Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/kSER2798uaT4ZEQ3_Ywav1IgXDo.roa
File: kSER2798uaT4ZEQ3_Ywav1IgXDo.roa (raw, json)
Hash identifier: o89fQ/v3jr3XzrvC5mfE9JQZHOaC2hUzybiixeh55JI=
Subject key identifier: 91:21:11:DB:BF:7C:B9:A4:F8:64:44:37:FD:8C:1A:BF:52:20:5C:3A
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 0194258FBD97971DD8B8AF679AA5305F11B1
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/kSER2798uaT4ZEQ3_Ywav1IgXDo.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212599
IP address blocks: 185.134.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bd:97:97:1d:d8:b8:af:67:9a:a5:30:5f:11:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=912111dbbf7cb9a4f8644437fd8c1abf52205c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:3b:c6:e6:c3:1a:40:81:19:ab:c9:06:92:
c5:06:7c:85:b5:f0:b1:e7:d6:46:bc:19:23:13:41:
a9:af:0d:f9:10:1a:f9:55:fb:4f:01:93:2b:c7:fb:
a3:b0:8f:eb:7f:9b:c0:b8:c1:3d:97:cf:98:46:29:
64:ad:ec:c5:dd:56:c0:b0:5d:bc:d1:6c:59:a0:ae:
19:9e:52:e9:b6:84:2e:9c:9e:dd:c5:ef:b2:98:38:
39:95:12:a0:3e:17:2e:22:f3:48:ca:40:f9:ae:8f:
98:ca:b7:4d:10:18:45:96:ef:9e:44:02:47:5d:0d:
d8:2a:55:09:db:b4:9b:32:29:7a:dc:d6:64:39:60:
80:b7:6f:da:78:ec:c5:e8:53:ed:ca:e4:65:33:00:
57:7b:d5:03:70:61:30:d9:bc:1c:86:3c:b9:28:af:
5b:46:b5:9d:a9:16:64:2d:7b:75:83:86:19:58:88:
53:2f:9a:e3:ae:41:43:67:f8:0c:c9:84:11:fa:30:
54:ff:f8:94:c3:af:7d:1e:34:73:1b:a4:a3:88:41:
f5:6d:c2:be:70:b1:b4:be:6f:d9:6b:cb:a5:d0:0f:
1b:12:ca:7c:4a:a9:6b:db:f5:a8:3c:34:4e:5b:3c:
9d:58:47:1c:29:9f:08:f8:28:48:9b:6e:e0:b7:85:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:11:DB:BF:7C:B9:A4:F8:64:44:37:FD:8C:1A:BF:52:20:5C:3A
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/kSER2798uaT4ZEQ3_Ywav1IgXDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.175.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7d:42:88:0c:c8:35:c0:2c:e2:a4:60:19:ec:ca:4b:0e:2b:
0c:6a:89:f6:18:a1:e4:04:14:99:09:2c:df:0d:01:7a:e8:0a:
eb:fe:e3:f0:51:23:c7:b0:6c:4d:8a:e0:f3:64:d7:67:66:7b:
21:44:b5:54:89:69:bf:61:b7:45:67:52:0c:d7:aa:1c:fd:d1:
05:63:97:93:09:33:dc:ec:fa:fb:13:4f:e9:28:c2:ad:11:0f:
ae:1c:e0:98:52:62:8e:1d:04:10:a4:1f:e8:66:a7:77:c0:23:
5d:94:89:56:9c:ac:06:3f:99:ee:d8:23:fe:af:7c:d3:e6:05:
a8:10:f2:f3:fc:21:9e:e0:50:39:bc:4b:e1:f1:00:e6:61:76:
66:c2:4f:6e:b5:07:61:a8:89:88:7b:a2:95:aa:39:c8:21:3f:
88:4c:ec:61:d2:79:8a:32:e2:09:33:e0:a9:36:38:28:55:43:
0a:ca:2e:3a:aa:66:e1:91:40:e6:a7:83:bf:de:db:7c:71:6a:
90:87:19:8d:4d:e5:1a:67:e1:1b:0e:34:0a:ca:5f:32:e4:7a:
83:89:d2:1b:a1:ad:01:58:4c:55:62:c3:90:db:1d:4b:97:6d:
31:a4:3a:e5:89:7c:12:49:82:92:d4:1c:67:79:9f:d1:08:23:
2c:0d:4a:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj72Xlx3YuK9nmqUwXxGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODljYjcxODkxYzZkOTRiZDllNmYxNGYxNmU3ZTM3YzJj
NzI4YmYwHhcNMjUwMTAyMDU0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTIxMTFkYmJmN2NiOWE0Zjg2NDQ0MzdmZDhjMWFiZjUyMjA1YzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYE7xubDGkCBGavJBpLFBnyFtfCx
59ZGvBkjE0Gprw35EBr5VftPAZMrx/ujsI/rf5vAuME9l8+YRilkrezF3VbAsF28
0WxZoK4ZnlLptoQunJ7dxe+ymDg5lRKgPhcuIvNIykD5ro+YyrdNEBhFlu+eRAJH
XQ3YKlUJ27SbMil63NZkOWCAt2/aeOzF6FPtyuRlMwBXe9UDcGEw2bwchjy5KK9b
RrWdqRZkLXt1g4YZWIhTL5rjrkFDZ/gMyYQR+jBU//iUw699HjRzG6SjiEH1bcK+
cLG0vm/Za8ul0A8bEsp8Sqlr2/WoPDROWzydWEccKZ8I+ChIm27gt4WZAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJEhEdu/fLmk+GREN/2MGr9SIFw6MB8GA1UdIwQY
MBaAFNaJy3GJHG2UvZ5vFPFufjfCxyi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0Yjgt
ODI0ZmZjNjk0MmY0LzEva1NFUjI3OTh1YVQ0WkVRM19Zd2F2MUlnWERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0YjgtODI0ZmZjNjk0MmY0
LzEvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYavMA0G
CSqGSIb3DQEBCwUAA4IBAQB1fUKIDMg1wCzipGAZ7MpLDisMaon2GKHkBBSZCSzf
DQF66Arr/uPwUSPHsGxNiuDzZNdnZnshRLVUiWm/YbdFZ1IM16oc/dEFY5eTCTPc
7Pr7E0/pKMKtEQ+uHOCYUmKOHQQQpB/oZqd3wCNdlIlWnKwGP5nu2CP+r3zT5gWo
EPLz/CGe4FA5vEvh8QDmYXZmwk9utQdhqImIe6KVqjnIIT+ITOxh0nmKMuIJM+Cp
NjgoVUMKyi46qmbhkUDmp4O/3tt8cWqQhxmNTeUaZ+EbDjQKyl8y5HqDidIboa0B
WExVYsOQ2x1Ll20xpDrliXwSSYKS1BxneZ/RCCMsDUoW
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net