Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/kkSPJZVB96rAbN17P-YUAJN7aaE.roa
File: kkSPJZVB96rAbN17P-YUAJN7aaE.roa (raw, json)
Hash identifier: 8dKJzCnviJKMMlZ3r9gbzAQciz/e0KQ17aqwbgXszyU=
Subject key identifier: 92:44:8F:25:95:41:F7:AA:C0:6C:DD:7B:3F:E6:14:00:93:7B:69:A1
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 019420D5C5905439DE32FAEDC52F253B7907
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/kkSPJZVB96rAbN17P-YUAJN7aaE.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203203
IP address blocks: 185.179.84.0/22 maxlen: 22
185.179.84.0/24 maxlen: 24
185.179.85.0/24 maxlen: 24
185.179.86.0/24 maxlen: 24
2a0a:7e80::/29 maxlen: 29
2a0a:7e80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c5:90:54:39:de:32:fa:ed:c5:2f:25:3b:79:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92448f259541f7aac06cdd7b3fe61400937b69a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:6e:21:93:f5:06:8e:66:20:62:33:75:e3:
00:20:e8:e4:63:c8:aa:99:bc:c5:ed:9d:23:05:f3:
63:e2:68:34:36:0a:ae:36:83:8d:32:ec:59:8e:5c:
f5:d4:e3:a3:a5:e6:1e:69:81:0a:0e:e1:7e:f6:61:
c9:8b:6d:ba:b7:52:e0:10:d0:b4:9c:b7:3b:9e:fb:
51:bc:93:0e:3f:be:9b:16:6a:51:4a:ba:e4:69:06:
77:9c:1f:4f:21:6f:fc:de:b2:a0:68:be:65:61:2a:
02:4a:e2:2a:98:b2:34:96:a4:56:7e:93:54:6d:03:
20:a9:9a:fb:95:eb:2c:d3:78:98:c3:a6:b1:9e:d3:
5d:f8:61:ef:5a:1a:0f:77:7c:de:23:06:ab:36:cd:
26:ec:e5:72:59:32:64:d5:dd:7f:a9:ad:07:e1:e2:
fe:24:4f:21:b2:c2:f2:e4:e1:a8:c2:02:fd:a9:ff:
40:0c:37:05:3c:0f:90:97:61:b4:e3:bc:96:e3:cd:
81:f8:e8:0c:72:fb:9b:1a:3c:cf:c3:0e:9f:ff:5f:
32:61:e7:61:e3:9d:04:f4:47:f9:37:c7:50:b0:c5:
71:a0:f9:5b:01:be:42:50:1b:c9:75:b0:57:ee:3e:
31:41:f1:94:b2:67:f3:ec:be:9b:c8:b3:78:c9:4e:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:44:8F:25:95:41:F7:AA:C0:6C:DD:7B:3F:E6:14:00:93:7B:69:A1
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/kkSPJZVB96rAbN17P-YUAJN7aaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.84.0/22
IPv6:
2a0a:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
56:e5:df:d0:c0:75:0a:54:9a:e0:59:ac:13:12:0f:a4:5b:ba:
cb:68:d3:81:92:f4:29:1b:54:5c:ce:d9:32:cd:69:77:0e:0d:
77:42:fb:14:a3:85:f9:31:bb:7c:e2:6c:c9:5e:67:84:9c:f7:
38:06:06:7b:42:af:39:2c:1f:5a:0d:0a:ba:6d:32:e5:b1:43:
f1:86:3b:6e:1f:32:76:a3:4f:fb:f1:30:15:63:b9:f2:b8:ff:
c3:d5:dd:02:88:10:5b:d4:52:69:9e:5a:41:10:7f:90:1c:46:
8d:99:9b:69:1f:2a:c1:96:83:61:8e:ec:d0:0f:e8:b9:16:10:
6d:da:d7:50:f3:29:1d:dd:d6:53:dc:87:cb:0b:d0:7b:b5:7d:
cd:95:09:47:5e:37:83:77:f2:74:fa:a8:75:a8:28:56:a2:9f:
4c:99:66:09:92:43:36:5b:5f:41:32:c1:9b:ce:6e:3b:bc:98:
db:c4:21:f6:d8:cb:bd:85:11:0a:98:07:d8:c0:68:6e:b9:8f:
b2:47:fd:28:bd:68:43:c5:b6:f6:e7:88:9b:5b:a7:66:29:fb:
73:87:d7:ac:2b:d4:a8:20:7e:ad:0f:75:a5:15:d6:2d:1a:f9:
ac:4c:a7:ea:5d:dc:6a:c8:f9:04:db:00:74:03:e1:96:b2:2a:
a3:bc:56:40
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQg1cWQVDneMvrtxS8lO3kHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzM2NGJjMzhmNzViMThkNmY2ZWVmMjAzMjA5ZjcxYzI3
NjhkODUwHhcNMjUwMTAxMDc0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjQ0OGYyNTk1NDFmN2FhYzA2Y2RkN2IzZmU2MTQwMDkzN2I2OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0htuIZP1Bo5mIGIzdeMAIOjkY8iq
mbzF7Z0jBfNj4mg0NgquNoONMuxZjlz11OOjpeYeaYEKDuF+9mHJi226t1LgENC0
nLc7nvtRvJMOP76bFmpRSrrkaQZ3nB9PIW/83rKgaL5lYSoCSuIqmLI0lqRWfpNU
bQMgqZr7less03iYw6axntNd+GHvWhoPd3zeIwarNs0m7OVyWTJk1d1/qa0H4eL+
JE8hssLy5OGowgL9qf9ADDcFPA+Ql2G047yW482B+OgMcvubGjzPww6f/18yYedh
450E9Ef5N8dQsMVxoPlbAb5CUBvJdbBX7j4xQfGUsmfz7L6byLN4yU4yOQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJJEjyWVQfeqwGzdez/mFACTe2mhMB8GA1UdIwQY
MBaAFL4zZLw491sY1vbu8gMgn3HCdo2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTct
MWE2YWM5OGFjNmY5LzEva2tTUEpaVkI5NnJBYk4xN1AtWVVBSk43YWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTctMWE2YWM5OGFjNmY5
LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubNUMA0E
AgACMAcDBQMqCn6AMA0GCSqGSIb3DQEBCwUAA4IBAQBW5d/QwHUKVJrgWawTEg+k
W7rLaNOBkvQpG1RcztkyzWl3Dg13QvsUo4X5Mbt84mzJXmeEnPc4BgZ7Qq85LB9a
DQq6bTLlsUPxhjtuHzJ2o0/78TAVY7nyuP/D1d0CiBBb1FJpnlpBEH+QHEaNmZtp
HyrBloNhjuzQD+i5FhBt2tdQ8ykd3dZT3IfLC9B7tX3NlQlHXjeDd/J0+qh1qChW
op9MmWYJkkM2W19BMsGbzm47vJjbxCH22Mu9hREKmAfYwGhuuY+yR/0ovWhDxbb2
54ibW6dmKftzh9esK9SoIH6tD3WlFdYtGvmsTKfqXdxqyPkE2wB0A+GWsiqjvFZA
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net