Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/9hax9lcbcBPwKNzrRoXl7XRGxs0.roa
File: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (raw, json)
Hash identifier: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=
Subject key identifier: F6:16:B1:F6:57:1B:70:13:F0:28:DC:EB:46:85:E5:ED:74:46:C6:CD
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019420D5FEC46A9CF4B0006B94420FC8FDF0
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/9hax9lcbcBPwKNzrRoXl7XRGxs0.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3290
IP address blocks: 185.124.244.0/24 maxlen: 24
185.124.245.0/24 maxlen: 24
185.124.246.0/24 maxlen: 24
185.124.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fe:c4:6a:9c:f4:b0:00:6b:94:42:0f:c8:fd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f616b1f6571b7013f028dceb4685e5ed7446c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:87:8b:97:8b:49:3d:30:91:10:de:4e:7e:7c:
05:05:b8:da:cc:b5:a6:97:42:67:a1:8d:6e:0e:fa:
59:47:13:7f:89:f4:5b:91:92:9d:05:d8:3d:e7:23:
45:31:da:3e:17:91:77:42:2d:a2:b3:5f:95:86:26:
9a:94:61:13:9d:79:37:4d:6f:08:c0:9f:b2:4f:3e:
fb:51:a8:7c:60:5f:58:96:86:ca:d2:d1:5d:75:c3:
b2:5b:96:dc:e6:7c:18:67:79:19:32:5e:cc:0a:35:
c2:2a:b8:ab:fa:59:76:8c:9d:20:63:11:27:6e:45:
f7:38:ee:04:56:fa:e6:df:bc:4b:b4:ad:f9:41:6b:
db:13:0b:96:b7:c4:02:2f:cc:d2:1a:7e:9b:4a:31:
42:12:49:72:e7:69:c6:19:17:ca:25:88:6f:53:01:
39:d6:0e:69:aa:3b:cd:a9:ab:f2:ff:02:53:92:78:
89:eb:33:36:2e:3e:fa:99:c5:dd:db:4e:6b:0f:9d:
0d:5c:5a:68:c3:49:23:ca:5c:2e:cc:b4:ec:1d:6e:
be:2c:42:eb:06:b6:e9:bf:07:c4:c9:97:d6:f0:43:
d4:5d:61:99:88:ce:3f:ae:79:00:20:a3:4b:65:04:
0c:9a:92:a1:55:49:84:87:22:fb:34:94:e4:db:08:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:B1:F6:57:1B:70:13:F0:28:DC:EB:46:85:E5:ED:74:46:C6:CD
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/9hax9lcbcBPwKNzrRoXl7XRGxs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.244.0/22
Signature Algorithm: sha256WithRSAEncryption
af:8a:54:bf:ce:5a:81:f4:83:31:91:71:1b:ff:35:18:22:fa:
52:ae:d9:93:58:01:2a:38:03:09:4d:f8:5b:89:a2:20:c6:29:
ce:a1:6b:9f:04:87:3c:c6:10:eb:23:a0:9a:00:a6:e6:f0:55:
e8:58:f6:b8:95:32:e1:8f:51:6e:bc:9f:7d:0e:8e:eb:95:76:
9d:d8:2d:ba:cd:36:10:e8:aa:df:2c:7c:5c:be:dd:a8:7d:52:
de:b1:5d:70:72:97:49:36:d9:fc:b8:06:b8:29:1c:ba:ae:25:
2c:f4:d5:05:0c:ac:0b:b1:59:de:e1:0f:0b:fa:16:b2:72:07:
a5:f9:e0:2d:cd:f0:0b:0b:8e:78:de:11:4a:52:60:b6:a5:e4:
50:e4:7b:9c:65:78:76:07:c4:3d:d9:89:c6:4b:74:a9:c2:33:
d2:4b:65:8a:dd:e1:b9:a6:0a:fe:c4:e9:15:19:41:f5:f0:91:
57:93:cd:7f:d6:e7:8d:d4:c5:f4:d4:90:9f:5f:91:b1:6e:d0:
cf:14:2d:00:3c:69:7f:ce:29:ca:42:19:0c:3d:c4:14:4d:13:
b3:15:81:c3:9a:21:86:3d:f8:7b:12:9e:e2:f1:28:9e:ac:94:
5b:b0:d0:d3:1a:df:ac:f5:a8:a4:0f:78:84:2a:18:b2:2f:0b:
66:c7:00:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1f7Eapz0sABrlEIPyP3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhMDVmYWU3NjA2OTFmNzBjZmI1YjRmNjI0OTk0N2Fi
YWRlODcwHhcNMjUwMTAxMDc0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjE2YjFmNjU3MWI3MDEzZjAyOGRjZWI0Njg1ZTVlZDc0NDZjNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84eLl4tJPTCREN5OfnwFBbjazLWm
l0JnoY1uDvpZRxN/ifRbkZKdBdg95yNFMdo+F5F3Qi2is1+VhiaalGETnXk3TW8I
wJ+yTz77Uah8YF9YlobK0tFddcOyW5bc5nwYZ3kZMl7MCjXCKrir+ll2jJ0gYxEn
bkX3OO4EVvrm37xLtK35QWvbEwuWt8QCL8zSGn6bSjFCEkly52nGGRfKJYhvUwE5
1g5pqjvNqavy/wJTkniJ6zM2Lj76mcXd205rD50NXFpow0kjylwuzLTsHW6+LELr
BrbpvwfEyZfW8EPUXWGZiM4/rnkAIKNLZQQMmpKhVUmEhyL7NJTk2wh0WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPYWsfZXG3AT8Cjc60aF5e10RsbNMB8GA1UdIwQY
MBaAFA42oF+udgaR9wz7W09iSZR6ut6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMt
MGIzNmFjOGUyM2M3LzEvOWhheDlsY2JjQlB3S056clJvWGw3WFJHeHMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMtMGIzNmFjOGUyM2M3
LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXz0MA0G
CSqGSIb3DQEBCwUAA4IBAQCvilS/zlqB9IMxkXEb/zUYIvpSrtmTWAEqOAMJTfhb
iaIgxinOoWufBIc8xhDrI6CaAKbm8FXoWPa4lTLhj1FuvJ99Do7rlXad2C26zTYQ
6KrfLHxcvt2ofVLesV1wcpdJNtn8uAa4KRy6riUs9NUFDKwLsVne4Q8L+haycgel
+eAtzfALC4543hFKUmC2peRQ5HucZXh2B8Q92YnGS3SpwjPSS2WK3eG5pgr+xOkV
GUH18JFXk81/1ueN1MX01JCfX5GxbtDPFC0APGl/zinKQhkMPcQUTROzFYHDmiGG
Pfh7Ep7i8SierJRbsNDTGt+s9aikD3iEKhiyLwtmxwDn
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net