Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/fX6SqoqQUEoAM6pytW3ukSOt0zg.roa
File: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (raw, json)
Hash identifier: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=
Subject key identifier: 7D:7E:92:AA:8A:90:50:4A:00:33:AA:72:B5:6D:EE:91:23:AD:D3:38
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 01941F8C09AC66097E7A47FA92E8C81FB977
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/fX6SqoqQUEoAM6pytW3ukSOt0zg.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1921
IP address blocks: 185.80.188.0/24 maxlen: 24
185.80.189.0/24 maxlen: 24
185.80.190.0/24 maxlen: 24
185.80.191.0/24 maxlen: 24
2a05:7f00:188::/48 maxlen: 48
2a05:7f00:189::/48 maxlen: 48
2a05:7f00:190::/48 maxlen: 48
2a05:7f00:191::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:ac:66:09:7e:7a:47:fa:92:e8:c8:1f:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d7e92aa8a90504a0033aa72b56dee9123add338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:5e:94:45:ba:d2:31:67:26:7a:08:1d:cf:
30:51:ce:52:4c:b3:30:28:b9:99:ac:64:f4:b6:0e:
0c:2f:29:b0:f4:4f:8f:90:39:83:5a:5c:03:80:8c:
38:28:46:58:b4:b8:0e:7c:1a:b2:5a:b2:4c:3a:c6:
22:f9:5e:dc:97:9f:42:91:ad:e5:44:2b:6a:bb:a9:
8b:d2:a5:fb:c2:cd:2b:0a:c6:1d:9f:20:ae:f6:d6:
30:0a:6b:03:f2:eb:77:e7:51:ad:bf:46:32:7a:83:
43:90:04:e0:82:e2:08:ab:4b:5a:d5:e8:bf:ee:6f:
60:51:3e:3f:8d:8f:0c:94:6c:75:85:40:15:83:39:
2e:03:b8:8c:b7:72:69:67:9d:19:94:ac:b9:33:f2:
c6:50:d9:9c:6a:39:8a:9f:4a:62:f6:21:21:0f:65:
6c:12:9f:bc:cc:6f:4f:f6:5e:95:45:23:c7:0c:b3:
30:d0:16:50:4d:39:5d:00:47:b9:47:df:00:2c:92:
50:5c:5f:1c:e3:80:92:69:4a:f6:ac:33:26:46:bf:
6d:b9:1c:c8:40:58:8e:cb:b0:a2:f8:72:6f:54:e9:
6d:48:58:07:5f:e0:d1:ee:6b:55:9e:1c:5a:ea:86:
a4:45:7e:1c:fa:36:35:63:6f:5f:48:94:3f:71:2a:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7E:92:AA:8A:90:50:4A:00:33:AA:72:B5:6D:EE:91:23:AD:D3:38
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/fX6SqoqQUEoAM6pytW3ukSOt0zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.188.0/22
IPv6:
2a05:7f00:188::/47
2a05:7f00:190::/47
Signature Algorithm: sha256WithRSAEncryption
0f:7c:9f:ed:a0:fc:24:fa:7a:3f:d0:0e:d7:c9:5d:f6:00:97:
15:9c:6b:1b:ae:43:ae:08:f5:e3:c7:ae:1d:8c:e6:0e:93:7d:
70:75:15:9f:0f:33:a0:52:2f:a3:c7:94:e7:35:4b:a0:f5:42:
b5:f6:4a:a9:18:2a:86:19:ad:18:16:78:26:03:c3:3a:f6:3b:
32:62:03:db:42:f7:96:e0:0e:9b:14:95:62:86:80:c5:cc:06:
5b:4d:41:56:63:2e:d3:7a:d9:54:85:43:de:db:9d:9f:81:ee:
a7:a9:62:51:c8:5c:41:75:b2:ff:a8:ea:cc:17:bb:6c:0c:27:
41:69:31:a2:08:b3:64:f7:9b:f1:bc:52:55:7e:65:23:9e:5e:
55:38:05:a2:24:96:4f:db:6e:f3:74:56:68:f4:e2:42:7e:9c:
6e:92:44:ca:bb:5c:27:30:c7:8f:a4:10:ab:c0:68:4c:f7:6f:
ed:fe:ef:25:77:80:0e:11:f9:78:da:55:8a:a9:91:29:67:75:
3b:71:ea:14:77:c1:b2:5d:37:81:a6:40:11:5a:de:51:6e:d7:
cd:98:1a:f7:ce:18:7c:dd:ad:af:1d:d9:97:fc:94:16:b2:74:
e1:79:50:88:75:9b:c7:35:ba:a1:e4:85:de:ea:ef:da:bf:24:
61:a2:4e:29
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQfjAmsZgl+ekf6kujIH7l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi
N2YyZTcwHhcNMjUwMTAxMDE0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDdlOTJhYThhOTA1MDRhMDAzM2FhNzJiNTZkZWU5MTIzYWRkMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lxelEW60jFnJnoIHc8wUc5STLMw
KLmZrGT0tg4MLymw9E+PkDmDWlwDgIw4KEZYtLgOfBqyWrJMOsYi+V7cl59Cka3l
RCtqu6mL0qX7ws0rCsYdnyCu9tYwCmsD8ut351Gtv0YyeoNDkATgguIIq0ta1ei/
7m9gUT4/jY8MlGx1hUAVgzkuA7iMt3JpZ50ZlKy5M/LGUNmcajmKn0pi9iEhD2Vs
Ep+8zG9P9l6VRSPHDLMw0BZQTTldAEe5R98ALJJQXF8c44CSaUr2rDMmRr9tuRzI
QFiOy7Ci+HJvVOltSFgHX+DR7mtVnhxa6oakRX4c+jY1Y29fSJQ/cSpv1QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFH1+kqqKkFBKADOqcrVt7pEjrdM4MB8GA1UdIwQY
MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt
YjdkYzgzNzA2YTJhLzEvZlg2U3FvcVFVRW9BTTZweXRXM3VrU090MHpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh
LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuVC8MBgE
AgACMBIDBwEqBX8AAYgDBwEqBX8AAZAwDQYJKoZIhvcNAQELBQADggEBAA98n+2g
/CT6ej/QDtfJXfYAlxWcaxuuQ64I9ePHrh2M5g6TfXB1FZ8PM6BSL6PHlOc1S6D1
QrX2SqkYKoYZrRgWeCYDwzr2OzJiA9tC95bgDpsUlWKGgMXMBltNQVZjLtN62VSF
Q97bnZ+B7qepYlHIXEF1sv+o6swXu2wMJ0FpMaIIs2T3m/G8UlV+ZSOeXlU4BaIk
lk/bbvN0Vmj04kJ+nG6SRMq7XCcwx4+kEKvAaEz3b+3+7yV3gA4R+XjaVYqpkSln
dTtx6hR3wbJdN4GmQBFa3lFu182YGvfOGHzdra8d2Zf8lBaydOF5UIh1m8c1uqHk
hd7q79q/JGGiTik=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:58 2025 by rpki-client