Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oVRYOyK8MO2ttt8xLNUdKgF3kDY.roa
File: oVRYOyK8MO2ttt8xLNUdKgF3kDY.roa (raw, json)
Hash identifier: 2lWeRpqCYm0KLBZUu/9Mn8Cs+e8FFLEVmYnbMBNmcIQ=
Subject key identifier: A1:54:58:3B:22:BC:30:ED:AD:B6:DF:31:2C:D5:1D:2A:01:77:90:36
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422201CA26793B600CEB9042949CC251F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oVRYOyK8MO2ttt8xLNUdKgF3kDY.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 185.230.67.0/24 maxlen: 24
194.76.168.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1c:a2:67:93:b6:00:ce:b9:04:29:49:cc:25:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a154583b22bc30edadb6df312cd51d2a01779036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:c8:9d:40:09:4d:01:f4:8b:aa:7d:0e:99:
0f:47:da:82:57:bb:e1:b7:d0:e4:5e:f1:47:a9:db:
8d:6d:24:82:dd:8d:39:28:7b:7a:67:94:ea:e1:7f:
93:8d:a7:65:8d:a1:52:19:54:3c:1b:09:cd:47:fe:
fb:d5:7a:aa:15:67:39:a1:52:86:69:40:1e:01:ab:
8e:08:aa:84:13:b1:33:4e:92:c2:2a:5a:c8:9c:8d:
f1:56:bb:19:3c:25:30:7c:f2:6b:f3:f7:c8:35:42:
8a:46:d4:48:33:5d:93:d7:8f:2b:1a:1a:a0:05:3d:
f8:9c:36:29:b5:a4:06:4c:34:89:c2:0d:cc:4f:40:
14:eb:da:2d:c1:32:15:32:99:87:9b:a9:15:1f:64:
d2:bf:ee:d5:d5:a4:ff:f7:b1:98:26:6b:a4:2a:f1:
16:88:32:e9:f7:25:8d:87:aa:14:d7:66:66:71:54:
31:9c:aa:f7:85:8a:c2:4f:3c:7a:5c:ce:25:6a:95:
09:1d:76:c3:39:f0:e5:b8:23:64:6f:ef:a0:91:e7:
a5:08:08:78:2d:fb:10:ae:31:0b:ec:2c:90:3d:f9:
0c:37:55:f6:c4:ab:c2:cc:34:e4:92:6b:6b:1d:42:
f1:7e:e3:1f:c0:78:40:3c:e1:cc:b6:4a:42:3c:54:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:58:3B:22:BC:30:ED:AD:B6:DF:31:2C:D5:1D:2A:01:77:90:36
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oVRYOyK8MO2ttt8xLNUdKgF3kDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.67.0/24
194.76.168.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:2e:f0:7a:1c:85:9b:75:0a:5a:4a:94:b9:6c:4b:2f:b0:c2:
72:b6:1d:20:0c:24:56:03:74:1e:28:2a:b1:c4:31:f3:96:b6:
15:06:4f:2f:d6:13:eb:2e:de:14:2c:c3:7c:04:9e:7c:90:e2:
c0:51:1f:aa:7e:88:12:1d:07:d0:6d:09:4d:c1:05:2c:ac:14:
20:03:56:1c:92:08:d4:8a:44:47:98:4b:56:f7:05:7f:97:17:
b4:4f:e5:8a:50:c5:d2:66:ea:b4:d5:26:c9:bf:a9:5a:1e:f9:
74:aa:42:79:27:7a:3e:1e:c3:0b:9b:59:6f:b6:3d:55:5a:78:
d8:25:cf:38:95:d1:84:70:74:71:bd:ee:44:48:fe:25:99:43:
bc:eb:d8:6f:b3:33:77:38:2b:da:04:53:12:f1:0b:cf:3e:99:
67:cd:79:c6:58:69:92:06:15:5b:90:b2:29:40:f3:bc:26:4c:
19:da:e9:97:7c:41:e9:b7:de:37:0b:70:7e:90:49:46:4d:97:
01:d3:be:ef:14:c6:4d:49:e6:75:4f:b8:c8:42:66:b2:2b:dc:
c6:63:b6:73:52:d8:61:a5:92:9e:ef:44:2b:cf:0d:c1:2e:9f:
fb:c8:e6:6c:40:d0:10:97:58:0d:93:71:11:6e:6d:2a:65:4f:
d0:1a:61:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIByiZ5O2AM65BClJzCUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTU0NTgzYjIyYmMzMGVkYWRiNmRmMzEyY2Q1MWQyYTAxNzc5MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLLInUAJTQH0i6p9DpkPR9qCV7vh
t9DkXvFHqduNbSSC3Y05KHt6Z5Tq4X+TjadljaFSGVQ8GwnNR/771XqqFWc5oVKG
aUAeAauOCKqEE7EzTpLCKlrInI3xVrsZPCUwfPJr8/fINUKKRtRIM12T148rGhqg
BT34nDYptaQGTDSJwg3MT0AU69otwTIVMpmHm6kVH2TSv+7V1aT/97GYJmukKvEW
iDLp9yWNh6oU12ZmcVQxnKr3hYrCTzx6XM4lapUJHXbDOfDluCNkb++gkeelCAh4
LfsQrjEL7CyQPfkMN1X2xKvCzDTkkmtrHULxfuMfwHhAPOHMtkpCPFQCVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKFUWDsivDDtrbbfMSzVHSoBd5A2MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvb1ZSWU95SzhNTzJ0dHQ4eExOVWRLZ0Yza0RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueZDAwQB
wkyoMA0GCSqGSIb3DQEBCwUAA4IBAQAtLvB6HIWbdQpaSpS5bEsvsMJyth0gDCRW
A3QeKCqxxDHzlrYVBk8v1hPrLt4ULMN8BJ58kOLAUR+qfogSHQfQbQlNwQUsrBQg
A1YckgjUikRHmEtW9wV/lxe0T+WKUMXSZuq01SbJv6laHvl0qkJ5J3o+HsMLm1lv
tj1VWnjYJc84ldGEcHRxve5ESP4lmUO869hvszN3OCvaBFMS8QvPPplnzXnGWGmS
BhVbkLIpQPO8JkwZ2umXfEHpt943C3B+kElGTZcB077vFMZNSeZ1T7jIQmayK9zG
Y7ZzUthhpZKe70Qrzw3BLp/7yOZsQNAQl1gNk3ERbm0qZU/QGmEy
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:47 2025 by rpki-client