Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sTAcEeIlslVpuXMYkyeJBskGwEo.roa
File: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (raw, json)
Hash identifier: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=
Subject key identifier: B1:30:1C:11:E2:25:B2:55:69:B9:73:18:93:27:89:06:C9:06:C0:4A
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7DF42E3E62062632EF6D3B749CA7D
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sTAcEeIlslVpuXMYkyeJBskGwEo.roa
Signing time: Wed 01 Jan 2025 21:48:57 +0000
ROA not before: Wed 01 Jan 2025 21:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 185.65.202.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
212.22.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:df:42:e3:e6:20:62:63:2e:f6:d3:b7:49:ca:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1301c11e225b25569b9731893278906c906c04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:60:aa:2c:ca:e7:fa:60:98:22:65:0e:25:
4a:86:2d:17:b5:da:03:86:b1:1c:f0:95:18:80:ff:
7d:00:94:34:4a:c7:32:77:57:4b:26:55:4b:a0:69:
9a:1a:b9:95:e2:4c:d1:3f:5c:4b:97:1f:dc:8b:35:
8c:ec:57:7c:23:d8:89:cb:93:30:65:e9:24:08:a0:
e2:fb:ad:ad:46:2c:27:11:88:38:99:2c:94:66:96:
09:db:5b:a4:5c:00:d2:dd:06:4b:65:97:6b:c9:23:
66:0f:aa:4f:94:bb:8e:b2:58:a1:34:4f:c6:2c:a4:
22:a1:41:81:69:d6:31:03:b5:e3:38:09:ad:35:9b:
5c:ea:be:cd:24:cb:19:0f:36:1e:9c:f3:39:d9:94:
ee:ef:8f:d9:1f:6f:74:97:17:46:53:df:d5:f3:71:
cf:1c:11:7e:10:a2:ff:2c:61:b1:5e:cc:5d:18:84:
bd:a5:0d:a1:e3:ba:01:de:ba:c7:87:0c:6a:10:d3:
a3:12:ee:7b:eb:1b:a3:1b:97:3d:59:72:4e:57:ad:
56:15:62:4b:93:4a:62:f1:7d:3d:b4:58:5c:98:7b:
b7:c9:d8:8a:0a:42:9c:17:51:9a:7b:31:03:06:7e:
2f:b3:5e:e6:95:bc:5a:3a:3f:75:0e:fb:f2:8f:c8:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:1C:11:E2:25:B2:55:69:B9:73:18:93:27:89:06:C9:06:C0:4A
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sTAcEeIlslVpuXMYkyeJBskGwEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.202.0/24
185.120.59.0/24
185.255.178.0/23
212.22.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:42:44:01:63:b8:73:d5:26:61:50:06:a2:2b:5d:38:cf:08:
f5:8d:5b:d3:4c:f0:b1:d1:f4:cf:45:44:35:c4:07:a0:94:39:
2d:da:87:13:68:62:d4:58:85:07:75:ca:d7:1c:8d:9e:ac:10:
ea:81:3a:2d:83:69:7f:4c:e6:b1:08:8d:0b:4a:11:1d:53:62:
2c:d7:96:3e:54:21:21:82:40:10:38:2b:60:92:61:bf:fb:8a:
b0:41:73:5f:25:a7:22:d3:5b:93:f2:ed:f9:7a:76:00:d1:05:
4a:69:93:b2:2d:e9:8b:9e:d5:3f:a2:42:5c:76:c1:c2:53:70:
ac:e2:be:6d:f1:35:eb:34:9f:ab:b0:e7:1b:c8:df:53:1e:92:
30:57:16:db:68:03:a0:d6:01:f2:f6:21:cf:fd:e0:1b:fd:0a:
eb:6c:df:59:b8:4d:b9:a9:c2:a4:0e:c9:38:ef:d2:91:53:b1:
a8:d2:13:a9:cd:55:6d:13:7b:84:72:52:a8:af:19:4e:d9:df:
06:0f:e0:3a:78:95:2e:3a:10:ae:d3:58:d7:12:bf:aa:14:69:
54:87:01:e2:10:5d:fc:53:dc:31:4c:26:58:b9:45:67:3f:c6:
b8:e5:38:52:3a:52:17:bb:70:b4:ef:09:e0:89:83:ca:cf:26:
06:94:fc:f0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQj199C4+YgYmMu9tO3Scp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjUwMTAxMjE0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTMwMWMxMWUyMjViMjU1NjliOTczMTg5MzI3ODkwNmM5MDZjMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW9gqizK5/pgmCJlDiVKhi0XtdoD
hrEc8JUYgP99AJQ0Sscyd1dLJlVLoGmaGrmV4kzRP1xLlx/cizWM7Fd8I9iJy5Mw
ZekkCKDi+62tRiwnEYg4mSyUZpYJ21ukXADS3QZLZZdrySNmD6pPlLuOslihNE/G
LKQioUGBadYxA7XjOAmtNZtc6r7NJMsZDzYenPM52ZTu74/ZH290lxdGU9/V83HP
HBF+EKL/LGGxXsxdGIS9pQ2h47oB3rrHhwxqENOjEu576xujG5c9WXJOV61WFWJL
k0pi8X09tFhcmHu3ydiKCkKcF1GaezEDBn4vs17mlbxaOj91Dvvyj8hh/wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLEwHBHiJbJVablzGJMniQbJBsBKMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvc1RBY0VlSWxzbFZwdVhNWWt5ZUpCc2tHd0VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuUHKAwQA
uXg7AwQBuf+yAwQA1BZKMA0GCSqGSIb3DQEBCwUAA4IBAQDJQkQBY7hz1SZhUAai
K104zwj1jVvTTPCx0fTPRUQ1xAeglDkt2ocTaGLUWIUHdcrXHI2erBDqgTotg2l/
TOaxCI0LShEdU2Is15Y+VCEhgkAQOCtgkmG/+4qwQXNfJaci01uT8u35enYA0QVK
aZOyLemLntU/okJcdsHCU3Cs4r5t8TXrNJ+rsOcbyN9THpIwVxbbaAOg1gHy9iHP
/eAb/QrrbN9ZuE25qcKkDsk479KRU7Go0hOpzVVtE3uEclKorxlO2d8GD+A6eJUu
OhCu01jXEr+qFGlUhwHiEF38U9wxTCZYuUVnP8a45ThSOlIXu3C07wngiYPKzyYG
lPzw
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:28 2025 by rpki-client