Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/wFOiJmPx91gFud4szSTNVGIfLik.roa
File: wFOiJmPx91gFud4szSTNVGIfLik.roa (raw, json)
Hash identifier: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=
Subject key identifier: C0:53:A2:26:63:F1:F7:58:05:B9:DE:2C:CD:24:CD:54:62:1F:2E:29
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019427B655E64B12F066D07B4F4D455CB334
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/wFOiJmPx91gFud4szSTNVGIfLik.roa
Signing time: Thu 02 Jan 2025 15:50:48 +0000
ROA not before: Thu 02 Jan 2025 15:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29644
IP address blocks: 185.150.220.0/24 maxlen: 24
185.150.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:55:e6:4b:12:f0:66:d0:7b:4f:4d:45:5c:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Jan 2 15:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c053a22663f1f75805b9de2ccd24cd54621f2e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:1d:2c:3a:e6:8c:6b:12:69:df:55:13:f9:
1c:6f:64:a2:8b:33:d8:c3:98:1b:f6:65:90:f2:cf:
33:c8:e3:c0:58:af:14:15:cd:8b:b5:07:ec:18:28:
1f:12:12:a1:48:0d:fd:00:2e:42:cd:f5:95:b6:fb:
75:7c:f4:84:57:0a:2a:31:6e:86:0f:1f:96:87:0b:
7f:95:df:f5:0b:05:24:b6:2f:4a:1f:8b:07:0c:12:
07:c0:b5:b4:9b:a9:e8:aa:46:62:e1:7b:22:fb:f5:
ff:07:0a:a1:b5:46:b6:b6:3d:f6:80:04:ba:13:ea:
54:1e:e6:7b:8d:7d:58:aa:80:91:d7:16:24:ea:b2:
9e:0b:85:c5:3a:89:97:ca:69:1f:96:a0:a1:88:c0:
63:0c:fd:09:05:9e:78:ed:31:b5:9d:c1:c4:7b:49:
d4:f8:5d:91:e0:40:0e:2d:50:37:54:f0:18:62:7d:
88:30:42:55:e0:02:d5:44:05:26:04:d7:e7:59:e1:
3d:61:ee:5b:db:7d:09:c0:5d:39:15:38:49:c3:a5:
24:7a:5b:d0:aa:96:82:4d:1e:77:d1:54:06:06:3e:
6b:1f:b2:32:f1:e9:a6:5f:c8:c9:fe:70:cb:0a:62:
6d:b5:55:82:5a:23:d4:c1:fc:eb:62:ef:93:63:b2:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:A2:26:63:F1:F7:58:05:B9:DE:2C:CD:24:CD:54:62:1F:2E:29
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/wFOiJmPx91gFud4szSTNVGIfLik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.220.0/23
Signature Algorithm: sha256WithRSAEncryption
66:71:bb:35:0b:05:1f:70:62:83:e2:d6:41:0b:75:78:af:d0:
88:a0:a1:be:44:81:1f:ac:6f:b6:67:a7:04:f6:28:2b:d1:1a:
db:dc:4f:77:52:15:15:b9:fa:b5:eb:4a:73:95:60:f2:3c:8b:
80:a4:6c:38:58:4f:31:c6:9f:38:5b:ea:bf:73:be:66:0e:70:
c8:c6:aa:f7:6a:19:6d:ec:c2:a5:91:54:a4:45:30:82:cd:81:
67:3e:a0:14:ab:72:75:cb:dd:1b:31:64:59:bb:3f:73:cc:88:
f6:a6:59:11:04:d7:2c:67:6e:d8:74:2a:4f:4b:3e:0a:bc:e6:
7f:be:19:b3:4e:9b:13:da:98:49:c2:52:2f:76:da:f8:a6:81:
75:57:31:e8:90:84:ed:04:4e:3a:41:74:8e:fb:21:5d:13:35:
bc:ec:5a:7d:28:f3:a1:7e:68:00:6f:ae:4c:42:41:58:71:97:
73:f9:6c:64:42:28:2d:e2:62:31:d1:a5:a7:58:d8:e5:34:08:
36:e6:a0:6c:7a:23:fb:ac:66:37:a5:13:c3:a8:5a:1f:a9:44:
0b:1e:00:ae:36:9b:7b:a6:fa:07:cd:ef:a9:bd:50:b7:26:7d:
5e:64:95:a0:47:65:fe:20:a9:35:f3:e0:23:9b:a9:3a:da:4c:
6b:2b:47:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntlXmSxLwZtB7T01FXLM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1
NmYxZGEwHhcNMjUwMTAyMTU1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDUzYTIyNjYzZjFmNzU4MDViOWRlMmNjZDI0Y2Q1NDYyMWYyZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkYdLDrmjGsSad9VE/kcb2SiizPY
w5gb9mWQ8s8zyOPAWK8UFc2LtQfsGCgfEhKhSA39AC5CzfWVtvt1fPSEVwoqMW6G
Dx+Whwt/ld/1CwUkti9KH4sHDBIHwLW0m6noqkZi4Xsi+/X/BwqhtUa2tj32gAS6
E+pUHuZ7jX1YqoCR1xYk6rKeC4XFOomXymkflqChiMBjDP0JBZ547TG1ncHEe0nU
+F2R4EAOLVA3VPAYYn2IMEJV4ALVRAUmBNfnWeE9Ye5b230JwF05FThJw6UkelvQ
qpaCTR530VQGBj5rH7Iy8emmX8jJ/nDLCmJttVWCWiPUwfzrYu+TY7JViQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMBToiZj8fdYBbneLM0kzVRiHy4pMB8GA1UdIwQY
MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt
NDFkNTA5ZjhiMTU1LzEvd0ZPaUptUHg5MWdGdWQ0c3pTVE5WR0lmTGlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1
LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZbcMA0G
CSqGSIb3DQEBCwUAA4IBAQBmcbs1CwUfcGKD4tZBC3V4r9CIoKG+RIEfrG+2Z6cE
9igr0Rrb3E93UhUVufq160pzlWDyPIuApGw4WE8xxp84W+q/c75mDnDIxqr3ahlt
7MKlkVSkRTCCzYFnPqAUq3J1y90bMWRZuz9zzIj2plkRBNcsZ27YdCpPSz4KvOZ/
vhmzTpsT2phJwlIvdtr4poF1VzHokITtBE46QXSO+yFdEzW87Fp9KPOhfmgAb65M
QkFYcZdz+WxkQigt4mIx0aWnWNjlNAg25qBseiP7rGY3pRPDqFofqUQLHgCuNpt7
pvoHze+pvVC3Jn1eZJWgR2X+IKk18+Ajm6k62kxrK0eo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net