Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/mF32KrmR7qkPWXVgQfXewbxtOHE.roa
File: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (raw, json)
Hash identifier: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=
Subject key identifier: 98:5D:F6:2A:B9:91:EE:A9:0F:59:75:60:41:F5:DE:C1:BC:6D:38:71
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 019426D969F638A30413A37E2158A3823C79
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/mF32KrmR7qkPWXVgQfXewbxtOHE.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8458
IP address blocks: 193.93.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:69:f6:38:a3:04:13:a3:7e:21:58:a3:82:3c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=985df62ab991eea90f59756041f5dec1bc6d3871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:a1:ac:48:d9:0f:3a:83:97:be:58:54:e6:
78:78:ba:82:96:34:4f:b8:6d:70:55:f2:36:12:da:
37:7c:f0:be:ce:01:ed:59:4e:e9:df:72:96:3c:fb:
85:15:8c:f4:5b:97:11:d6:b2:21:b8:27:38:e2:89:
7d:88:eb:d3:d5:e2:1a:88:c2:5e:22:1b:81:8a:52:
21:e4:a1:29:b8:53:8d:47:c2:72:2b:6d:b8:a5:e8:
4c:b2:5a:40:33:16:59:5f:32:68:2c:f5:16:8f:4e:
51:39:93:01:bf:7c:69:45:fd:24:41:7c:d7:3a:7a:
f7:f8:57:99:51:d8:8c:c2:87:2f:29:e1:0a:6a:87:
cf:41:4b:ed:0a:ca:6c:73:54:03:47:ff:4c:27:90:
10:51:62:2a:3b:cc:23:ac:30:91:6d:44:63:a7:3f:
3e:46:98:23:58:50:ab:87:89:39:67:b4:81:7b:6b:
60:4d:d3:a8:df:a2:ba:c0:bb:0d:90:39:45:30:45:
e0:f2:1b:ea:96:8d:30:bd:f1:23:bf:4c:31:93:43:
28:19:7c:f4:44:25:2d:30:1e:d0:8e:00:5f:53:52:
00:7e:ed:22:c7:8c:89:88:db:fe:ec:7d:c6:9a:06:
8d:d3:a3:1c:ed:4a:ec:00:b9:c8:6d:ca:4a:97:8a:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:F6:2A:B9:91:EE:A9:0F:59:75:60:41:F5:DE:C1:BC:6D:38:71
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/mF32KrmR7qkPWXVgQfXewbxtOHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.156.0/22
Signature Algorithm: sha256WithRSAEncryption
17:b2:10:32:9e:16:87:2a:a4:33:fe:f4:95:df:be:21:ad:7d:
8d:0e:45:cc:5f:06:48:57:ae:8a:54:e2:91:7b:88:82:c1:56:
d3:05:69:d0:c9:d8:05:84:dc:25:2c:3b:d3:ba:54:52:5f:45:
81:29:87:46:de:8c:b9:e2:28:0b:f9:4c:e0:a4:38:64:28:a7:
7b:91:7e:09:0a:22:e5:39:cc:82:90:b1:ea:6c:81:75:f0:1c:
a4:bd:5d:45:ec:62:8b:82:50:50:a9:84:08:9a:9e:41:a5:2c:
52:ec:52:e8:59:cd:ec:e9:d3:3d:cc:ca:48:eb:22:fc:e1:22:
4a:ca:f0:51:fd:49:dd:e0:1d:fb:c1:38:24:f5:84:e4:56:6f:
2b:99:8d:fa:71:ba:f4:2e:05:3a:a5:69:d5:7e:3b:71:f4:a8:
95:e6:55:37:54:fd:57:cd:f3:0f:66:10:b9:18:a7:d6:3f:19:
01:dc:2b:74:82:60:9a:56:b1:6a:43:80:45:37:14:8a:71:6f:
13:d9:a8:59:b2:d8:4d:38:12:63:41:e2:ed:3a:94:cb:a6:8c:
80:74:e8:19:22:d8:31:c6:ad:a5:da:20:c9:fa:b7:96:26:f6:
81:eb:b7:dc:b8:4f:f7:c4:47:8d:a7:04:ec:b7:4f:c7:86:6d:
23:55:54:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2Wn2OKMEE6N+IVijgjx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzAwNTE3NzUyNmQ2NjhlODQ0YjJhN2E1YTU5YWM2NGE0
OTU2NTIwHhcNMjUwMTAyMTE0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODVkZjYyYWI5OTFlZWE5MGY1OTc1NjA0MWY1ZGVjMWJjNmQzODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ChrEjZDzqDl75YVOZ4eLqCljRP
uG1wVfI2Eto3fPC+zgHtWU7p33KWPPuFFYz0W5cR1rIhuCc44ol9iOvT1eIaiMJe
IhuBilIh5KEpuFONR8JyK224pehMslpAMxZZXzJoLPUWj05ROZMBv3xpRf0kQXzX
Onr3+FeZUdiMwocvKeEKaofPQUvtCspsc1QDR/9MJ5AQUWIqO8wjrDCRbURjpz8+
RpgjWFCrh4k5Z7SBe2tgTdOo36K6wLsNkDlFMEXg8hvqlo0wvfEjv0wxk0MoGXz0
RCUtMB7QjgBfU1IAfu0ix4yJiNv+7H3GmgaN06Mc7UrsALnIbcpKl4qrGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJhd9iq5ke6pD1l1YEH13sG8bThxMB8GA1UdIwQY
MBaAFBdwBRd1JtZo6ESyp6WlmsZKSVZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYt
MGNkZWZiZmM3ODdhLzEvbUYzMktybVI3cWtQV1hWZ1FmWGV3Ynh0T0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYtMGNkZWZiZmM3ODdh
LzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwV2cMA0G
CSqGSIb3DQEBCwUAA4IBAQAXshAynhaHKqQz/vSV374hrX2NDkXMXwZIV66KVOKR
e4iCwVbTBWnQydgFhNwlLDvTulRSX0WBKYdG3oy54igL+UzgpDhkKKd7kX4JCiLl
OcyCkLHqbIF18BykvV1F7GKLglBQqYQImp5BpSxS7FLoWc3s6dM9zMpI6yL84SJK
yvBR/Und4B37wTgk9YTkVm8rmY36cbr0LgU6pWnVfjtx9KiV5lU3VP1XzfMPZhC5
GKfWPxkB3Ct0gmCaVrFqQ4BFNxSKcW8T2ahZsthNOBJjQeLtOpTLpoyAdOgZItgx
xq2l2iDJ+reWJvaB67fcuE/3xEeNpwTst0/Hhm0jVVTw
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net