Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/_IXLnCzw_zVB3dV_MJacG4jX80Y.roa
File: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (raw, json)
Hash identifier: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=
Subject key identifier: FC:85:CB:9C:2C:F0:FF:35:41:DD:D5:7F:30:96:9C:1B:88:D7:F3:46
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 0194258F2EA08CE1D8190C4FADB48D72C0FF
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/_IXLnCzw_zVB3dV_MJacG4jX80Y.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211196
IP address blocks: 185.53.112.0/24 maxlen: 24
185.53.113.0/24 maxlen: 24
185.53.114.0/24 maxlen: 24
185.53.115.0/24 maxlen: 24
185.198.68.0/24 maxlen: 24
2a0b:6f80:100::/48 maxlen: 48
2a0b:6f80:101::/48 maxlen: 48
2a0b:6f80:102::/48 maxlen: 48
2a0b:6f80:103::/48 maxlen: 48
2a0b:6f80:200::/40 maxlen: 40
2a0b:6f80:300::/40 maxlen: 40
2a0b:6f80:400::/40 maxlen: 40
2a0b:6f80:500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2e:a0:8c:e1:d8:19:0c:4f:ad:b4:8d:72:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc85cb9c2cf0ff3541ddd57f30969c1b88d7f346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:99:4e:c6:4a:71:cc:1d:fb:44:a5:a8:00:7c:
1c:92:17:00:77:b9:6d:a0:ed:96:fe:b8:0b:ff:5e:
8a:f7:33:c0:ca:06:ed:2d:07:9c:a7:25:87:aa:4c:
a3:90:86:bf:17:1a:03:00:fe:b3:de:bf:b1:cc:70:
44:df:0c:21:99:73:11:de:04:12:78:33:d6:f9:dc:
2d:86:7a:1a:50:8d:c5:c5:b1:d9:b8:ed:25:ed:93:
7f:ee:45:88:53:78:d7:ad:30:a3:8f:b5:bf:73:02:
e5:1b:a4:3f:95:d7:f6:1d:c6:66:0d:3b:5f:90:0c:
5f:56:c7:8e:dc:41:0c:52:b0:c0:97:dc:5b:dc:fb:
d3:f0:26:be:75:bb:f5:77:0a:de:43:dd:c0:d4:e4:
17:74:d2:a6:79:1a:db:b1:e8:d0:e3:0a:bc:3d:6e:
0c:a7:a2:50:ff:7d:13:c4:04:cf:5b:1a:16:e0:6d:
b0:38:e1:b1:63:67:27:36:55:b0:3f:f2:8e:b1:ce:
a0:10:00:e9:12:6b:93:2d:7e:12:e9:2f:17:37:a3:
15:0c:c1:97:a3:3b:9a:0a:c5:76:37:74:2f:61:aa:
c1:fa:8e:32:3a:7f:1e:fb:d6:0d:9c:37:12:d7:4d:
db:17:20:c9:2f:52:7b:cc:81:d2:76:38:b0:66:e9:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:CB:9C:2C:F0:FF:35:41:DD:D5:7F:30:96:9C:1B:88:D7:F3:46
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/_IXLnCzw_zVB3dV_MJacG4jX80Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.112.0/22
185.198.68.0/24
IPv6:
2a0b:6f80:100::/46
2a0b:6f80:200::-2a0b:6f80:5ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:1c:22:db:b6:30:93:7e:82:17:9d:7f:1a:7b:32:58:f1:af:
67:41:97:62:ac:0f:36:85:64:65:eb:15:67:cc:ca:57:c1:9a:
2c:91:51:43:a6:28:5f:ed:ad:01:7f:ad:95:08:36:8d:99:96:
ad:04:9e:70:53:08:48:b0:a2:11:72:4c:3e:13:ce:75:75:d3:
f9:89:fd:26:bd:e1:92:da:b4:3a:67:3e:44:36:84:45:02:da:
f7:9b:83:fb:62:6b:38:0c:ca:75:d9:f1:6e:60:d1:92:8b:a0:
df:33:bd:12:9f:e1:27:e3:d9:6f:30:d4:78:d5:0b:97:de:f8:
ed:55:8c:37:ea:4c:14:ad:7a:c5:0f:ff:f3:e4:dd:26:33:ab:
be:69:50:e6:c0:b3:64:9a:33:92:74:b9:e3:fe:74:ec:05:88:
21:34:4b:9f:59:21:e7:dd:2d:21:24:f5:fb:69:f4:8e:9d:5a:
d0:a4:8a:fd:b3:d1:22:d3:4c:0d:04:a0:30:7a:e9:50:cb:cd:
48:29:60:56:1c:fd:d0:69:36:97:07:77:98:da:13:d8:9f:66:
29:a7:c2:1f:c5:1b:13:a2:12:db:e1:c2:a7:67:1e:06:22:74:
3d:9e:75:f7:13:f2:27:8f:28:1e:ab:60:20:25:2d:5a:fb:04:
7e:93:00:07
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQljy6gjOHYGQxPrbSNcsD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx
YWM0N2UwHhcNMjUwMTAyMDU0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzg1Y2I5YzJjZjBmZjM1NDFkZGQ1N2YzMDk2OWMxYjg4ZDdmMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JlOxkpxzB37RKWoAHwckhcAd7lt
oO2W/rgL/16K9zPAygbtLQecpyWHqkyjkIa/FxoDAP6z3r+xzHBE3wwhmXMR3gQS
eDPW+dwthnoaUI3FxbHZuO0l7ZN/7kWIU3jXrTCjj7W/cwLlG6Q/ldf2HcZmDTtf
kAxfVseO3EEMUrDAl9xb3PvT8Ca+dbv1dwreQ93A1OQXdNKmeRrbsejQ4wq8PW4M
p6JQ/30TxATPWxoW4G2wOOGxY2cnNlWwP/KOsc6gEADpEmuTLX4S6S8XN6MVDMGX
ozuaCsV2N3QvYarB+o4yOn8e+9YNnDcS103bFyDJL1J7zIHSdjiwZuk9+wIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFPyFy5ws8P81Qd3VfzCWnBuI1/NGMB8GA1UdIwQY
MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt
Y2YwOTA3MTMzMjQxLzEvX0lYTG5DendfelZCM2RWX01KYWNHNGpYODBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx
LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzASBAIAATAMAwQCuTVwAwQA
ucZEMCEEAgACMBsDBwIqC2+AAQAwEAMGASoLb4ACAwYBKgtvgAQwDQYJKoZIhvcN
AQELBQADggEBAAccItu2MJN+ghedfxp7Mljxr2dBl2KsDzaFZGXrFWfMylfBmiyR
UUOmKF/trQF/rZUINo2Zlq0EnnBTCEiwohFyTD4TznV10/mJ/Sa94ZLatDpnPkQ2
hEUC2vebg/tiazgMynXZ8W5g0ZKLoN8zvRKf4Sfj2W8w1HjVC5fe+O1VjDfqTBSt
esUP//Pk3SYzq75pUObAs2SaM5J0ueP+dOwFiCE0S59ZIefdLSEk9ftp9I6dWtCk
iv2z0SLTTA0EoDB66VDLzUgpYFYc/dBpNpcHd5jaE9ifZimnwh/FGxOiEtvhwqdn
HgYidD2edfcT8iePKB6rYCAlLVr7BH6TAAc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net