Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/L-DhFAOlHk5rFENU35v4H6Y8kC4.roa
File: L-DhFAOlHk5rFENU35v4H6Y8kC4.roa (raw, json)
Hash identifier: es/wTE6LdxRXaEI3U8d6ZJo/4QzkGb/m+lXYCfWMDmo=
Subject key identifier: 2F:E0:E1:14:03:A5:1E:4E:6B:14:43:54:DF:9B:F8:1F:A6:3C:90:2E
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 01942747CCD93BD7261BD51D1B003FA196E0
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/L-DhFAOlHk5rFENU35v4H6Y8kC4.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202701
IP address blocks: 185.156.204.0/22 maxlen: 24
194.5.100.0/22 maxlen: 24
2a07:a100::/29 maxlen: 29
2a07:a104::/32 maxlen: 32
2a07:a105::/32 maxlen: 32
2a07:a106::/32 maxlen: 32
2a07:a107::/32 maxlen: 32
2a0c:e840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cc:d9:3b:d7:26:1b:d5:1d:1b:00:3f:a1:96:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fe0e11403a51e4e6b144354df9bf81fa63c902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:41:ed:2b:ef:17:e3:83:60:a1:8a:72:0e:
73:8d:f0:b5:0c:bb:3e:75:71:45:46:4f:0b:84:7f:
34:20:d7:05:0a:4d:fd:b4:33:ca:ac:60:94:85:2d:
0a:fb:1c:ed:68:1c:af:27:91:13:db:97:49:c0:7e:
4b:dc:ac:ee:f4:22:f1:34:a7:e7:ed:38:ef:28:5f:
ff:75:4f:d9:6d:7b:04:b5:33:08:19:f9:40:4a:80:
36:4b:41:ef:bf:7f:0f:4c:02:aa:12:0d:f2:48:7b:
49:4c:e9:60:81:ee:57:6d:f6:18:d6:e4:b5:29:b5:
9b:e1:b8:b7:00:9b:4d:1a:52:ba:26:32:47:46:d1:
9f:eb:b5:fd:6b:bd:85:d9:4f:c3:85:70:a8:ea:d9:
e6:42:dc:35:44:20:2b:3c:dd:6d:6e:70:72:70:c6:
5a:34:53:93:09:f7:52:14:45:fc:d4:bd:16:11:b8:
c6:0a:75:57:4f:a7:ce:05:18:4d:be:b2:cc:81:22:
30:2a:ac:8b:0b:95:61:37:26:79:8a:ad:d7:b3:c1:
e8:4a:18:be:e1:6e:14:98:e4:4e:55:55:b3:f5:af:
ea:62:c6:14:c5:bd:23:fd:0e:56:bf:16:16:1a:7a:
58:78:86:f3:ec:1a:c6:4d:37:e6:45:b9:fd:fd:98:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:E1:14:03:A5:1E:4E:6B:14:43:54:DF:9B:F8:1F:A6:3C:90:2E
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/L-DhFAOlHk5rFENU35v4H6Y8kC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.204.0/22
194.5.100.0/22
IPv6:
2a07:a100::/29
2a0c:e840::/29
Signature Algorithm: sha256WithRSAEncryption
b6:d7:78:db:19:ff:ad:e8:87:7c:57:1b:3f:0e:ec:5c:6e:83:
39:c7:fb:06:df:b6:eb:b6:df:2b:43:c6:22:d4:63:99:2a:36:
75:b0:cb:39:07:36:9e:00:fe:cf:96:ed:d2:58:01:36:82:0a:
05:46:55:0c:68:59:98:0f:00:f1:32:26:c3:26:83:d8:9d:1e:
ef:9f:d2:ba:3e:b6:36:c8:7b:4d:b3:f0:63:99:ab:31:3a:e6:
02:7b:51:63:72:16:82:44:50:d1:bd:ed:2f:8a:87:b6:c0:0f:
52:09:d9:0f:14:35:17:4a:75:ec:d2:8d:e8:81:97:96:43:38:
d5:ea:9e:c9:53:39:33:34:e1:94:f6:24:2a:36:22:1a:30:40:
31:e0:8a:cb:43:23:37:00:8d:1f:e4:72:e1:05:a8:eb:db:dd:
60:98:08:66:9b:e8:5d:b9:97:38:d9:4f:8c:45:6f:86:08:e6:
d4:47:51:c5:d1:14:62:26:17:b4:5a:25:07:8c:ec:1a:97:8d:
78:bb:2b:76:5e:70:49:38:6d:8f:7d:08:b7:84:c9:3d:e4:04:
39:1d:55:21:28:30:b8:a3:d1:56:26:6e:f3:65:d6:d0:af:5b:
74:a4:e3:12:54:48:c6:be:51:bd:8e:d5:65:c5:a2:ea:ee:bc:
8b:a1:5b:06
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQnR8zZO9cmG9UdGwA/oZbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjI1OGNlMjAzZTA0YTMzZjRlOTA2NTExNTNiMjU5Y2Zm
YTNlODgwHhcNMjUwMTAyMTM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmUwZTExNDAzYTUxZTRlNmIxNDQzNTRkZjliZjgxZmE2M2M5MDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyJB7SvvF+ODYKGKcg5zjfC1DLs+
dXFFRk8LhH80INcFCk39tDPKrGCUhS0K+xztaByvJ5ET25dJwH5L3Kzu9CLxNKfn
7TjvKF//dU/ZbXsEtTMIGflASoA2S0Hvv38PTAKqEg3ySHtJTOlgge5XbfYY1uS1
KbWb4bi3AJtNGlK6JjJHRtGf67X9a72F2U/DhXCo6tnmQtw1RCArPN1tbnBycMZa
NFOTCfdSFEX81L0WEbjGCnVXT6fOBRhNvrLMgSIwKqyLC5VhNyZ5iq3Xs8HoShi+
4W4UmOROVVWz9a/qYsYUxb0j/Q5WvxYWGnpYeIbz7BrGTTfmRbn9/ZgelQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC/g4RQDpR5OaxRDVN+b+B+mPJAuMB8GA1UdIwQY
MBaAFMjyWM4gPgSjP06QZRFTslnP+j6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQt
NmM4OGJmYTdiNTVjLzEvTC1EaEZBT2xIazVyRkVOVTM1djRINlk4a0M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQtNmM4OGJmYTdiNTVj
LzEveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuZzMAwQC
wgVkMBQEAgACMA4DBQMqB6EAAwUDKgzoQDANBgkqhkiG9w0BAQsFAAOCAQEAttd4
2xn/reiHfFcbPw7sXG6DOcf7Bt+267bfK0PGItRjmSo2dbDLOQc2ngD+z5bt0lgB
NoIKBUZVDGhZmA8A8TImwyaD2J0e75/Suj62Nsh7TbPwY5mrMTrmAntRY3IWgkRQ
0b3tL4qHtsAPUgnZDxQ1F0p17NKN6IGXlkM41eqeyVM5MzThlPYkKjYiGjBAMeCK
y0MjNwCNH+Ry4QWo69vdYJgIZpvoXbmXONlPjEVvhgjm1EdRxdEUYiYXtFolB4zs
GpeNeLsrdl5wSThtj30It4TJPeQEOR1VISgwuKPRViZu82XW0K9bdKTjElRIxr5R
vY7VZcWi6u68i6FbBg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net