Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/_DAat-3CE9ZFNRkF0uRoytspqVk.roa
File: _DAat-3CE9ZFNRkF0uRoytspqVk.roa (raw, json)
Hash identifier: W/V47ANAI+ZPWjsSxOpd+0DYbwwKRu5S8PJBl4bhXWU=
Subject key identifier: FC:30:1A:B7:ED:C2:13:D6:45:35:19:05:D2:E4:68:CA:DB:29:A9:59
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 019483F6A391110BABD5BF96C81DECF53E0A
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/_DAat-3CE9ZFNRkF0uRoytspqVk.roa
Signing time: Mon 20 Jan 2025 13:46:06 +0000
ROA not before: Mon 20 Jan 2025 13:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60751
IP address blocks: 185.24.233.0/24 maxlen: 24
185.24.235.0/24 maxlen: 24
185.104.216.0/22 maxlen: 24
2a04:2e00::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:f6:a3:91:11:0b:ab:d5:bf:96:c8:1d:ec:f5:3e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Jan 20 13:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc301ab7edc213d645351905d2e468cadb29a959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:ae:c0:1d:e2:f7:51:0f:fc:35:f5:50:d4:
6c:a7:3d:74:4d:7f:86:da:08:1c:89:bd:a4:b2:cf:
6b:e4:84:4f:7a:6e:a0:af:17:ca:6d:3c:42:8e:dd:
ba:b7:8d:a1:e5:c2:8c:e0:d7:59:ed:7f:7a:e2:e1:
57:c8:ac:bb:ed:67:06:d8:20:a0:94:bb:2d:d3:25:
39:cc:e6:47:e9:26:97:ac:78:55:18:ed:0a:54:ac:
ca:5e:12:0f:ca:d1:e7:5d:35:98:56:b7:9b:a6:26:
57:e9:db:de:fa:66:44:80:3f:3c:da:1c:fa:bd:41:
fd:fc:66:ee:2f:2b:b7:ed:49:3a:36:0d:80:aa:a9:
01:98:b1:cb:43:46:4a:88:30:cc:9d:c6:74:32:b0:
93:44:96:2a:88:5e:31:c6:7a:61:86:05:bb:b3:51:
4f:2e:28:3f:c9:06:f1:27:0f:2b:53:ef:66:c2:7f:
91:a5:c1:b5:09:ee:91:76:72:59:76:84:ea:a1:fe:
39:63:b5:0c:60:59:94:c4:a2:cf:d9:69:c3:78:2b:
8c:95:b4:17:d4:73:3c:92:53:c2:5c:15:ec:a6:20:
70:55:60:ba:ce:20:27:f8:28:ae:3d:20:2f:eb:78:
19:62:dd:de:64:a9:da:15:3b:f6:92:df:2b:42:24:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:1A:B7:ED:C2:13:D6:45:35:19:05:D2:E4:68:CA:DB:29:A9:59
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/_DAat-3CE9ZFNRkF0uRoytspqVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.233.0/24
185.24.235.0/24
185.104.216.0/22
IPv6:
2a04:2e00::/32
Signature Algorithm: sha256WithRSAEncryption
99:65:4c:24:da:25:ac:71:f4:35:83:83:c7:42:30:be:0d:e8:
51:da:88:93:8c:2a:fe:f0:74:aa:e9:9f:a1:73:70:23:4a:15:
02:27:09:ea:ab:22:93:6a:a6:08:a6:3d:df:89:46:ae:c5:e1:
a3:26:ff:94:67:c8:a3:df:be:c4:d2:aa:bc:41:22:8c:87:51:
d5:20:c2:8f:00:52:49:7b:b9:17:b9:98:5d:51:60:aa:85:46:
4a:6a:f9:fd:4c:18:56:95:77:17:9b:42:75:8c:e4:5f:fc:ce:
ce:10:18:52:07:8e:ef:9c:45:db:78:2c:0a:b5:ee:5f:d4:fa:
be:2f:dd:2c:6b:76:69:0e:e3:8e:d6:3f:3d:99:bd:dc:d2:4f:
8e:44:6a:49:16:7c:5a:da:00:86:1a:f3:6b:b0:ab:e4:fc:79:
05:86:7e:14:cc:10:da:45:61:c2:01:55:67:39:a8:a0:d3:13:
8c:89:05:cb:11:fc:a0:2e:3c:82:ff:44:1c:09:a4:fd:d6:24:
22:f9:bb:e2:d7:38:e9:02:46:45:ff:9d:04:48:fa:dc:31:ad:
4c:40:1f:de:b7:51:b1:a9:c9:9d:15:6d:59:df:7a:11:22:a0:
05:cc:35:5a:b8:02:9e:cd:b0:cf:23:74:c5:cd:69:18:26:9b:
5c:95:c3:aa
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZSD9qOREQur1b+WyB3s9T4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2JiZjkzNDhhZTU1OGM2ZWZhMGMwODZmMjRiZTA0Y2Iy
M2M2ZTkwHhcNMjUwMTIwMTM0NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzMwMWFiN2VkYzIxM2Q2NDUzNTE5MDVkMmU0NjhjYWRiMjlhOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZauwB3i91EP/DX1UNRspz10TX+G
2ggcib2kss9r5IRPem6grxfKbTxCjt26t42h5cKM4NdZ7X964uFXyKy77WcG2CCg
lLst0yU5zOZH6SaXrHhVGO0KVKzKXhIPytHnXTWYVrebpiZX6dve+mZEgD882hz6
vUH9/GbuLyu37Uk6Ng2AqqkBmLHLQ0ZKiDDMncZ0MrCTRJYqiF4xxnphhgW7s1FP
Lig/yQbxJw8rU+9mwn+RpcG1Ce6RdnJZdoTqof45Y7UMYFmUxKLP2WnDeCuMlbQX
1HM8klPCXBXspiBwVWC6ziAn+CiuPSAv63gZYt3eZKnaFTv2kt8rQiRnNQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPwwGrftwhPWRTUZBdLkaMrbKalZMB8GA1UdIwQY
MBaAFCPLv5NIrlWMbvoMCG8kvgTLI8bpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTh1X2swaXVWWXh1LWd3SWJ5Uy1CTXNqeHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZTkwZjktZThkMy00NTYyLWE1YjMt
NjIxZWUwNTJhNmZjLzEvX0RBYXQtM0NFOVpGTlJrRjB1Um95dHNwcVZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZTkwZjktZThkMy00NTYyLWE1YjMtNjIxZWUwNTJhNmZj
LzEvSTh1X2swaXVWWXh1LWd3SWJ5Uy1CTXNqeHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAuRjpAwQA
uRjrAwQCuWjYMA0EAgACMAcDBQAqBC4AMA0GCSqGSIb3DQEBCwUAA4IBAQCZZUwk
2iWscfQ1g4PHQjC+DehR2oiTjCr+8HSq6Z+hc3AjShUCJwnqqyKTaqYIpj3fiUau
xeGjJv+UZ8ij377E0qq8QSKMh1HVIMKPAFJJe7kXuZhdUWCqhUZKavn9TBhWlXcX
m0J1jORf/M7OEBhSB47vnEXbeCwKte5f1Pq+L90sa3ZpDuOO1j89mb3c0k+ORGpJ
Fnxa2gCGGvNrsKvk/HkFhn4UzBDaRWHCAVVnOaig0xOMiQXLEfygLjyC/0QcCaT9
1iQi+bvi1zjpAkZF/50ESPrcMa1MQB/et1GxqcmdFW1Z33oRIqAFzDVauAKezbDP
I3TFzWkYJptclcOq
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:03 2025 by rpki-client