Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa
File: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (raw, json)
Hash identifier: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=
Subject key identifier: 09:82:E0:CB:33:2C:62:2E:E5:82:7F:D0:E4:6A:7B:38:5A:77:60:BA
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 019422FBA8165FE80676FE65737E5EAC2BEE
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa
Signing time: Wed 01 Jan 2025 17:48:25 +0000
ROA not before: Wed 01 Jan 2025 17:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206519
IP address blocks: 185.184.84.0/24 maxlen: 24
185.184.85.0/24 maxlen: 24
185.184.86.0/24 maxlen: 24
185.184.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a8:16:5f:e8:06:76:fe:65:73:7e:5e:ac:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0982e0cb332c622ee5827fd0e46a7b385a7760ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7e:83:e8:07:64:17:62:f5:28:c6:53:ed:9a:
54:a3:88:f5:86:c1:ff:89:bd:b3:be:5e:7c:0b:da:
40:51:b6:1c:ca:9b:92:84:a6:28:15:7b:78:c2:cd:
71:b4:a6:d3:63:96:dc:94:21:28:85:3e:6e:75:da:
d5:41:3b:b7:05:24:2b:84:81:02:8b:78:d5:4a:10:
19:e6:ae:93:f1:21:ce:dc:f5:9d:8b:a6:36:69:8c:
72:7a:e7:7e:e3:8e:4c:28:d8:f2:bb:7e:59:3d:68:
ec:34:ee:c8:c4:04:6e:9b:e8:c6:01:94:98:2b:29:
38:9a:07:96:95:73:30:0c:e1:11:a1:c2:5a:8b:9c:
d6:78:9b:36:81:d3:6c:08:e6:13:9e:62:1c:53:46:
1b:ef:c0:97:e8:9c:9f:07:8b:71:80:8c:0f:59:1f:
35:23:8a:41:cd:b7:92:df:58:e2:4a:aa:09:6f:4a:
72:46:f7:e5:46:7d:17:54:a8:0c:9f:91:ba:02:dc:
c0:93:66:45:05:23:fb:3c:ae:5f:e1:0f:7c:e2:c6:
c7:67:29:73:0f:6a:37:ef:8a:c4:00:a4:66:c4:56:
fb:8a:d1:13:33:6c:0b:2f:77:4c:c5:e4:33:51:41:
52:43:2c:8f:86:30:70:e2:14:63:c5:74:92:da:9c:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:E0:CB:33:2C:62:2E:E5:82:7F:D0:E4:6A:7B:38:5A:77:60:BA
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.84.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:23:a0:63:be:6c:7a:01:d9:55:18:f9:81:a4:37:e7:25:2b:
1c:8c:88:f8:93:e7:7d:8c:bb:d8:1d:c2:a9:b2:c7:e9:54:28:
f6:14:99:46:0d:ed:a9:af:15:70:b3:3a:10:63:dd:43:88:23:
ae:08:f9:12:57:d3:1e:1e:6c:35:ed:16:de:cc:f8:5b:20:02:
30:3f:9a:69:57:59:d6:36:58:68:bf:90:a9:86:a8:0d:ba:5f:
f5:c5:4d:1e:0a:d6:c7:7c:b0:d7:71:88:46:08:13:14:4d:11:
e6:5b:9e:b4:c1:0e:f2:8c:89:21:68:a8:28:1e:4f:db:67:35:
ab:88:fe:28:6e:cb:8e:58:05:91:50:b8:58:5f:b9:e1:71:18:
a8:ad:64:c0:b8:d2:ba:c0:7e:47:d5:92:e8:a5:31:3b:a3:c2:
96:1c:34:a8:d2:f3:84:eb:e7:6c:f8:da:80:22:3e:57:ce:77:
b3:0a:90:95:b0:b1:22:d0:8d:d6:1a:50:e1:6d:86:0f:35:93:
54:89:d6:a7:81:ba:03:47:f7:0c:dc:fc:3f:ba:83:11:ee:4c:
d8:7d:4f:8e:a7:14:a9:cf:ac:06:80:cd:41:6a:7f:fa:d8:80:
09:93:b9:06:82:7d:62:2e:2c:15:32:1d:0c:d0:26:6c:c5:50:
f0:31:cb:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+6gWX+gGdv5lc35erCvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODg0ZjkyYWZlYjU4ZmZhYjI2NDg3YjIzMjA1ZmUwZDVk
YThhOWYwHhcNMjUwMTAxMTc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTgyZTBjYjMzMmM2MjJlZTU4MjdmZDBlNDZhN2IzODVhNzc2MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H6D6AdkF2L1KMZT7ZpUo4j1hsH/
ib2zvl58C9pAUbYcypuShKYoFXt4ws1xtKbTY5bclCEohT5uddrVQTu3BSQrhIEC
i3jVShAZ5q6T8SHO3PWdi6Y2aYxyeud+445MKNjyu35ZPWjsNO7IxARum+jGAZSY
Kyk4mgeWlXMwDOERocJai5zWeJs2gdNsCOYTnmIcU0Yb78CX6JyfB4txgIwPWR81
I4pBzbeS31jiSqoJb0pyRvflRn0XVKgMn5G6AtzAk2ZFBSP7PK5f4Q984sbHZylz
D2o374rEAKRmxFb7itETM2wLL3dMxeQzUUFSQyyPhjBw4hRjxXSS2px9wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAmC4MszLGIu5YJ/0ORqezhad2C6MB8GA1UdIwQY
MBaAFNmIT5Kv61j/qyZIeyMgX+DV2oqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYt
NzY1MzMyNDVmMmJlLzEvQ1lMZ3l6TXNZaTdsZ25fUTVHcDdPRnAzWUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYtNzY1MzMyNDVmMmJl
LzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubhUMA0G
CSqGSIb3DQEBCwUAA4IBAQCrI6Bjvmx6AdlVGPmBpDfnJSscjIj4k+d9jLvYHcKp
ssfpVCj2FJlGDe2prxVwszoQY91DiCOuCPkSV9MeHmw17RbezPhbIAIwP5ppV1nW
Nlhov5CphqgNul/1xU0eCtbHfLDXcYhGCBMUTRHmW560wQ7yjIkhaKgoHk/bZzWr
iP4obsuOWAWRULhYX7nhcRiorWTAuNK6wH5H1ZLopTE7o8KWHDSo0vOE6+ds+NqA
Ij5XznezCpCVsLEi0I3WGlDhbYYPNZNUidangboDR/cM3Pw/uoMR7kzYfU+OpxSp
z6wGgM1Ban/62IAJk7kGgn1iLiwVMh0M0CZsxVDwMcub
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net