Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa
File: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (raw, json)
Hash identifier: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=
Subject key identifier: F3:AC:72:2E:0F:55:86:ED:65:93:94:51:79:3E:91:75:FF:ED:9A:82
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 01943FC00FC07B83939B65DE93032224905C
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa
Signing time: Tue 07 Jan 2025 07:52:18 +0000
ROA not before: Tue 07 Jan 2025 07:52:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216018
IP address blocks: 185.23.72.0/24 maxlen: 24
185.23.74.0/24 maxlen: 24
185.23.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:c0:0f:c0:7b:83:93:9b:65:de:93:03:22:24:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jan 7 07:52:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3ac722e0f5586ed65939451793e9175ffed9a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:52:a7:75:e9:1b:d6:04:c9:71:c2:35:27:e1:
f1:f9:be:14:b5:0f:2e:41:af:d8:df:06:92:50:0e:
17:c1:ff:f9:fb:de:2a:01:44:d6:f7:ae:e0:5a:eb:
e0:3a:07:07:d0:f0:78:e3:0a:ab:0e:67:c7:37:4d:
f0:56:7e:51:55:66:f0:e7:37:5c:ec:6b:17:90:c5:
28:b6:2d:87:d2:95:ed:3f:98:0b:fb:fe:dc:a6:e3:
34:65:46:c6:c9:6f:17:62:fb:97:97:77:fc:9f:d7:
61:57:28:1a:47:5b:33:47:49:b9:91:f2:25:6f:6d:
56:2d:b7:bc:71:6e:c7:89:59:bd:13:bf:a6:92:e5:
9d:3b:19:1e:ef:0d:b8:ef:f2:3f:0a:9e:90:bf:8b:
a4:33:2a:63:7e:73:c8:99:05:1a:37:ea:db:21:dd:
cb:82:37:94:7a:c8:79:62:8e:7f:26:4b:63:31:fc:
8e:da:1d:e5:24:ad:47:53:63:f9:19:0e:7c:6c:2f:
94:19:f5:4e:37:3c:28:9c:f3:a6:a1:e2:d9:12:1d:
9b:42:ea:3d:17:f8:55:87:c8:ae:cd:21:dd:7b:d8:
5a:14:ac:25:fb:15:c0:9c:8f:84:3a:bc:0d:39:17:
f3:de:49:d4:6e:b3:23:9b:b2:2c:40:1f:9d:22:01:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:72:2E:0F:55:86:ED:65:93:94:51:79:3E:91:75:FF:ED:9A:82
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.72.0/24
185.23.74.0/23
Signature Algorithm: sha256WithRSAEncryption
11:40:3a:54:16:22:47:05:1e:31:e8:32:fe:16:d4:4e:49:81:
cf:2d:c4:e5:8d:e4:2c:ea:1b:56:6e:d5:47:b1:60:ef:42:af:
c6:f3:ad:96:55:ff:73:bc:a0:d6:66:bf:69:7f:0e:1a:68:42:
90:4f:9d:5c:f2:97:ad:70:24:28:c5:30:a7:9f:98:a1:34:25:
c0:bc:1d:7f:98:a9:e7:bd:72:16:3a:4d:d0:88:a3:04:4c:cf:
c5:13:17:eb:e1:88:09:fe:2e:6d:cc:9c:01:b3:49:87:03:de:
24:aa:fc:85:87:b5:0e:98:0f:a9:59:15:34:22:a6:c2:9b:66:
d7:39:81:c5:7d:ee:c3:30:4a:90:1b:d8:37:04:4e:5c:a3:f7:
7e:82:c5:c2:75:4b:cc:4d:b6:be:69:e2:6e:2a:7a:3c:bd:30:
d2:ab:95:cc:0a:b5:36:ba:ed:18:a3:20:d4:e8:78:cc:77:25:
3a:1c:0e:7e:3d:1c:da:0f:94:db:5d:d9:e3:3a:b8:7b:91:0a:
7a:77:89:4d:9f:3a:1c:78:c2:b8:a4:45:52:f1:3f:d2:11:16:
eb:7b:a8:e5:e9:2a:d1:d0:f2:d2:77:6d:00:bf:9e:b5:c4:00:
87:8e:59:05:58:33:c4:30:1f:e5:91:19:88:db:3d:8e:c9:5b:
11:f2:2a:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQ/wA/Ae4OTm2XekwMiJJBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh
Zjc1OWUwHhcNMjUwMTA3MDc1MjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2FjNzIyZTBmNTU4NmVkNjU5Mzk0NTE3OTNlOTE3NWZmZWQ5YTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61Kndekb1gTJccI1J+Hx+b4UtQ8u
Qa/Y3waSUA4Xwf/5+94qAUTW967gWuvgOgcH0PB44wqrDmfHN03wVn5RVWbw5zdc
7GsXkMUoti2H0pXtP5gL+/7cpuM0ZUbGyW8XYvuXl3f8n9dhVygaR1szR0m5kfIl
b21WLbe8cW7HiVm9E7+mkuWdOxke7w247/I/Cp6Qv4ukMypjfnPImQUaN+rbId3L
gjeUesh5Yo5/JktjMfyO2h3lJK1HU2P5GQ58bC+UGfVONzwonPOmoeLZEh2bQuo9
F/hVh8iuzSHde9haFKwl+xXAnI+EOrwNORfz3knUbrMjm7IsQB+dIgFvMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPOsci4PVYbtZZOUUXk+kXX/7ZqCMB8GA1UdIwQY
MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt
MGEwYWFlYWVlNGYxLzEvODZ4eUxnOVZodTFsazVSUmVUNlJkZl90bW9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx
LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRdIAwQB
uRdKMA0GCSqGSIb3DQEBCwUAA4IBAQARQDpUFiJHBR4x6DL+FtROSYHPLcTljeQs
6htWbtVHsWDvQq/G862WVf9zvKDWZr9pfw4aaEKQT51c8petcCQoxTCnn5ihNCXA
vB1/mKnnvXIWOk3QiKMETM/FExfr4YgJ/i5tzJwBs0mHA94kqvyFh7UOmA+pWRU0
IqbCm2bXOYHFfe7DMEqQG9g3BE5co/d+gsXCdUvMTba+aeJuKno8vTDSq5XMCrU2
uu0YoyDU6HjMdyU6HA5+PRzaD5TbXdnjOrh7kQp6d4lNnzoceMK4pEVS8T/SERbr
e6jl6SrR0PLSd20Av561xACHjlkFWDPEMB/lkRmI2z2OyVsR8iqo
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:30 2025 by rpki-client