Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/RYELhtEFcsCmVORqbpstU7Crut0.roa
File: RYELhtEFcsCmVORqbpstU7Crut0.roa (raw, json)
Hash identifier: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=
Subject key identifier: 45:81:0B:86:D1:05:72:C0:A6:54:E4:6A:6E:9B:2D:53:B0:AB:BA:DD
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019427B65608E34EA7253082830021853363
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/RYELhtEFcsCmVORqbpstU7Crut0.roa
Signing time: Thu 02 Jan 2025 15:50:48 +0000
ROA not before: Thu 02 Jan 2025 15:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202823
IP address blocks: 185.150.220.0/24 maxlen: 24
185.150.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:56:08:e3:4e:a7:25:30:82:83:00:21:85:33:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Jan 2 15:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45810b86d10572c0a654e46a6e9b2d53b0abbadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:90:2b:61:03:d8:11:86:b7:54:1b:ef:2b:
11:74:d9:1b:32:c1:61:f1:15:71:c8:e8:cc:89:40:
cd:18:8a:ee:1e:a2:7c:29:2c:93:e7:6a:91:ff:fa:
61:01:c5:bf:0c:9e:84:c9:30:77:c1:84:a1:cb:fd:
cc:88:d0:94:71:8c:f9:a9:a9:f9:ba:c2:6c:b3:ee:
f9:76:42:62:f9:61:0f:ab:38:de:d4:69:97:3b:18:
2a:83:49:e5:15:b9:81:29:ca:f2:df:8a:8e:be:dd:
52:ad:a2:15:19:a4:7c:67:dd:53:e4:82:a5:10:15:
e8:ee:fc:b9:ce:76:96:eb:3f:21:8c:fe:bc:ae:0f:
fb:c1:43:bc:33:0c:45:50:56:c7:55:a9:f7:40:1d:
8b:55:1e:b9:c4:ad:00:65:ea:2d:77:9f:54:41:39:
13:92:78:e9:f7:b8:3c:71:84:85:89:65:27:b8:14:
a3:57:be:40:33:53:ef:32:b5:72:b4:82:e4:36:1c:
72:fb:b7:b8:3f:38:c7:23:76:13:7b:e5:95:05:94:
0c:2b:82:d3:83:25:ae:5f:a6:68:0e:02:6d:75:dc:
3e:61:c0:9d:99:8b:07:d3:84:4a:d0:aa:3e:b8:d3:
b1:6a:a7:a8:02:0b:09:a8:f8:93:41:85:0f:71:ab:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:81:0B:86:D1:05:72:C0:A6:54:E4:6A:6E:9B:2D:53:B0:AB:BA:DD
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/RYELhtEFcsCmVORqbpstU7Crut0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.220.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:43:96:c1:bd:77:62:27:df:de:5c:31:9d:ed:c8:71:f7:f6:
e1:d1:85:37:0d:bc:fa:b5:26:50:fc:e0:41:71:26:08:3d:21:
96:d1:72:7b:24:9a:28:ab:98:90:b7:2f:17:f3:65:1e:73:da:
95:c5:7c:49:e6:f8:e0:80:39:c5:49:1a:5d:9c:27:41:56:e4:
37:a0:4e:88:16:93:5d:a7:29:ce:e5:f2:88:a6:ed:41:94:47:
04:e8:47:1e:9b:a8:24:44:2d:cf:28:c7:cf:84:ca:22:cf:15:
80:79:7d:43:d8:b4:be:79:89:ad:90:b8:07:7e:43:70:fc:29:
6c:95:db:83:5d:91:11:2f:09:85:c8:01:77:7b:45:db:2e:d9:
c5:bb:fa:f5:61:56:8c:2e:28:4a:77:0e:c4:62:c4:bb:3f:61:
c5:d1:35:a0:fa:94:6d:ac:b4:f4:e2:dd:ad:d7:d8:76:2b:72:
b9:ac:a4:76:43:28:ce:58:8e:04:f4:c8:93:ff:17:90:0b:3b:
ed:23:04:87:e3:64:6a:17:09:b6:18:fe:1e:79:a2:9a:7a:e7:
85:fd:c1:08:9e:1a:fc:b6:5c:16:dd:8d:dc:7f:4f:ed:3d:b9:
c7:b3:f9:72:a7:15:c0:20:8d:8e:1d:57:34:2f:6f:f0:8f:1b:
a4:d9:ea:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntlYI406nJTCCgwAhhTNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1
NmYxZGEwHhcNMjUwMTAyMTU1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTgxMGI4NmQxMDU3MmMwYTY1NGU0NmE2ZTliMmQ1M2IwYWJiYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BCQK2ED2BGGt1Qb7ysRdNkbMsFh
8RVxyOjMiUDNGIruHqJ8KSyT52qR//phAcW/DJ6EyTB3wYShy/3MiNCUcYz5qan5
usJss+75dkJi+WEPqzje1GmXOxgqg0nlFbmBKcry34qOvt1SraIVGaR8Z91T5IKl
EBXo7vy5znaW6z8hjP68rg/7wUO8MwxFUFbHVan3QB2LVR65xK0AZeotd59UQTkT
knjp97g8cYSFiWUnuBSjV75AM1PvMrVytILkNhxy+7e4PzjHI3YTe+WVBZQMK4LT
gyWuX6ZoDgJtddw+YcCdmYsH04RK0Ko+uNOxaqeoAgsJqPiTQYUPcasvNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWBC4bRBXLAplTkam6bLVOwq7rdMB8GA1UdIwQY
MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt
NDFkNTA5ZjhiMTU1LzEvUllFTGh0RUZjc0NtVk9ScWJwc3RVN0NydXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1
LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZbcMA0G
CSqGSIb3DQEBCwUAA4IBAQBKQ5bBvXdiJ9/eXDGd7chx9/bh0YU3Dbz6tSZQ/OBB
cSYIPSGW0XJ7JJooq5iQty8X82Uec9qVxXxJ5vjggDnFSRpdnCdBVuQ3oE6IFpNd
pynO5fKIpu1BlEcE6Ecem6gkRC3PKMfPhMoizxWAeX1D2LS+eYmtkLgHfkNw/Cls
lduDXZERLwmFyAF3e0XbLtnFu/r1YVaMLihKdw7EYsS7P2HF0TWg+pRtrLT04t2t
19h2K3K5rKR2QyjOWI4E9MiT/xeQCzvtIwSH42RqFwm2GP4eeaKaeueF/cEInhr8
tlwW3Y3cf0/tPbnHs/lypxXAII2OHVc0L2/wjxuk2eoV
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net