Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/Tz0-GH9GTxNnsSYKPK-Ng0bqHFU.roa
File: Tz0-GH9GTxNnsSYKPK-Ng0bqHFU.roa (raw, json)
Hash identifier: 6KAfAR9FK4FJFxLsDkhMRqDlSfVSMvMOJuzMsurfhN0=
Subject key identifier: 4F:3D:3E:18:7F:46:4F:13:67:B1:26:0A:3C:AF:8D:83:46:EA:1C:55
Certificate issuer: /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Certificate serial: 01942068742B788E494114AAED365B3A66BA
Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/Tz0-GH9GTxNnsSYKPK-Ng0bqHFU.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42061
IP address blocks: 185.248.180.0/22 maxlen: 22
193.186.5.0/24 maxlen: 24
193.186.6.0/24 maxlen: 24
2a0d:ee80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:74:2b:78:8e:49:41:14:aa:ed:36:5b:3a:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f3d3e187f464f1367b1260a3caf8d8346ea1c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:3a:b1:e8:64:d7:d0:33:77:67:f5:1f:f7:
12:e3:f7:21:b8:4e:a7:bf:88:95:b9:8d:bc:0a:94:
ea:b7:cb:94:e3:bf:50:6c:95:f6:05:e6:56:a5:e1:
6e:a9:06:65:1c:6f:e7:48:56:47:e4:b4:b4:aa:e1:
c0:2f:8b:4d:e3:c2:e3:c0:b5:fd:77:ab:42:40:2f:
78:27:af:73:46:63:37:24:fb:b7:e5:34:21:2c:0b:
76:82:22:fa:70:b9:b9:d8:a3:82:98:bb:4e:cb:d1:
07:41:d0:45:d0:eb:b0:ca:cb:b2:8d:81:70:5a:93:
85:46:cc:61:1b:ad:9a:ec:c0:db:28:86:cc:58:71:
01:46:9e:d9:bc:9b:cd:25:e3:65:01:21:0f:23:3d:
cf:79:6c:ee:7b:88:f5:e3:37:f2:46:cd:95:68:8b:
3d:89:8c:48:34:1a:78:00:57:c7:b1:b8:15:6b:e0:
10:51:90:49:b5:53:c8:fb:b2:ba:02:1d:82:fa:e7:
2e:99:89:b1:81:fe:36:20:a6:a1:cb:42:6e:41:5a:
86:83:51:ce:64:6a:d9:b3:cd:a7:85:58:ac:ce:c6:
68:9f:04:13:b5:a9:95:38:c7:50:1a:4a:68:f7:8b:
ab:fc:15:4b:17:9c:2d:63:bd:dd:a3:75:c6:ca:a2:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3D:3E:18:7F:46:4F:13:67:B1:26:0A:3C:AF:8D:83:46:EA:1C:55
X509v3 Authority Key Identifier:
keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/Tz0-GH9GTxNnsSYKPK-Ng0bqHFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.180.0/22
193.186.5.0-193.186.6.255
IPv6:
2a0d:ee80::/32
Signature Algorithm: sha256WithRSAEncryption
69:89:3b:93:e4:f3:1f:d4:b9:cd:9f:a6:22:5b:cd:10:b6:39:
dc:df:5e:8c:f5:b5:ea:f8:25:95:b8:51:58:ad:96:86:d6:cd:
e5:3f:1b:19:2d:38:27:b9:0c:c3:dc:42:1b:f2:9b:00:d3:8e:
4b:5a:47:0e:4e:77:d4:67:0f:eb:33:7f:4a:e0:fb:9b:6c:fa:
10:2a:e0:ee:91:fb:84:f2:d5:1a:f3:9a:3a:39:8a:6d:c9:5e:
37:13:e8:c7:8a:5d:09:15:6d:a4:9d:39:46:eb:fd:71:72:2c:
79:62:59:32:8d:f2:4d:0e:7e:96:67:03:d9:c7:69:dd:4c:a2:
92:2b:d5:8a:15:44:57:15:46:75:ef:d4:d5:75:5e:e7:26:f8:
81:c8:20:50:f8:4b:ed:80:2e:33:01:c7:de:e1:e0:7b:36:1a:
a1:08:30:05:92:31:82:3a:b8:ff:0a:a2:fd:9a:14:2d:4e:2f:
3a:91:69:43:29:f8:09:be:08:6f:c3:52:08:65:23:eb:43:fc:
78:eb:38:48:18:07:d0:6e:2e:df:6b:76:01:95:5c:6c:df:49:
8e:f3:64:61:60:a3:43:de:82:45:50:ba:85:99:95:0c:86:5e:
4a:7f:5b:ea:fe:bf:c1:a0:3b:5c:d1:5c:e5:d7:5c:93:fc:f1:
a0:dd:10:3c
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQgaHQreI5JQRSq7TZbOma6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDkyMDYzYTJhN2RjNjA5ZTJiNmY5Y2MwZGFmMDRmMWU5
OGI5ZWQwHhcNMjUwMTAxMDU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjNkM2UxODdmNDY0ZjEzNjdiMTI2MGEzY2FmOGQ4MzQ2ZWExYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+06sehk19Azd2f1H/cS4/chuE6n
v4iVuY28CpTqt8uU479QbJX2BeZWpeFuqQZlHG/nSFZH5LS0quHAL4tN48LjwLX9
d6tCQC94J69zRmM3JPu35TQhLAt2giL6cLm52KOCmLtOy9EHQdBF0OuwysuyjYFw
WpOFRsxhG62a7MDbKIbMWHEBRp7ZvJvNJeNlASEPIz3PeWzue4j14zfyRs2VaIs9
iYxINBp4AFfHsbgVa+AQUZBJtVPI+7K6Ah2C+ucumYmxgf42IKahy0JuQVqGg1HO
ZGrZs82nhViszsZonwQTtamVOMdQGkpo94ur/BVLF5wtY73do3XGyqIvDwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFE89Phh/Rk8TZ7EmCjyvjYNG6hxVMB8GA1UdIwQY
MBaAFBYJIGOip9xgnitvnMDa8E8emLntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjct
NjBkM2ZlMTljM2JjLzEvVHowLUdIOUdUeE5uc1NZS1BLLU5nMGJxSEZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjctNjBkM2ZlMTljM2Jj
LzEvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCufi0MAwD
BADBugUDBADBugYwDQQCAAIwBwMFACoN7oAwDQYJKoZIhvcNAQELBQADggEBAGmJ
O5Pk8x/Uuc2fpiJbzRC2OdzfXoz1ter4JZW4UVitlobWzeU/GxktOCe5DMPcQhvy
mwDTjktaRw5Od9RnD+szf0rg+5ts+hAq4O6R+4Ty1Rrzmjo5im3JXjcT6MeKXQkV
baSdOUbr/XFyLHliWTKN8k0OfpZnA9nHad1MopIr1YoVRFcVRnXv1NV1Xucm+IHI
IFD4S+2ALjMBx97h4Hs2GqEIMAWSMYI6uP8Kov2aFC1OLzqRaUMp+Am+CG/DUghl
I+tD/HjrOEgYB9BuLt9rdgGVXGzfSY7zZGFgo0PegkVQuoWZlQyGXkp/W+r+v8Gg
O1zRXOXXXJP88aDdEDw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:32 2025 by rpki-client on console.sobornost.net