Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/8uYJC_uUQib3K90k6tRQR4c4tec.roa
File: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (raw, json)
Hash identifier: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=
Subject key identifier: F2:E6:09:0B:FB:94:42:26:F7:2B:DD:24:EA:D4:50:47:87:38:B5:E7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 0195B3A80CE5796C1BD1CB31224686700D12
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/8uYJC_uUQib3K90k6tRQR4c4tec.roa
Signing time: Thu 20 Mar 2025 13:04:49 +0000
ROA not before: Thu 20 Mar 2025 13:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31477
IP address blocks: 185.180.96.0/22 maxlen: 24
195.137.169.0/24 maxlen: 24
2a0b:6d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:a8:0c:e5:79:6c:1b:d1:cb:31:22:46:86:70:0d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Mar 20 13:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2e6090bfb944226f72bdd24ead450478738b5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:39:3e:25:36:71:47:a6:ba:ac:1f:1b:88:
39:ff:34:1f:b5:1f:75:3e:91:24:8e:c9:5e:97:78:
f9:76:05:60:68:2f:80:f1:6e:1b:cf:71:a2:84:9e:
04:62:2b:29:d4:71:2d:7f:58:92:46:71:18:97:49:
89:27:8d:a8:b9:48:77:b2:2f:b8:c3:4a:37:df:c3:
ac:67:80:89:eb:fd:a4:6a:72:77:5a:e0:7f:f2:34:
38:2b:4d:93:2d:0d:7d:5b:e1:81:d4:a4:7f:79:98:
36:5a:86:7b:20:09:72:0d:c8:98:da:07:46:79:0a:
5b:cc:74:45:40:e6:76:10:d2:dc:2f:d1:7f:a0:58:
6c:da:f6:d8:c9:b1:14:28:6b:6c:1a:b0:64:f5:9b:
c2:30:b7:3b:39:d0:3d:12:99:bc:a3:46:de:90:6c:
ac:2b:82:2c:bb:cf:1e:32:56:7e:cc:85:3c:8f:74:
99:6b:5a:f7:61:2e:9a:10:21:57:35:51:e8:f0:f1:
71:55:1a:03:d7:03:22:00:ab:3e:65:e1:79:66:a8:
eb:0f:32:e3:e8:a8:79:a7:3a:96:28:c7:bc:90:25:
66:b4:c4:27:42:01:03:cb:70:ac:55:49:5a:d5:87:
24:ec:aa:35:31:e5:0c:df:ff:a6:8c:f9:28:e9:c2:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:09:0B:FB:94:42:26:F7:2B:DD:24:EA:D4:50:47:87:38:B5:E7
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/8uYJC_uUQib3K90k6tRQR4c4tec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.96.0/22
195.137.169.0/24
IPv6:
2a0b:6d80::/29
Signature Algorithm: sha256WithRSAEncryption
59:af:65:c5:59:94:b8:bf:a9:23:8b:7c:cb:a1:53:5f:b0:01:
1c:14:78:66:14:d4:97:5f:fb:e0:51:67:78:54:0e:8b:a7:84:
e7:61:73:d8:01:f2:f0:e7:db:fb:c5:51:ec:9a:fa:7f:54:9d:
19:1c:a6:26:04:d9:6a:a3:93:3c:2b:92:73:bd:72:99:ab:d9:
78:86:f3:d1:fa:3d:99:58:f5:7d:1b:5a:13:20:4c:38:64:97:
dc:46:6f:95:ed:79:bf:4e:36:1b:b9:78:99:30:cf:46:f2:3d:
59:03:6c:fa:bd:fd:ed:a4:0d:bc:8e:15:7a:49:71:bd:22:fb:
a0:45:d9:18:aa:dc:14:d3:7c:54:da:fa:f6:85:6e:df:9a:66:
f2:48:6e:bd:30:4b:c2:19:f5:33:56:e4:b3:b2:48:a9:4b:c6:
88:d3:3d:17:5c:a4:7e:db:a9:0f:b4:a0:51:92:e9:53:da:67:
2e:81:89:18:4f:3b:b2:5a:a9:eb:93:c0:3d:29:3c:a5:50:b1:
d9:91:df:61:cf:8c:25:3c:d8:33:74:b8:82:a4:c0:42:55:20:
4b:d7:bb:79:cb:5e:75:40:09:d3:59:b2:31:55:56:88:89:9c:
51:8b:98:f7:2f:c5:0a:fd:2b:2c:8b:6d:c0:48:3c:51:58:e4:
f3:86:77:b5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZWzqAzleWwb0csxIkaGcA0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjgyZmYzZWM3Y2I4MWI3OGU2MjhhNzM1MTc2NDhkNjIy
OWNhYjcwHhcNMjUwMzIwMTMwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmU2MDkwYmZiOTQ0MjI2ZjcyYmRkMjRlYWQ0NTA0Nzg3MzhiNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplo5PiU2cUemuqwfG4g5/zQftR91
PpEkjslel3j5dgVgaC+A8W4bz3GihJ4EYisp1HEtf1iSRnEYl0mJJ42ouUh3si+4
w0o338OsZ4CJ6/2kanJ3WuB/8jQ4K02TLQ19W+GB1KR/eZg2WoZ7IAlyDciY2gdG
eQpbzHRFQOZ2ENLcL9F/oFhs2vbYybEUKGtsGrBk9ZvCMLc7OdA9Epm8o0bekGys
K4Isu88eMlZ+zIU8j3SZa1r3YS6aECFXNVHo8PFxVRoD1wMiAKs+ZeF5ZqjrDzLj
6Kh5pzqWKMe8kCVmtMQnQgEDy3CsVUla1Yck7Ko1MeUM3/+mjPko6cJLUwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPLmCQv7lEIm9yvdJOrUUEeHOLXnMB8GA1UdIwQY
MBaAFIwoL/PsfLgbeOYopzUXZI1iKcq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUt
NmNhM2U5ZDNlNzhkLzEvOHVZSkNfdVVRaWIzSzkwazZ0UlFSNGM0dGVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUtNmNhM2U5ZDNlNzhk
LzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubRgAwQA
w4mpMA0EAgACMAcDBQMqC22AMA0GCSqGSIb3DQEBCwUAA4IBAQBZr2XFWZS4v6kj
i3zLoVNfsAEcFHhmFNSXX/vgUWd4VA6Lp4TnYXPYAfLw59v7xVHsmvp/VJ0ZHKYm
BNlqo5M8K5JzvXKZq9l4hvPR+j2ZWPV9G1oTIEw4ZJfcRm+V7Xm/TjYbuXiZMM9G
8j1ZA2z6vf3tpA28jhV6SXG9IvugRdkYqtwU03xU2vr2hW7fmmbySG69MEvCGfUz
VuSzskipS8aI0z0XXKR+26kPtKBRkulT2mcugYkYTzuyWqnrk8A9KTylULHZkd9h
z4wlPNgzdLiCpMBCVSBL17t5y151QAnTWbIxVVaIiZxRi5j3L8UK/Sssi23ASDxR
WOTzhne1
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:05 2025 by rpki-client on console.sobornost.net