Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/ml5z24U6xSCTuhnWBbQRxmv1hXU.roa
File: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (raw, json)
Hash identifier: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=
Subject key identifier: 9A:5E:73:DB:85:3A:C5:20:93:BA:19:D6:05:B4:11:C6:6B:F5:85:75
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 019422FBB3FB1ED4F943ADB4E7762503753D
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/ml5z24U6xSCTuhnWBbQRxmv1hXU.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211929
IP address blocks: 185.230.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b3:fb:1e:d4:f9:43:ad:b4:e7:76:25:03:75:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a5e73db853ac52093ba19d605b411c66bf58575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:3c:9e:40:cf:27:b2:15:12:1f:19:54:d3:
35:f8:f5:29:6a:08:1f:a6:12:83:47:4d:3e:6e:01:
b0:b5:68:1c:28:ae:de:84:8c:6d:43:66:e3:bd:f5:
6b:a6:41:a7:82:9f:7f:66:3e:71:d0:6f:a7:d9:6d:
86:76:36:26:3c:c2:94:9d:b7:bb:e5:ad:25:dc:29:
20:d9:b6:1b:d5:4d:5e:cd:f6:3c:26:fe:54:67:a2:
5e:00:bd:7e:01:de:12:9e:ac:15:7e:15:0d:c4:68:
69:bb:a7:94:19:da:4d:6d:5d:2e:16:97:f6:d3:98:
98:e0:55:2c:54:53:47:d8:7c:9c:b8:7e:a1:6f:51:
a7:08:15:f3:43:2c:7b:65:63:ef:7a:81:13:cd:96:
df:06:fb:74:27:49:dc:7f:39:2d:4e:11:75:d4:cc:
55:5d:9d:59:f5:c0:11:e4:3e:48:c6:a6:ef:ac:ad:
e6:bf:c3:e4:94:65:75:40:e7:a4:b4:48:a3:bf:cd:
5c:76:c7:74:6c:e3:b9:60:ba:a4:c0:44:2f:3b:93:
f9:57:ee:e9:83:f5:30:de:d2:c6:89:14:65:9c:ae:
7b:7d:71:69:39:80:f3:77:2e:55:8d:e3:79:59:24:
f8:fb:8c:c3:b3:76:b5:bb:71:20:88:4a:3e:15:8e:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:73:DB:85:3A:C5:20:93:BA:19:D6:05:B4:11:C6:6B:F5:85:75
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/ml5z24U6xSCTuhnWBbQRxmv1hXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.198.0/24
Signature Algorithm: sha256WithRSAEncryption
68:70:4a:4b:5d:a1:ec:ab:01:09:68:9e:e7:bc:36:a9:91:cf:
03:3b:08:d9:b9:2b:0f:8d:d8:31:1d:32:4a:b4:74:36:a4:03:
a0:88:48:98:31:37:44:27:42:e4:fc:2c:b7:bf:42:98:a2:6b:
6f:50:c5:72:6e:f0:e4:75:99:61:7d:e3:08:f7:d3:1e:c4:5a:
36:87:d9:9d:93:a9:6b:6d:26:40:15:c1:eb:7c:4e:3c:b8:1b:
ef:ec:bf:34:32:87:d8:b0:50:82:dd:a2:71:21:e9:0c:c2:b9:
d8:2c:49:f2:74:45:53:1a:f0:47:da:45:98:de:cc:70:12:b6:
43:36:d6:5e:7d:92:cf:a6:08:c3:de:7f:f5:55:49:53:2f:da:
17:99:ff:1e:16:03:fe:71:6e:5d:e3:d8:8c:99:b1:3b:0d:a0:
7e:3a:df:da:23:ae:8f:f5:e5:5f:ac:73:31:71:89:8c:67:bd:
4b:aa:5a:db:43:13:27:cf:8a:34:16:8d:bb:b4:0b:a2:98:57:
c2:fc:17:5c:b2:ca:b9:a2:98:08:00:29:e6:80:57:6a:73:30:
03:fa:3a:9c:36:fb:88:1e:9f:af:ae:ff:8b:98:ab:00:e0:3c:
14:2d:8c:1f:48:a7:b0:66:f7:ca:7a:75:4a:af:ed:d1:c3:dd:
5c:82:31:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+7P7HtT5Q62053YlA3U9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjM2VhYzBmNzZhZDIxY2Q1MjQ0NTkzZTRjMTdiYTY3MWI1
ZThlZTkwHhcNMjUwMTAxMTc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTVlNzNkYjg1M2FjNTIwOTNiYTE5ZDYwNWI0MTFjNjZiZjU4NTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w88nkDPJ7IVEh8ZVNM1+PUpaggf
phKDR00+bgGwtWgcKK7ehIxtQ2bjvfVrpkGngp9/Zj5x0G+n2W2GdjYmPMKUnbe7
5a0l3Ckg2bYb1U1ezfY8Jv5UZ6JeAL1+Ad4SnqwVfhUNxGhpu6eUGdpNbV0uFpf2
05iY4FUsVFNH2HycuH6hb1GnCBXzQyx7ZWPveoETzZbfBvt0J0ncfzktThF11MxV
XZ1Z9cAR5D5IxqbvrK3mv8PklGV1QOektEijv81cdsd0bOO5YLqkwEQvO5P5V+7p
g/Uw3tLGiRRlnK57fXFpOYDzdy5VjeN5WST4+4zDs3a1u3EgiEo+FY7P0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJpec9uFOsUgk7oZ1gW0EcZr9YV1MB8GA1UdIwQY
MBaAFFw+rA92rSHNUkRZPkwXumcbXo7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEQ2c0QzYXRJYzFTUkZrLVRCZTZaeHRlanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85NjQwODgtOGFiZC00NTRjLTk5Mjct
NDQ2NGExM2JmMWEwLzEvbWw1ejI0VTZ4U0NUdWhuV0JiUVJ4bXYxaFhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni85NjQwODgtOGFiZC00NTRjLTk5MjctNDQ2NGExM2JmMWEw
LzEvWEQ2c0QzYXRJYzFTUkZrLVRCZTZaeHRlanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuebGMA0G
CSqGSIb3DQEBCwUAA4IBAQBocEpLXaHsqwEJaJ7nvDapkc8DOwjZuSsPjdgxHTJK
tHQ2pAOgiEiYMTdEJ0Lk/Cy3v0KYomtvUMVybvDkdZlhfeMI99MexFo2h9mdk6lr
bSZAFcHrfE48uBvv7L80MofYsFCC3aJxIekMwrnYLEnydEVTGvBH2kWY3sxwErZD
NtZefZLPpgjD3n/1VUlTL9oXmf8eFgP+cW5d49iMmbE7DaB+Ot/aI66P9eVfrHMx
cYmMZ71LqlrbQxMnz4o0Fo27tAuimFfC/Bdcssq5opgIACnmgFdqczAD+jqcNvuI
Hp+vrv+LmKsA4DwULYwfSKewZvfKenVKr+3Rw91cgjE8
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net