Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/bkbeFY-foKd3saHxL2Ms4IvaWZI.roa
File: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (raw, json)
Hash identifier: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=
Subject key identifier: 6E:46:DE:15:8F:9F:A0:A7:77:B1:A1:F1:2F:63:2C:E0:8B:DA:59:92
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 0194222001ADADD853B28613C89CC54D878C
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/bkbeFY-foKd3saHxL2Ms4IvaWZI.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272381
IP address blocks: 185.75.14.0/24 maxlen: 24
185.75.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:01:ad:ad:d8:53:b2:86:13:c8:9c:c5:4d:87:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e46de158f9fa0a777b1a1f12f632ce08bda5992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:ae:1c:c9:d6:75:2a:97:94:47:4f:5a:11:
88:ce:8d:11:42:94:02:07:cf:fd:17:82:5c:cc:e1:
80:d7:4f:b6:b4:fb:06:8e:75:5f:a9:57:90:97:12:
d1:94:92:59:bd:9c:19:5b:b1:36:7b:ae:b1:bf:fe:
2a:20:a7:9c:78:0b:ba:c9:f0:e9:88:b0:72:07:24:
4a:a9:3e:e1:38:a0:82:04:ea:61:3e:f4:94:d9:f3:
8e:92:89:cd:0a:6d:20:d2:ea:53:c4:aa:1b:3d:99:
b9:c0:6d:78:01:cb:96:08:74:77:68:7f:25:fe:c6:
98:07:fb:e5:f8:dd:c6:08:4b:68:77:c2:eb:1f:aa:
fd:0e:ac:70:3f:0b:94:ed:0b:e1:d8:83:b9:e0:83:
bb:66:c9:c1:8c:a8:06:98:65:38:f1:6a:09:cb:3b:
c8:3b:ec:d3:15:b9:54:67:22:48:41:9c:66:23:9b:
9a:c4:6a:65:08:73:62:91:c4:eb:ce:05:1a:ac:42:
f1:46:79:7e:a4:8c:38:f2:3c:0e:3d:04:09:ed:a5:
43:38:cc:e0:1b:05:0c:b9:b5:05:49:8c:e2:82:63:
55:98:e4:ef:cc:1a:ff:66:e6:46:6d:17:93:ea:da:
65:2e:b9:6d:14:ca:52:c8:0f:80:d7:3c:1d:c5:f3:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:46:DE:15:8F:9F:A0:A7:77:B1:A1:F1:2F:63:2C:E0:8B:DA:59:92
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/bkbeFY-foKd3saHxL2Ms4IvaWZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:05:cf:41:3b:08:ed:fc:dd:07:ca:bf:0f:84:3a:fc:2a:61:
79:0d:4c:64:44:b1:4a:8b:d6:bd:ac:75:41:9b:67:50:c0:84:
0f:26:98:1f:ec:c7:d6:47:3d:9c:d0:5e:94:b6:02:f1:ce:86:
b8:b6:6e:94:9f:c0:27:95:49:34:84:f2:57:18:bd:5b:f6:bc:
f2:6a:ae:7c:57:1a:0d:b0:b4:d8:e1:c2:7d:d3:7c:08:85:9c:
09:4a:83:da:8b:99:41:c2:1b:cc:97:74:3d:da:31:1c:0a:b4:
be:76:94:d2:63:9f:51:7e:c9:81:51:33:2d:e1:8d:ce:0d:80:
85:dd:41:05:1a:97:1c:12:96:a7:c9:f5:2c:bd:55:66:36:3a:
2f:a7:3d:e6:2b:af:48:7e:ef:93:8f:8d:02:e5:3b:48:c8:6c:
69:c9:8c:34:47:f6:97:27:95:19:0d:cb:51:0c:fa:95:3c:44:
8c:6b:b5:c6:4f:b1:11:29:93:fd:45:ab:0e:f3:bf:24:8e:8b:
a4:34:b7:7e:ff:29:3a:1e:8a:a9:c7:e3:f9:71:e7:f9:bc:95:
3e:5d:a3:4a:e6:56:e5:68:4d:c7:81:24:2b:36:c9:89:cf:27:
41:6f:4d:4e:f9:06:37:05:5e:9e:d0:5a:74:ef:a7:f3:5b:a2:
78:5b:db:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIAGtrdhTsoYTyJzFTYeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk
ZWZlNzEwHhcNMjUwMTAxMTM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTQ2ZGUxNThmOWZhMGE3NzdiMWExZjEyZjYzMmNlMDhiZGE1OTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQOuHMnWdSqXlEdPWhGIzo0RQpQC
B8/9F4JczOGA10+2tPsGjnVfqVeQlxLRlJJZvZwZW7E2e66xv/4qIKeceAu6yfDp
iLByByRKqT7hOKCCBOphPvSU2fOOkonNCm0g0upTxKobPZm5wG14AcuWCHR3aH8l
/saYB/vl+N3GCEtod8LrH6r9DqxwPwuU7Qvh2IO54IO7ZsnBjKgGmGU48WoJyzvI
O+zTFblUZyJIQZxmI5uaxGplCHNikcTrzgUarELxRnl+pIw48jwOPQQJ7aVDOMzg
GwUMubUFSYzigmNVmOTvzBr/ZuZGbReT6tplLrltFMpSyA+A1zwdxfNlFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5G3hWPn6Cnd7Gh8S9jLOCL2lmSMB8GA1UdIwQY
MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt
Zjg4OWNhMTYxYzAxLzEvYmtiZUZZLWZvS2Qzc2FIeEwyTXM0SXZhV1pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx
LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUsOMA0G
CSqGSIb3DQEBCwUAA4IBAQBaBc9BOwjt/N0Hyr8PhDr8KmF5DUxkRLFKi9a9rHVB
m2dQwIQPJpgf7MfWRz2c0F6UtgLxzoa4tm6Un8AnlUk0hPJXGL1b9rzyaq58VxoN
sLTY4cJ903wIhZwJSoPai5lBwhvMl3Q92jEcCrS+dpTSY59RfsmBUTMt4Y3ODYCF
3UEFGpccEpanyfUsvVVmNjovpz3mK69Ifu+Tj40C5TtIyGxpyYw0R/aXJ5UZDctR
DPqVPESMa7XGT7ERKZP9RasO878kjoukNLd+/yk6Hoqpx+P5cef5vJU+XaNK5lbl
aE3HgSQrNsmJzydBb01O+QY3BV6e0Fp076fzW6J4W9uA
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net