Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/KsdzajN30uY3uVW5kyMxHSnmmxU.roa
File: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (raw, json)
Hash identifier: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=
Subject key identifier: 2A:C7:73:6A:33:77:D2:E6:37:B9:55:B9:93:23:31:1D:29:E6:9B:15
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 0194252170ECF5C5660D98E48E3177F73AD6
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/KsdzajN30uY3uVW5kyMxHSnmmxU.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49775
IP address blocks: 185.194.252.0/22 maxlen: 22
185.194.252.0/23 maxlen: 23
185.194.254.0/23 maxlen: 23
185.194.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:70:ec:f5:c5:66:0d:98:e4:8e:31:77:f7:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ac7736a3377d2e637b955b99323311d29e69b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:a4:ec:28:2f:c8:fd:08:f7:57:bf:b7:90:
1b:19:18:72:bd:66:88:ff:b7:df:8c:9b:4c:a1:2a:
f8:6d:6d:90:86:7b:13:e1:4a:59:78:ca:49:9e:8b:
46:1c:4e:40:2d:39:43:72:03:a0:af:79:00:f8:08:
05:5d:f0:09:5e:a7:56:a1:b8:ee:d6:48:5a:b4:f4:
82:61:bf:d2:0d:62:19:2a:a4:05:bf:13:a3:18:5c:
32:e9:e5:fc:c8:38:57:e1:45:0a:07:57:15:7b:65:
aa:0b:b0:34:9e:3a:86:19:29:e0:46:cc:d6:92:c8:
4d:b7:dc:13:bb:3d:75:2f:c2:a9:92:4e:c5:cb:a1:
01:bd:63:5e:7f:a9:77:8d:03:08:58:42:38:5a:ae:
04:1a:18:71:7a:40:7b:dd:ac:b0:d6:dc:42:12:bf:
30:e6:b6:e3:4d:cd:68:37:fb:6d:01:e0:cb:f2:f6:
3c:64:1a:b7:2f:1f:00:02:c7:ff:d2:e1:94:ce:79:
64:f4:72:d3:3b:67:ae:94:8b:dd:9e:f6:5a:27:3c:
49:2b:6f:f2:96:17:7c:8b:4f:89:85:cf:bc:af:57:
92:31:ac:4d:9d:2e:54:2f:d1:3e:d3:b6:ae:0d:40:
e3:60:00:f0:c0:dc:9e:5b:98:fb:2b:b6:19:d1:11:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C7:73:6A:33:77:D2:E6:37:B9:55:B9:93:23:31:1D:29:E6:9B:15
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/KsdzajN30uY3uVW5kyMxHSnmmxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:f2:43:e9:43:b3:96:04:3c:0e:af:67:cf:32:f1:d4:de:ce:
3b:06:98:79:52:ec:ee:f6:2b:42:99:13:56:7a:33:dd:bd:08:
19:39:4b:50:cf:47:83:ea:30:41:57:55:38:35:7d:47:1a:8a:
3e:a2:46:31:1f:31:8c:0a:3b:bb:c0:a5:85:2d:ee:21:52:c8:
8a:6f:ee:57:85:c4:be:1a:dc:74:ef:9e:9a:7b:08:c2:1c:07:
83:b5:60:c2:c0:e4:b2:13:c8:ba:2f:54:7b:56:5c:6c:1b:07:
64:79:0f:79:23:ea:92:54:22:21:3c:da:75:c6:79:70:99:11:
1e:cb:3a:5f:0b:51:cb:0e:f1:da:fb:c0:ce:39:3b:88:44:ef:
58:d0:bf:ad:3b:27:ec:21:3f:32:7d:2a:c0:e1:b0:d5:b2:ab:
ee:3b:80:1b:ba:6d:96:b2:bc:87:b3:1b:63:c3:70:fc:92:36:
4b:ad:a3:77:79:1b:04:fc:c0:8b:3f:9f:10:dc:ea:69:16:8c:
1a:47:af:e2:ef:51:30:74:bc:cc:7e:fe:19:a9:75:4f:28:1c:
1a:c0:07:c9:6e:ae:7a:e2:e5:a1:9f:3d:b5:46:ce:75:e0:df:
88:08:9e:3f:b1:4b:57:6b:98:6a:1b:5d:94:3b:db:93:ca:63:
09:73:4a:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIXDs9cVmDZjkjjF39zrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzAyZDQyMzRmNGJjNGU4NzU1NWU0MWMwMzc3OWQ1NjIw
YTUxNTUwHhcNMjUwMTAyMDM0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWM3NzM2YTMzNzdkMmU2MzdiOTU1Yjk5MzIzMzExZDI5ZTY5YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyak7CgvyP0I91e/t5AbGRhyvWaI
/7ffjJtMoSr4bW2QhnsT4UpZeMpJnotGHE5ALTlDcgOgr3kA+AgFXfAJXqdWobju
1khatPSCYb/SDWIZKqQFvxOjGFwy6eX8yDhX4UUKB1cVe2WqC7A0njqGGSngRszW
kshNt9wTuz11L8Kpkk7Fy6EBvWNef6l3jQMIWEI4Wq4EGhhxekB73ayw1txCEr8w
5rbjTc1oN/ttAeDL8vY8ZBq3Lx8AAsf/0uGUznlk9HLTO2eulIvdnvZaJzxJK2/y
lhd8i0+Jhc+8r1eSMaxNnS5UL9E+07auDUDjYADwwNyeW5j7K7YZ0RGVCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCrHc2ozd9LmN7lVuZMjMR0p5psVMB8GA1UdIwQY
MBaAFMnALUI09LxOh1VeQcA3edViClFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUt
MWE2Y2U1ZmFmOTE2LzEvS3NkemFqTjMwdVkzdVZXNWt5TXhIU25tbXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUtMWE2Y2U1ZmFmOTE2
LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucL8MA0G
CSqGSIb3DQEBCwUAA4IBAQCb8kPpQ7OWBDwOr2fPMvHU3s47Bph5Uuzu9itCmRNW
ejPdvQgZOUtQz0eD6jBBV1U4NX1HGoo+okYxHzGMCju7wKWFLe4hUsiKb+5XhcS+
Gtx0756aewjCHAeDtWDCwOSyE8i6L1R7VlxsGwdkeQ95I+qSVCIhPNp1xnlwmREe
yzpfC1HLDvHa+8DOOTuIRO9Y0L+tOyfsIT8yfSrA4bDVsqvuO4Abum2WsryHsxtj
w3D8kjZLraN3eRsE/MCLP58Q3OppFowaR6/i71EwdLzMfv4ZqXVPKBwawAfJbq56
4uWhnz21Rs514N+ICJ4/sUtXa5hqG12UO9uTymMJc0qD
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:51 2025 by rpki-client