Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/4pgipsDtjzVZOnA4qzWqk83-xSA.roa
File: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (raw, json)
Hash identifier: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=
Subject key identifier: E2:98:22:A6:C0:ED:8F:35:59:3A:70:38:AB:35:AA:93:CD:FE:C5:20
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 0194221F679B23D0848A6F09450C5C140B59
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/4pgipsDtjzVZOnA4qzWqk83-xSA.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51392
IP address blocks: 185.157.208.0/24 maxlen: 24
185.157.209.0/24 maxlen: 24
185.157.210.0/24 maxlen: 24
185.157.211.0/24 maxlen: 24
2a03:afe1::/32 maxlen: 32
2a03:afe2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:67:9b:23:d0:84:8a:6f:09:45:0c:5c:14:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e29822a6c0ed8f35593a7038ab35aa93cdfec520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:15:cb:94:90:2e:30:92:1d:74:7f:58:56:
18:12:3e:9c:10:c2:af:79:5a:79:59:1e:ea:7a:2a:
eb:36:91:a1:47:5c:82:21:49:2d:d0:1c:01:89:fc:
a5:bb:03:6b:75:bd:0f:5d:f2:20:32:c9:d3:64:25:
e6:6d:69:c4:f3:d4:96:8a:b9:c2:c1:a0:7f:1b:7e:
22:a0:ba:2b:61:84:b1:d2:4b:46:55:23:ef:c8:20:
6f:1d:78:cc:21:45:cb:85:43:37:8f:07:65:f2:13:
d6:07:2b:a4:bb:d0:7d:3a:8b:f1:d0:96:cc:f7:12:
59:08:55:6f:e8:d9:e7:2b:c2:3f:4c:b8:d2:8c:c1:
f5:b8:41:92:95:d5:f3:12:45:06:7d:da:46:fc:4e:
e4:45:4d:d8:fb:a4:08:c8:23:03:2d:bc:31:44:f0:
d0:24:c2:25:ce:14:84:83:21:86:14:d0:46:67:81:
9d:e9:cf:90:e8:77:15:30:ab:6c:4c:8d:4f:d5:7e:
e0:07:25:d0:a1:5f:6d:3d:d5:20:f0:07:24:a8:13:
39:83:95:97:54:be:6c:fe:32:6c:3f:f1:c5:67:3e:
77:95:3d:fe:43:03:e3:e4:24:aa:ce:60:7d:83:77:
63:50:01:60:af:2f:2c:1e:b6:f2:b8:9b:18:93:e5:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:22:A6:C0:ED:8F:35:59:3A:70:38:AB:35:AA:93:CD:FE:C5:20
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/4pgipsDtjzVZOnA4qzWqk83-xSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.208.0/22
IPv6:
2a03:afe1::-2a03:afe2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:52:4e:e4:28:b5:aa:1e:b1:e2:fc:33:65:01:b4:49:2d:02:
8a:5f:a8:3e:46:c8:a9:71:dd:0a:58:0c:a0:39:ab:f3:a8:6a:
35:d1:1a:06:58:69:2f:5e:b4:a2:cc:4b:10:b4:7c:59:f2:2b:
59:d8:3a:cb:5e:cb:63:54:bf:ff:f1:f0:98:69:81:24:f7:73:
9a:20:c4:c2:a6:f7:d1:67:4b:64:20:90:41:83:dc:da:26:6a:
02:d9:bf:46:09:e5:ca:53:44:61:7f:c6:40:49:1a:7c:03:42:
e0:9c:29:88:04:3f:e6:e3:82:b8:30:e9:14:72:b1:11:ef:23:
79:03:0b:1d:53:a5:c0:73:a5:be:f4:72:36:93:94:e8:72:8d:
97:70:7a:2f:e9:07:f0:40:76:a4:4a:96:ee:34:a2:45:24:77:
71:b3:0e:70:fa:50:63:f9:56:84:29:2b:d2:22:71:47:af:57:
06:81:1b:7d:5a:d2:fa:02:72:6c:fe:af:0f:5f:5c:2d:ab:e8:
35:10:6e:16:c3:88:f0:2b:4c:3d:de:c6:d4:4d:40:1d:7f:e5:
7f:eb:8c:f6:bf:d2:ed:1d:d6:ca:9c:3d:08:d9:42:d1:37:ba:
4b:99:3b:a2:c0:5c:3b:98:ab:ff:30:1e:6e:b9:62:7c:41:4a:
22:08:fe:71
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQiH2ebI9CEim8JRQxcFAtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh
NzIwZjgwHhcNMjUwMTAxMTM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjk4MjJhNmMwZWQ4ZjM1NTkzYTcwMzhhYjM1YWE5M2NkZmVjNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/MVy5SQLjCSHXR/WFYYEj6cEMKv
eVp5WR7qeirrNpGhR1yCIUkt0BwBifyluwNrdb0PXfIgMsnTZCXmbWnE89SWirnC
waB/G34ioLorYYSx0ktGVSPvyCBvHXjMIUXLhUM3jwdl8hPWByuku9B9Oovx0JbM
9xJZCFVv6NnnK8I/TLjSjMH1uEGSldXzEkUGfdpG/E7kRU3Y+6QIyCMDLbwxRPDQ
JMIlzhSEgyGGFNBGZ4Gd6c+Q6HcVMKtsTI1P1X7gByXQoV9tPdUg8AckqBM5g5WX
VL5s/jJsP/HFZz53lT3+QwPj5CSqzmB9g3djUAFgry8sHrbyuJsYk+WfDwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOKYIqbA7Y81WTpwOKs1qpPN/sUgMB8GA1UdIwQY
MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt
MWIwOGY3ZjUwMTVkLzEvNHBnaXBzRHRqelZaT25BNHF6V3FrODMteFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk
LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuZ3QMBYE
AgACMBAwDgMFACoDr+EDBQAqA6/iMA0GCSqGSIb3DQEBCwUAA4IBAQAeUk7kKLWq
HrHi/DNlAbRJLQKKX6g+Rsipcd0KWAygOavzqGo10RoGWGkvXrSizEsQtHxZ8itZ
2DrLXstjVL//8fCYaYEk93OaIMTCpvfRZ0tkIJBBg9zaJmoC2b9GCeXKU0Rhf8ZA
SRp8A0LgnCmIBD/m44K4MOkUcrER7yN5AwsdU6XAc6W+9HI2k5Toco2XcHov6Qfw
QHakSpbuNKJFJHdxsw5w+lBj+VaEKSvSInFHr1cGgRt9WtL6AnJs/q8PX1wtq+g1
EG4Ww4jwK0w93sbUTUAdf+V/64z2v9LtHdbKnD0I2ULRN7pLmTuiwFw7mKv/MB5u
uWJ8QUoiCP5x
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net