Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/LlheXbpgUpnd6LfIavs5m7046X8.roa
File: LlheXbpgUpnd6LfIavs5m7046X8.roa (raw, json)
Hash identifier: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=
Subject key identifier: 2E:58:5E:5D:BA:60:52:99:DD:E8:B7:C8:6A:FB:39:9B:BD:38:E9:7F
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0194228E26BB78361B141E494EFCEEB1E022
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/LlheXbpgUpnd6LfIavs5m7046X8.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212851
IP address blocks: 185.214.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:26:bb:78:36:1b:14:1e:49:4e:fc:ee:b1:e0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e585e5dba605299dde8b7c86afb399bbd38e97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:38:ce:ed:f7:6b:0f:e5:7f:e4:44:f6:5e:
a8:bf:55:0a:e0:c2:a5:cc:37:97:aa:03:6b:62:cb:
c0:0d:5b:97:3a:32:05:d3:4c:e9:96:70:fa:6f:bf:
53:8d:40:15:f2:5a:b5:d4:95:73:74:a0:c1:bd:b5:
01:8b:70:4e:4d:73:61:20:1c:ce:10:0c:7d:19:0b:
0b:d6:81:4d:07:53:02:5e:2a:f6:ae:cc:32:0e:db:
41:be:bc:3f:78:60:7c:af:9e:54:65:5d:20:48:db:
51:62:aa:7e:f7:1f:33:57:bc:49:92:22:17:d2:f8:
99:39:eb:5c:4d:e7:bd:08:6c:a9:29:2f:e2:7f:b0:
8b:fb:66:91:64:ae:e6:e4:a2:ff:b4:93:51:5a:cb:
5d:6a:13:bc:77:97:eb:5d:87:69:d3:05:6f:bc:5b:
b6:07:db:4c:f7:7d:3f:ca:b5:0b:11:0f:40:17:f1:
cf:c8:ce:22:82:10:6b:f2:31:a8:31:e9:c5:4a:7c:
ee:96:c0:94:a6:6b:c0:be:a0:e4:a5:3a:e3:67:95:
b8:06:4e:f5:c6:ff:85:2f:c5:5b:85:6a:38:f3:97:
03:92:5c:e8:9b:c4:dc:66:8c:52:b9:07:7d:02:5d:
9c:10:0a:f0:e1:5a:34:c8:4b:88:8f:28:e8:2f:56:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:5E:5D:BA:60:52:99:DD:E8:B7:C8:6A:FB:39:9B:BD:38:E9:7F
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/LlheXbpgUpnd6LfIavs5m7046X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.65.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6d:23:3b:d3:1f:35:76:d2:05:c6:ec:7f:5c:6c:cb:2b:1b:
d7:c8:16:ca:fc:67:8a:42:74:d6:e5:19:ca:ee:46:3b:8b:13:
d1:c8:bc:7a:c9:96:bb:f2:d5:d2:45:71:67:2a:35:27:99:17:
b6:c4:93:79:a8:45:37:81:2a:78:53:d6:ad:e5:c3:93:ae:a9:
44:62:e4:04:76:0c:e8:92:ff:93:8f:92:99:06:32:13:4d:6c:
85:43:ee:7b:0c:cc:80:03:a8:a1:91:78:17:fa:6c:71:33:6f:
41:25:da:17:d0:6b:80:f8:e6:2c:39:e6:ab:14:93:81:e6:0e:
72:14:3b:ec:da:53:2f:49:69:ea:0d:b8:5b:97:e7:25:37:57:
1d:aa:ce:0a:1e:11:cc:80:4b:3b:46:84:5d:1c:90:11:a9:4d:
fa:89:7f:2b:5c:69:2c:24:fb:7a:6e:52:e6:60:fa:00:4e:56:
e7:56:8d:01:9d:97:3c:67:87:c7:64:71:fd:2d:9e:09:89:ce:
68:85:c1:79:ab:7f:c5:6d:d9:c2:62:38:70:2b:ce:02:15:c1:
63:03:26:ee:e3:10:4a:63:2f:36:31:7f:cc:a5:5f:d1:89:1c:
0b:22:a4:80:25:1b:0a:46:e7:60:d1:29:01:12:77:b7:29:e3:
f5:b0:9a:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijia7eDYbFB5JTvzuseAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWJkNjJiZWVjYWIwZTkwM2IyOTgxMTI0MWRiMjQ0YmJm
NTJjMzkwHhcNMjUwMTAxMTU0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTU4NWU1ZGJhNjA1Mjk5ZGRlOGI3Yzg2YWZiMzk5YmJkMzhlOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcE4zu33aw/lf+RE9l6ov1UK4MKl
zDeXqgNrYsvADVuXOjIF00zplnD6b79TjUAV8lq11JVzdKDBvbUBi3BOTXNhIBzO
EAx9GQsL1oFNB1MCXir2rswyDttBvrw/eGB8r55UZV0gSNtRYqp+9x8zV7xJkiIX
0viZOetcTee9CGypKS/if7CL+2aRZK7m5KL/tJNRWstdahO8d5frXYdp0wVvvFu2
B9tM930/yrULEQ9AF/HPyM4ighBr8jGoMenFSnzulsCUpmvAvqDkpTrjZ5W4Bk71
xv+FL8VbhWo485cDklzom8TcZoxSuQd9Al2cEArw4Vo0yEuIjyjoL1bFJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC5YXl26YFKZ3ei3yGr7OZu9OOl/MB8GA1UdIwQY
MBaAFMsb1ivuyrDpA7KYESQdskS79Sw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYt
ZTQwMTZhZDUzY2M5LzEvTGxoZVhicGdVcG5kNkxmSWF2czVtNzA0Nlg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYtZTQwMTZhZDUzY2M5
LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZBMA0G
CSqGSIb3DQEBCwUAA4IBAQBEbSM70x81dtIFxux/XGzLKxvXyBbK/GeKQnTW5RnK
7kY7ixPRyLx6yZa78tXSRXFnKjUnmRe2xJN5qEU3gSp4U9at5cOTrqlEYuQEdgzo
kv+Tj5KZBjITTWyFQ+57DMyAA6ihkXgX+mxxM29BJdoX0GuA+OYsOearFJOB5g5y
FDvs2lMvSWnqDbhbl+clN1cdqs4KHhHMgEs7RoRdHJARqU36iX8rXGksJPt6blLm
YPoATlbnVo0BnZc8Z4fHZHH9LZ4Jic5ohcF5q3/FbdnCYjhwK84CFcFjAybu4xBK
Yy82MX/MpV/RiRwLIqSAJRsKRudg0SkBEne3KeP1sJpQ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:15 2025 by rpki-client