqypO97YezqYZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwNDExMTczOTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjgyNTBjOGJhZDEwNTFhNTlmZTAwZDhkNjZlZGI0NmZjNDA2MTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CfeZwJiM2pMfA7kIQModhADZ+b1
s+v7DU9Gl44F5qSuJZ3nhT24l5rxwya5T6WvzWGKcJQLSEenUnWxd4KgVa3ClcsZ
5Ede9f/wFqVWVrh9/0dacSHXTzk8oa59TldUmTZbyCdk0aA6i2ppDM5SrlIk/kz+
cNttNRxeEdmUtJf3ZnzyXFsEMtT+6TGFOAhhuw9oyWbwaFDXPv+szDA6isgPAa3F
cRzxuSzcAZDTh/0OFzDMHlt4qmAsfbBOQQiZGJDvOY+kWsZFbGcRh3IOJ7rAzhrl
QENj8ftiJBbpNLrXk+qysDK9Y/Lw9Q7TAiqDZGd7PjchBPJswNP4IhpdIwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAKCUMi60QUaWf4A2NZu20b8QGFGMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvQW9KUXlMclJCUnBaX2dEWTFtN2JSdnhBWVVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAaOk7AwQA
aO84AwQBaPkwMAwDBABo+TMDBABo+TYwDQYJKoZIhvcNAQELBQADggEBAHbZswjT
E+IDG/uzAIfYmDBqr1mfG8E7MuoIfhrQdqmC3APyTrW6R5nzPp/fe1R6CG7sUohn
SG+Iv9tdhIBcHcSwxaVY9ap8phmgZEuwCLGUXvco7Nvm0qykDy57nd3YaQb9kVXq
NE5aCjD90qZZtcAdOe8bwZCJ46JN9LlY1dQqqNWP8AtgEkn7xOKnIRqJl74cez5r
AS3K6G9ma3OrtpNTqDJO8i95wAQVHb5fvWtEtyKOlbzUFF9uKZP+xXFA3JMrz/b9
fFzYn6AJS1Q5+mynXPyW/bRJXimAhrGiOwKQO0oUDpZeu5HVv5U8lEWrVIV7Ughi
sv8bAvlLSmPdJUw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net