Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa
File: 9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa (raw, json)
Hash identifier: XKwu2dm5EiilAMiU6vQWAsMs3u94DmEeOaG3OlX3RRc=
Subject key identifier: F5:D2:C0:14:10:37:C9:9B:71:43:74:B3:FA:2D:DB:6E:86:3B:EA:2F
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 019423D6A63FDD135CFC9859869E0748E426
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 185.233.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a6:3f:dd:13:5c:fc:98:59:86:9e:07:48:e4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d2c0141037c99b714374b3fa2ddb6e863bea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:6b:b1:af:6a:c2:da:16:d3:36:42:25:26:
b3:47:26:dc:88:1b:52:30:2c:45:76:d2:b7:1e:9c:
3d:8e:46:9c:9b:06:68:4f:09:2b:ee:c8:e0:cb:6e:
42:2a:c0:f5:33:0f:81:99:c5:02:be:94:a3:fc:91:
c5:45:98:83:c9:30:05:b3:af:22:57:c2:b7:5e:2a:
dd:c2:d7:95:0e:1a:e9:97:bf:67:75:a2:d0:7f:8a:
39:a2:fe:bb:e2:56:30:3a:ee:76:0c:d2:ad:a6:eb:
22:ad:3b:fb:c7:1f:96:43:8d:21:fe:52:bd:db:41:
ab:60:4a:26:70:ed:2f:4c:f4:bc:8c:58:f7:4d:b1:
d8:26:5b:a2:15:9d:55:4b:df:a0:2d:ea:ac:cf:41:
e5:32:c3:8f:25:f6:0e:81:36:c1:94:fb:2a:87:d9:
74:e6:65:f7:41:ba:f2:f6:30:5a:fd:eb:17:6a:8d:
a9:e9:d0:f6:ec:68:65:7c:d6:e0:31:a3:2b:8e:3a:
cc:ac:22:9f:56:e0:e4:bf:35:14:7e:fe:e9:8a:ea:
c0:57:5f:3c:9e:09:b7:79:d8:a4:00:41:7b:92:0b:
97:cc:fc:c4:99:58:77:ba:7f:2a:64:05:5c:7b:e1:
8d:12:cb:7d:53:34:34:6e:e1:04:d0:eb:78:05:46:
7f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D2:C0:14:10:37:C9:9B:71:43:74:B3:FA:2D:DB:6E:86:3B:EA:2F
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.219.0/24
Signature Algorithm: sha256WithRSAEncryption
26:89:08:84:c6:34:0d:d9:1e:3d:7a:29:0b:83:2d:b5:1b:84:
4f:00:47:f7:aa:41:cc:e2:55:a2:18:dd:ec:88:58:d6:6a:60:
21:95:7b:7a:82:b5:f2:27:c0:68:27:a3:1b:e0:ed:1e:c7:08:
0a:2b:ff:20:ef:24:96:8d:66:f1:78:89:6f:3e:1e:7e:77:0b:
dc:69:01:2f:36:e9:51:ed:8c:fa:0d:7c:47:b3:b3:bf:55:de:
54:d4:31:49:ba:97:cb:d8:23:2c:f4:bc:fa:c7:e8:06:53:24:
1d:6e:14:e6:a0:13:e8:47:04:4a:7c:e8:d8:0b:02:37:23:9e:
2c:5d:59:72:2f:ee:f5:01:45:44:f0:0f:78:64:3a:41:d2:c5:
8d:45:55:cc:84:f1:e7:32:d6:99:00:22:1b:81:0b:6f:88:c4:
2b:ab:f6:90:75:ef:a1:db:5c:02:54:28:79:ea:93:5e:02:f6:
a8:07:c2:2c:ab:c8:27:9e:ba:86:4c:7a:d8:52:fb:4f:2c:19:
6a:3c:c7:76:dd:ff:05:8d:ea:e0:8a:ce:d9:90:98:9e:ba:1b:
0b:bc:7f:da:b7:e8:e5:cb:b2:a0:59:b7:b8:36:7a:df:19:bd:
d2:95:5f:a1:57:46:c7:ee:54:52:0e:88:1c:2b:7c:d2:ab:92:
31:ae:d3:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1qY/3RNc/JhZhp4HSOQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzJjNzMxNDU5MzA0MmNmNzQyMTBmN2YwM2JlNzEwNmMy
MjRmODkwHhcNMjUwMTAxMjE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWQyYzAxNDEwMzdjOTliNzE0Mzc0YjNmYTJkZGI2ZTg2M2JlYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzxrsa9qwtoW0zZCJSazRybciBtS
MCxFdtK3Hpw9jkacmwZoTwkr7sjgy25CKsD1Mw+BmcUCvpSj/JHFRZiDyTAFs68i
V8K3XirdwteVDhrpl79ndaLQf4o5ov674lYwOu52DNKtpusirTv7xx+WQ40h/lK9
20GrYEomcO0vTPS8jFj3TbHYJluiFZ1VS9+gLeqsz0HlMsOPJfYOgTbBlPsqh9l0
5mX3Qbry9jBa/esXao2p6dD27GhlfNbgMaMrjjrMrCKfVuDkvzUUfv7piurAV188
ngm3edikAEF7kguXzPzEmVh3un8qZAVce+GNEst9UzQ0buEE0Ot4BUZ/BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXSwBQQN8mbcUN0s/ot226GO+ovMB8GA1UdIwQY
MBaAFMjCxzFFkwQs90IQ9/A75xBsIk+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjIt
M2E1M2QwZWY4YjVhLzEvOWRMQUZCQTN5WnR4UTNTei1pM2Jib1k3Nmk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjItM2E1M2QwZWY4YjVh
LzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuenbMA0G
CSqGSIb3DQEBCwUAA4IBAQAmiQiExjQN2R49eikLgy21G4RPAEf3qkHM4lWiGN3s
iFjWamAhlXt6grXyJ8BoJ6Mb4O0exwgKK/8g7ySWjWbxeIlvPh5+dwvcaQEvNulR
7Yz6DXxHs7O/Vd5U1DFJupfL2CMs9Lz6x+gGUyQdbhTmoBPoRwRKfOjYCwI3I54s
XVlyL+71AUVE8A94ZDpB0sWNRVXMhPHnMtaZACIbgQtviMQrq/aQde+h21wCVCh5
6pNeAvaoB8Isq8gnnrqGTHrYUvtPLBlqPMd23f8Fjergis7ZkJieuhsLvH/at+jl
y7KgWbe4NnrfGb3SlV+hV0bH7lRSDogcK3zSq5IxrtOf
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net