Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/mLzt7xGUveLWBI5KBd3nPnlkK34.roa
File: mLzt7xGUveLWBI5KBd3nPnlkK34.roa (raw, json)
Hash identifier: gBHkMYqm2CFNHYl0R32/z6OsqeoYFanglt5qYzw7wHQ=
Subject key identifier: 98:BC:ED:EF:11:94:BD:E2:D6:04:8E:4A:05:DD:E7:3E:79:64:2B:7E
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 019423D6A7DDE3479755C45BB27261C9B765
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/mLzt7xGUveLWBI5KBd3nPnlkK34.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212285
IP address blocks: 185.107.134.0/24 maxlen: 24
185.107.135.0/24 maxlen: 24
194.5.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a7:dd:e3:47:97:55:c4:5b:b2:72:61:c9:b7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98bcedef1194bde2d6048e4a05dde73e79642b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:8c:4c:5c:e5:81:f0:78:60:73:88:fb:12:
b7:bd:bd:c6:17:61:b6:91:40:4e:cb:40:84:85:6f:
cd:63:04:ac:92:f8:e4:c3:d1:c1:96:45:2b:1f:c4:
b5:9a:94:b0:f4:d6:a7:7e:d7:0b:d7:5a:41:15:af:
ff:a1:61:c1:b0:64:34:c8:ba:2e:7e:eb:47:ae:b3:
5b:e7:0c:f3:53:54:08:e0:1c:25:8c:f4:24:42:f7:
82:3a:fb:0b:8c:37:ab:41:e9:9f:43:33:8e:db:6f:
4a:32:9f:95:a3:ef:cf:03:2b:00:1d:1e:c3:09:34:
4b:24:e4:64:a5:9b:53:fe:83:63:44:ee:ce:0a:36:
5b:ea:04:eb:33:8a:43:f4:5d:60:39:67:cb:11:bd:
b6:00:d4:39:f9:e1:74:63:d2:4a:da:67:4b:90:0a:
94:42:1f:5a:5e:42:2c:07:27:1c:65:28:72:ff:2b:
71:85:f3:81:5f:8b:bc:fd:44:db:22:9a:30:38:70:
fc:a2:1b:d3:95:e8:8c:30:27:3b:7e:f6:a2:ec:c9:
5f:ee:82:c3:97:a9:bc:f3:8d:01:fc:56:40:63:7f:
a4:84:fe:e1:4a:4f:e9:f8:5e:6b:ad:d5:32:21:1c:
f9:6b:08:25:ec:fd:f9:09:0c:82:4f:06:07:1a:08:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:ED:EF:11:94:BD:E2:D6:04:8E:4A:05:DD:E7:3E:79:64:2B:7E
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/mLzt7xGUveLWBI5KBd3nPnlkK34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.134.0/23
194.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:cd:3b:d1:bb:82:fd:ea:b8:b4:db:28:ed:eb:7a:7f:f4:16:
db:bb:80:1c:be:db:db:dd:8b:cb:03:bc:c3:a9:0a:20:ee:43:
d8:27:53:b3:a8:3b:cf:71:e2:82:cf:9e:2a:cf:f7:1d:f7:de:
53:ee:70:d2:fc:02:72:3a:0b:41:c0:14:36:49:12:06:33:f3:
11:2c:f0:40:8c:cf:74:5d:e4:49:2d:09:75:d4:a3:48:ae:be:
02:45:95:36:1b:be:5b:37:59:7c:1a:3d:e3:cd:c3:0b:44:07:
48:41:86:57:ec:fe:fe:23:32:00:78:96:a6:9c:31:24:02:e1:
95:e7:fe:f6:06:0c:a5:22:d7:ec:83:05:95:e0:b3:44:16:d9:
b4:86:a8:e9:ba:38:59:71:39:23:8a:1d:23:76:02:92:71:cf:
43:71:d0:91:3d:80:7c:d7:df:a6:55:ad:61:5f:b8:1e:36:4c:
af:a3:4d:f3:bd:62:e8:8d:3a:61:15:99:8d:31:1c:e3:73:0e:
d5:71:b6:e5:6f:a5:e4:66:55:09:97:e0:c6:e7:ff:de:a1:63:
2d:43:63:c6:b7:ba:26:9b:da:78:53:c2:14:0c:48:14:62:a9:
1c:f2:02:ee:52:09:37:0c:70:24:27:e9:e0:d3:b4:a6:25:ae:
2c:80:5a:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1qfd40eXVcRbsnJhybdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzJjNzMxNDU5MzA0MmNmNzQyMTBmN2YwM2JlNzEwNmMy
MjRmODkwHhcNMjUwMTAxMjE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGJjZWRlZjExOTRiZGUyZDYwNDhlNGEwNWRkZTczZTc5NjQyYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJiMTFzlgfB4YHOI+xK3vb3GF2G2
kUBOy0CEhW/NYwSskvjkw9HBlkUrH8S1mpSw9NanftcL11pBFa//oWHBsGQ0yLou
futHrrNb5wzzU1QI4BwljPQkQveCOvsLjDerQemfQzOO229KMp+Vo+/PAysAHR7D
CTRLJORkpZtT/oNjRO7OCjZb6gTrM4pD9F1gOWfLEb22ANQ5+eF0Y9JK2mdLkAqU
Qh9aXkIsByccZShy/ytxhfOBX4u8/UTbIpowOHD8ohvTleiMMCc7fvai7Mlf7oLD
l6m8840B/FZAY3+khP7hSk/p+F5rrdUyIRz5awgl7P35CQyCTwYHGghxBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJi87e8RlL3i1gSOSgXd5z55ZCt+MB8GA1UdIwQY
MBaAFMjCxzFFkwQs90IQ9/A75xBsIk+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjIt
M2E1M2QwZWY4YjVhLzEvbUx6dDd4R1V2ZUxXQkk1S0JkM25QbmxrSzM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjItM2E1M2QwZWY4YjVh
LzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuWuGAwQA
wgXpMA0GCSqGSIb3DQEBCwUAA4IBAQDNzTvRu4L96ri02yjt63p/9Bbbu4Acvtvb
3YvLA7zDqQog7kPYJ1OzqDvPceKCz54qz/cd995T7nDS/AJyOgtBwBQ2SRIGM/MR
LPBAjM90XeRJLQl11KNIrr4CRZU2G75bN1l8Gj3jzcMLRAdIQYZX7P7+IzIAeJam
nDEkAuGV5/72BgylItfsgwWV4LNEFtm0hqjpujhZcTkjih0jdgKScc9DcdCRPYB8
19+mVa1hX7geNkyvo03zvWLojTphFZmNMRzjcw7Vcbblb6XkZlUJl+DG5//eoWMt
Q2PGt7omm9p4U8IUDEgUYqkc8gLuUgk3DHAkJ+ng07SmJa4sgFpr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net