Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/tiyXMKkh1c00WsEaw1I-tE1-ImI.roa
File: tiyXMKkh1c00WsEaw1I-tE1-ImI.roa (raw, json)
Hash identifier: A3wieewQW3Kix1vMGs+UTMXhUvBDH87xFIuGyxaYKk4=
Subject key identifier: B6:2C:97:30:A9:21:D5:CD:34:5A:C1:1A:C3:52:3E:B4:4D:7E:22:62
Certificate issuer: /CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Certificate serial: 019423D6F79FD4172085E0C325C347BF09E3
Authority key identifier: 6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/tiyXMKkh1c00WsEaw1I-tE1-ImI.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43298
IP address blocks: 185.71.65.0/24 maxlen: 24
185.71.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f7:9f:d4:17:20:85:e0:c3:25:c3:47:bf:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b62c9730a921d5cd345ac11ac3523eb44d7e2262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:3a:0f:c6:d3:3a:fd:bc:7f:28:d5:a7:80:
e9:c3:a7:90:d7:93:e8:69:d2:6d:16:38:10:f9:f8:
14:27:33:ec:47:f4:50:a4:f8:80:8f:b7:30:dd:56:
3d:57:02:b5:c7:d7:e5:a8:ce:81:e8:01:43:bd:ef:
57:53:0b:db:07:56:0f:ad:b1:9f:09:0a:63:7f:ec:
f2:22:df:48:13:9f:49:43:fd:21:50:b0:19:8b:ee:
d6:2c:bc:3e:71:e3:e0:3b:52:ad:f1:b0:9b:f7:06:
14:6a:79:35:ab:b4:4d:f3:d2:3b:f5:66:80:9a:44:
00:3a:77:4e:14:f8:61:3b:24:c7:6c:4a:dd:f2:ba:
94:41:3c:70:f1:ac:5b:5e:d8:62:41:7a:8e:d2:66:
1c:4a:75:50:19:a0:5b:4e:4c:40:cd:91:12:38:80:
2e:94:fe:d6:df:d5:78:91:04:19:97:a4:a1:ce:10:
bc:6b:9b:67:5a:7f:7c:a4:af:8c:0d:37:c9:7d:a1:
13:43:70:e0:b9:46:46:69:cc:03:2e:0a:de:f7:cb:
44:d3:84:86:75:1c:4b:5c:65:04:bc:6d:3a:4a:fa:
67:c8:bd:eb:d5:31:74:60:9c:e2:ca:f9:8f:6e:91:
4b:72:d7:61:0e:bf:f4:a8:14:a0:9c:07:33:b5:94:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2C:97:30:A9:21:D5:CD:34:5A:C1:1A:C3:52:3E:B4:4D:7E:22:62
X509v3 Authority Key Identifier:
keyid:6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/tiyXMKkh1c00WsEaw1I-tE1-ImI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.65.0/24
185.71.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:38:6d:2f:3b:98:12:d0:0a:91:3d:ad:a3:76:9f:cc:fe:9e:
d1:a8:16:c8:f5:f3:b5:14:6c:ce:aa:93:04:ae:b2:2c:b7:4f:
fa:ba:78:ff:88:e2:47:6d:be:36:c3:c7:6c:03:11:9c:0e:64:
d3:dc:d4:93:23:c2:ff:d3:7c:ad:91:9c:69:af:f4:3c:1b:43:
64:0b:72:5e:e7:ce:62:28:da:78:39:b9:be:79:0c:a3:2c:c3:
33:2f:d5:85:e8:9b:12:bc:13:12:2a:b1:e7:21:55:c9:12:b4:
38:c4:e4:d5:44:e9:65:6a:43:a6:c6:d0:e3:7f:25:53:77:c9:
08:62:fe:82:ff:bb:7e:c5:1e:ca:71:a4:73:d8:09:d9:b1:90:
b1:f8:ac:92:8c:3f:c7:8d:8b:ab:ba:71:03:d6:ca:55:4d:94:
d6:96:76:37:f7:1e:4a:73:a3:44:34:1e:65:2c:29:b2:e2:24:
00:97:1b:ea:21:10:69:09:53:ec:c2:b6:24:f6:b0:c7:9b:eb:
04:37:42:5f:f5:9f:10:50:35:d7:66:ab:71:a6:dd:48:c1:78:
55:24:81:45:fe:29:4b:dc:4f:e4:88:c6:8d:b9:d0:7d:ec:a2:
79:28:39:80:49:1d:3b:08:7c:f4:9e:30:74:9f:c2:bd:65:47:
6a:12:be:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1vef1BcgheDDJcNHvwnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzBkMDVmOGVlOWU5NThmYzk1ZGU2NWRjNTlhMjE0MWM1
ZjFlZmQwHhcNMjUwMTAxMjE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjJjOTczMGE5MjFkNWNkMzQ1YWMxMWFjMzUyM2ViNDRkN2UyMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpA6D8bTOv28fyjVp4Dpw6eQ15Po
adJtFjgQ+fgUJzPsR/RQpPiAj7cw3VY9VwK1x9flqM6B6AFDve9XUwvbB1YPrbGf
CQpjf+zyIt9IE59JQ/0hULAZi+7WLLw+cePgO1Kt8bCb9wYUank1q7RN89I79WaA
mkQAOndOFPhhOyTHbErd8rqUQTxw8axbXthiQXqO0mYcSnVQGaBbTkxAzZESOIAu
lP7W39V4kQQZl6ShzhC8a5tnWn98pK+MDTfJfaETQ3DguUZGacwDLgre98tE04SG
dRxLXGUEvG06SvpnyL3r1TF0YJziyvmPbpFLctdhDr/0qBSgnAcztZRKawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLYslzCpIdXNNFrBGsNSPrRNfiJiMB8GA1UdIwQY
MBaAFG3A0F+O6elY/JXeZdxZohQcXx79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNEUVg0N3A2Vmo4bGQ1bDNGbWlGQnhmSHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZDU3ZGQtNTU5OS00NWE3LWFiMDMt
NGQ2Y2UwNzY2ZWI1LzEvdGl5WE1La2gxYzAwV3NFYXcxSS10RTEtSW1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xZDU3ZGQtNTU5OS00NWE3LWFiMDMtNGQ2Y2UwNzY2ZWI1
LzEvYmNEUVg0N3A2Vmo4bGQ1bDNGbWlGQnhmSHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUdBAwQA
uUdDMA0GCSqGSIb3DQEBCwUAA4IBAQB/OG0vO5gS0AqRPa2jdp/M/p7RqBbI9fO1
FGzOqpMErrIst0/6unj/iOJHbb42w8dsAxGcDmTT3NSTI8L/03ytkZxpr/Q8G0Nk
C3Je585iKNp4Obm+eQyjLMMzL9WF6JsSvBMSKrHnIVXJErQ4xOTVROllakOmxtDj
fyVTd8kIYv6C/7t+xR7KcaRz2AnZsZCx+KySjD/HjYurunED1spVTZTWlnY39x5K
c6NENB5lLCmy4iQAlxvqIRBpCVPswrYk9rDHm+sEN0Jf9Z8QUDXXZqtxpt1IwXhV
JIFF/ilL3E/kiMaNudB97KJ5KDmASR07CHz0njB0n8K9ZUdqEr7a
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:28:39 2025 by rpki-client on console.sobornost.net