Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/kgzoK8BF6aDaCA7s2y2-oNomvaU.roa
File: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (raw, json)
Hash identifier: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=
Subject key identifier: 92:0C:E8:2B:C0:45:E9:A0:DA:08:0E:EC:DB:2D:BE:A0:DA:26:BD:A5
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 0194266A41C4C76B27932E841775A6BC4794
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/kgzoK8BF6aDaCA7s2y2-oNomvaU.roa
Signing time: Thu 02 Jan 2025 09:48:05 +0000
ROA not before: Thu 02 Jan 2025 09:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211957
IP address blocks: 185.235.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:41:c4:c7:6b:27:93:2e:84:17:75:a6:bc:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Jan 2 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=920ce82bc045e9a0da080eecdb2dbea0da26bda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:13:2c:71:04:58:1e:da:70:aa:31:f5:71:
79:ef:7e:b3:ff:3a:58:a2:99:ac:8e:e1:e3:3f:07:
d7:63:19:23:b3:78:f5:7b:44:38:00:13:bd:fb:97:
a1:61:9f:52:bb:6e:a6:29:9f:ba:7f:c1:b5:11:ae:
75:2c:57:83:9f:06:88:cd:fc:57:08:23:65:21:8f:
e3:93:cb:ba:3c:7c:d6:ea:2c:6f:1c:e7:6f:d9:4d:
c8:d9:ce:b2:33:3e:6b:7e:50:2f:b3:b1:c3:3b:22:
6c:1f:f8:c1:64:61:f6:3a:41:42:2d:12:3d:06:87:
30:a9:31:2b:6d:d8:51:88:c1:39:ad:6c:57:28:33:
78:6f:0a:65:6c:7d:6d:b1:14:2a:fc:85:9c:3f:76:
9d:b7:0f:8c:37:a9:c5:30:57:79:5d:e5:50:e3:fd:
cd:0a:9d:8e:2f:33:ad:2b:9e:63:6a:21:8d:db:70:
df:74:e3:f2:9e:f9:e6:e7:eb:c5:78:47:fe:b4:6a:
4e:d8:59:92:41:c7:1d:d9:67:33:29:27:a8:f6:50:
f4:a5:5d:68:00:5e:62:7d:0f:4a:bc:5a:ba:b2:de:
38:73:a8:9a:e1:51:f2:ca:f3:24:bd:64:88:03:f0:
c2:9e:3b:b9:db:02:9a:b3:67:b2:ed:bf:53:54:58:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:E8:2B:C0:45:E9:A0:DA:08:0E:EC:DB:2D:BE:A0:DA:26:BD:A5
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/kgzoK8BF6aDaCA7s2y2-oNomvaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:96:e3:c5:91:3f:fb:dc:5b:f4:ac:1a:3d:53:60:07:b5:10:
4f:e3:f7:98:8d:9a:bb:28:92:c2:c0:c6:71:62:98:41:89:34:
ad:f7:c2:d1:f1:7b:3d:8b:5e:4c:74:da:3c:59:91:8a:9f:f8:
df:a5:f6:64:c5:20:25:f2:da:94:34:ba:e4:6d:a0:af:1b:8c:
e5:f3:53:ca:8b:96:69:7c:24:82:57:7e:d1:b7:32:ec:24:69:
4b:fb:a9:46:69:77:94:11:b4:13:f8:7f:32:32:c4:79:e8:38:
1f:b6:3b:97:e7:4e:5d:8b:5f:b6:17:f8:3a:e1:7b:19:b0:eb:
c7:07:02:04:2d:d8:f0:54:93:28:7d:c6:d7:96:1f:0a:d5:fd:
2f:79:ac:5d:8f:94:4c:56:1d:f8:4f:47:c7:d6:38:25:7a:0d:
de:e1:08:63:9a:24:a1:9b:9b:6f:aa:9b:90:ad:da:c7:08:ef:
2f:16:b6:46:25:ab:d3:32:c6:e5:d8:2d:fe:78:c1:1b:54:dc:
be:8a:bb:91:34:e4:aa:bd:1e:e2:ec:0f:85:84:ba:d8:08:b0:
84:cf:30:f2:c5:f4:41:28:2e:20:a0:77:29:d0:b7:be:38:d7:
53:98:f0:7c:15:9a:9c:be:44:bc:96:95:9a:d0:f3:14:37:fb:
2d:7b:6e:89
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQmakHEx2snky6EF3WmvEeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQxNTk0YTkyYTlhZTA1YzY1YTA0ZjgwM2Q0MTFhNGY4
ODQyM2YwHhcNMjUwMTAyMDk0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjBjZTgyYmMwNDVlOWEwZGEwODBlZWNkYjJkYmVhMGRhMjZiZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqygTLHEEWB7acKox9XF5736z/zpY
opmsjuHjPwfXYxkjs3j1e0Q4ABO9+5ehYZ9Su26mKZ+6f8G1Ea51LFeDnwaIzfxX
CCNlIY/jk8u6PHzW6ixvHOdv2U3I2c6yMz5rflAvs7HDOyJsH/jBZGH2OkFCLRI9
BocwqTErbdhRiME5rWxXKDN4bwplbH1tsRQq/IWcP3adtw+MN6nFMFd5XeVQ4/3N
Cp2OLzOtK55jaiGN23DfdOPynvnm5+vFeEf+tGpO2FmSQccd2WczKSeo9lD0pV1o
AF5ifQ9KvFq6st44c6ia4VHyyvMkvWSIA/DCnju52wKas2ey7b9TVFhC6QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJIM6CvARemg2ggO7NstvqDaJr2lMB8GA1UdIwQY
MBaAFPikFZSpKprgXGWgT4A9QRpPiEI/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LUVZsS2txbXVCY1phQlBnRDFCR2stSVFqOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2
LTZhN2MzYmEzMTQxMC8xL2tnem9LOEJGNmFEYUNBN3MyeTItb05vbXZhVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2LTZhN2MzYmEzMTQx
MC8xLzEtS1FWbEtrcW11QmNaYUJQZ0QxQkdrLUlRajguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC56wgw
DQYJKoZIhvcNAQELBQADggEBAE+W48WRP/vcW/SsGj1TYAe1EE/j95iNmrsoksLA
xnFimEGJNK33wtHxez2LXkx02jxZkYqf+N+l9mTFICXy2pQ0uuRtoK8bjOXzU8qL
lml8JIJXftG3MuwkaUv7qUZpd5QRtBP4fzIyxHnoOB+2O5fnTl2LX7YX+Drhexmw
68cHAgQt2PBUkyh9xteWHwrV/S95rF2PlExWHfhPR8fWOCV6Dd7hCGOaJKGbm2+q
m5Ct2scI7y8WtkYlq9MyxuXYLf54wRtU3L6Ku5E05Kq9HuLsD4WEutgIsITPMPLF
9EEoLiCgdynQt74411OY8HwVmpy+RLyWlZrQ8xQ3+y17bok=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:12:00 2025 by rpki-client