Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/DF9yRFAWYaxLwT3ruOrYKO1I2Ik.roa
File: DF9yRFAWYaxLwT3ruOrYKO1I2Ik.roa (raw, json)
Hash identifier: kTs4UQdxYwKyY0uupJ+G2/gOGPpzBvQfEDYM3ZB2yso=
Subject key identifier: 0C:5F:72:44:50:16:61:AC:4B:C1:3D:EB:B8:EA:D8:28:ED:48:D8:89
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B240D60E5923C2B591449E8566FF1A
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/DF9yRFAWYaxLwT3ruOrYKO1I2Ik.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210797
IP address blocks: 185.57.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:40:d6:0e:59:23:c2:b5:91:44:9e:85:66:ff:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c5f7244501661ac4bc13debb8ead828ed48d889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:aa:20:cf:4c:ab:36:1e:d6:bd:dc:fd:40:
74:8d:1c:10:ed:f9:bc:e7:05:1d:97:6c:20:07:84:
b8:cd:64:ae:76:de:8f:7a:f7:b0:ec:40:86:b4:e2:
3b:da:6e:95:3b:f8:28:9e:4b:8e:e3:5c:da:b9:fe:
b1:8c:d4:ad:59:ea:a5:fa:55:2f:93:1c:d8:b3:0a:
b5:7a:01:e0:48:be:67:f9:8b:78:d9:d6:bd:15:05:
cd:b5:0b:e5:8a:2a:e8:d7:fc:2a:ed:c0:c6:5a:82:
9a:c0:c7:e5:f8:19:3e:26:80:6b:89:2e:2c:02:f3:
79:6f:8e:d2:74:6c:b1:7e:bb:66:fd:a6:78:cc:05:
ba:d5:cc:46:3b:df:62:97:74:89:35:ec:ff:37:c3:
53:03:8a:45:da:97:0c:b7:a7:f0:b1:13:58:ef:97:
6b:32:d9:af:88:4a:41:1c:d1:8d:b8:61:82:ee:e5:
d7:b2:7f:4d:cc:46:b8:35:b5:4f:de:09:7c:fb:53:
bc:0b:1b:f1:a7:ac:06:b4:81:f6:31:fe:b8:46:32:
ea:40:3f:84:b0:03:90:99:1f:20:69:1e:c8:dd:30:
c7:f4:ee:4c:16:1c:1b:05:97:d2:49:a0:28:37:7a:
0d:1b:ac:b4:2a:ed:f5:73:f8:6d:64:6f:b7:1a:cc:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:72:44:50:16:61:AC:4B:C1:3D:EB:B8:EA:D8:28:ED:48:D8:89
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/DF9yRFAWYaxLwT3ruOrYKO1I2Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.230.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a2:23:4f:8e:44:33:d3:09:9d:97:c0:3a:14:92:6f:e5:f3:
1e:cb:05:ef:e0:b9:a4:f8:bd:5e:04:9c:f3:3e:1e:30:89:61:
53:f7:b5:6f:cf:ac:98:ce:d4:43:be:73:6d:2f:94:42:08:75:
cb:83:86:c9:e5:bc:ab:ed:e6:52:13:8e:a1:11:e3:b9:09:78:
63:f0:3a:02:75:af:d5:4b:4d:ab:52:cc:38:ad:02:04:5a:4e:
c3:2e:2f:32:d3:3d:13:f1:93:a7:1f:77:01:d5:ac:5b:df:54:
80:b3:42:96:e9:e5:2b:f6:5d:25:9f:f8:8d:be:ee:ed:24:b5:
55:9d:ca:19:57:b8:55:b4:c9:fa:58:7c:cd:2f:69:91:40:c0:
a3:fd:f4:43:29:55:6b:65:df:bc:c3:52:1b:e9:87:8f:a7:26:
c3:78:83:05:b8:21:2a:80:37:d3:99:61:67:9c:86:19:de:78:
de:86:93:36:ac:ea:51:7c:31:12:37:4f:cf:8b:83:41:b5:a5:
64:ea:9b:5c:b5:f5:4d:6f:bb:b3:09:2f:9a:83:09:c3:85:e9:
23:9f:d4:42:4f:93:66:03:c6:e7:1f:77:ce:3d:a9:b7:c8:95:
a5:c7:7d:76:35:33:b8:3f:bf:32:8b:78:a1:49:d4:b4:4b:47:
cf:82:26:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhskDWDlkjwrWRRJ6FZv8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjUwMTAxMTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzVmNzI0NDUwMTY2MWFjNGJjMTNkZWJiOGVhZDgyOGVkNDhkODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4seqIM9MqzYe1r3c/UB0jRwQ7fm8
5wUdl2wgB4S4zWSudt6Pevew7ECGtOI72m6VO/gonkuO41zauf6xjNStWeql+lUv
kxzYswq1egHgSL5n+Yt42da9FQXNtQvliiro1/wq7cDGWoKawMfl+Bk+JoBriS4s
AvN5b47SdGyxfrtm/aZ4zAW61cxGO99il3SJNez/N8NTA4pF2pcMt6fwsRNY75dr
MtmviEpBHNGNuGGC7uXXsn9NzEa4NbVP3gl8+1O8Cxvxp6wGtIH2Mf64RjLqQD+E
sAOQmR8gaR7I3TDH9O5MFhwbBZfSSaAoN3oNG6y0Ku31c/htZG+3GsxoMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAxfckRQFmGsS8E967jq2CjtSNiJMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvREY5eVJGQVdZYXhMd1QzcnVPcllLTzFJMklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTnmMA0G
CSqGSIb3DQEBCwUAA4IBAQAWoiNPjkQz0wmdl8A6FJJv5fMeywXv4Lmk+L1eBJzz
Ph4wiWFT97Vvz6yYztRDvnNtL5RCCHXLg4bJ5byr7eZSE46hEeO5CXhj8DoCda/V
S02rUsw4rQIEWk7DLi8y0z0T8ZOnH3cB1axb31SAs0KW6eUr9l0ln/iNvu7tJLVV
ncoZV7hVtMn6WHzNL2mRQMCj/fRDKVVrZd+8w1Ib6YePpybDeIMFuCEqgDfTmWFn
nIYZ3njehpM2rOpRfDESN0/Pi4NBtaVk6ptctfVNb7uzCS+agwnDhekjn9RCT5Nm
A8bnH3fOPam3yJWlx312NTO4P78yi3ihSdS0S0fPgib8
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:29 2025 by rpki-client