Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/JyKT5t-tp9Ns-zQBDf52afbSU90.roa
File: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (raw, json)
Hash identifier: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=
Subject key identifier: 27:22:93:E6:DF:AD:A7:D3:6C:FB:34:01:0D:FE:76:69:F6:D2:53:DD
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 01942445A31D93A5FC5AA18B9EA0891BFBB1
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/JyKT5t-tp9Ns-zQBDf52afbSU90.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211494
IP address blocks: 185.93.7.0/24 maxlen: 24
185.235.143.0/24 maxlen: 24
2a0d:a180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a3:1d:93:a5:fc:5a:a1:8b:9e:a0:89:1b:fb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=272293e6dfada7d36cfb34010dfe7669f6d253dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:c6:ed:73:93:2e:c2:44:62:f2:d8:18:4a:
79:36:c8:e6:63:60:9b:98:ac:d9:d8:02:fd:72:30:
36:ef:93:19:88:fc:a3:6d:52:66:48:6c:e4:11:7b:
66:37:2b:0e:12:72:47:07:df:e2:b1:b7:cd:fc:7f:
c4:54:ab:b0:44:fc:89:5b:34:db:01:9f:48:c1:45:
76:fb:ae:be:7d:51:6b:37:d0:0e:77:93:d2:a0:94:
b6:87:2e:79:95:a5:9e:e1:c1:32:5c:cf:75:37:a6:
fe:01:4c:d8:28:de:70:14:de:da:ec:87:6b:3f:6c:
30:2d:48:bf:43:6a:6e:43:14:ad:a5:a3:14:c0:c4:
82:19:3e:38:f1:51:d1:40:59:68:18:14:a2:25:a8:
d6:64:1c:9d:38:cd:0b:08:0d:33:08:1d:7c:f1:be:
c9:5b:24:e1:48:08:e4:b3:15:8f:10:67:c7:b3:7f:
40:06:d3:48:2f:9b:7c:e6:6d:6b:31:34:74:02:17:
df:dc:78:53:14:f6:8b:cf:7b:c0:35:f7:02:b0:d0:
8c:9d:1a:9a:3f:8e:0f:6f:5c:b2:d3:aa:83:38:ad:
e4:6b:94:6e:96:c0:1b:35:85:2f:e3:c2:60:9b:ca:
7b:66:43:2b:be:84:37:bb:d1:ae:d0:86:28:b1:b0:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:22:93:E6:DF:AD:A7:D3:6C:FB:34:01:0D:FE:76:69:F6:D2:53:DD
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/JyKT5t-tp9Ns-zQBDf52afbSU90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.7.0/24
185.235.143.0/24
IPv6:
2a0d:a180::/32
Signature Algorithm: sha256WithRSAEncryption
77:08:dd:9a:48:90:a9:0c:16:10:fe:f6:06:ff:df:aa:59:7b:
28:b3:4e:ae:8f:b4:88:3e:1e:03:48:fa:7d:58:56:d3:42:4f:
9c:01:6f:48:e9:00:56:2e:3e:4b:6c:b0:6d:74:05:02:0f:39:
1f:06:0f:9e:68:a6:7b:36:93:82:f4:fd:8d:d8:03:5c:ef:e5:
55:6e:65:57:d1:f3:a8:0f:6a:76:e2:18:f5:84:7e:e0:36:a3:
e2:c2:fb:6b:c4:b5:aa:9c:b3:21:0e:04:2b:b8:f6:36:69:ee:
1d:39:bf:f5:a2:25:10:e1:00:34:d0:35:a7:2a:43:32:b9:24:
8b:ad:44:ac:d0:ae:21:4e:bc:5a:65:52:c9:4a:9d:c7:4f:4c:
ed:e2:d2:af:7d:a3:cb:2f:fa:b4:52:0a:b5:30:46:0d:4f:70:
32:d6:e9:8b:ea:04:7a:90:77:ae:f5:47:3e:bd:47:46:f7:d2:
8f:ff:d1:af:07:a9:91:6c:14:d3:fc:52:f4:00:e2:74:73:ec:
c0:e7:f9:1a:81:9c:08:b8:e4:bb:d8:81:ef:13:4c:d4:dc:d4:
37:73:77:c8:e8:5c:5c:2d:b2:3c:da:07:28:8a:b5:3d:b6:a7:
8f:5a:d6:95:59:f5:69:57:16:51:26:f0:1f:1f:d9:95:bf:07:
c5:98:d3:d2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQkRaMdk6X8WqGLnqCJG/uxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjNlYjQ0M2MwNmEzZGNjMDg4ZTJjYWEwNWNlMDljZjhk
NGU3YTYwHhcNMjUwMTAxMjM0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzIyOTNlNmRmYWRhN2QzNmNmYjM0MDEwZGZlNzY2OWY2ZDI1M2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv/G7XOTLsJEYvLYGEp5NsjmY2Cb
mKzZ2AL9cjA275MZiPyjbVJmSGzkEXtmNysOEnJHB9/isbfN/H/EVKuwRPyJWzTb
AZ9IwUV2+66+fVFrN9AOd5PSoJS2hy55laWe4cEyXM91N6b+AUzYKN5wFN7a7Idr
P2wwLUi/Q2puQxStpaMUwMSCGT448VHRQFloGBSiJajWZBydOM0LCA0zCB188b7J
WyThSAjksxWPEGfHs39ABtNIL5t85m1rMTR0Ahff3HhTFPaLz3vANfcCsNCMnRqa
P44Pb1yy06qDOK3ka5RulsAbNYUv48Jgm8p7ZkMrvoQ3u9Gu0IYosbBrSQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCcik+bfrafTbPs0AQ3+dmn20lPdMB8GA1UdIwQY
MBaAFKiz60Q8BqPcwIjiyqBc4Jz41OemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEt
MzEzZGU0ODkyYjhkLzEvSnlLVDV0LXRwOU5zLXpRQkRmNTJhZmJTVTkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEtMzEzZGU0ODkyYjhk
LzEvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuV0HAwQA
ueuPMA0EAgACMAcDBQAqDaGAMA0GCSqGSIb3DQEBCwUAA4IBAQB3CN2aSJCpDBYQ
/vYG/9+qWXsos06uj7SIPh4DSPp9WFbTQk+cAW9I6QBWLj5LbLBtdAUCDzkfBg+e
aKZ7NpOC9P2N2ANc7+VVbmVX0fOoD2p24hj1hH7gNqPiwvtrxLWqnLMhDgQruPY2
ae4dOb/1oiUQ4QA00DWnKkMyuSSLrUSs0K4hTrxaZVLJSp3HT0zt4tKvfaPLL/q0
Ugq1MEYNT3Ay1umL6gR6kHeu9Uc+vUdG99KP/9GvB6mRbBTT/FL0AOJ0c+zA5/ka
gZwIuOS72IHvE0zU3NQ3c3fI6FxcLbI82gcoirU9tqePWtaVWfVpVxZRJvAfH9mV
vwfFmNPS
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net