Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kNkBfxrt0pmtSeFr2oOLONJYfS0.roa
File: kNkBfxrt0pmtSeFr2oOLONJYfS0.roa (raw, json)
Hash identifier: jnJsm8YaIpBY44TtEsJkOqCETWmngUcHASBmTLiSycg=
Subject key identifier: 90:D9:01:7F:1A:ED:D2:99:AD:49:E1:6B:DA:83:8B:38:D2:58:7D:2D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0195AEC113B8EC9D876EED4DA2A3BA374C06
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kNkBfxrt0pmtSeFr2oOLONJYfS0.roa
Signing time: Wed 19 Mar 2025 14:14:03 +0000
ROA not before: Wed 19 Mar 2025 14:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29262
IP address blocks: 185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.238.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.153.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.87.27.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.98.60.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.119.81.0/24 maxlen: 24
185.119.82.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:c1:13:b8:ec:9d:87:6e:ed:4d:a2:a3:ba:37:4c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 19 14:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90d9017f1aedd299ad49e16bda838b38d2587d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:fe:f2:fc:0c:a6:b1:f0:ba:b4:80:fd:93:
93:79:e5:25:d5:1c:ee:1c:7c:02:08:e9:b6:34:90:
e9:94:74:24:5f:58:4b:eb:c1:8e:20:ba:8f:27:1f:
02:73:90:28:5a:61:b7:6c:cd:65:3e:cf:21:12:64:
20:11:52:02:3c:06:c7:1d:cb:e9:11:41:fe:a3:9a:
11:43:40:2e:e4:f9:7c:d2:03:4a:93:ec:b6:4b:0d:
ea:f1:a8:8a:81:af:d1:78:51:9c:30:b0:d2:d8:58:
4e:7c:f6:f4:aa:18:3f:c9:7b:0a:a0:90:e0:44:c3:
e7:de:c2:32:0b:2b:74:b5:54:83:38:10:c4:63:84:
df:43:a2:b5:ee:60:c8:f3:51:90:bf:47:fb:dc:bf:
6d:63:34:14:35:28:01:c7:34:da:be:12:ed:0d:a7:
84:8a:1e:55:04:c4:ff:86:ec:67:7b:a6:dc:e4:a0:
de:6f:cc:18:77:92:16:39:d6:b8:1b:05:ab:95:6f:
9e:b6:12:c6:65:73:9a:3f:7e:fe:3d:26:ba:a5:7a:
f5:a9:16:fc:3e:ca:0a:ad:76:95:27:83:e7:1a:14:
d8:e2:16:8b:e7:8a:f7:6e:ed:98:46:62:a9:66:31:
cc:58:a0:cc:7a:98:73:0f:09:aa:c5:2c:0a:57:32:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:01:7F:1A:ED:D2:99:AD:49:E1:6B:DA:83:8B:38:D2:58:7D:2D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kNkBfxrt0pmtSeFr2oOLONJYfS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.189.0-185.85.191.255
185.85.237.0-185.85.239.255
185.86.5.0/24
185.86.13.0/24
185.86.153.0-185.86.154.255
185.86.164.0/22
185.87.24.0/24
185.87.26.0/23
185.87.121.0-185.87.123.255
185.98.60.0/24
185.119.80.0/22
185.141.32.0/24
IPv6:
2a0b:6780::/29
2a0c:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
39:cb:ef:f9:2a:e7:76:47:d9:96:6a:0e:25:16:c8:0f:f7:2b:
a2:39:c0:81:ef:53:87:e6:52:bc:13:ad:d0:ba:17:32:84:98:
40:df:ff:00:ec:a8:6c:50:fd:38:3f:9d:4d:3d:d8:44:f1:28:
81:fd:53:c0:73:2d:7d:70:73:34:77:3d:c4:24:24:22:6b:6b:
e9:83:41:9b:d9:c6:68:66:1f:1c:b0:08:86:8b:29:ed:0f:3f:
7f:70:f8:ad:8c:a3:ad:e1:58:67:3c:79:24:ed:5f:8b:c8:0b:
ee:e5:92:0c:3d:c2:e9:74:1b:88:d4:74:60:f0:83:1f:86:b9:
45:1f:62:b7:f0:b4:1b:12:cb:f2:34:5a:fe:ff:96:ff:96:bd:
ee:05:0d:31:de:4a:b9:0c:e8:84:96:c2:1d:f3:6d:78:25:f3:
56:65:cb:c3:98:b9:ff:e1:c7:4d:d7:7e:19:de:36:2a:a2:b5:
d7:ac:93:a5:60:58:58:24:38:2b:92:25:74:b9:ea:f3:db:8a:
99:b3:ea:cd:6f:3f:bd:d2:c2:3f:54:81:72:0d:0a:39:d6:41:
55:7a:ad:1f:60:02:e6:69:f0:20:0b:46:d0:7f:f4:e5:b4:0d:
20:60:3b:6a:88:5d:b3:58:07:17:ea:08:d5:09:11:e9:92:16:
fe:44:ad:92
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZWuwRO47J2Hbu1NoqO6N0wGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMzE5MTQxNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGQ5MDE3ZjFhZWRkMjk5YWQ0OWUxNmJkYTgzOGIzOGQyNTg3ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhv+8vwMprHwurSA/ZOTeeUl1Rzu
HHwCCOm2NJDplHQkX1hL68GOILqPJx8Cc5AoWmG3bM1lPs8hEmQgEVICPAbHHcvp
EUH+o5oRQ0Au5Pl80gNKk+y2Sw3q8aiKga/ReFGcMLDS2FhOfPb0qhg/yXsKoJDg
RMPn3sIyCyt0tVSDOBDEY4TfQ6K17mDI81GQv0f73L9tYzQUNSgBxzTavhLtDaeE
ih5VBMT/huxne6bc5KDeb8wYd5IWOda4GwWrlW+ethLGZXOaP37+PSa6pXr1qRb8
PsoKrXaVJ4PnGhTY4haL54r3bu2YRmKpZjHMWKDMephzDwmqxSwKVzKl+QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJDZAX8a7dKZrUnha9qDizjSWH0tMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEva05rQmZ4cnQwcG10U2VGcjJvT0xPTkpZZlMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBuBAIAATBoMAwDBAC5
Vb0DBAa5VYAwDAMEALlV7QMEBLlV4AMEALlWBQMEALlWDTAMAwQAuVaZAwQAuVaa
AwQCuVakAwQAuVcYAwQBuVcaMAwDBAC5V3kDBAK5V3gDBAC5YjwDBAK5d1ADBAC5
jSAwFAQCAAIwDgMFAyoLZ4ADBQMqDGfAMA0GCSqGSIb3DQEBCwUAA4IBAQA5y+/5
Kud2R9mWag4lFsgP9yuiOcCB71OH5lK8E63QuhcyhJhA3/8A7KhsUP04P51NPdhE
8SiB/VPAcy19cHM0dz3EJCQia2vpg0Gb2cZoZh8csAiGiyntDz9/cPitjKOt4Vhn
PHkk7V+LyAvu5ZIMPcLpdBuI1HRg8IMfhrlFH2K38LQbEsvyNFr+/5b/lr3uBQ0x
3kq5DOiElsId8214JfNWZcvDmLn/4cdN134Z3jYqorXXrJOlYFhYJDgrkiV0uerz
24qZs+rNbz+90sI/VIFyDQo51kFVeq0fYALmafAgC0bQf/TltA0gYDtqiF2zWAcX
6gjVCRHpkhb+RK2S
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:41 2025 by rpki-client