Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xSRjdot4ZrrM2dZPDTgELhYbMLA.roa
File: xSRjdot4ZrrM2dZPDTgELhYbMLA.roa (raw, json)
Hash identifier: gfaeOm2nkdnKANI+ScEGn6N47UVBne4HmIH/gLaACB0=
Subject key identifier: C5:24:63:76:8B:78:66:BA:CC:D9:D6:4F:0D:38:04:2E:16:1B:30:B0
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF944B44830498807480E570841451C
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xSRjdot4ZrrM2dZPDTgELhYbMLA.roa
Signing time: Mon 02 Jan 2023 00:54:45 +0000
ROA not before: Mon 02 Jan 2023 00:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.229.200.0/22 maxlen: 24
185.213.242.0/24 maxlen: 24
185.111.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:44:b4:48:30:49:88:07:48:0e:57:08:41:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c52463768b7866baccd9d64f0d38042e161b30b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:4b:66:f5:c4:43:2d:4f:0e:76:c3:92:e8:
73:24:3e:ef:6e:fd:b1:8e:4b:ca:8f:a8:b2:08:0f:
cd:6a:ea:5e:5c:84:30:39:dd:d9:ba:61:cb:5f:cc:
70:46:40:e9:ed:6b:15:c1:a0:bd:37:d3:45:79:f6:
76:33:58:54:68:18:51:33:fb:7a:16:be:69:a4:1e:
18:23:ea:5d:46:14:df:0a:86:67:df:5d:3a:f8:f2:
81:51:41:9b:81:98:0a:a8:6c:ba:b0:ce:cc:32:fa:
be:78:d6:d7:bd:68:a1:c8:9e:32:84:ad:bf:51:d1:
3f:b3:72:5d:ea:5f:10:32:bc:4a:80:13:97:aa:de:
ba:28:1d:24:89:33:00:93:c2:d7:8f:d6:89:8c:21:
df:ed:56:8a:fc:15:f9:f7:85:7d:e1:bd:95:b1:cd:
2b:92:54:d7:3a:49:ea:01:84:14:7e:36:e0:ff:0d:
e7:af:fb:5a:10:0f:44:45:2b:ee:f7:0f:56:c6:8a:
8a:f8:6d:db:3f:a2:32:3f:a5:a7:a4:48:61:75:0e:
2f:ad:e2:6b:3c:71:77:bb:58:21:39:0b:38:05:80:
88:f4:b6:71:a0:00:59:88:00:a4:53:c2:18:e2:e7:
b3:ca:0a:45:d0:a5:1e:61:9b:1d:23:32:12:bd:8c:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:24:63:76:8B:78:66:BA:CC:D9:D6:4F:0D:38:04:2E:16:1B:30:B0
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/xSRjdot4ZrrM2dZPDTgELhYbMLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
185.213.242.0/24
185.229.200.0/22
Signature Algorithm: sha256WithRSAEncryption
01:bb:0a:5a:93:4c:bd:b9:2a:0c:2f:b5:d6:97:e6:79:8c:05:
13:f5:99:84:79:e2:1b:07:f4:1f:0d:43:1f:fe:66:9f:2d:90:
69:c5:21:e8:ce:59:25:5c:24:9c:a8:8c:c1:80:5e:18:89:a0:
c7:33:27:bf:e1:7b:f6:11:c6:18:f1:45:0b:cb:41:e3:80:86:
47:62:b5:15:61:66:79:f5:46:71:90:df:e5:99:a6:18:cb:cb:
32:ab:a8:e5:01:6a:a2:49:fd:09:39:87:4e:e8:06:0e:c1:a8:
46:22:f3:43:56:a8:68:bc:14:25:9f:2c:75:51:56:b0:68:39:
9b:f4:cb:b8:cb:07:64:86:47:39:4c:f9:7e:6a:fd:5d:49:ae:
66:bc:d8:2d:55:a7:9a:10:97:37:3c:c6:15:8b:7f:34:d4:8a:
e1:df:6b:3b:b8:3c:c8:a9:86:c8:7b:ae:6d:20:76:10:d5:be:
85:ab:aa:4e:04:ec:d6:1d:12:6c:43:2b:96:40:fc:36:01:02:
e4:89:8a:01:02:5f:88:55:f1:f5:42:9a:78:9d:af:bc:e1:56:
1b:59:e9:46:f5:a5:48:c6:cd:71:a8:7c:1b:b4:8b:ab:7b:fd:
f8:dc:60:c6:11:02:d9:6e:5c:98:02:fa:64:53:b3:93:44:6c:
56:80:87:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVv+US0SDBJiAdIDlcIQUUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODUzOTdmMjZhMDQ0Y2FlZjZhNmI2NjkyODczMzFhYTRk
Njg2NDUwHhcNMjMwMTAyMDA1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTI0NjM3NjhiNzg2NmJhY2NkOWQ2NGYwZDM4MDQyZTE2MWIzMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJxLZvXEQy1PDnbDkuhzJD7vbv2x
jkvKj6iyCA/NaupeXIQwOd3ZumHLX8xwRkDp7WsVwaC9N9NFefZ2M1hUaBhRM/t6
Fr5ppB4YI+pdRhTfCoZn3106+PKBUUGbgZgKqGy6sM7MMvq+eNbXvWihyJ4yhK2/
UdE/s3Jd6l8QMrxKgBOXqt66KB0kiTMAk8LXj9aJjCHf7VaK/BX594V94b2Vsc0r
klTXOknqAYQUfjbg/w3nr/taEA9ERSvu9w9WxoqK+G3bP6IyP6WnpEhhdQ4vreJr
PHF3u1ghOQs4BYCI9LZxoABZiACkU8IY4uezygpF0KUeYZsdIzISvYyT+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMUkY3aLeGa6zNnWTw04BC4WGzCwMB8GA1UdIwQY
MBaAFGCFOX8moETK72prZpKHMxqk1oZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlVNWZ5YWdSTXJ2YW10bWtvY3pHcVRXaGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xMTI1YTItNDQzMi00ODNmLWEwMGIt
NjE2ZDk3YTc3YmQ2LzEveFNSamRvdDRacnJNMmRaUERUZ0VMaFliTUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xMTI1YTItNDQzMi00ODNmLWEwMGItNjE2ZDk3YTc3YmQ2
LzEvWUlVNWZ5YWdSTXJ2YW10bWtvY3pHcVRXaGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuW+8AwQA
udXyAwQCueXIMA0GCSqGSIb3DQEBCwUAA4IBAQABuwpak0y9uSoML7XWl+Z5jAUT
9ZmEeeIbB/QfDUMf/mafLZBpxSHozlklXCScqIzBgF4YiaDHMye/4Xv2EcYY8UUL
y0HjgIZHYrUVYWZ59UZxkN/lmaYYy8syq6jlAWqiSf0JOYdO6AYOwahGIvNDVqho
vBQlnyx1UVawaDmb9Mu4ywdkhkc5TPl+av1dSa5mvNgtVaeaEJc3PMYVi3801Irh
32s7uDzIqYbIe65tIHYQ1b6Fq6pOBOzWHRJsQyuWQPw2AQLkiYoBAl+IVfH1Qpp4
na+84VYbWelG9aVIxs1xqHwbtIure/343GDGEQLZblyYAvpkU7OTRGxWgIdA
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:46:04 2025 by rpki-client