Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/jFmoFKTdoD_zhkYCV-OeXWX6tmA.roa
File: jFmoFKTdoD_zhkYCV-OeXWX6tmA.roa (raw, json)
Hash identifier: /aJDsITmOE0oYKNaeiIex9Em4QV4AHTPb9IZ9kKZrSU=
Subject key identifier: 8C:59:A8:14:A4:DD:A0:3F:F3:86:46:02:57:E3:9E:5D:65:FA:B6:60
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 018FD64E033361352A25621C61F40497A1B3
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/jFmoFKTdoD_zhkYCV-OeXWX6tmA.roa
Signing time: Sun 02 Jun 2024 00:16:27 +0000
ROA not before: Sun 02 Jun 2024 00:16:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.85.72.0/24 maxlen: 24
185.85.73.0/24 maxlen: 24
185.85.74.0/24 maxlen: 24
185.85.75.0/24 maxlen: 24
185.160.29.0/24 maxlen: 24
185.160.31.0/24 maxlen: 24
2a05:abc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d6:4e:03:33:61:35:2a:25:62:1c:61:f4:04:97:a1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jun 2 00:16:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c59a814a4dda03ff386460257e39e5d65fab660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:13:d4:19:d7:bb:8a:f4:27:3a:d4:fa:6d:
6f:a3:5b:96:95:3d:1d:c4:d5:66:ee:40:54:c2:45:
2a:cf:b8:91:12:43:83:6d:64:61:f0:ad:b0:83:f6:
3a:83:43:f9:c3:c4:03:76:f1:16:34:0b:66:70:68:
29:d2:8e:e5:02:02:ab:da:d3:7f:ab:33:a8:bb:f9:
a2:dc:aa:3d:41:92:6c:b5:26:79:28:b1:48:2c:7b:
37:cc:b1:ab:00:c7:5e:d7:95:0d:8a:5e:54:4d:2f:
a1:1e:a4:88:65:6b:51:8e:bd:f5:4c:26:f6:fb:34:
5d:73:20:61:65:54:14:0a:01:47:21:ea:ef:be:1e:
94:3d:50:9b:f0:b0:7d:18:59:31:a2:5a:87:f8:82:
b8:9c:d4:9a:f4:bc:50:48:00:88:36:e3:30:09:5e:
d5:79:73:13:ac:ae:ce:03:2a:05:37:5e:2c:72:55:
39:86:53:f9:2d:75:ae:d3:c4:06:cd:0d:0f:f6:65:
09:4a:e6:ca:b6:3c:ad:bf:54:b3:eb:02:5c:ec:36:
c7:5e:70:6b:fd:85:d1:9a:c7:cb:3c:23:93:ec:f5:
ad:59:ce:7c:f8:dc:94:aa:23:e2:59:40:3e:52:13:
01:40:60:01:ca:34:cf:a2:a4:e2:48:51:ee:ca:ae:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:59:A8:14:A4:DD:A0:3F:F3:86:46:02:57:E3:9E:5D:65:FA:B6:60
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/jFmoFKTdoD_zhkYCV-OeXWX6tmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.72.0/22
185.160.29.0/24
185.160.31.0/24
IPv6:
2a05:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:df:ff:13:5e:e5:a8:37:93:2d:5b:af:c9:1f:88:cb:72:e2:
02:3b:14:e5:cb:33:df:a6:8f:96:e6:7b:f8:7e:8a:5c:39:d7:
72:00:d0:5b:fc:be:49:a1:fa:1d:1d:f6:8b:c6:db:91:e0:b6:
21:00:b0:06:6e:45:f2:18:4b:00:47:54:22:d6:41:b6:2c:5b:
8a:26:00:5b:ec:33:9e:6b:8c:86:86:1f:ad:22:97:30:80:10:
67:66:f5:8e:1b:f2:d2:b4:16:8a:a1:68:08:74:c0:5f:94:42:
9e:89:2c:79:50:eb:f9:95:ee:05:85:ac:ab:0f:f3:85:24:0d:
5c:8e:07:8f:80:e3:0f:c3:76:58:a6:c0:b8:76:da:d5:80:b1:
43:cd:7e:ca:ac:8f:a7:7e:c5:3b:89:36:ce:86:50:2a:fe:fa:
e1:75:69:57:83:78:ec:37:04:70:cd:b6:ae:6d:b7:79:c0:17:
c6:98:35:67:eb:ae:c5:d7:2c:cf:bd:97:5d:77:f3:cf:a9:93:
65:c1:a6:92:99:31:99:ac:cd:df:ca:b6:94:f0:1e:f7:ca:49:
18:6e:b6:ce:b1:dd:1b:c8:b8:11:fa:6d:25:f9:a2:f0:af:cc:
9a:05:94:db:71:5f:00:84:aa:19:33:64:5d:62:e9:dc:90:5e:
59:00:39:29
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY/WTgMzYTUqJWIcYfQEl6GzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjQwNjAyMDAxNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzU5YTgxNGE0ZGRhMDNmZjM4NjQ2MDI1N2UzOWU1ZDY1ZmFiNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1gT1BnXu4r0JzrU+m1vo1uWlT0d
xNVm7kBUwkUqz7iREkODbWRh8K2wg/Y6g0P5w8QDdvEWNAtmcGgp0o7lAgKr2tN/
qzOou/mi3Ko9QZJstSZ5KLFILHs3zLGrAMde15UNil5UTS+hHqSIZWtRjr31TCb2
+zRdcyBhZVQUCgFHIervvh6UPVCb8LB9GFkxolqH+IK4nNSa9LxQSACINuMwCV7V
eXMTrK7OAyoFN14sclU5hlP5LXWu08QGzQ0P9mUJSubKtjytv1Sz6wJc7DbHXnBr
/YXRmsfLPCOT7PWtWc58+NyUqiPiWUA+UhMBQGAByjTPoqTiSFHuyq7HiQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFIxZqBSk3aA/84ZGAlfjnl1l+rZgMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvakZtb0ZLVGRvRF96aGtZQ1YtT2VYV1g2dG1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuVVIAwQA
uaAdAwQAuaAfMA0EAgACMAcDBQMqBavAMA0GCSqGSIb3DQEBCwUAA4IBAQA93/8T
XuWoN5MtW6/JH4jLcuICOxTlyzPfpo+W5nv4fopcOddyANBb/L5JofodHfaLxtuR
4LYhALAGbkXyGEsAR1Qi1kG2LFuKJgBb7DOea4yGhh+tIpcwgBBnZvWOG/LStBaK
oWgIdMBflEKeiSx5UOv5le4FhayrD/OFJA1cjgePgOMPw3ZYpsC4dtrVgLFDzX7K
rI+nfsU7iTbOhlAq/vrhdWlXg3jsNwRwzbaubbd5wBfGmDVn667F1yzPvZddd/PP
qZNlwaaSmTGZrM3fyraU8B73ykkYbrbOsd0byLgR+m0l+aLwr8yaBZTbcV8AhKoZ
M2RdYunckF5ZADkp
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:53 2024 by rpki-client on console.sobornost.net