Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cBdrVotmMoY5s2TwcS7Dzu1S6uo.roa
File: cBdrVotmMoY5s2TwcS7Dzu1S6uo.roa (raw, json)
Hash identifier: getWN7AwEZr2c2EX30+PdOMn82mczFGXbErr1v+E/Lk=
Subject key identifier: 70:17:6B:56:8B:66:32:86:39:B3:64:F0:71:2E:C3:CE:ED:52:EA:EA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01962EA8DA2B47A1B7E0DB677BBADA70C1FE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cBdrVotmMoY5s2TwcS7Dzu1S6uo.roa
Signing time: Sun 13 Apr 2025 10:18:59 +0000
ROA not before: Sun 13 Apr 2025 10:18:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 62.76.229.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:a8:da:2b:47:a1:b7:e0:db:67:7b:ba:da:70:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 13 10:18:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70176b568b66328639b364f0712ec3ceed52eaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:23:df:4c:14:83:f2:69:3a:1e:34:93:d8:
fa:3e:2b:d0:b8:b5:93:98:ad:82:8e:b0:24:07:dd:
a0:21:53:a4:d8:e6:42:a1:f5:55:56:77:88:dc:34:
f4:c0:d8:fe:c1:f5:4e:fa:d8:63:94:6e:c8:33:51:
37:7f:43:43:ab:a2:a9:fd:fd:0a:8e:d5:16:7a:41:
3d:86:b9:43:ee:6e:17:5a:da:c5:75:7a:f0:df:16:
25:d5:49:e3:6e:c6:1e:48:f5:1c:aa:f3:9c:fc:d0:
9d:73:5a:c3:c2:0a:40:30:44:16:8e:e7:b3:8f:d1:
0a:29:27:30:cd:80:78:d4:14:23:e9:0d:90:1f:8c:
a6:11:f8:41:b8:e6:2c:20:d2:84:70:dc:c7:4e:39:
dc:c0:3e:0a:37:7b:52:f5:c0:52:92:55:69:bb:0f:
26:5d:56:41:00:3f:a7:69:26:50:de:60:a0:8c:61:
b7:53:a4:23:4c:17:1f:da:e0:d5:37:a2:d9:18:88:
96:7e:39:72:a9:91:61:f3:0d:53:cf:99:3e:7b:a6:
fd:e3:31:6f:12:90:da:25:6e:07:84:19:6c:37:15:
84:7d:41:e7:ee:cb:e7:a1:14:ca:ba:c4:27:7f:ef:
a8:91:e0:cb:18:c0:6e:6c:3d:89:06:3d:ec:7e:74:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:6B:56:8B:66:32:86:39:B3:64:F0:71:2E:C3:CE:ED:52:EA:EA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cBdrVotmMoY5s2TwcS7Dzu1S6uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
194.87.212.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cf:e2:26:d7:44:4d:0e:66:26:ac:be:02:d8:20:87:cf:2e:
5f:36:3d:6f:35:e3:f8:eb:62:e2:95:89:3f:78:4b:67:79:45:
0d:65:da:1b:d2:d2:15:71:ce:a1:65:06:87:67:9b:40:37:0f:
f8:77:d0:2e:1a:8a:d3:c2:f2:1d:68:fd:a4:05:cc:8b:54:d4:
e8:bd:40:dd:52:6a:cb:48:74:0c:3e:96:b4:47:07:96:aa:9b:
97:57:4d:a8:6c:d5:3e:ff:ce:e0:b5:2f:4b:83:70:ce:4b:ef:
cc:ee:23:de:d0:6a:de:07:6f:b4:e9:2a:6c:cf:41:f6:30:f6:
f4:d0:80:bb:78:06:f8:4e:41:1e:26:5f:5f:ef:61:98:64:74:
3e:c1:2f:14:ff:58:a2:36:30:ce:7b:51:22:f9:87:07:04:ff:
37:45:d9:e2:2f:41:dc:4d:52:41:00:f0:2f:a6:d4:c2:c7:e5:
7b:32:52:aa:eb:c8:7f:0b:6e:3b:3a:6c:6a:c7:77:3f:fc:2f:
c2:62:52:60:c4:2e:0b:dc:b7:ce:8a:fa:41:8d:76:e3:99:7d:
1c:df:94:4c:07:48:ed:99:54:c9:9c:6d:12:68:ca:b9:40:96:
b4:7f:c9:c2:d0:cb:bb:03:62:77:57:1f:b1:78:38:52:ae:1b:
28:bf:a0:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYuqNorR6G34Ntne7racMH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwNDEzMTAxODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDE3NmI1NjhiNjYzMjg2MzliMzY0ZjA3MTJlYzNjZWVkNTJlYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Aj30wUg/JpOh40k9j6PivQuLWT
mK2CjrAkB92gIVOk2OZCofVVVneI3DT0wNj+wfVO+thjlG7IM1E3f0NDq6Kp/f0K
jtUWekE9hrlD7m4XWtrFdXrw3xYl1UnjbsYeSPUcqvOc/NCdc1rDwgpAMEQWjuez
j9EKKScwzYB41BQj6Q2QH4ymEfhBuOYsINKEcNzHTjncwD4KN3tS9cBSklVpuw8m
XVZBAD+naSZQ3mCgjGG3U6QjTBcf2uDVN6LZGIiWfjlyqZFh8w1Tz5k+e6b94zFv
EpDaJW4HhBlsNxWEfUHn7svnoRTKusQnf++okeDLGMBubD2JBj3sfnQIAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHAXa1aLZjKGObNk8HEuw87tUurqMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvY0JkclZvdG1Nb1k1czJUd2NTN0R6dTFTNnVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkzlAwQA
wlfUMA0GCSqGSIb3DQEBCwUAA4IBAQBwz+Im10RNDmYmrL4C2CCHzy5fNj1vNeP4
62LilYk/eEtneUUNZdob0tIVcc6hZQaHZ5tANw/4d9AuGorTwvIdaP2kBcyLVNTo
vUDdUmrLSHQMPpa0RweWqpuXV02obNU+/87gtS9Lg3DOS+/M7iPe0GreB2+06Sps
z0H2MPb00IC7eAb4TkEeJl9f72GYZHQ+wS8U/1iiNjDOe1Ei+YcHBP83RdniL0Hc
TVJBAPAvptTCx+V7MlKq68h/C247Omxqx3c//C/CYlJgxC4L3LfOivpBjXbjmX0c
35RMB0jtmVTJnG0SaMq5QJa0f8nC0Mu7A2J3Vx+xeDhSrhsov6Cm
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net