Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/E8fqlMMExB61QIsEKMENcZNpWcs.roa
File: E8fqlMMExB61QIsEKMENcZNpWcs.roa (raw, json)
Hash identifier: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=
Subject key identifier: 13:C7:EA:94:C3:04:C4:1E:B5:40:8B:04:28:C1:0D:71:93:69:59:CB
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019421B21821CF8430756286FA6248BC3946
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/E8fqlMMExB61QIsEKMENcZNpWcs.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213128
IP address blocks: 185.204.137.0/24 maxlen: 24
185.204.138.0/24 maxlen: 24
185.204.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:18:21:cf:84:30:75:62:86:fa:62:48:bc:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13c7ea94c304c41eb5408b0428c10d71936959cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:43:76:61:90:53:19:60:c2:4c:6a:a5:f7:
4a:aa:60:c6:bd:d5:a5:5d:4b:fe:d9:1c:1f:b6:1b:
3e:9d:82:42:c1:34:54:36:1c:17:97:75:28:4a:d1:
2d:24:07:be:c9:ec:27:fa:4e:86:eb:a7:33:da:53:
7d:1e:77:6e:0a:4c:fc:b2:e5:ed:27:70:47:77:9d:
bb:1a:1e:85:82:87:cb:a7:39:29:82:0d:98:24:32:
ac:b2:8f:0e:61:56:9c:5a:b5:f7:c7:82:0d:4a:e5:
e6:ec:77:1f:da:56:14:ac:e7:79:ca:4b:43:5f:32:
bb:60:1e:df:72:87:16:49:27:5c:c0:12:92:ea:37:
48:c5:5d:dd:e5:17:7e:63:e3:15:d2:78:f6:c8:7e:
50:77:a5:66:13:3a:6d:a8:47:72:1c:f9:32:9d:00:
6b:86:90:10:51:a7:7e:56:9d:59:47:7e:26:23:ef:
e6:40:9a:f2:71:2a:3d:df:3b:2b:78:7e:f6:75:1c:
95:c7:0a:15:ca:4b:30:e6:6d:0a:4f:62:52:39:5b:
39:19:dc:13:62:d7:0e:4f:76:1a:76:9a:79:49:ea:
57:91:e2:fe:67:63:d4:d3:76:05:8e:e5:a1:75:d2:
9c:6a:47:21:6f:89:b3:b8:01:a0:a3:d5:5d:f3:ae:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:EA:94:C3:04:C4:1E:B5:40:8B:04:28:C1:0D:71:93:69:59:CB
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/E8fqlMMExB61QIsEKMENcZNpWcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.137.0-185.204.139.255
Signature Algorithm: sha256WithRSAEncryption
af:61:29:ac:b3:94:ba:37:ba:2c:4f:d1:ce:5a:ad:db:be:64:
42:12:44:c8:03:57:8c:eb:35:54:cc:ed:eb:ff:48:e6:6d:ab:
b4:fb:e7:1c:1e:75:a5:98:34:04:d0:86:52:1f:d7:05:72:c1:
16:c2:80:d6:06:aa:62:d5:e3:2a:de:e5:16:aa:8a:59:89:b6:
fb:83:21:8b:8a:32:0f:1a:31:85:82:8f:a3:70:34:8a:42:8d:
6d:03:5c:5e:2d:e6:b3:82:31:ae:e5:65:7d:f6:e7:31:97:a5:
a5:4c:36:a0:bd:cd:d5:94:b6:72:2a:d5:a3:17:08:cc:6a:75:
0d:60:33:20:d9:dd:3c:a0:c6:5e:ff:27:db:87:7f:7d:74:c0:
e1:20:c7:1f:bd:3d:b7:3e:b1:79:51:bc:1f:8e:f1:fe:6e:d2:
8d:f0:a0:44:6d:c4:bb:8c:90:56:50:43:e8:a0:62:14:04:ae:
76:02:fe:a7:fa:14:8d:60:fe:1b:c4:5e:fe:fd:93:19:be:84:
04:31:9c:ff:15:7b:3d:ab:57:9b:1d:03:3b:c6:b4:8b:35:b9:
29:da:f3:f9:db:f5:5b:03:a5:94:2c:3d:a5:1c:ac:77:a4:b3:
6c:9c:31:62:3d:57:77:41:2c:e7:25:f2:80:9e:7c:f3:ea:6e:
f6:94:e2:b9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhshghz4QwdWKG+mJIvDlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw
ZGU4YTAwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2M3ZWE5NGMzMDRjNDFlYjU0MDhiMDQyOGMxMGQ3MTkzNjk1OWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRhDdmGQUxlgwkxqpfdKqmDGvdWl
XUv+2Rwfths+nYJCwTRUNhwXl3UoStEtJAe+yewn+k6G66cz2lN9HnduCkz8suXt
J3BHd527Gh6FgofLpzkpgg2YJDKsso8OYVacWrX3x4INSuXm7Hcf2lYUrOd5yktD
XzK7YB7fcocWSSdcwBKS6jdIxV3d5Rd+Y+MV0nj2yH5Qd6VmEzptqEdyHPkynQBr
hpAQUad+Vp1ZR34mI+/mQJrycSo93zsreH72dRyVxwoVyksw5m0KT2JSOVs5GdwT
YtcOT3Yadpp5SepXkeL+Z2PU03YFjuWhddKcakchb4mzuAGgo9Vd866ZzQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBPH6pTDBMQetUCLBCjBDXGTaVnLMB8GA1UdIwQY
MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt
NTM4NTA5ZjNhNzg5LzEvRThmcWxNTUV4QjYxUUlzRUtNRU5jWk5wV2NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5
LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5zIkD
BAK5zIgwDQYJKoZIhvcNAQELBQADggEBAK9hKayzlLo3uixP0c5ardu+ZEISRMgD
V4zrNVTM7ev/SOZtq7T75xwedaWYNATQhlIf1wVywRbCgNYGqmLV4yre5RaqilmJ
tvuDIYuKMg8aMYWCj6NwNIpCjW0DXF4t5rOCMa7lZX325zGXpaVMNqC9zdWUtnIq
1aMXCMxqdQ1gMyDZ3Tygxl7/J9uHf310wOEgxx+9Pbc+sXlRvB+O8f5u0o3woERt
xLuMkFZQQ+igYhQErnYC/qf6FI1g/hvEXv79kxm+hAQxnP8Vez2rV5sdAzvGtIs1
uSna8/nb9VsDpZQsPaUcrHeks2ycMWI9V3dBLOcl8oCefPPqbvaU4rk=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net