Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/8ifx7KKJ18pryNHwF1j4-Fc64gM.roa
File: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (raw, json)
Hash identifier: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=
Subject key identifier: F2:27:F1:EC:A2:89:D7:CA:6B:C8:D1:F0:17:58:F8:F8:57:3A:E2:03
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 019427481D9C357ED234A1E5083A1EE16B5E
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/8ifx7KKJ18pryNHwF1j4-Fc64gM.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12541
IP address blocks: 185.123.120.0/22 maxlen: 24
212.66.160.0/24 maxlen: 24
212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1d:9c:35:7e:d2:34:a1:e5:08:3a:1e:e1:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f227f1eca289d7ca6bc8d1f01758f8f8573ae203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:7b:c9:c4:56:d1:f2:09:bd:ae:8e:11:2a:
c7:f9:d7:2d:7b:0c:25:ce:af:16:70:75:6f:1c:dc:
32:91:31:cc:ae:4f:eb:1a:eb:bb:4c:12:84:82:bf:
ad:99:80:6c:7b:05:01:23:fd:41:02:aa:e1:e1:4d:
6b:fe:c3:2d:70:d3:16:1e:b5:14:6e:4f:d8:fd:08:
b1:60:e0:4a:5f:31:1a:35:c8:fb:a5:c6:e0:fe:6b:
79:64:5a:55:45:dd:15:f4:5c:51:dd:bd:3d:d6:ba:
f0:1d:db:62:cb:e6:bf:0f:28:b2:6b:5f:cf:d7:a1:
6a:fa:45:95:d7:b2:29:70:af:b2:55:cc:77:14:b1:
cf:c6:c4:ee:cc:9e:bf:fe:13:52:ed:d7:bf:63:8a:
5a:13:0a:f1:49:20:ae:f0:2f:19:a3:3a:0a:d8:e5:
19:54:88:b7:fa:c3:02:1c:ac:35:4f:8d:32:bb:04:
fc:22:36:2a:57:b7:3b:b4:71:42:b2:ba:c9:da:a9:
a5:5a:56:3d:8f:84:78:26:f6:30:12:71:cb:88:a3:
b4:f8:19:91:56:f1:00:1b:c3:67:52:3e:d7:48:ef:
d0:b4:d5:06:48:cc:1a:41:3a:94:80:f3:77:16:5c:
43:eb:3a:49:5b:11:f5:13:f5:b5:26:e9:fd:bb:b9:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:F1:EC:A2:89:D7:CA:6B:C8:D1:F0:17:58:F8:F8:57:3A:E2:03
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/8ifx7KKJ18pryNHwF1j4-Fc64gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:39:b9:df:c2:13:70:72:78:6d:92:c8:c7:8a:5a:a2:b6:04:
91:77:09:8a:61:3c:1a:0f:fb:fd:1b:6a:04:4c:d0:9d:0a:13:
09:7f:9a:ba:30:7c:14:f4:5d:93:4e:f8:d9:b3:18:fa:71:0e:
f0:88:af:d3:87:bf:68:a5:c3:2b:fd:a8:b6:80:41:9d:4c:60:
8e:2e:8a:56:9b:7f:60:f7:c0:11:52:63:14:4c:c9:f7:ef:a2:
8e:77:c6:47:a9:00:32:25:2d:d2:0a:e1:de:79:8e:d6:a1:c4:
7d:55:cb:04:87:ad:3e:a0:62:95:ac:a0:1b:71:a9:c8:18:35:
8e:ff:f6:11:3b:c3:94:90:91:72:fd:84:44:78:34:e2:01:58:
b4:23:b6:94:70:c7:64:dc:cd:85:68:38:1f:45:3c:80:e7:6b:
2b:a6:f3:c3:13:e1:a4:08:75:90:d7:70:6d:a1:7e:35:47:33:
14:83:d7:3d:08:30:ce:82:6f:23:5c:a9:5f:fb:cc:c6:bb:45:
ae:00:a8:54:4b:a2:8f:34:c0:37:11:fd:1c:bd:c3:19:f6:79:
2c:a1:56:01:d1:75:fe:57:62:82:03:6d:ea:a8:e5:00:be:15:
43:f1:61:d5:85:71:ac:6a:79:7c:9a:c3:2f:6d:c4:82:96:25:
cc:0b:35:5b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQnSB2cNX7SNKHlCDoe4WteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjUwMTAyMTM1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjI3ZjFlY2EyODlkN2NhNmJjOGQxZjAxNzU4ZjhmODU3M2FlMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgR7ycRW0fIJva6OESrH+dctewwl
zq8WcHVvHNwykTHMrk/rGuu7TBKEgr+tmYBsewUBI/1BAqrh4U1r/sMtcNMWHrUU
bk/Y/QixYOBKXzEaNcj7pcbg/mt5ZFpVRd0V9FxR3b091rrwHdtiy+a/Dyiya1/P
16Fq+kWV17IpcK+yVcx3FLHPxsTuzJ6//hNS7de/Y4paEwrxSSCu8C8ZozoK2OUZ
VIi3+sMCHKw1T40yuwT8IjYqV7c7tHFCsrrJ2qmlWlY9j4R4JvYwEnHLiKO0+BmR
VvEAG8NnUj7XSO/QtNUGSMwaQTqUgPN3FlxD6zpJWxH1E/W1Jun9u7lOiwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPIn8eyiidfKa8jR8BdY+PhXOuIDMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvOGlmeDdLS0oxOHByeU5Id0YxajQtRmM2NGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuXt4AwQA
1EKgAwQF1FCgAwQF1aogMA0GCSqGSIb3DQEBCwUAA4IBAQBPObnfwhNwcnhtksjH
ilqitgSRdwmKYTwaD/v9G2oETNCdChMJf5q6MHwU9F2TTvjZsxj6cQ7wiK/Th79o
pcMr/ai2gEGdTGCOLopWm39g98ARUmMUTMn376KOd8ZHqQAyJS3SCuHeeY7WocR9
VcsEh60+oGKVrKAbcanIGDWO//YRO8OUkJFy/YREeDTiAVi0I7aUcMdk3M2FaDgf
RTyA52srpvPDE+GkCHWQ13BtoX41RzMUg9c9CDDOgm8jXKlf+8zGu0WuAKhUS6KP
NMA3Ef0cvcMZ9nksoVYB0XX+V2KCA23qqOUAvhVD8WHVhXGsanl8msMvbcSCliXM
CzVb
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net