Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/6EVtfxOnIlFOnha5IuorjOTy4KA.roa
File: 6EVtfxOnIlFOnha5IuorjOTy4KA.roa (raw, json)
Hash identifier: nFlGUiIl7eXftZfqYHFq9VWjwxevh1UBiT1G1C0iJR8=
Subject key identifier: E8:45:6D:7F:13:A7:22:51:4E:9E:16:B9:22:EA:2B:8C:E4:F2:E0:A0
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 018CCA2ADB62BC868D410D11D19CDC656185
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/6EVtfxOnIlFOnha5IuorjOTy4KA.roa
Signing time: Tue 02 Jan 2024 12:34:15 +0000
ROA not before: Tue 02 Jan 2024 12:34:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205694
IP address blocks: 185.208.186.0/24 maxlen: 24
185.208.186.0/23 maxlen: 23
185.208.184.0/22 maxlen: 22
185.208.185.0/24 maxlen: 24
185.208.184.0/23 maxlen: 23
185.208.184.0/24 maxlen: 24
185.208.187.0/24 maxlen: 24
185.160.152.0/24 maxlen: 24
185.160.152.0/23 maxlen: 23
185.160.155.0/24 maxlen: 24
185.160.154.0/23 maxlen: 23
185.160.154.0/24 maxlen: 24
185.160.153.0/24 maxlen: 24
2a07:c2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:db:62:bc:86:8d:41:0d:11:d1:9c:dc:65:61:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Jan 2 12:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8456d7f13a722514e9e16b922ea2b8ce4f2e0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:cc:59:e2:7e:93:9e:75:50:54:ec:65:5e:
4f:14:0e:ce:fe:15:45:c8:27:fd:bf:6e:d4:73:ad:
67:39:a9:fe:87:6f:73:d3:e1:8c:68:ab:91:55:de:
f8:49:7c:4f:4a:29:bb:8a:d3:5b:fb:38:67:f1:d2:
3f:cf:6c:96:1c:48:b6:51:84:1f:74:3d:c5:8a:c7:
03:28:01:14:30:12:a0:2c:bc:36:ad:e2:02:2a:21:
73:bd:1b:eb:c8:e2:5e:38:cf:c5:39:e2:f3:46:67:
9d:79:a3:07:00:a3:98:65:21:59:d6:d4:6e:d8:58:
b3:04:3c:36:8d:47:a9:a9:2f:52:ca:26:7d:63:bc:
fb:0b:cf:d0:96:13:7f:14:06:74:9b:a5:d9:85:74:
75:44:6d:e5:2e:1c:ac:28:c8:67:de:57:37:73:0d:
94:eb:77:d3:6c:5f:10:ec:9f:45:84:09:c6:4f:77:
54:0f:91:e2:9f:87:a9:bb:18:40:4d:f2:87:18:93:
2e:0a:57:2a:1d:02:73:70:86:1f:38:d1:cc:00:e4:
7a:a5:32:5a:3b:7a:92:9e:3d:36:80:df:59:ca:18:
1c:be:a0:1d:2c:05:44:82:19:22:5f:1d:78:a3:5b:
8d:66:b7:02:05:63:16:19:eb:ed:41:ed:3b:36:a0:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:6D:7F:13:A7:22:51:4E:9E:16:B9:22:EA:2B:8C:E4:F2:E0:A0
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/6EVtfxOnIlFOnha5IuorjOTy4KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.152.0/22
185.208.184.0/22
IPv6:
2a07:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:a3:58:02:1b:fc:46:2b:87:fc:6b:7b:2c:e6:39:93:af:69:
4c:18:93:1f:5b:84:f0:b1:05:f8:a6:3b:d2:ff:78:56:d0:a7:
f0:fe:c7:eb:68:76:26:33:60:9d:15:e0:a9:5d:4d:69:70:c9:
b8:17:18:5b:75:a9:7c:ae:77:ad:bf:44:4d:ec:95:86:05:72:
6a:ae:48:89:39:e7:e4:b1:79:53:40:80:c6:84:78:e5:54:03:
a9:76:96:be:a0:85:40:f4:8a:ae:29:0e:1a:ec:76:c6:93:07:
08:88:ef:22:a0:9a:6c:8b:1b:80:04:ba:69:04:89:af:2e:0a:
b5:f2:43:a8:4e:7f:59:80:1a:19:0e:cb:de:d3:43:61:2a:c4:
49:6e:4d:c2:7a:46:e6:18:eb:9d:91:31:de:08:32:9d:82:c6:
57:56:32:d6:9e:89:b1:56:bf:ee:f7:a6:75:98:59:d8:3d:66:
da:0a:1a:0b:bf:f6:06:32:bd:a0:fa:f4:67:5e:77:13:61:28:
2f:cc:a2:10:f4:39:57:18:d5:c1:5c:76:5a:cc:0c:58:b5:18:
a4:f1:f4:5c:fd:ba:8e:d6:a1:81:9b:01:8f:b6:63:61:50:f1:
79:50:0d:39:4f:8d:2f:eb:08:14:fc:b0:3a:0d:33:3b:46:ae:
2f:d3:06:40
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzKKttivIaNQQ0R0ZzcZWGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1
MDkyMGUwHhcNMjQwMTAyMTIzNDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODQ1NmQ3ZjEzYTcyMjUxNGU5ZTE2YjkyMmVhMmI4Y2U0ZjJlMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst/MWeJ+k551UFTsZV5PFA7O/hVF
yCf9v27Uc61nOan+h29z0+GMaKuRVd74SXxPSim7itNb+zhn8dI/z2yWHEi2UYQf
dD3FiscDKAEUMBKgLLw2reICKiFzvRvryOJeOM/FOeLzRmedeaMHAKOYZSFZ1tRu
2FizBDw2jUepqS9SyiZ9Y7z7C8/QlhN/FAZ0m6XZhXR1RG3lLhysKMhn3lc3cw2U
63fTbF8Q7J9FhAnGT3dUD5Hin4epuxhATfKHGJMuClcqHQJzcIYfONHMAOR6pTJa
O3qSnj02gN9ZyhgcvqAdLAVEghkiXx14o1uNZrcCBWMWGevtQe07NqBLxwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOhFbX8TpyJRTp4WuSLqK4zk8uCgMB8GA1UdIwQY
MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt
Mzg4YjgxYzBjOTBjLzEvNkVWdGZ4T25JbEZPbmhhNUl1b3JqT1R5NEtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj
LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuaCYAwQC
udC4MA0EAgACMAcDBQMqB8LAMA0GCSqGSIb3DQEBCwUAA4IBAQBAo1gCG/xGK4f8
a3ss5jmTr2lMGJMfW4TwsQX4pjvS/3hW0Kfw/sfraHYmM2CdFeCpXU1pcMm4Fxhb
dal8rnetv0RN7JWGBXJqrkiJOefksXlTQIDGhHjlVAOpdpa+oIVA9IquKQ4a7HbG
kwcIiO8ioJpsixuABLppBImvLgq18kOoTn9ZgBoZDsve00NhKsRJbk3CekbmGOud
kTHeCDKdgsZXVjLWnomxVr/u96Z1mFnYPWbaChoLv/YGMr2g+vRnXncTYSgvzKIQ
9DlXGNXBXHZazAxYtRik8fRc/bqO1qGBmwGPtmNhUPF5UA05T40v6wgU/LA6DTM7
Rq4v0wZA
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net