Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Si8V8khtv0yVUA78DGGzfalNcCk.roa
File: Si8V8khtv0yVUA78DGGzfalNcCk.roa (raw, json)
Hash identifier: TuKNETdYYEdxWIcOAjkF1OdADD7zXp4g+mS6E5V7pvo=
Subject key identifier: 4A:2F:15:F2:48:6D:BF:4C:95:50:0E:FC:0C:61:B3:7D:A9:4D:70:29
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 0195F6DBBCD17C37B8775FE07E0332CD3AAB
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Si8V8khtv0yVUA78DGGzfalNcCk.roa
Signing time: Wed 02 Apr 2025 14:15:50 +0000
ROA not before: Wed 02 Apr 2025 14:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203562
IP address blocks: 185.101.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:db:bc:d1:7c:37:b8:77:5f:e0:7e:03:32:cd:3a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Apr 2 14:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a2f15f2486dbf4c95500efc0c61b37da94d7029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:36:71:9f:2c:90:95:86:fd:e8:16:7a:1c:
4b:77:da:6f:ed:d5:82:7d:0a:69:8f:ee:42:da:f1:
47:8c:94:6d:71:b7:aa:0e:d1:27:d2:e2:0a:3e:56:
84:09:49:d7:43:79:be:9f:a3:c4:5e:b8:63:98:9f:
ae:38:41:10:3f:9d:e9:67:f4:90:cd:2a:4f:b4:e6:
50:4d:d5:0c:c9:f2:c9:bc:37:09:9f:67:a8:0f:4b:
92:3f:49:4c:1c:c8:44:e0:d6:b0:ef:bf:05:e0:b0:
be:02:29:c0:de:ff:96:bf:c4:62:57:58:79:c0:85:
79:53:8d:08:06:4c:2e:84:84:f2:00:21:66:0e:14:
57:5d:f9:fd:c3:f8:61:28:a0:59:3d:6e:39:f3:09:
2e:4c:f2:cd:a9:ed:83:a9:36:66:01:ea:d9:af:1b:
b7:a5:af:b4:af:fc:47:71:09:9b:b2:1d:a5:2c:3e:
40:2f:f5:86:2b:bd:70:ce:ec:6a:3a:d4:45:75:0d:
89:59:42:11:5c:36:9d:21:8b:f7:ff:6b:9e:24:af:
07:3a:de:36:34:db:ce:82:f2:90:3a:5b:cc:de:79:
31:de:2e:c1:a2:e6:9d:db:39:63:35:71:c4:5b:4c:
54:86:04:ef:a1:64:53:b4:da:7c:06:0e:e8:55:6c:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2F:15:F2:48:6D:BF:4C:95:50:0E:FC:0C:61:B3:7D:A9:4D:70:29
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/Si8V8khtv0yVUA78DGGzfalNcCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:18:0d:cd:92:15:4b:43:b5:89:00:2c:a6:d3:e9:66:5b:f3:
60:04:94:4c:33:d7:71:e9:ee:19:2f:60:54:58:50:44:b5:ba:
a6:b5:a3:c2:33:91:46:44:67:61:91:fb:44:aa:ff:37:6d:f6:
22:df:a5:31:f8:eb:d8:a5:33:18:81:4a:7e:24:d3:29:87:7a:
28:54:eb:9b:05:7f:fe:03:5c:32:01:ef:59:91:82:54:6d:1d:
fe:f5:4e:86:6b:7f:9c:62:72:79:c7:0d:c3:d8:9d:78:92:a3:
14:48:34:26:b4:eb:eb:f3:67:18:64:b3:7a:07:84:37:07:af:
6a:b1:24:0d:7c:67:e3:f5:15:ad:72:4b:ed:08:2b:89:0c:53:
bd:7a:73:64:52:c7:b9:35:66:21:d6:8d:3f:94:bd:66:58:d6:
45:d5:0a:4b:cb:49:38:64:3e:37:bc:55:cf:72:1d:f4:8b:60:
74:a8:9a:59:d9:5c:39:e4:f6:70:29:12:a1:85:60:d0:07:52:
d6:85:ed:4d:e1:9f:cb:bc:64:ca:87:28:60:5d:22:42:4e:80:
e8:a3:9a:53:1c:59:a0:44:ed:d9:e3:8d:f0:61:af:51:54:f0:
99:74:7f:ac:c1:ab:dd:c5:2a:4c:30:aa:82:c0:46:fa:86:dc:
a7:50:87:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX227zRfDe4d1/gfgMyzTqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0
MWE4ZDMwHhcNMjUwNDAyMTQxNTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTJmMTVmMjQ4NmRiZjRjOTU1MDBlZmMwYzYxYjM3ZGE5NGQ3MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuak2cZ8skJWG/egWehxLd9pv7dWC
fQppj+5C2vFHjJRtcbeqDtEn0uIKPlaECUnXQ3m+n6PEXrhjmJ+uOEEQP53pZ/SQ
zSpPtOZQTdUMyfLJvDcJn2eoD0uSP0lMHMhE4Naw778F4LC+AinA3v+Wv8RiV1h5
wIV5U40IBkwuhITyACFmDhRXXfn9w/hhKKBZPW458wkuTPLNqe2DqTZmAerZrxu3
pa+0r/xHcQmbsh2lLD5AL/WGK71wzuxqOtRFdQ2JWUIRXDadIYv3/2ueJK8HOt42
NNvOgvKQOlvM3nkx3i7Bouad2zljNXHEW0xUhgTvoWRTtNp8Bg7oVWwV7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEovFfJIbb9MlVAO/Axhs32pTXApMB8GA1UdIwQY
MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt
MjcxZDI1ZTIwNTc0LzEvU2k4VjhraHR2MHlWVUE3OERHR3pmYWxOY0NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0
LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWWBMA0G
CSqGSIb3DQEBCwUAA4IBAQBLGA3NkhVLQ7WJACym0+lmW/NgBJRMM9dx6e4ZL2BU
WFBEtbqmtaPCM5FGRGdhkftEqv83bfYi36Ux+OvYpTMYgUp+JNMph3ooVOubBX/+
A1wyAe9ZkYJUbR3+9U6Ga3+cYnJ5xw3D2J14kqMUSDQmtOvr82cYZLN6B4Q3B69q
sSQNfGfj9RWtckvtCCuJDFO9enNkUse5NWYh1o0/lL1mWNZF1QpLy0k4ZD43vFXP
ch30i2B0qJpZ2Vw55PZwKRKhhWDQB1LWhe1N4Z/LvGTKhyhgXSJCToDoo5pTHFmg
RO3Z443wYa9RVPCZdH+swavdxSpMMKqCwEb6htynUIfY
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net