Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa
File: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (raw, json)
Hash identifier: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=
Subject key identifier: E1:80:57:7B:C4:44:E1:2D:05:93:D4:9F:36:3E:30:25:37:0B:AD:59
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 01941F8C5F7780A25026D56C5A45DC0A3BB6
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62440
IP address blocks: 185.35.128.0/22 maxlen: 22
185.35.128.0/24 maxlen: 24
185.35.129.0/24 maxlen: 24
185.35.130.0/24 maxlen: 24
185.35.131.0/24 maxlen: 24
212.94.16.0/20 maxlen: 20
212.94.16.0/24 maxlen: 24
212.94.17.0/24 maxlen: 24
212.94.18.0/24 maxlen: 24
212.94.19.0/24 maxlen: 24
212.94.20.0/24 maxlen: 24
212.94.21.0/24 maxlen: 24
212.94.22.0/24 maxlen: 24
212.94.23.0/24 maxlen: 24
212.94.24.0/24 maxlen: 24
212.94.25.0/24 maxlen: 24
212.94.26.0/24 maxlen: 24
212.94.27.0/24 maxlen: 24
212.94.28.0/24 maxlen: 24
212.94.29.0/24 maxlen: 24
212.94.30.0/24 maxlen: 24
212.94.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5f:77:80:a2:50:26:d5:6c:5a:45:dc:0a:3b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e180577bc444e12d0593d49f363e3025370bad59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:77:7a:04:3f:11:b3:29:41:79:1e:53:7e:
a4:40:f2:5d:45:a3:e7:47:d0:6f:3f:59:bf:3c:55:
75:57:91:f0:28:a7:79:77:a8:32:70:a8:0f:98:bd:
2e:a7:74:71:cd:80:77:a7:d7:d6:b6:6c:c2:47:9c:
5c:7c:f6:05:dd:ee:70:be:aa:99:a0:1c:20:93:56:
40:7f:41:26:f0:29:57:48:fd:52:78:ca:31:6f:5f:
31:b4:f5:36:a8:7c:35:72:d8:e9:f3:eb:c4:8f:c4:
7f:b9:c9:82:09:28:57:d8:22:5d:fe:d3:fa:3f:95:
fc:aa:26:74:f9:4c:17:7b:c2:f0:21:4e:47:70:d4:
c9:05:2c:a9:18:02:48:a5:a3:41:3b:99:95:dc:9e:
03:8f:ff:0e:e9:15:d5:de:96:94:b0:63:f9:7d:2f:
52:c4:4e:3b:0e:71:c7:f2:55:6f:0c:fa:9f:28:5e:
79:3d:2b:3a:04:1b:aa:57:04:b3:5c:cd:b1:1e:d8:
7b:ec:45:da:d6:69:bf:86:41:28:b0:2a:ee:98:59:
f2:d6:78:8f:d4:ca:59:58:f9:c3:86:8a:1d:aa:73:
61:1f:57:e7:37:b2:5f:9f:2e:9a:63:e2:01:fa:90:
a9:eb:c9:8b:fa:d3:48:9a:a0:32:70:c7:64:d9:35:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:57:7B:C4:44:E1:2D:05:93:D4:9F:36:3E:30:25:37:0B:AD:59
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.128.0/22
212.94.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:27:9b:f5:d9:5c:cd:4b:4c:81:45:ea:f9:ae:ed:ca:27:35:
43:fe:0a:d7:ef:4a:02:e4:f2:bf:d3:49:b3:3c:cb:81:55:5c:
73:35:76:74:b6:4e:32:b7:7e:40:c1:7f:d7:e9:14:6a:c1:89:
2f:72:c4:77:46:f3:58:6c:92:d0:ec:18:c9:25:7a:f5:f7:5e:
b4:57:e2:bc:f9:db:a0:7c:6e:a4:42:b3:ee:83:fb:db:1c:6f:
86:11:4e:85:69:88:5a:00:6f:d0:77:cf:6d:a1:c1:05:20:8d:
62:1b:d4:3b:f1:f5:d2:77:d2:36:b6:e2:6e:21:09:6d:4f:67:
3d:f7:4e:4e:90:ef:67:29:31:4c:db:f0:00:38:63:09:6a:a8:
45:0d:58:ce:59:8e:8c:5e:68:8f:64:85:ab:bc:06:1c:51:1f:
d2:a6:46:63:c1:20:f1:81:db:ea:f6:1c:79:a9:b2:92:2d:78:
4d:d1:27:75:f5:02:91:83:29:ad:8f:a1:11:da:40:de:b3:22:
79:fd:48:ef:80:6e:f2:38:fc:d1:43:3c:36:08:f4:16:08:b1:
e1:a1:a5:d6:ab:9e:b2:54:58:53:77:62:e4:03:62:3e:77:a2:
8d:6d:8d:b6:44:71:ef:95:5d:72:78:bb:fb:6b:4c:55:62:e9:
d2:d7:3c:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjF93gKJQJtVsWkXcCju2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmFkOWE5NWFjMTU4MDJlNTgzNDE4MDhhMDRkZTUzZDlj
ZjgyZjEwHhcNMjUwMTAxMDE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTgwNTc3YmM0NDRlMTJkMDU5M2Q0OWYzNjNlMzAyNTM3MGJhZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6l3egQ/EbMpQXkeU36kQPJdRaPn
R9BvP1m/PFV1V5HwKKd5d6gycKgPmL0up3RxzYB3p9fWtmzCR5xcfPYF3e5wvqqZ
oBwgk1ZAf0Em8ClXSP1SeMoxb18xtPU2qHw1ctjp8+vEj8R/ucmCCShX2CJd/tP6
P5X8qiZ0+UwXe8LwIU5HcNTJBSypGAJIpaNBO5mV3J4Dj/8O6RXV3paUsGP5fS9S
xE47DnHH8lVvDPqfKF55PSs6BBuqVwSzXM2xHth77EXa1mm/hkEosCrumFny1niP
1MpZWPnDhoodqnNhH1fnN7Jfny6aY+IB+pCp68mL+tNImqAycMdk2TUZ2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOGAV3vEROEtBZPUnzY+MCU3C61ZMB8GA1UdIwQY
MBaAFJVq2alawVgC5YNBgIoE3lPZz4LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2Et
ZDg3MjFiODBkZDc5LzEvNFlCWGU4UkU0UzBGazlTZk5qNHdKVGNMclZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2EtZDg3MjFiODBkZDc5
LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSOAAwQE
1F4QMA0GCSqGSIb3DQEBCwUAA4IBAQBsJ5v12VzNS0yBRer5ru3KJzVD/grX70oC
5PK/00mzPMuBVVxzNXZ0tk4yt35AwX/X6RRqwYkvcsR3RvNYbJLQ7BjJJXr19160
V+K8+dugfG6kQrPug/vbHG+GEU6FaYhaAG/Qd89tocEFII1iG9Q78fXSd9I2tuJu
IQltT2c9905OkO9nKTFM2/AAOGMJaqhFDVjOWY6MXmiPZIWrvAYcUR/SpkZjwSDx
gdvq9hx5qbKSLXhN0Sd19QKRgymtj6ER2kDesyJ5/UjvgG7yOPzRQzw2CPQWCLHh
oaXWq56yVFhTd2LkA2I+d6KNbY22RHHvlV1yeLv7a0xVYunS1zzR
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net