Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa
File: eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa (raw, json)
Hash identifier: x3TEJF+lEhYQXreBGO5p/2V/eqc0Q9Afb2MZe1Qg0wg=
Subject key identifier: 78:B3:35:B4:C0:36:F8:FA:F1:FB:A0:09:98:F7:D2:C4:F4:D0:F3:0B
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 019427B4FDCBD84F373AD29EDDCF28989B35
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa
Signing time: Thu 02 Jan 2025 15:49:20 +0000
ROA not before: Thu 02 Jan 2025 15:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3262
IP address blocks: 185.177.40.0/24 maxlen: 24
185.177.41.0/24 maxlen: 24
185.220.164.0/24 maxlen: 24
185.220.165.0/24 maxlen: 24
185.220.166.0/24 maxlen: 24
185.220.167.0/24 maxlen: 24
185.226.229.0/24 maxlen: 24
185.232.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:fd:cb:d8:4f:37:3a:d2:9e:dd:cf:28:98:9b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 2 15:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78b335b4c036f8faf1fba00998f7d2c4f4d0f30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:06:18:f3:55:18:f3:79:74:ad:e2:2c:16:
ca:11:7d:f3:88:58:db:10:2e:29:fb:d4:cc:ae:5c:
13:f7:c3:90:0b:db:43:44:ca:b2:85:8d:0a:7e:5d:
b4:9f:b9:2a:25:1b:28:4b:41:f6:39:7c:c7:d7:21:
5e:5c:6b:86:2e:c9:f6:3c:c1:51:9b:f1:a2:a5:07:
6c:b2:34:4b:f6:3d:ae:b0:61:48:ae:3d:27:1a:89:
54:97:bf:d6:d6:3d:fd:7e:a7:c8:86:6c:ab:5f:3d:
1c:7c:03:b4:54:1d:68:8d:8e:c4:53:06:52:12:28:
6a:71:e1:b7:8a:a0:b0:d4:96:2e:cf:42:da:a2:f1:
0e:af:ce:9e:90:4a:7e:fb:d3:b0:ba:4b:37:eb:b0:
e4:f8:2e:33:94:3f:cf:31:23:dc:a4:25:68:6b:55:
23:f0:f5:93:c1:e2:6a:76:ca:02:78:79:0a:29:07:
c6:26:77:80:c3:4e:71:0e:b9:21:c2:6a:f1:b8:f2:
d9:01:76:cc:49:36:d5:cb:28:2e:8f:ce:6f:fc:ad:
0e:65:6e:6d:5a:c7:89:4d:f7:4d:2d:26:f7:ee:0d:
dc:87:ee:0b:91:85:84:09:71:5c:1c:12:d5:6c:dd:
be:39:97:a9:54:98:c5:df:5f:6f:d8:a1:80:62:3d:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:35:B4:C0:36:F8:FA:F1:FB:A0:09:98:F7:D2:C4:F4:D0:F3:0B
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.40.0/23
185.220.164.0/22
185.226.229.0/24
185.232.132.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a6:f6:ba:af:9e:bf:19:7c:02:80:c0:0e:b1:dd:d7:e8:8e:
9d:05:dc:60:98:0f:d7:19:77:4a:a3:39:38:7f:fa:63:4a:f3:
06:68:2e:ec:73:bc:a3:6a:af:3f:3d:9a:5d:b2:6d:af:3e:42:
f5:ad:ab:a8:95:9f:ca:a8:fa:1b:5c:4b:fa:8b:fe:e2:00:47:
d2:b7:13:a2:9f:52:6f:05:02:25:4b:b2:73:08:76:2e:de:e6:
3d:de:4d:49:e7:8b:d0:67:08:59:10:53:2e:12:0f:f4:94:5d:
e2:90:8c:01:db:d7:32:d5:70:7a:24:ab:93:8c:16:19:e2:a6:
8e:9b:46:b8:8b:80:8d:a2:59:fd:86:ad:f9:af:92:60:9a:80:
c3:b6:e1:01:42:7f:c0:cb:93:03:9b:ad:de:21:0b:a9:3b:4d:
4f:f2:5b:ff:ab:83:71:ce:a3:ea:1d:d1:b4:6e:2e:40:69:32:
db:7b:d0:54:6e:5f:f6:b2:fa:6b:da:95:db:ac:cc:25:28:11:
12:23:15:a7:b1:97:86:44:c6:ee:ca:69:63:0a:cb:51:3d:5c:
11:4b:70:68:a5:08:c9:85:bf:f6:b4:86:c6:01:e9:84:f0:0c:
ae:9a:80:60:89:13:ed:20:39:dc:4a:6d:f1:e5:6a:e6:af:a7:
fb:38:be:c4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQntP3L2E83OtKe3c8omJs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2
ZmZlYWEwHhcNMjUwMTAyMTU0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGIzMzViNGMwMzZmOGZhZjFmYmEwMDk5OGY3ZDJjNGY0ZDBmMzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SAGGPNVGPN5dK3iLBbKEX3ziFjb
EC4p+9TMrlwT98OQC9tDRMqyhY0Kfl20n7kqJRsoS0H2OXzH1yFeXGuGLsn2PMFR
m/GipQdssjRL9j2usGFIrj0nGolUl7/W1j39fqfIhmyrXz0cfAO0VB1ojY7EUwZS
EihqceG3iqCw1JYuz0LaovEOr86ekEp++9Owuks367Dk+C4zlD/PMSPcpCVoa1Uj
8PWTweJqdsoCeHkKKQfGJneAw05xDrkhwmrxuPLZAXbMSTbVyyguj85v/K0OZW5t
WseJTfdNLSb37g3ch+4LkYWECXFcHBLVbN2+OZepVJjF319v2KGAYj323QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHizNbTANvj68fugCZj30sT00PMLMB8GA1UdIwQY
MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt
OWNjYmIwODQyOGZhLzEvZUxNMXRNQTItUHJ4LTZBSm1QZlN4UFRROHdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh
LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBubEoAwQC
udykAwQAueLlAwQAueiEMA0GCSqGSIb3DQEBCwUAA4IBAQCSpva6r56/GXwCgMAO
sd3X6I6dBdxgmA/XGXdKozk4f/pjSvMGaC7sc7yjaq8/PZpdsm2vPkL1rauolZ/K
qPobXEv6i/7iAEfStxOin1JvBQIlS7JzCHYu3uY93k1J54vQZwhZEFMuEg/0lF3i
kIwB29cy1XB6JKuTjBYZ4qaOm0a4i4CNoln9hq35r5JgmoDDtuEBQn/Ay5MDm63e
IQupO01P8lv/q4NxzqPqHdG0bi5AaTLbe9BUbl/2svpr2pXbrMwlKBESIxWnsZeG
RMbuymljCstRPVwRS3BopQjJhb/2tIbGAemE8AyumoBgiRPtIDncSm3x5Wrmr6f7
OL7E
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net