Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/CpF6aVcFa4aSib91gY7r_oRg7yk.roa
File: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (raw, json)
Hash identifier: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=
Subject key identifier: 0A:91:7A:69:57:05:6B:86:92:89:BF:75:81:8E:EB:FE:84:60:EF:29
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 01942067D7F98C929EE32C3E1BC12E8DFBDB
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/CpF6aVcFa4aSib91gY7r_oRg7yk.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204386
IP address blocks: 185.250.156.0/22 maxlen: 22
185.250.156.0/24 maxlen: 24
185.250.157.0/24 maxlen: 24
185.250.158.0/24 maxlen: 24
185.250.159.0/24 maxlen: 24
185.251.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d7:f9:8c:92:9e:e3:2c:3e:1b:c1:2e:8d:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a917a6957056b869289bf75818eebfe8460ef29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:ef:9f:8e:86:59:4a:48:f3:63:e1:66:f1:
81:19:bd:77:2a:86:ca:aa:47:74:07:6e:47:c4:3c:
0b:c5:1e:22:f9:5f:19:3c:00:cb:a9:fb:ea:68:cc:
8d:ca:8f:76:5f:71:77:ef:f3:32:46:3f:26:c2:a0:
92:6d:b9:e7:72:71:ed:cc:a4:04:6d:82:27:7e:b5:
59:86:eb:b8:a6:9d:3a:f1:72:dd:ce:e1:93:42:2a:
da:e1:f3:f0:23:a7:41:68:84:e4:3e:76:e3:18:4e:
ef:e6:7b:74:e3:f8:eb:ee:75:51:b1:eb:7d:41:af:
ec:14:56:90:77:2e:2b:97:fd:1f:da:b9:08:b8:66:
9e:cc:98:31:47:65:9f:1b:f9:27:c8:31:a1:e3:31:
d2:98:99:6b:90:66:c9:95:ec:bc:3c:ef:76:cd:ca:
b3:cd:5c:39:f5:87:40:cc:23:dc:9d:24:11:2c:26:
41:90:14:76:f5:f8:1d:05:2a:1a:41:5b:a8:c2:d4:
b6:4d:78:d3:34:0b:10:4b:27:63:88:0a:2c:42:9d:
ef:05:f5:da:67:68:df:cb:09:97:0a:39:0c:17:61:
23:d0:5c:bb:9e:3a:a2:61:9b:ce:a6:eb:70:4d:4e:
7f:72:f6:0f:6b:f6:60:a4:2a:cd:54:f4:ac:82:16:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:7A:69:57:05:6B:86:92:89:BF:75:81:8E:EB:FE:84:60:EF:29
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/CpF6aVcFa4aSib91gY7r_oRg7yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.156.0/22
185.251.26.0/24
Signature Algorithm: sha256WithRSAEncryption
36:00:08:2b:c3:09:0a:99:87:ec:e7:27:38:11:d8:e4:6b:b7:
ec:45:81:7d:1d:d4:09:dc:4a:b4:d4:e8:f6:35:fe:7c:d5:bf:
c4:e7:62:13:e4:89:52:61:89:c4:4a:20:0b:70:eb:7b:49:61:
7b:93:d2:48:16:ae:8d:c0:71:6f:bb:c3:38:2a:39:25:bb:f1:
c1:1b:8b:0c:78:f4:2b:e3:80:98:ab:95:26:80:8f:fd:0f:3d:
62:cf:a6:95:08:6d:a4:9f:d6:31:f6:39:f0:04:2a:2b:9b:f2:
e9:f5:80:3f:94:5d:5d:d2:23:5d:6d:f8:9d:8f:c2:91:73:79:
27:02:e5:79:11:23:34:4c:fe:96:16:88:ca:5c:66:70:1e:f8:
78:f7:02:72:25:9e:20:65:c3:78:44:51:85:69:fb:95:12:25:
5c:ff:2d:a5:cb:25:03:79:6b:7e:70:a7:74:85:46:1e:96:09:
db:ae:85:fd:68:7b:3a:2f:b9:96:86:68:b8:b0:a4:c6:5f:80:
c2:2e:47:3d:74:35:e6:ca:ea:c1:8b:d7:5a:b3:20:6a:24:71:
9e:fa:fd:73:71:4f:b9:c4:94:53:95:cb:5d:e5:64:dd:e7:e1:
28:53:f4:8c:36:52:9d:0a:7a:7a:1b:6c:a8:d1:43:4b:38:cf:
25:d3:db:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgZ9f5jJKe4yw+G8EujfvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTJiNmEwNTE0NzFiZWM1MWRiNzRkNzI1NmU3YTMwYTU1
ZWNmMWEwHhcNMjUwMTAxMDU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTkxN2E2OTU3MDU2Yjg2OTI4OWJmNzU4MThlZWJmZTg0NjBlZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HDvn46GWUpI82PhZvGBGb13KobK
qkd0B25HxDwLxR4i+V8ZPADLqfvqaMyNyo92X3F37/MyRj8mwqCSbbnncnHtzKQE
bYInfrVZhuu4pp068XLdzuGTQira4fPwI6dBaITkPnbjGE7v5nt04/jr7nVRset9
Qa/sFFaQdy4rl/0f2rkIuGaezJgxR2WfG/knyDGh4zHSmJlrkGbJley8PO92zcqz
zVw59YdAzCPcnSQRLCZBkBR29fgdBSoaQVuowtS2TXjTNAsQSydjiAosQp3vBfXa
Z2jfywmXCjkMF2Ej0Fy7njqiYZvOputwTU5/cvYPa/ZgpCrNVPSsghY3pQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAqRemlXBWuGkom/dYGO6/6EYO8pMB8GA1UdIwQY
MBaAFJxStqBRRxvsUdt01yVuejClXs8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAt
MjgyOWFhM2RmMjU4LzEvQ3BGNmFWY0ZhNGFTaWI5MWdZN3Jfb1JnN3lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAtMjgyOWFhM2RmMjU4
LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCufqcAwQA
ufsaMA0GCSqGSIb3DQEBCwUAA4IBAQA2AAgrwwkKmYfs5yc4Edjka7fsRYF9HdQJ
3Eq01Oj2Nf581b/E52IT5IlSYYnESiALcOt7SWF7k9JIFq6NwHFvu8M4Kjklu/HB
G4sMePQr44CYq5UmgI/9Dz1iz6aVCG2kn9Yx9jnwBCorm/Lp9YA/lF1d0iNdbfid
j8KRc3knAuV5ESM0TP6WFojKXGZwHvh49wJyJZ4gZcN4RFGFafuVEiVc/y2lyyUD
eWt+cKd0hUYelgnbroX9aHs6L7mWhmi4sKTGX4DCLkc9dDXmyurBi9dasyBqJHGe
+v1zcU+5xJRTlctd5WTd5+EoU/SMNlKdCnp6G2yo0UNLOM8l09tm
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net