Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/dKgonROO4xpKslqbxO1osnY3m3M.roa
File: dKgonROO4xpKslqbxO1osnY3m3M.roa (raw, json)
Hash identifier: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=
Subject key identifier: 74:A8:28:9D:13:8E:E3:1A:4A:B2:5A:9B:C4:ED:68:B2:76:37:9B:73
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01941FFA2362D519CC98AEF7F11C8D9981C2
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/dKgonROO4xpKslqbxO1osnY3m3M.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60975
IP address blocks: 185.19.184.0/24 maxlen: 24
185.19.185.0/24 maxlen: 24
185.19.187.0/24 maxlen: 24
2a00:43e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:23:62:d5:19:cc:98:ae:f7:f1:1c:8d:99:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74a8289d138ee31a4ab25a9bc4ed68b276379b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:62:20:ce:87:75:23:91:ab:bb:e1:e5:6f:44:
ac:56:bf:13:76:5f:74:78:bb:df:26:81:fd:92:9f:
a6:74:39:15:2f:01:25:53:96:7b:7a:83:a1:fa:85:
ad:91:a3:4a:9b:13:b6:8e:9c:e9:86:a2:33:1b:fa:
89:b6:ac:f4:87:31:96:7e:88:ab:e0:05:a2:d9:99:
08:2e:04:35:eb:d9:e0:bc:d0:e1:74:30:c3:89:d3:
ac:0e:40:c6:ed:fc:49:20:48:d8:37:eb:f8:f3:e8:
0a:bb:12:b2:f0:8e:85:89:51:54:85:73:4b:4b:11:
95:e6:72:4f:38:84:f5:19:df:ae:4f:f6:60:61:98:
58:6e:aa:d5:e5:c8:6a:f5:09:56:2b:80:30:52:72:
40:ff:34:5f:b8:44:4a:75:b1:f3:b8:7c:a5:6a:c1:
ab:47:0f:d7:93:83:76:c2:0d:98:ba:38:e9:29:d7:
78:ab:61:96:ba:55:51:13:54:65:34:a3:b6:66:c5:
90:8a:46:df:5b:22:64:b3:9f:6e:74:13:28:5c:93:
bd:6b:4c:24:4a:1b:66:5b:1f:86:81:4d:f4:e0:c4:
7d:f7:e8:5b:90:5f:68:03:2e:b3:c0:a5:58:fb:6a:
3f:eb:a7:f0:3f:09:58:13:b3:3b:e1:c1:8f:12:34:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A8:28:9D:13:8E:E3:1A:4A:B2:5A:9B:C4:ED:68:B2:76:37:9B:73
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/dKgonROO4xpKslqbxO1osnY3m3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.184.0/23
185.19.187.0/24
IPv6:
2a00:43e0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:f0:5e:a1:90:07:a5:34:cf:ce:89:fa:77:22:39:6a:84:54:
49:62:70:45:9c:05:f3:1b:e5:10:ff:e7:e5:c7:10:8a:8b:fb:
f0:69:d2:2d:01:59:44:fd:ac:53:1f:e4:a3:fd:c2:4e:9c:7d:
56:f1:9b:0e:d5:ce:c5:41:13:42:56:58:ae:55:9b:e1:70:9f:
25:4a:eb:97:ba:9e:b2:05:4e:e0:df:0e:96:f8:12:f6:fd:a3:
f4:eb:85:a4:ba:64:8b:b1:52:97:9e:4a:e4:d8:b5:bb:b4:d6:
1d:1b:41:73:c7:9d:e3:e3:4a:2b:ea:86:98:25:9d:68:a6:bb:
cb:e2:46:4a:9a:f8:54:cf:ec:91:94:14:35:df:7e:46:d6:07:
99:91:58:7d:ad:63:1b:83:7e:f6:b3:a6:d4:1a:73:8b:9a:63:
fd:e9:40:ef:1c:bb:b7:92:94:e9:aa:7c:4b:e5:e5:d0:38:2b:
a9:8c:27:70:a4:b2:14:42:b9:2e:30:d6:d6:59:11:0d:39:bb:
f2:27:98:28:20:26:38:04:15:46:ba:cb:89:39:5c:db:f0:bd:
09:3d:1c:08:16:0f:69:6a:6b:e5:2b:84:a7:5b:c2:b9:14:d7:
6a:3a:41:18:b1:82:12:1e:7f:2c:04:4f:ce:79:55:9f:e3:00:
75:aa:73:88
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQf+iNi1RnMmK738RyNmYHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy
MTZjNzgwHhcNMjUwMTAxMDM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGE4Mjg5ZDEzOGVlMzFhNGFiMjVhOWJjNGVkNjhiMjc2Mzc5YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Igzod1I5Gru+Hlb0SsVr8Tdl90
eLvfJoH9kp+mdDkVLwElU5Z7eoOh+oWtkaNKmxO2jpzphqIzG/qJtqz0hzGWfoir
4AWi2ZkILgQ169ngvNDhdDDDidOsDkDG7fxJIEjYN+v48+gKuxKy8I6FiVFUhXNL
SxGV5nJPOIT1Gd+uT/ZgYZhYbqrV5chq9QlWK4AwUnJA/zRfuERKdbHzuHylasGr
Rw/Xk4N2wg2YujjpKdd4q2GWulVRE1RlNKO2ZsWQikbfWyJks59udBMoXJO9a0wk
ShtmWx+GgU304MR99+hbkF9oAy6zwKVY+2o/66fwPwlYE7M74cGPEjQBnQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHSoKJ0TjuMaSrJam8TtaLJ2N5tzMB8GA1UdIwQY
MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt
NTY4MDVjYTExYzMzLzEvZEtnb25ST080eHBLc2xxYnhPMW9zblkzbTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz
LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuRO4AwQA
uRO7MA0EAgACMAcDBQAqAEPgMA0GCSqGSIb3DQEBCwUAA4IBAQDD8F6hkAelNM/O
ifp3IjlqhFRJYnBFnAXzG+UQ/+flxxCKi/vwadItAVlE/axTH+Sj/cJOnH1W8ZsO
1c7FQRNCVliuVZvhcJ8lSuuXup6yBU7g3w6W+BL2/aP064WkumSLsVKXnkrk2LW7
tNYdG0Fzx53j40or6oaYJZ1oprvL4kZKmvhUz+yRlBQ1335G1geZkVh9rWMbg372
s6bUGnOLmmP96UDvHLu3kpTpqnxL5eXQOCupjCdwpLIUQrkuMNbWWRENObvyJ5go
ICY4BBVGusuJOVzb8L0JPRwIFg9pamvlK4SnW8K5FNdqOkEYsYISHn8sBE/OeVWf
4wB1qnOI
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net