Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/_txCLD4YDUdsTjfPPVJ9SdD6ihE.roa
File: _txCLD4YDUdsTjfPPVJ9SdD6ihE.roa (raw, json)
Hash identifier: C6PAK9KSmJssxrTPd8kldiLRoq+LybtLO5CbxPOkExU=
Subject key identifier: FE:DC:42:2C:3E:18:0D:47:6C:4E:37:CF:3D:52:7D:49:D0:FA:8A:11
Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial: 0195DC3620D13561ED5A41FB99B876BD93E5
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/_txCLD4YDUdsTjfPPVJ9SdD6ihE.roa
Signing time: Fri 28 Mar 2025 10:04:49 +0000
ROA not before: Fri 28 Mar 2025 10:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30967
IP address blocks: 85.184.0.0/22 maxlen: 22
85.184.4.0/23 maxlen: 23
85.184.6.0/24 maxlen: 24
91.206.234.0/23 maxlen: 23
91.206.235.0/24 maxlen: 24
185.99.24.0/23 maxlen: 23
185.99.26.0/23 maxlen: 23
194.88.242.0/24 maxlen: 24
194.88.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:36:20:d1:35:61:ed:5a:41:fb:99:b8:76:bd:93:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Validity
Not Before: Mar 28 10:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fedc422c3e180d476c4e37cf3d527d49d0fa8a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7d:a0:57:2f:83:bf:d2:f2:5b:06:2f:d0:39:
7a:91:3d:64:09:7f:8c:ad:c7:ca:4c:34:a8:0d:1e:
c0:01:82:a0:89:b4:b8:87:70:78:e3:03:ac:9f:e9:
3c:9d:28:04:d5:63:97:03:c4:9b:5a:e8:47:cf:1c:
d2:51:e0:98:13:5c:49:9f:4c:15:7d:03:9d:e4:b6:
98:69:6b:8f:c4:1e:4e:e4:52:4a:ec:89:0e:3e:12:
4b:e3:3d:e5:4c:02:98:57:55:d5:1b:81:d3:68:c0:
4f:89:7c:c7:a1:dd:84:e8:72:47:bb:3f:34:41:34:
95:ae:69:26:cc:dd:62:79:c9:85:f3:92:52:d3:40:
f3:7b:8b:56:86:76:e1:60:9b:27:7a:78:41:12:e4:
65:93:9c:2a:28:ea:10:de:60:f5:46:fd:6d:e6:11:
58:f0:30:8d:2a:89:b2:53:c5:7e:15:e2:1f:88:c5:
ca:ea:43:b2:e9:c7:9b:e0:c9:2c:6c:ea:53:1f:27:
00:65:81:74:f6:3f:28:b7:17:d1:7b:b1:e4:86:7b:
8f:f5:43:75:f3:5e:db:55:a9:92:42:a2:66:e7:2f:
7f:c0:d1:36:ac:0e:b2:7a:df:cb:50:16:7f:2d:30:
51:68:d8:00:87:8e:73:b8:1e:b0:1a:52:e7:6d:62:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:42:2C:3E:18:0D:47:6C:4E:37:CF:3D:52:7D:49:D0:FA:8A:11
X509v3 Authority Key Identifier:
keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/_txCLD4YDUdsTjfPPVJ9SdD6ihE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.184.0.0-85.184.6.255
91.206.234.0/23
185.99.24.0/22
194.88.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:dd:f8:63:31:5d:be:fa:2e:9e:15:af:f5:28:ea:3f:74:76:
7a:0e:55:0c:ea:ad:cb:9f:f0:36:bc:64:d1:96:d7:08:f2:33:
93:47:9a:82:42:8b:8e:f6:4a:be:7d:a1:71:b1:7b:b1:9d:29:
cf:24:1b:08:a3:2e:c3:d9:1c:23:75:2b:d7:a9:96:7c:18:6c:
21:54:d3:82:44:6c:bc:9c:c0:b7:f1:3c:57:b6:62:be:9f:1e:
74:73:38:eb:b4:b8:28:f4:68:20:bd:b0:31:78:40:a2:43:9e:
b6:60:2d:32:48:a1:05:9a:6f:e3:d3:72:75:2e:43:2c:2d:02:
e6:38:80:04:f7:47:26:92:62:94:f8:c2:95:cb:82:80:d9:3e:
eb:1d:07:7c:4b:98:78:de:d8:cf:c3:1c:aa:9c:3a:90:45:a4:
7f:df:ac:6d:f3:18:ae:28:36:be:84:67:8e:a8:df:98:1c:5a:
79:64:05:cd:4a:3f:11:35:1c:43:d2:67:1b:2f:ee:6f:94:4f:
f9:7f:63:c0:1f:8e:3c:c0:32:23:52:04:97:2c:8a:b6:c7:39:
b8:9e:57:3e:c7:57:d8:3b:49:af:45:9d:9b:09:e2:2d:7f:9a:
8e:04:9d:7c:4f:61:2e:c9:f4:3f:f3:34:e3:3b:98:25:e7:d3:
88:cb:cc:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXcNiDRNWHtWkH7mbh2vZPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm
ZmYzYWUwHhcNMjUwMzI4MTAwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWRjNDIyYzNlMTgwZDQ3NmM0ZTM3Y2YzZDUyN2Q0OWQwZmE4YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi32gVy+Dv9LyWwYv0Dl6kT1kCX+M
rcfKTDSoDR7AAYKgibS4h3B44wOsn+k8nSgE1WOXA8SbWuhHzxzSUeCYE1xJn0wV
fQOd5LaYaWuPxB5O5FJK7IkOPhJL4z3lTAKYV1XVG4HTaMBPiXzHod2E6HJHuz80
QTSVrmkmzN1iecmF85JS00Dze4tWhnbhYJsnenhBEuRlk5wqKOoQ3mD1Rv1t5hFY
8DCNKomyU8V+FeIfiMXK6kOy6ceb4MksbOpTHycAZYF09j8otxfRe7HkhnuP9UN1
817bVamSQqJm5y9/wNE2rA6yet/LUBZ/LTBRaNgAh45zuB6wGlLnbWLjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7cQiw+GA1HbE43zz1SfUnQ+ooRMB8GA1UdIwQY
MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt
ZTEyOTZiMzJhMTFmLzEvX3R4Q0xENFlEVWRzVGpmUFBWSjlTZEQ2aWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm
LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfMAsDAwNVuAME
AFW4BgMEAVvO6gMEArljGAMEAcJY8jANBgkqhkiG9w0BAQsFAAOCAQEAGt34YzFd
vvounhWv9SjqP3R2eg5VDOqty5/wNrxk0ZbXCPIzk0eagkKLjvZKvn2hcbF7sZ0p
zyQbCKMuw9kcI3Ur16mWfBhsIVTTgkRsvJzAt/E8V7Zivp8edHM467S4KPRoIL2w
MXhAokOetmAtMkihBZpv49NydS5DLC0C5jiABPdHJpJilPjClcuCgNk+6x0HfEuY
eN7Yz8Mcqpw6kEWkf9+sbfMYrig2voRnjqjfmBxaeWQFzUo/ETUcQ9JnGy/ub5RP
+X9jwB+OPMAyI1IElyyKtsc5uJ5XPsdX2DtJr0WdmwniLX+ajgSdfE9hLsn0P/M0
4zuYJefTiMvMlQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:19:59 2025 by rpki-client