Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/1S5DUik66dezdrx5pEezWXmNLtk.roa
File: 1S5DUik66dezdrx5pEezWXmNLtk.roa (raw, json)
Hash identifier: Dm4cQ8MmhvuUwjcbPH5bXsghzfESlaOzg3wk6aN2+Y0=
Subject key identifier: D5:2E:43:52:29:3A:E9:D7:B3:76:BC:79:A4:47:B3:59:79:8D:2E:D9
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 0194266BD24CFEE2A431E9DF0F56B84D04D4
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/1S5DUik66dezdrx5pEezWXmNLtk.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 185.153.248.0/22 maxlen: 22
185.153.248.0/24 maxlen: 24
185.153.249.0/24 maxlen: 24
185.153.250.0/24 maxlen: 24
185.153.251.0/24 maxlen: 24
185.155.148.0/24 maxlen: 24
185.155.149.0/24 maxlen: 24
2a07:89c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d2:4c:fe:e2:a4:31:e9:df:0f:56:b8:4d:04:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d52e4352293ae9d7b376bc79a447b359798d2ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:d8:b5:63:e3:84:48:4e:54:ba:39:b7:b6:
6f:74:70:65:6b:5e:08:61:ca:09:51:68:35:18:4e:
be:d3:3e:5b:98:38:57:c1:1c:08:43:a3:b0:67:7f:
ad:a0:03:f9:3f:33:3d:29:22:5d:66:7c:51:a1:1c:
57:87:85:fe:a3:6e:90:1b:77:7e:a2:64:6f:e9:33:
a0:47:0d:a6:de:db:85:7c:43:35:fa:92:96:2b:07:
31:58:98:f1:39:58:0a:b9:3d:8e:e7:40:b6:55:f9:
4f:e5:f9:19:e7:35:47:a5:85:d0:db:fa:d7:57:4d:
65:9f:63:76:b3:08:ee:df:4f:69:bb:9a:9e:ee:50:
6f:d7:39:91:e2:dd:d6:35:3d:96:51:a5:6c:b1:cd:
fe:49:ab:49:60:61:67:0c:bb:79:80:8d:26:8e:07:
4d:23:bd:57:0d:72:be:2d:9a:0d:59:54:51:3c:b1:
b1:a6:bf:bf:62:f7:e0:b7:d0:79:46:5a:c7:70:be:
61:c1:2e:0b:95:17:2a:25:17:61:c9:75:3b:f6:b4:
ef:76:9e:40:f6:a6:01:ec:f0:5b:2b:0d:d2:d8:96:
bc:13:93:4c:79:14:d5:36:e7:72:31:00:43:ae:6e:
ca:30:b3:6b:a0:a4:07:e8:73:a3:21:c2:82:d4:6f:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:43:52:29:3A:E9:D7:B3:76:BC:79:A4:47:B3:59:79:8D:2E:D9
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/1S5DUik66dezdrx5pEezWXmNLtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.248.0/22
185.155.148.0/23
IPv6:
2a07:89c0::/48
Signature Algorithm: sha256WithRSAEncryption
45:80:9c:b7:ef:19:bb:52:73:80:42:01:84:9e:11:eb:eb:72:
9c:2b:aa:26:d0:1c:35:af:52:4a:87:cd:fa:ad:e5:a4:ee:c2:
c8:7a:53:38:80:d5:84:5b:2b:e8:ed:5a:7a:b4:36:dc:1d:78:
79:c3:1c:82:a8:da:cc:d8:80:00:b5:03:13:92:6d:f4:43:a7:
08:5d:46:4d:3b:33:23:00:d8:ab:cc:b3:30:2f:cd:4d:f2:96:
01:d5:20:f2:3c:f7:bb:50:a7:50:10:08:cf:84:bb:da:da:8a:
af:5a:23:23:fe:67:90:f1:4c:0c:6f:7e:9c:01:ac:54:0e:74:
4a:bc:cf:ca:b9:d7:a9:17:f9:54:ac:8a:b1:4b:ec:eb:ba:6f:
89:47:5a:28:24:4f:8b:04:1f:57:00:a4:f9:ad:1e:22:b6:58:
57:8b:3b:92:ee:5b:c1:f8:79:fa:32:1e:a8:9f:ce:76:ad:a8:
96:8b:65:a3:35:df:aa:80:90:0c:4a:2e:fc:0e:55:b3:d3:19:
b4:ec:03:12:38:3e:91:d2:cd:30:a2:2a:bd:f4:35:fc:5e:eb:
5f:94:2a:58:85:48:a0:40:d1:e4:d8:29:07:e4:43:30:0e:1c:
a2:57:8f:55:1d:bf:17:aa:02:ad:25:94:a1:a3:63:94:5d:65:
2f:58:b2:28
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQma9JM/uKkMenfD1a4TQTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjczNjc5NjdkYzc2MzM0OWZkMGI1MGUzMWY3NWI4MjMw
Mjg1OTAwHhcNMjUwMTAyMDk0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTJlNDM1MjI5M2FlOWQ3YjM3NmJjNzlhNDQ3YjM1OTc5OGQyZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYbYtWPjhEhOVLo5t7ZvdHBla14I
YcoJUWg1GE6+0z5bmDhXwRwIQ6OwZ3+toAP5PzM9KSJdZnxRoRxXh4X+o26QG3d+
omRv6TOgRw2m3tuFfEM1+pKWKwcxWJjxOVgKuT2O50C2VflP5fkZ5zVHpYXQ2/rX
V01ln2N2swju309pu5qe7lBv1zmR4t3WNT2WUaVssc3+SatJYGFnDLt5gI0mjgdN
I71XDXK+LZoNWVRRPLGxpr+/Yvfgt9B5RlrHcL5hwS4LlRcqJRdhyXU79rTvdp5A
9qYB7PBbKw3S2Ja8E5NMeRTVNudyMQBDrm7KMLNroKQH6HOjIcKC1G8V3wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFNUuQ1IpOunXs3a8eaRHs1l5jS7ZMB8GA1UdIwQY
MBaAFLRnNnln3HYzSf0LUOMfdbgjAoWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMt
YjgxMzczYzQwZGM5LzEvMVM1RFVpazY2ZGV6ZHJ4NXBFZXpXWG1OTHRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMtYjgxMzczYzQwZGM5
LzEvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuZn4AwQB
uZuUMA8EAgACMAkDBwAqB4nAAAAwDQYJKoZIhvcNAQELBQADggEBAEWAnLfvGbtS
c4BCAYSeEevrcpwrqibQHDWvUkqHzfqt5aTuwsh6UziA1YRbK+jtWnq0NtwdeHnD
HIKo2szYgAC1AxOSbfRDpwhdRk07MyMA2KvMszAvzU3ylgHVIPI897tQp1AQCM+E
u9raiq9aIyP+Z5DxTAxvfpwBrFQOdEq8z8q516kX+VSsirFL7Ou6b4lHWigkT4sE
H1cApPmtHiK2WFeLO5LuW8H4efoyHqifznatqJaLZaM136qAkAxKLvwOVbPTGbTs
AxI4PpHSzTCiKr30Nfxe61+UKliFSKBA0eTYKQfkQzAOHKJXj1UdvxeqAq0llKGj
Y5RdZS9Ysig=
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:13 2025 by rpki-client