Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/JQ0JLv3dju_CCqlooLL5tlgBa_8.roa
File: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (raw, json)
Hash identifier: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=
Subject key identifier: 25:0D:09:2E:FD:DD:8E:EF:C2:0A:A9:68:A0:B2:F9:B6:58:01:6B:FF
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 0194274831E386B622DBCA9E0F5A56CA0215
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/JQ0JLv3dju_CCqlooLL5tlgBa_8.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 185.248.164.0/23 maxlen: 23
185.248.167.0/24 maxlen: 24
2a0d:ed80:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:31:e3:86:b6:22:db:ca:9e:0f:5a:56:ca:02:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=250d092efddd8eefc20aa968a0b2f9b658016bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:59:86:c6:7d:12:7d:b9:10:76:b9:06:52:
f7:f0:5f:6b:25:2d:cd:9a:e3:c5:3a:66:5e:ca:89:
ec:6d:fb:60:56:b5:44:5f:33:d0:b9:7b:df:ce:d5:
7a:0a:eb:9c:69:b8:52:86:02:c5:7d:6b:11:5e:d6:
22:8a:7b:aa:3b:50:98:b8:4b:f3:64:e1:72:34:9a:
3b:88:b2:37:fc:97:5e:74:41:c5:b0:90:1b:1b:f6:
24:ae:35:3e:bc:a0:52:ad:83:86:80:77:1e:05:eb:
7a:2b:45:b8:87:66:b7:15:69:e1:73:2e:95:8a:d8:
97:c8:73:98:5b:01:00:18:f2:c9:7e:8f:2a:8f:43:
38:bb:72:cc:30:e8:68:52:63:2c:c3:98:b7:36:68:
96:18:ba:43:ea:55:29:b0:08:a6:b9:97:73:1b:35:
6d:97:ec:a2:86:7b:0b:01:a4:91:9a:e8:b1:cf:4a:
02:11:c3:ca:dc:22:05:51:aa:b2:ed:3b:72:76:f0:
41:75:ad:d0:75:c1:48:54:a7:df:70:7a:09:e4:e8:
d4:6a:b5:8b:a0:1a:65:c6:61:9b:57:ae:fc:74:1a:
5b:e5:61:7f:1d:f7:11:b5:75:63:21:28:98:52:81:
c4:ef:3a:f3:66:98:81:30:90:4c:96:d8:f9:83:f7:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:09:2E:FD:DD:8E:EF:C2:0A:A9:68:A0:B2:F9:B6:58:01:6B:FF
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/JQ0JLv3dju_CCqlooLL5tlgBa_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.164.0/23
185.248.167.0/24
IPv6:
2a0d:ed80:300::/40
Signature Algorithm: sha256WithRSAEncryption
65:f1:99:53:cb:47:0e:2a:12:57:97:00:3c:78:37:e7:ac:ee:
35:bf:83:02:84:02:06:e8:44:bc:8c:df:06:eb:99:eb:54:68:
12:1c:b1:4e:8f:4f:4d:e7:f5:5c:e1:3b:86:b0:9a:2b:38:5a:
3b:92:18:92:10:02:df:94:6a:40:d6:4c:bc:cf:ec:44:60:b7:
03:31:97:fe:93:04:a8:bf:1c:bc:94:20:5d:6b:07:c9:36:72:
3c:3f:a2:f1:71:88:23:cd:79:7d:ef:94:83:1f:3b:dc:04:e3:
89:39:3f:13:9f:62:b9:4c:6d:f4:88:94:25:4d:a0:21:1b:81:
ea:f9:36:05:19:5b:82:00:28:e3:92:04:9f:cf:05:05:3b:32:
bc:42:a1:74:ed:0a:17:f8:7e:fc:d2:fb:83:ca:5b:08:ea:1d:
9e:bd:4c:ac:9c:bf:d2:69:9c:50:2c:63:61:d7:09:7d:e6:b4:
74:83:10:fe:24:bc:42:ce:7d:16:3f:ce:4a:2c:9c:6f:90:00:
af:09:3c:94:fd:6a:0e:3d:22:89:0d:4e:cb:f0:6a:d3:f7:fe:
35:a0:f1:73:15:48:4e:62:34:64:96:d4:14:3a:21:83:8c:44:
37:3d:14:ca:85:2a:b6:d7:ac:05:9f:b5:75:0a:53:49:0f:29:
1a:85:38:f9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQnSDHjhrYi28qeD1pWygIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTRiZTc5Yzg5MmI1MzU2YmYxYjdiY2QxMzEzOTdmMmMy
M2FkYzAwHhcNMjUwMTAyMTM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTBkMDkyZWZkZGQ4ZWVmYzIwYWE5NjhhMGIyZjliNjU4MDE2YmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2BZhsZ9En25EHa5BlL38F9rJS3N
muPFOmZeyonsbftgVrVEXzPQuXvfztV6CuucabhShgLFfWsRXtYiinuqO1CYuEvz
ZOFyNJo7iLI3/JdedEHFsJAbG/YkrjU+vKBSrYOGgHceBet6K0W4h2a3FWnhcy6V
itiXyHOYWwEAGPLJfo8qj0M4u3LMMOhoUmMsw5i3NmiWGLpD6lUpsAimuZdzGzVt
l+yihnsLAaSRmuixz0oCEcPK3CIFUaqy7TtydvBBda3QdcFIVKffcHoJ5OjUarWL
oBplxmGbV678dBpb5WF/HfcRtXVjISiYUoHE7zrzZpiBMJBMltj5g/dcXQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFCUNCS793Y7vwgqpaKCy+bZYAWv/MB8GA1UdIwQY
MBaAFB1UvnnIkrU1a/G3vNExOX8sI63AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWIt
ODAyYjYzNzZmNzQzLzEvSlEwSkx2M2RqdV9DQ3Fsb29MTDV0bGdCYV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWItODAyYjYzNzZmNzQz
LzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBufikAwQA
ufinMA4EAgACMAgDBgAqDe2AAzANBgkqhkiG9w0BAQsFAAOCAQEAZfGZU8tHDioS
V5cAPHg356zuNb+DAoQCBuhEvIzfBuuZ61RoEhyxTo9PTef1XOE7hrCaKzhaO5IY
khAC35RqQNZMvM/sRGC3AzGX/pMEqL8cvJQgXWsHyTZyPD+i8XGII815fe+Ugx87
3ATjiTk/E59iuUxt9IiUJU2gIRuB6vk2BRlbggAo45IEn88FBTsyvEKhdO0KF/h+
/NL7g8pbCOodnr1MrJy/0mmcUCxjYdcJfea0dIMQ/iS8Qs59Fj/OSiycb5AArwk8
lP1qDj0iiQ1Oy/Bq0/f+NaDxcxVITmI0ZJbUFDohg4xENz0UyoUqttesBZ+1dQpT
SQ8pGoU4+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net