Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa
File: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (raw, json)
Hash identifier: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=
Subject key identifier: DD:27:B6:C8:E9:C9:B1:55:82:1A:C8:34:7F:83:ED:C6:57:C1:DD:46
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01942521EAF35397970A3C69E4706B25B9E1
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49419
IP address blocks: 84.19.128.0/20 maxlen: 24
84.19.144.0/21 maxlen: 24
185.224.56.0/22 maxlen: 24
2a0b:fd80::/32 maxlen: 48
2a0b:fd81::/32 maxlen: 48
2a0b:fd87::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ea:f3:53:97:97:0a:3c:69:e4:70:6b:25:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd27b6c8e9c9b155821ac8347f83edc657c1dd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:23:7f:fd:b1:fa:6b:c8:ec:74:e9:4d:0b:
cf:a5:dc:3b:72:62:9e:c0:a9:8d:1f:d0:e5:38:31:
1d:55:c9:0c:1e:1d:ac:fd:86:c5:57:94:bc:e9:43:
70:df:98:82:43:34:68:80:b6:38:0f:f7:79:83:27:
47:e6:fe:82:51:d0:ee:b8:4b:8b:ee:dd:f7:73:de:
7a:50:3e:4d:ce:f4:72:85:b5:40:45:05:96:89:bb:
23:b7:12:7b:23:77:54:37:17:72:45:01:d5:ce:07:
57:ea:90:7d:00:2c:ae:5c:de:b1:93:1d:15:90:1c:
2c:48:53:46:51:43:24:e1:f9:c2:ef:fd:de:7b:6a:
37:ba:7b:eb:90:e1:92:66:ef:58:25:57:da:05:27:
15:b2:ca:6c:c0:42:9a:36:52:a5:3a:a8:7a:89:d0:
80:0d:d6:a1:0a:35:44:59:a5:d1:b7:c8:b0:1f:40:
c6:3a:f2:93:08:36:f8:08:3e:e8:66:e4:6d:b7:0e:
20:8c:1b:f5:8b:e8:45:ca:41:be:b8:81:08:29:18:
a4:ae:0f:36:70:33:ea:0c:e3:4c:84:b0:0c:2f:77:
a8:15:f6:77:de:0c:2c:4d:2b:b2:7e:a5:cd:2c:bd:
80:67:4b:83:54:9f:d5:6f:b8:df:ea:ba:c8:e8:52:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:27:B6:C8:E9:C9:B1:55:82:1A:C8:34:7F:83:ED:C6:57:C1:DD:46
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.128.0-84.19.151.255
185.224.56.0/22
IPv6:
2a0b:fd80::/31
2a0b:fd87::/32
Signature Algorithm: sha256WithRSAEncryption
47:ba:ee:31:a4:8e:73:96:5c:5f:ef:9c:3d:6a:ca:6a:cb:97:
92:e7:56:35:00:42:6f:f3:8e:b8:14:52:54:d5:e7:91:a6:94:
ce:74:48:c0:98:b4:c4:e0:8f:21:1b:20:38:12:b0:ac:4c:65:
b1:28:9e:57:e9:d9:14:39:22:14:c1:7d:eb:66:6c:ec:a8:0a:
ee:2f:b3:63:be:39:c4:32:34:bc:9a:62:0c:11:d9:57:78:b9:
6b:6e:d3:84:72:e0:63:f5:59:69:cd:f7:f5:9b:f6:63:c4:5a:
ab:83:7b:8e:3a:8e:c7:2b:a7:65:f3:af:f8:62:22:13:c1:82:
fe:dc:4b:38:a2:cc:b6:f0:d6:00:3a:0d:77:67:e4:79:e9:92:
d7:00:57:3d:cb:8f:a9:13:6a:57:3e:15:aa:4d:30:3f:62:2c:
69:34:3e:c3:7c:e5:8b:35:9e:a6:1f:2a:a1:ed:0f:fe:d4:87:
4a:dd:d5:1d:44:d3:49:2b:0c:17:4a:a7:44:60:19:35:9b:b6:
a2:34:fc:89:cc:8c:27:08:03:0c:37:dd:cd:d3:4d:1e:df:4f:
97:6a:e3:7b:b7:bd:00:5a:b0:ed:b0:f6:69:e3:ba:20:15:15:
eb:f9:fd:9f:17:e1:29:ff:48:16:08:ee:81:94:0b:94:70:db:
09:d1:8b:f9
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQlIerzU5eXCjxp5HBrJbnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjUwMTAyMDM0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDI3YjZjOGU5YzliMTU1ODIxYWM4MzQ3ZjgzZWRjNjU3YzFkZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6kjf/2x+mvI7HTpTQvPpdw7cmKe
wKmNH9DlODEdVckMHh2s/YbFV5S86UNw35iCQzRogLY4D/d5gydH5v6CUdDuuEuL
7t33c956UD5NzvRyhbVARQWWibsjtxJ7I3dUNxdyRQHVzgdX6pB9ACyuXN6xkx0V
kBwsSFNGUUMk4fnC7/3ee2o3unvrkOGSZu9YJVfaBScVsspswEKaNlKlOqh6idCA
DdahCjVEWaXRt8iwH0DGOvKTCDb4CD7oZuRttw4gjBv1i+hFykG+uIEIKRikrg82
cDPqDONMhLAML3eoFfZ33gwsTSuyfqXNLL2AZ0uDVJ/Vb7jf6rrI6FJHVwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFN0ntsjpybFVghrINH+D7cZXwd1GMB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvM1NlMnlPbkpzVldDR3NnMGY0UHR4bGZCM1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAaBAIAATAUMAwDBAdUE4AD
BANUE5ADBAK54DgwFAQCAAIwDgMFASoL/YADBQAqC/2HMA0GCSqGSIb3DQEBCwUA
A4IBAQBHuu4xpI5zllxf75w9aspqy5eS51Y1AEJv8464FFJU1eeRppTOdEjAmLTE
4I8hGyA4ErCsTGWxKJ5X6dkUOSIUwX3rZmzsqAruL7NjvjnEMjS8mmIMEdlXeLlr
btOEcuBj9Vlpzff1m/ZjxFqrg3uOOo7HK6dl86/4YiITwYL+3Es4osy28NYAOg13
Z+R56ZLXAFc9y4+pE2pXPhWqTTA/YixpND7DfOWLNZ6mHyqh7Q/+1IdK3dUdRNNJ
KwwXSqdEYBk1m7aiNPyJzIwnCAMMN93N000e30+XauN7t70AWrDtsPZp47ogFRXr
+f2fF+Ep/0gWCO6BlAuUcNsJ0Yv5
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net