Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa
File: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (raw, json)
Hash identifier: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=
Subject key identifier: 1B:CA:4C:E0:13:B8:48:31:6E:1B:43:B4:68:71:99:15:21:EE:D1:B6
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 019423D73E8A4DAD5E86B4CFAB082B096562
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30950
IP address blocks: 185.58.68.0/22 maxlen: 22
193.28.236.0/24 maxlen: 24
2001:67c:324::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3e:8a:4d:ad:5e:86:b4:cf:ab:08:2b:09:65:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bca4ce013b848316e1b43b46871991521eed1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:85:0c:5d:76:df:6d:c2:ff:fb:c8:d9:10:
73:41:4e:86:e9:a7:0d:9e:80:bc:a0:f0:10:02:5b:
8f:96:99:1e:18:50:c0:17:bf:24:33:99:4d:7d:65:
a9:36:ff:66:90:a8:08:1c:2d:a1:bf:74:2b:ce:ba:
c1:4b:32:48:1c:24:fb:67:d1:2e:37:d5:b4:1a:a3:
29:d1:88:14:aa:08:7c:8e:d5:e5:22:7a:85:36:5c:
72:52:82:82:ee:59:43:ff:5a:6e:00:a6:28:d6:91:
c1:b4:4b:54:a4:81:76:53:6a:cc:8b:f2:5b:e3:f2:
1f:d5:06:ce:71:df:81:92:5b:65:33:15:11:34:65:
93:44:0e:65:eb:ef:de:48:6b:5b:39:81:f7:aa:2b:
06:c4:b6:e2:dc:7a:33:3e:86:3f:01:2e:7d:2f:ba:
7b:e7:46:5a:ba:7b:5a:58:26:42:c3:a7:0f:e2:0f:
f7:24:c9:51:9e:c3:5f:26:d4:a3:4d:36:57:58:de:
93:13:c9:3e:07:cd:27:65:45:39:3a:65:6a:00:bd:
94:35:1c:f4:80:77:40:e8:08:3c:3f:6a:9b:01:ce:
42:aa:5f:bc:02:3e:dd:fe:c7:72:15:9a:59:7b:a5:
75:57:3f:32:a9:a9:03:51:5d:ca:47:0c:30:ff:a3:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:4C:E0:13:B8:48:31:6E:1B:43:B4:68:71:99:15:21:EE:D1:B6
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.68.0/22
193.28.236.0/24
IPv6:
2001:67c:324::/48
Signature Algorithm: sha256WithRSAEncryption
a0:19:f0:5d:c8:8f:bb:ec:9d:b3:af:6d:05:a5:8f:8f:62:7d:
67:3d:57:6a:f0:10:81:e5:77:43:7c:e0:c2:e8:92:42:7a:de:
c2:c0:98:f9:f2:e3:80:47:04:dd:26:6d:8c:ec:71:15:9b:a7:
61:57:91:78:b9:35:6f:12:c3:57:04:f0:8f:7b:67:c1:c7:68:
58:d3:18:67:2f:c3:f7:f8:24:16:b1:55:7b:f7:d2:48:cc:d6:
1d:e6:46:57:8a:5b:4a:9d:f2:fc:1f:e6:e5:4a:24:ed:c5:40:
2f:61:fc:9d:b4:cb:32:f5:a0:4d:33:89:3e:7b:0f:b8:98:5d:
42:de:df:de:b6:c4:38:6f:bc:24:91:cf:c8:8d:35:bc:04:43:
3e:56:66:4a:d0:d0:68:57:a6:71:a2:33:71:79:8a:f8:1d:22:
41:5e:71:3e:73:c8:b8:e2:52:a6:69:94:26:f2:51:cb:a9:e0:
71:e5:22:b5:3b:d6:30:eb:23:78:0e:3b:cb:3f:b3:8e:e7:30:
8b:c2:d4:d5:01:a8:bb:e8:66:10:76:92:0f:4f:45:e8:e9:a2:
fc:24:43:37:ee:c1:a6:bd:ff:8b:ac:ba:c9:c5:7f:3b:66:1f:
b3:ff:3e:9c:21:b5:d6:08:99:7f:82:97:03:5a:49:8a:0e:da:
20:5a:14:bd
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQj1z6KTa1ehrTPqwgrCWViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh
ZTA4N2MwHhcNMjUwMTAxMjE0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmNhNGNlMDEzYjg0ODMxNmUxYjQzYjQ2ODcxOTkxNTIxZWVkMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpaFDF12323C//vI2RBzQU6G6acN
noC8oPAQAluPlpkeGFDAF78kM5lNfWWpNv9mkKgIHC2hv3QrzrrBSzJIHCT7Z9Eu
N9W0GqMp0YgUqgh8jtXlInqFNlxyUoKC7llD/1puAKYo1pHBtEtUpIF2U2rMi/Jb
4/If1QbOcd+BkltlMxURNGWTRA5l6+/eSGtbOYH3qisGxLbi3HozPoY/AS59L7p7
50ZauntaWCZCw6cP4g/3JMlRnsNfJtSjTTZXWN6TE8k+B80nZUU5OmVqAL2UNRz0
gHdA6Ag8P2qbAc5Cql+8Aj7d/sdyFZpZe6V1Vz8yqakDUV3KRwww/6N3iQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFBvKTOATuEgxbhtDtGhxmRUh7tG2MB8GA1UdIwQY
MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt
ZTAxNjI0MDFmZjdhLzEvRzhwTTRCTzRTREZ1RzBPMGFIR1pGU0h1MGJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh
LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuTpEAwQA
wRzsMA8EAgACMAkDBwAgAQZ8AyQwDQYJKoZIhvcNAQELBQADggEBAKAZ8F3Ij7vs
nbOvbQWlj49ifWc9V2rwEIHld0N84MLokkJ63sLAmPny44BHBN0mbYzscRWbp2FX
kXi5NW8Sw1cE8I97Z8HHaFjTGGcvw/f4JBaxVXv30kjM1h3mRleKW0qd8vwf5uVK
JO3FQC9h/J20yzL1oE0ziT57D7iYXULe3962xDhvvCSRz8iNNbwEQz5WZkrQ0GhX
pnGiM3F5ivgdIkFecT5zyLjiUqZplCbyUcup4HHlIrU71jDrI3gOO8s/s47nMIvC
1NUBqLvoZhB2kg9PRejpovwkQzfuwaa9/4ususnFfztmH7P/PpwhtdYImX+ClwNa
SYoO2iBaFL0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net