Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/xhegVBAKk0XT86_ijfwUPQBwbjE.roa
File: xhegVBAKk0XT86_ijfwUPQBwbjE.roa (raw, json)
Hash identifier: HzUtvDRCwVOU+h+rA3imDZdqrxNmwf2Nw3JBM6GcfyM=
Subject key identifier: C6:17:A0:54:10:0A:93:45:D3:F3:AF:E2:8D:FC:14:3D:00:70:6E:31
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 0194258F6CAD91FFC249BAA7EFEAD8A1B3C1
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/xhegVBAKk0XT86_ijfwUPQBwbjE.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50647
IP address blocks: 185.181.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6c:ad:91:ff:c2:49:ba:a7:ef:ea:d8:a1:b3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c617a054100a9345d3f3afe28dfc143d00706e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:0f:7f:d8:f3:10:6a:08:cd:0c:1f:7d:d1:
73:08:f9:53:c2:64:33:3d:18:4a:c3:03:ef:58:33:
8e:00:9e:31:00:30:c9:b4:65:8b:a5:8a:1a:83:9e:
0c:2d:21:3a:f2:5f:05:b6:0c:18:66:d9:fb:25:b2:
2c:ca:45:1e:51:8a:cb:87:84:06:2a:87:2b:3d:7f:
32:c1:8f:2e:af:b2:64:b9:66:b2:82:0f:d9:56:e6:
be:06:a1:a1:11:ed:6c:aa:fc:4c:e9:78:ee:bf:06:
6d:97:0d:e1:78:ed:57:67:cd:2d:69:fd:b5:bb:2b:
24:51:4f:e5:35:21:78:ae:f4:7c:1b:d3:cd:45:5f:
dc:4e:f1:e1:c3:bd:af:3b:65:4a:f0:b7:5c:d5:aa:
64:68:a5:4b:17:2c:e6:f0:0d:4d:b8:7a:25:fe:52:
fb:24:df:01:7d:ec:48:22:7c:de:64:0b:7b:7b:3e:
c1:d1:a2:be:1a:5c:67:a0:5a:cf:ba:1c:ea:bd:4a:
9e:4f:51:51:ea:aa:40:a3:5a:75:18:3b:3a:7e:80:
b8:dc:91:9d:70:4d:9f:f5:75:16:a3:bb:b4:bc:13:
00:86:3c:3a:e6:fd:75:76:9c:2f:76:d8:c2:7f:2b:
17:74:43:41:72:5c:bc:b6:76:a0:14:0d:e2:0c:aa:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:A0:54:10:0A:93:45:D3:F3:AF:E2:8D:FC:14:3D:00:70:6E:31
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/xhegVBAKk0XT86_ijfwUPQBwbjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:31:82:cb:f5:0e:53:89:66:62:50:0d:b7:b3:97:de:43:7f:
95:99:89:d5:8d:85:98:ee:19:3e:17:52:ca:00:1b:a8:05:7f:
02:05:5c:cc:b2:d8:71:79:95:92:17:a5:e9:12:5d:47:cc:e3:
48:5e:ad:8b:cb:49:0d:58:5e:25:59:ee:47:78:0d:ce:88:52:
83:3d:a3:61:92:3f:b6:8a:47:c5:29:cb:a5:de:bc:43:03:7c:
38:ca:96:88:43:6a:2f:68:93:27:6c:24:f1:a1:7c:24:52:ff:
1c:16:5f:2a:a4:28:04:38:7b:59:5a:20:8c:6a:2b:83:bf:44:
73:49:e5:ba:3d:45:05:d5:78:81:b5:47:a6:ce:af:21:a7:40:
51:f7:97:47:e4:12:21:94:e3:91:4f:a7:5d:61:fd:33:10:05:
f1:2f:a5:44:0c:12:f2:56:fa:58:32:b6:f8:95:09:9c:12:3d:
5d:78:cd:2f:c3:10:cd:0e:6b:97:fe:0b:6e:3b:48:5b:d2:6b:
2e:d2:cb:39:5b:65:33:be:54:94:55:e6:4d:2e:ef:de:70:22:
16:69:0c:c5:1a:d4:9a:75:54:6b:7f:59:7b:95:88:a3:28:6f:
0c:6f:e7:6d:4d:78:30:f3:3c:83:68:bc:23:9f:94:8b:23:0c:
99:52:a5:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj2ytkf/CSbqn7+rYobPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjY0ODM1ZjhhYWZlNjE0OTcxZmZhODY4M2Y5Zjc0YmY0
ZDBmZjQwHhcNMjUwMTAyMDU0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjE3YTA1NDEwMGE5MzQ1ZDNmM2FmZTI4ZGZjMTQzZDAwNzA2ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtocPf9jzEGoIzQwffdFzCPlTwmQz
PRhKwwPvWDOOAJ4xADDJtGWLpYoag54MLSE68l8FtgwYZtn7JbIsykUeUYrLh4QG
KocrPX8ywY8ur7JkuWaygg/ZVua+BqGhEe1sqvxM6XjuvwZtlw3heO1XZ80taf21
uyskUU/lNSF4rvR8G9PNRV/cTvHhw72vO2VK8Ldc1apkaKVLFyzm8A1NuHol/lL7
JN8BfexIInzeZAt7ez7B0aK+GlxnoFrPuhzqvUqeT1FR6qpAo1p1GDs6foC43JGd
cE2f9XUWo7u0vBMAhjw65v11dpwvdtjCfysXdENBcly8tnagFA3iDKrwNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMYXoFQQCpNF0/Ov4o38FD0AcG4xMB8GA1UdIwQY
MBaAFAhmSDX4qv5hSXH/qGg/n3S/TQ/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZWYzYjUtYTg0OC00M2Q1LTg3M2Et
MDc1N2E2ZDI4MjI0LzEveGhlZ1ZCQUtrMFhUODZfaWpmd1VQUUJ3YmpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZWYzYjUtYTg0OC00M2Q1LTg3M2EtMDc1N2E2ZDI4MjI0
LzEvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubX4MA0G
CSqGSIb3DQEBCwUAA4IBAQCeMYLL9Q5TiWZiUA23s5feQ3+VmYnVjYWY7hk+F1LK
ABuoBX8CBVzMsthxeZWSF6XpEl1HzONIXq2Ly0kNWF4lWe5HeA3OiFKDPaNhkj+2
ikfFKcul3rxDA3w4ypaIQ2ovaJMnbCTxoXwkUv8cFl8qpCgEOHtZWiCMaiuDv0Rz
SeW6PUUF1XiBtUemzq8hp0BR95dH5BIhlOORT6ddYf0zEAXxL6VEDBLyVvpYMrb4
lQmcEj1deM0vwxDNDmuX/gtuO0hb0msu0ss5W2UzvlSUVeZNLu/ecCIWaQzFGtSa
dVRrf1l7lYijKG8Mb+dtTXgw8zyDaLwjn5SLIwyZUqWp
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net