Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/BrHbrYKSOYnddxluEnx_GzD4CYE.roa
File: BrHbrYKSOYnddxluEnx_GzD4CYE.roa (raw, json)
Hash identifier: vlnJ9NqMjq58xWPTHWSEwW+HXXpc4BxbINNaSiT95A4=
Subject key identifier: 06:B1:DB:AD:82:92:39:89:DD:77:19:6E:12:7C:7F:1B:30:F8:09:81
Certificate issuer: /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial: 019420D5DBB0AC1E88249BAE41F242CF6D83
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/BrHbrYKSOYnddxluEnx_GzD4CYE.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48904
IP address blocks: 185.204.8.0/23 maxlen: 23
185.204.10.0/23 maxlen: 23
217.72.16.0/21 maxlen: 21
217.72.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:db:b0:ac:1e:88:24:9b:ae:41:f2:42:cf:6d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06b1dbad82923989dd77196e127c7f1b30f80981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:ad:6d:3f:26:12:23:b1:3a:10:4b:d9:35:
39:ff:1a:3b:1a:5c:ef:77:6b:5b:21:de:6b:22:6f:
de:dd:df:b6:dd:9f:47:8b:01:d4:ba:a1:3c:5b:d1:
6f:39:a9:d8:b1:8f:66:d0:05:81:ab:6a:bb:40:1d:
b7:2f:f7:a2:42:98:6f:ca:c4:89:65:19:bd:b6:2d:
84:0c:35:7b:70:12:22:75:e0:23:3c:67:78:a5:94:
c3:da:74:f5:fb:2d:26:c8:f5:d4:b5:13:27:1e:1a:
2b:cf:1b:f7:77:f4:24:84:5a:d2:a4:d9:e4:01:e2:
46:88:f1:2c:62:73:c4:b4:89:3f:9b:60:88:07:3e:
bb:83:7b:73:5b:20:9a:54:11:31:11:88:9a:67:78:
7b:6b:98:40:8a:1d:af:22:35:ce:9e:54:f6:f8:fd:
a1:c3:84:ad:01:4c:f1:a9:26:c2:b2:12:8d:0d:6b:
71:05:97:9e:62:14:a7:57:dc:be:a6:69:33:11:88:
7a:ed:bc:b8:7c:0d:03:c4:87:7e:40:94:43:4e:76:
bb:b9:83:17:7f:b8:ca:5f:82:51:0a:1d:c0:e3:46:
48:cd:b6:03:41:a9:d2:b0:87:f0:a5:de:96:c1:b7:
af:6d:a6:1f:4e:0f:94:11:93:87:fb:2b:d7:5f:ec:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:DB:AD:82:92:39:89:DD:77:19:6E:12:7C:7F:1B:30:F8:09:81
X509v3 Authority Key Identifier:
keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/BrHbrYKSOYnddxluEnx_GzD4CYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.8.0/22
217.72.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:15:f0:ea:65:ee:6e:7f:5d:6b:5d:27:39:27:85:67:c9:45:
06:91:b7:e6:fa:b5:9b:04:93:23:fb:88:fe:ef:c5:c1:c6:38:
2f:76:e1:01:62:7b:43:fd:38:00:7a:84:b1:c9:03:ce:01:62:
e3:a7:fb:97:56:5e:e2:dc:aa:37:94:0e:63:bc:c9:ad:ef:9d:
3a:b8:c1:00:04:69:5e:ee:da:48:b9:1a:e1:56:6d:f8:02:08:
ce:01:b1:bf:bd:d7:63:08:49:84:b5:39:6b:61:66:30:52:8d:
f1:44:d5:41:47:92:f4:82:fa:db:36:3c:9a:b2:59:27:1d:c5:
bf:d6:6c:c0:56:4a:19:7a:cd:20:f4:39:db:e3:16:e6:7b:8b:
64:16:6a:90:79:34:06:38:9d:6c:01:d3:bd:70:5b:22:8e:25:
00:1e:c2:29:a5:8f:c5:1c:8f:ee:60:7c:79:d3:a6:8f:3f:7f:
74:33:b8:06:69:0d:fb:9f:a8:a1:ce:ba:97:87:a2:ae:87:67:
95:5e:5f:73:1e:24:c2:b8:1d:13:3a:7b:74:10:76:cd:0b:0a:
d3:4b:48:33:1b:4e:76:47:62:0b:db:04:96:cc:be:4a:5c:44:
23:f4:3c:77:5b:28:8b:7f:a1:9d:d1:19:6e:57:4d:74:51:3b:
df:8c:75:27
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1duwrB6IJJuuQfJCz22DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzQ5MTM4MjNhMzE5ZmViYTIyNzBlMWJhMmNhMDllNDM1
YmQ1NWIwHhcNMjUwMTAxMDc0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmIxZGJhZDgyOTIzOTg5ZGQ3NzE5NmUxMjdjN2YxYjMwZjgwOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdWtbT8mEiOxOhBL2TU5/xo7Glzv
d2tbId5rIm/e3d+23Z9HiwHUuqE8W9FvOanYsY9m0AWBq2q7QB23L/eiQphvysSJ
ZRm9ti2EDDV7cBIideAjPGd4pZTD2nT1+y0myPXUtRMnHhorzxv3d/QkhFrSpNnk
AeJGiPEsYnPEtIk/m2CIBz67g3tzWyCaVBExEYiaZ3h7a5hAih2vIjXOnlT2+P2h
w4StAUzxqSbCshKNDWtxBZeeYhSnV9y+pmkzEYh67by4fA0DxId+QJRDTna7uYMX
f7jKX4JRCh3A40ZIzbYDQanSsIfwpd6WwbevbaYfTg+UEZOH+yvXX+ykVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAax262CkjmJ3XcZbhJ8fxsw+AmBMB8GA1UdIwQY
MBaAFALEkTgjoxn+uiJw4bosoJ5DW9VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMzY2YmItNzIyMC00NWYzLWI0NmQt
ZDYzYTUxMTFmYmY3LzEvQnJIYnJZS1NPWW5kZHhsdUVueF9HekQ0Q1lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iMzY2YmItNzIyMC00NWYzLWI0NmQtZDYzYTUxMTFmYmY3
LzEvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCucwIAwQE
2UgQMA0GCSqGSIb3DQEBCwUAA4IBAQBfFfDqZe5uf11rXSc5J4VnyUUGkbfm+rWb
BJMj+4j+78XBxjgvduEBYntD/TgAeoSxyQPOAWLjp/uXVl7i3Ko3lA5jvMmt7506
uMEABGle7tpIuRrhVm34AgjOAbG/vddjCEmEtTlrYWYwUo3xRNVBR5L0gvrbNjya
slknHcW/1mzAVkoZes0g9Dnb4xbme4tkFmqQeTQGOJ1sAdO9cFsijiUAHsIppY/F
HI/uYHx506aPP390M7gGaQ37n6ihzrqXh6Kuh2eVXl9zHiTCuB0TOnt0EHbNCwrT
S0gzG052R2IL2wSWzL5KXEQj9Dx3WyiLf6Gd0RluV010UTvfjHUn
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:11 2025 by rpki-client on console.sobornost.net