Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Ej8KsK3ekpSAuBzyfoaBTrkE254.roa
File: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (raw, json)
Hash identifier: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=
Subject key identifier: 12:3F:0A:B0:AD:DE:92:94:80:B8:1C:F2:7E:86:81:4E:B9:04:DB:9E
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 01956BD07B422323BC57DBEE6FC9DE0F06EE
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Ej8KsK3ekpSAuBzyfoaBTrkE254.roa
Signing time: Thu 06 Mar 2025 14:16:19 +0000
ROA not before: Thu 06 Mar 2025 14:16:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 185.244.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:d0:7b:42:23:23:bc:57:db:ee:6f:c9:de:0f:06:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Mar 6 14:16:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=123f0ab0adde929480b81cf27e86814eb904db9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:22:b6:1b:7a:58:b6:9b:9e:aa:57:42:bf:
78:d7:68:80:ae:2a:b5:97:a6:38:16:18:e6:e9:04:
fe:6a:f0:11:8e:b4:eb:e4:d7:42:6c:18:29:83:b5:
86:49:91:15:93:8d:42:39:3f:b9:05:e7:6a:00:11:
d9:31:75:47:81:80:93:e4:96:f4:ca:3b:6f:8c:d8:
4e:e1:15:47:35:48:db:83:fa:0f:f7:ca:dc:28:f3:
fe:0d:6a:9d:2e:5e:51:48:0a:66:c9:d8:0c:37:59:
06:0e:0d:1b:8c:7b:0b:a0:39:68:af:ea:cf:b2:ee:
17:5f:11:54:0c:7b:f9:42:41:b6:1d:4f:e2:f2:c1:
c2:e8:49:0a:43:45:06:df:6a:1c:5c:46:2f:0a:e8:
52:b9:a4:52:52:49:c5:61:58:f6:68:2e:f1:54:d3:
5a:bc:29:70:5b:7c:b2:a9:9b:2e:6a:78:2d:f1:c4:
9e:5a:4f:4d:0e:a8:83:37:d7:de:cd:29:70:94:ff:
a2:1f:e2:8b:1f:7b:f9:5f:69:d7:7b:e2:a5:77:23:
62:d6:4e:3a:b1:60:43:59:c2:c4:72:d8:5f:b4:2e:
84:8d:fa:d8:5e:63:b6:84:f3:e1:af:2b:ae:5d:b9:
7f:a2:52:0b:aa:f7:8f:63:20:65:4a:a3:a0:4a:44:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:0A:B0:AD:DE:92:94:80:B8:1C:F2:7E:86:81:4E:B9:04:DB:9E
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/Ej8KsK3ekpSAuBzyfoaBTrkE254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.2.0/24
Signature Algorithm: sha256WithRSAEncryption
19:75:7a:50:c4:e5:28:89:30:3e:3f:d8:f2:d9:7d:46:52:ab:
94:d9:bc:9a:35:8d:34:15:28:79:8d:c3:85:2a:b1:d2:0d:d0:
2f:e4:13:b2:ab:d9:c9:a7:15:07:bf:93:7b:88:83:1f:a1:9f:
5c:cb:46:b3:74:c3:bc:d8:7f:97:9c:a9:7b:29:12:ea:63:1f:
a4:68:7b:78:e2:e5:ee:bc:92:a1:b5:38:26:eb:d0:f5:b3:ff:
01:76:38:c0:38:f5:02:28:8c:e7:97:7c:87:0b:f6:40:ae:cb:
10:0f:94:95:bc:a6:0a:28:18:ff:6d:bc:75:f3:14:a2:32:35:
e6:90:38:03:39:cb:a1:47:b8:62:9c:f7:13:c8:d5:7c:18:02:
b3:d3:36:88:3b:78:17:d2:c9:1e:68:fa:be:b0:6f:d8:1d:4f:
e9:72:34:ea:a9:f9:34:87:11:96:fb:ab:51:02:05:2d:90:ac:
38:8f:cb:a5:bb:22:f2:27:a5:10:65:57:8b:71:63:fe:13:17:
91:06:33:92:7a:30:c8:29:42:7d:71:c3:cc:c6:fb:42:ba:ff:
f2:f8:58:ba:e2:0c:a6:77:55:b6:5d:bf:f3:f4:27:94:43:76:
76:e2:1a:00:5b:47:f6:ca:de:1a:42:35:71:12:d1:45:80:35:
71:50:d1:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVr0HtCIyO8V9vub8neDwbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjUwMzA2MTQxNjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjNmMGFiMGFkZGU5Mjk0ODBiODFjZjI3ZTg2ODE0ZWI5MDRkYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfMitht6WLabnqpXQr9412iAriq1
l6Y4Fhjm6QT+avARjrTr5NdCbBgpg7WGSZEVk41COT+5BedqABHZMXVHgYCT5Jb0
yjtvjNhO4RVHNUjbg/oP98rcKPP+DWqdLl5RSApmydgMN1kGDg0bjHsLoDlor+rP
su4XXxFUDHv5QkG2HU/i8sHC6EkKQ0UG32ocXEYvCuhSuaRSUknFYVj2aC7xVNNa
vClwW3yyqZsuangt8cSeWk9NDqiDN9fezSlwlP+iH+KLH3v5X2nXe+KldyNi1k46
sWBDWcLEcthftC6EjfrYXmO2hPPhryuuXbl/olILqvePYyBlSqOgSkSyFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBI/CrCt3pKUgLgc8n6GgU65BNueMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvRWo4S3NLM2VrcFNBdUJ6eWZvYUJUcmtFMjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQCMA0G
CSqGSIb3DQEBCwUAA4IBAQAZdXpQxOUoiTA+P9jy2X1GUquU2byaNY00FSh5jcOF
KrHSDdAv5BOyq9nJpxUHv5N7iIMfoZ9cy0azdMO82H+XnKl7KRLqYx+kaHt44uXu
vJKhtTgm69D1s/8BdjjAOPUCKIznl3yHC/ZArssQD5SVvKYKKBj/bbx18xSiMjXm
kDgDOcuhR7hinPcTyNV8GAKz0zaIO3gX0skeaPq+sG/YHU/pcjTqqfk0hxGW+6tR
AgUtkKw4j8uluyLyJ6UQZVeLcWP+ExeRBjOSejDIKUJ9ccPMxvtCuv/y+Fi64gym
d1W2Xb/z9CeUQ3Z24hoAW0f2yt4aQjVxEtFFgDVxUNHy
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:25 2025 by rpki-client