Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa
File: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (raw, json)
Hash identifier: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=
Subject key identifier: 49:29:39:10:9D:9E:78:2C:47:AA:D4:48:DF:AB:38:60:06:BA:5C:71
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 019425FD3E51FC7F7BDA4474892115F9C91A
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa
Signing time: Thu 02 Jan 2025 07:49:00 +0000
ROA not before: Thu 02 Jan 2025 07:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51262
IP address blocks: 185.147.8.0/24 maxlen: 24
185.147.9.0/24 maxlen: 24
185.147.10.0/23 maxlen: 23
185.147.10.0/24 maxlen: 24
185.147.11.0/24 maxlen: 24
2a0a:dc00::/32 maxlen: 32
2a0a:dc01::/32 maxlen: 32
2a0a:dc02::/32 maxlen: 32
2a0a:dc03::/32 maxlen: 32
2a0a:dc04::/32 maxlen: 32
2a0a:dc05::/32 maxlen: 32
2a0a:dc06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:3e:51:fc:7f:7b:da:44:74:89:21:15:f9:c9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Jan 2 07:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=492939109d9e782c47aad448dfab386006ba5c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:c4:28:ca:3c:f7:bb:f8:b3:13:8c:c2:20:
ff:3c:5f:7f:a7:10:0d:97:a4:eb:02:d1:f8:a9:4c:
ca:02:89:aa:1b:98:84:2a:00:b9:f1:85:ea:7f:6f:
32:69:87:6c:ce:7e:8c:65:fe:63:20:6a:d6:75:a9:
4a:6d:a5:56:37:bd:36:60:32:6e:33:bb:b4:5b:22:
ae:bd:90:7a:53:81:26:7c:95:af:3d:d0:39:7a:dc:
58:79:6d:2f:8a:44:31:2f:84:c9:93:2f:c8:e6:51:
91:0a:02:ba:8d:f5:9b:33:7a:26:a4:59:74:10:d4:
a1:3e:72:07:16:fe:10:a6:d8:06:f1:22:15:16:09:
3e:e8:33:5c:22:aa:12:65:14:65:71:50:4b:dc:c7:
d2:08:78:9a:2c:3a:7f:6c:ca:97:c1:25:b4:f1:26:
72:f9:9f:3a:81:32:fe:da:f5:fb:87:47:f6:b3:5f:
eb:81:56:d7:cd:a3:2d:65:6c:30:f1:44:f9:83:b1:
64:f3:d7:cf:1a:e5:ab:64:0b:23:81:b2:1b:48:cf:
82:87:b5:93:02:ab:84:07:30:5f:db:cf:f8:6a:8c:
1b:8a:9e:ed:be:d4:11:dc:b2:4d:7d:f8:4d:ae:9e:
d5:c6:26:3e:c6:09:43:19:06:a6:21:af:1d:55:ae:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:39:10:9D:9E:78:2C:47:AA:D4:48:DF:AB:38:60:06:BA:5C:71
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.8.0/22
IPv6:
2a0a:dc00::-2a0a:dc06:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
55:99:2c:9a:fc:7b:7f:62:e9:96:58:b1:97:68:fc:69:88:a7:
fd:6c:5c:0f:32:c9:eb:03:19:d3:ef:66:2e:ae:47:4b:05:78:
57:54:2a:8a:91:b4:fc:43:55:e7:43:77:b2:30:26:e5:7c:d9:
93:42:21:a9:44:fc:07:9d:51:7f:d5:6f:1d:87:d9:87:f4:1e:
de:e5:57:39:ce:4d:1f:38:51:4e:82:0b:a2:d8:fa:1c:7d:40:
1a:58:6b:c7:49:88:c5:48:25:e8:3f:02:55:b8:2b:d2:f6:f7:
e8:41:a8:7f:80:69:29:6f:7e:dd:cd:71:2d:ed:f5:c1:30:a8:
48:7f:87:fe:f4:79:bb:e7:53:c1:6c:68:a9:d7:37:88:df:13:
1f:d0:cb:2b:58:c1:76:cd:3d:25:a3:c2:7d:b9:38:1a:af:78:
fd:d8:21:34:41:1e:07:eb:93:71:38:87:1c:ec:10:fd:0f:94:
c5:13:4b:0e:e3:34:86:8e:58:35:e0:4a:f9:bd:02:4a:a9:74:
c4:87:e7:92:95:1f:4b:27:9e:1e:38:b1:d2:be:70:1f:9b:d2:
c6:c7:1a:8d:9b:53:5c:7e:36:4b:39:3b:3f:0e:aa:34:18:13:
f0:26:cc:ce:d3:5a:0a:16:15:4c:8d:9e:6e:59:15:d2:43:2d:
16:d8:c1:eb
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQl/T5R/H972kR0iSEV+ckaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw
ZmRlZWQwHhcNMjUwMTAyMDc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTI5MzkxMDlkOWU3ODJjNDdhYWQ0NDhkZmFiMzg2MDA2YmE1YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgPEKMo897v4sxOMwiD/PF9/pxAN
l6TrAtH4qUzKAomqG5iEKgC58YXqf28yaYdszn6MZf5jIGrWdalKbaVWN702YDJu
M7u0WyKuvZB6U4EmfJWvPdA5etxYeW0vikQxL4TJky/I5lGRCgK6jfWbM3ompFl0
ENShPnIHFv4QptgG8SIVFgk+6DNcIqoSZRRlcVBL3MfSCHiaLDp/bMqXwSW08SZy
+Z86gTL+2vX7h0f2s1/rgVbXzaMtZWww8UT5g7Fk89fPGuWrZAsjgbIbSM+Ch7WT
AquEBzBf28/4aowbip7tvtQR3LJNffhNrp7VxiY+xglDGQamIa8dVa4IWwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFEkpORCdnngsR6rUSN+rOGAGulxxMB8GA1UdIwQY
MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt
MzgxNGM1N2ZlOWJiLzEvU1NrNUVKMmVlQ3hIcXRSSTM2czRZQWE2WEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi
LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQCuZMIMBUE
AgACMA8wDQMEAioK3AMFACoK3AYwDQYJKoZIhvcNAQELBQADggEBAFWZLJr8e39i
6ZZYsZdo/GmIp/1sXA8yyesDGdPvZi6uR0sFeFdUKoqRtPxDVedDd7IwJuV82ZNC
IalE/AedUX/Vbx2H2Yf0Ht7lVznOTR84UU6CC6LY+hx9QBpYa8dJiMVIJeg/AlW4
K9L29+hBqH+AaSlvft3NcS3t9cEwqEh/h/70ebvnU8FsaKnXN4jfEx/QyytYwXbN
PSWjwn25OBqveP3YITRBHgfrk3E4hxzsEP0PlMUTSw7jNIaOWDXgSvm9AkqpdMSH
55KVH0snnh44sdK+cB+b0sbHGo2bU1x+Nks5Oz8OqjQYE/AmzM7TWgoWFUyNnm5Z
FdJDLRbYwes=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net