Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/V1gcgrRQvSf2dtL0E41D42XNa0c.roa
File: V1gcgrRQvSf2dtL0E41D42XNa0c.roa (raw, json)
Hash identifier: J5zYvKNdV+l5Y6eVeDRqi8ebNs+g0KhpZ1mPMI4wWZE=
Subject key identifier: 57:58:1C:82:B4:50:BD:27:F6:76:D2:F4:13:8D:43:E3:65:CD:6B:47
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 019426D91C9E72F6AB863D53422E5E4B4918
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/V1gcgrRQvSf2dtL0E41D42XNa0c.roa
Signing time: Thu 02 Jan 2025 11:49:10 +0000
ROA not before: Thu 02 Jan 2025 11:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203460
IP address blocks: 185.115.60.0/22 maxlen: 22
2a06:7580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1c:9e:72:f6:ab:86:3d:53:42:2e:5e:4b:49:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Jan 2 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57581c82b450bd27f676d2f4138d43e365cd6b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:99:cf:e1:4d:95:20:45:77:37:53:48:82:
8a:46:8b:e7:1f:cd:6a:e3:56:38:83:4c:26:9b:4b:
1f:2c:95:44:e1:3f:b7:d4:ea:db:59:b3:d6:23:ad:
d1:77:fe:4d:f3:5c:47:a9:40:bf:7e:ef:20:ff:22:
33:9d:c4:f5:79:ff:e9:40:9e:0a:86:1b:93:b2:d2:
96:21:5a:11:97:97:fb:78:77:4a:d2:5d:27:77:7b:
f2:68:3d:15:1c:af:3c:51:77:16:6d:04:8e:6e:e0:
38:8d:63:69:de:eb:c0:f6:b0:7f:e8:1a:95:33:46:
0c:e9:d3:b6:b8:68:67:f0:9e:c7:74:7a:3f:ad:d5:
8a:a4:60:ea:2b:e1:23:6c:67:de:18:96:71:3b:92:
6c:81:4d:d5:03:b2:93:1a:67:df:ce:eb:85:30:47:
48:f2:17:83:47:5d:cc:a9:36:79:db:7f:72:63:0f:
8a:48:a9:79:93:f7:a9:ac:8c:6c:d0:da:87:33:41:
1d:a9:06:90:3e:82:8e:fd:20:af:86:b0:46:94:9f:
f1:9b:a5:9a:a6:b2:8b:8c:58:0c:69:8e:95:cb:c0:
0f:78:e9:30:5a:7f:6b:1d:fc:cb:0c:5f:01:d1:07:
01:92:05:47:f9:e1:5c:b5:85:9d:59:3a:05:b1:5d:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:1C:82:B4:50:BD:27:F6:76:D2:F4:13:8D:43:E3:65:CD:6B:47
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/V1gcgrRQvSf2dtL0E41D42XNa0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.60.0/22
IPv6:
2a06:7580::/29
Signature Algorithm: sha256WithRSAEncryption
4e:be:c3:5f:0a:3f:f2:61:c2:89:c8:04:51:57:e5:49:6b:9f:
b9:ba:38:23:2c:a8:f3:aa:2c:6a:a7:08:63:b3:80:1c:73:0e:
2d:3b:09:03:63:cf:2a:4d:ce:b2:8c:a3:66:cd:52:2a:c4:c3:
e1:fc:08:e8:bf:2d:5c:8e:75:f1:b1:c6:32:20:47:65:e5:dd:
65:24:84:0f:9d:fe:d5:b2:c2:24:a7:ec:32:e7:64:e9:9b:fd:
78:29:64:0b:d8:ce:35:0e:72:38:b1:82:2e:73:26:10:fb:d8:
95:0e:9d:c2:53:59:11:e9:10:7b:65:53:c1:e1:3f:b6:08:ef:
37:98:c0:12:9d:00:58:cf:f5:00:b9:d6:30:c8:f7:e7:81:65:
9c:3d:df:05:89:5a:9a:1b:9b:af:33:1a:ba:7f:ec:97:c1:44:
59:0f:99:7d:b7:fa:3c:73:ef:7a:a9:74:26:f9:8d:c4:37:74:
47:d5:2d:3d:5a:14:15:bc:95:f2:c6:c6:12:cc:14:c9:29:75:
54:11:e9:07:62:fb:8f:ef:cb:0b:4f:19:5c:68:75:dd:88:fd:
9e:ed:0a:da:be:e7:1e:0e:46:6e:43:e2:c0:db:56:55:4f:a4:
13:4c:05:a5:17:cc:dc:8a:ed:c1:01:85:02:49:93:43:7c:f9:
ad:88:84:81
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2Ryecvarhj1TQi5eS0kYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmU1MjgxMDc0MGE2ZWMxMzQ5OTNkYmM5YWQxMWI2NDU0
ZDlhN2EwHhcNMjUwMTAyMTE0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzU4MWM4MmI0NTBiZDI3ZjY3NmQyZjQxMzhkNDNlMzY1Y2Q2YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EiZz+FNlSBFdzdTSIKKRovnH81q
41Y4g0wmm0sfLJVE4T+31OrbWbPWI63Rd/5N81xHqUC/fu8g/yIzncT1ef/pQJ4K
hhuTstKWIVoRl5f7eHdK0l0nd3vyaD0VHK88UXcWbQSObuA4jWNp3uvA9rB/6BqV
M0YM6dO2uGhn8J7HdHo/rdWKpGDqK+EjbGfeGJZxO5JsgU3VA7KTGmffzuuFMEdI
8heDR13MqTZ5239yYw+KSKl5k/eprIxs0NqHM0EdqQaQPoKO/SCvhrBGlJ/xm6Wa
prKLjFgMaY6Vy8APeOkwWn9rHfzLDF8B0QcBkgVH+eFctYWdWToFsV1gXwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFdYHIK0UL0n9nbS9BONQ+NlzWtHMB8GA1UdIwQY
MBaAFARuUoEHQKbsE0mT28mtEbZFTZp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkc1U2dRZEFwdXdUU1pQYnlhMFJ0a1ZObW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83N2E2OTktMDU1Yi00MDdjLWIxMmIt
YWQ5NTQyYWQ0ZjQzLzEvVjFnY2dyUlF2U2YyZHRMMEU0MUQ0MlhOYTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83N2E2OTktMDU1Yi00MDdjLWIxMmItYWQ5NTQyYWQ0ZjQz
LzEvQkc1U2dRZEFwdXdUU1pQYnlhMFJ0a1ZObW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXM8MA0E
AgACMAcDBQMqBnWAMA0GCSqGSIb3DQEBCwUAA4IBAQBOvsNfCj/yYcKJyARRV+VJ
a5+5ujgjLKjzqixqpwhjs4Accw4tOwkDY88qTc6yjKNmzVIqxMPh/Ajovy1cjnXx
scYyIEdl5d1lJIQPnf7VssIkp+wy52Tpm/14KWQL2M41DnI4sYIucyYQ+9iVDp3C
U1kR6RB7ZVPB4T+2CO83mMASnQBYz/UAudYwyPfngWWcPd8FiVqaG5uvMxq6f+yX
wURZD5l9t/o8c+96qXQm+Y3EN3RH1S09WhQVvJXyxsYSzBTJKXVUEekHYvuP78sL
TxlcaHXdiP2e7QravuceDkZuQ+LA21ZVT6QTTAWlF8zciu3BAYUCSZNDfPmtiISB
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:37 2025 by rpki-client