Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa
File: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (raw, json)
Hash identifier: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=
Subject key identifier: FB:0E:43:34:F9:48:84:4C:65:0C:6D:C9:27:C6:1E:84:A6:3C:07:6B
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 0194258F5BD7349101A467F650F89C252104
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205643
IP address blocks: 185.207.72.0/22 maxlen: 22
185.207.72.0/23 maxlen: 23
185.207.72.0/24 maxlen: 24
185.207.73.0/24 maxlen: 24
185.207.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5b:d7:34:91:01:a4:67:f6:50:f8:9c:25:21:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb0e4334f948844c650c6dc927c61e84a63c076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:27:7d:b0:af:1d:08:ad:a4:5f:70:f7:dd:
0b:01:0c:ea:fe:5a:21:68:cc:e8:a8:3e:bb:5b:6f:
65:15:34:68:86:d9:4d:e3:d2:22:35:eb:06:3d:69:
cd:02:e4:cf:25:d6:79:5f:a3:72:7b:55:61:3f:35:
f1:57:ea:af:9f:2c:97:0d:17:da:f6:55:4f:da:57:
17:8e:02:67:b8:45:8c:71:1a:9b:4a:4d:bd:da:0a:
c4:24:f7:68:42:25:52:0f:d0:dd:2f:2c:49:75:3f:
29:61:e5:70:2e:eb:b1:5a:35:e6:44:74:82:d2:4b:
33:00:55:09:6c:1b:61:b5:17:28:b0:63:b7:9e:6a:
1f:bd:13:98:9a:6b:be:19:1e:bc:97:b2:11:49:cf:
af:a1:bc:2c:da:32:14:5c:63:5a:94:92:e3:71:1c:
62:fb:f3:c8:01:8e:b5:bf:0e:3e:04:59:30:5a:0e:
b8:20:17:7c:3d:f4:17:a6:c9:57:b6:2b:79:76:c5:
99:26:75:41:f2:31:b8:12:57:49:f7:65:66:75:11:
2b:82:45:fc:d9:e9:86:44:94:25:87:3f:1f:e1:98:
f6:af:a3:2a:03:ea:b3:90:bb:3a:0d:f2:6e:53:55:
3e:4b:48:6a:aa:ea:59:0c:5c:fd:05:d8:a9:5e:c1:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:43:34:F9:48:84:4C:65:0C:6D:C9:27:C6:1E:84:A6:3C:07:6B
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.72.0/22
Signature Algorithm: sha256WithRSAEncryption
16:61:c9:0e:c2:6c:42:93:86:96:04:cd:68:62:95:19:2e:80:
1d:23:00:90:ee:0e:50:f1:e6:8e:c4:1a:3d:6f:68:79:be:16:
c3:09:11:a2:d3:e0:1c:36:cb:a6:f6:74:f5:f3:32:77:2c:da:
1e:ac:5c:ad:02:ff:2a:cb:0b:e8:9d:9a:ff:a1:d5:70:ab:1a:
03:c2:b3:53:0b:e4:8d:49:71:44:84:be:d0:a3:54:19:b0:06:
2b:1a:0a:04:94:fb:23:bb:0e:50:b2:59:6e:72:d1:f5:ba:e3:
ca:95:f7:14:a1:9d:b2:72:38:31:0f:19:bd:cb:cb:08:b9:34:
92:4c:25:fb:32:0e:5c:49:54:66:73:a2:7c:5a:b3:29:49:e0:
07:7c:70:88:5c:d5:d1:31:f3:0d:f1:11:e3:c3:d5:e1:0d:9a:
45:11:1f:dc:0b:ec:ab:0c:ff:db:cd:3f:f6:c0:f2:e3:59:5c:
08:c2:c5:3e:59:aa:47:91:c7:2c:92:2d:8e:78:43:30:a3:ef:
c6:7e:d2:b6:a2:39:e0:f6:d7:0c:8d:aa:b0:ef:03:9d:97:f3:
c6:e5:fa:cc:e6:ab:f7:22:a1:49:71:f1:46:c9:1e:16:d6:d6:
6a:03:d6:32:73:e7:e1:81:dd:cf:28:77:e9:78:7d:83:fc:44:
e0:77:11:3d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlj1vXNJEBpGf2UPicJSEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl
MTMzYjQwHhcNMjUwMTAyMDU0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjBlNDMzNGY5NDg4NDRjNjUwYzZkYzkyN2M2MWU4NGE2M2MwNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryAnfbCvHQitpF9w990LAQzq/loh
aMzoqD67W29lFTRohtlN49IiNesGPWnNAuTPJdZ5X6Nye1VhPzXxV+qvnyyXDRfa
9lVP2lcXjgJnuEWMcRqbSk292grEJPdoQiVSD9DdLyxJdT8pYeVwLuuxWjXmRHSC
0kszAFUJbBthtRcosGO3nmofvROYmmu+GR68l7IRSc+vobws2jIUXGNalJLjcRxi
+/PIAY61vw4+BFkwWg64IBd8PfQXpslXtit5dsWZJnVB8jG4EldJ92VmdRErgkX8
2emGRJQlhz8f4Zj2r6MqA+qzkLs6DfJuU1U+S0hqqupZDFz9BdipXsH9TQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsOQzT5SIRMZQxtySfGHoSmPAdrMB8GA1UdIwQY
MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt
Nzk0MjQwNDAxNmYzLzEvMS13NUROUGxJaEV4bERHM0pKOFllaEtZOEIycy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDAvMzFiZDA3LTlhMWYtNDM0NS1hNjZiLTc5NDI0MDQwMTZm
My8xL2JReUFNWUYzdkJhM0k0UDQ0SkxWS2pyaE03US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnPSDAN
BgkqhkiG9w0BAQsFAAOCAQEAFmHJDsJsQpOGlgTNaGKVGS6AHSMAkO4OUPHmjsQa
PW9oeb4WwwkRotPgHDbLpvZ09fMydyzaHqxcrQL/KssL6J2a/6HVcKsaA8KzUwvk
jUlxRIS+0KNUGbAGKxoKBJT7I7sOULJZbnLR9brjypX3FKGdsnI4MQ8ZvcvLCLk0
kkwl+zIOXElUZnOifFqzKUngB3xwiFzV0THzDfER48PV4Q2aRREf3Avsqwz/280/
9sDy41lcCMLFPlmqR5HHLJItjnhDMKPvxn7StqI54PbXDI2qsO8DnZfzxuX6zOar
9yKhSXHxRskeFtbWagPWMnPn4YHdzyh36Xh9g/xE4HcRPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net