Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/9p8e9WoA4C2DPVeIchZFPcz6XaE.roa
File: 9p8e9WoA4C2DPVeIchZFPcz6XaE.roa (raw, json)
Hash identifier: 08xeCtquw3Dlp/xIPaCDCsu7UXWt+ysM9TiqCqTDfRY=
Subject key identifier: F6:9F:1E:F5:6A:00:E0:2D:83:3D:57:88:72:16:45:3D:CC:FA:5D:A1
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 019426D9CD73AB3A4076E59A3E33D10CF521
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/9p8e9WoA4C2DPVeIchZFPcz6XaE.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196752
IP address blocks: 37.252.120.0/21 maxlen: 24
46.19.32.0/21 maxlen: 24
46.19.36.0/22 maxlen: 24
84.22.96.0/19 maxlen: 24
84.22.96.0/22 maxlen: 24
84.22.100.0/23 maxlen: 24
84.22.118.0/23 maxlen: 24
84.22.122.0/24 maxlen: 24
91.213.195.0/24 maxlen: 24
164.138.24.0/21 maxlen: 24
164.138.30.0/23 maxlen: 24
185.24.220.0/22 maxlen: 24
2a02:2770::/32 maxlen: 32
2a02:2770::/48 maxlen: 48
2a02:2770:1::/48 maxlen: 48
2a02:2770:2::/48 maxlen: 48
2a02:2770:3::/48 maxlen: 48
2a02:2770:5::/48 maxlen: 48
2a02:2770:6::/48 maxlen: 48
2a02:2770:7::/48 maxlen: 48
2a02:2770:8::/48 maxlen: 48
2a02:2770:9::/48 maxlen: 48
2a02:2770:10::/48 maxlen: 48
2a02:2770:11::/48 maxlen: 48
2a02:2770:12::/48 maxlen: 48
2a02:2770:13::/48 maxlen: 48
2a02:2770:15::/48 maxlen: 48
2a02:2770:16::/48 maxlen: 48
2a02:2770:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cd:73:ab:3a:40:76:e5:9a:3e:33:d1:0c:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69f1ef56a00e02d833d57887216453dccfa5da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:f2:6a:99:a0:45:b0:4e:ba:da:0a:44:79:
b1:48:c5:5b:53:48:bd:38:69:a4:1c:9c:66:d4:4c:
8e:e9:1c:64:14:2f:aa:46:70:99:9f:70:45:ce:73:
38:20:ff:f8:fe:74:67:62:58:6a:48:a9:a4:25:66:
da:d6:63:b0:70:56:18:3f:a3:16:9a:52:ee:09:fd:
c4:44:16:20:26:61:52:01:7d:d2:e2:31:68:0f:71:
4d:ee:64:be:e2:df:62:24:27:99:b7:9e:12:0a:1f:
11:be:a7:bc:2a:d7:5c:42:e0:7c:e3:7d:5e:d3:18:
f2:3c:1c:08:13:bd:f4:eb:fe:60:7a:14:1c:1c:db:
f4:77:72:bb:28:9a:ea:97:2f:4e:33:47:b0:35:19:
3f:69:1a:ec:99:6a:2e:45:8f:0b:35:f0:b4:f3:48:
2a:17:b4:ca:b6:b5:e9:18:c7:e2:2c:4b:b1:6d:01:
ad:b8:27:59:29:b9:77:67:49:25:17:8a:e0:ef:99:
2a:e3:cc:2b:37:12:0d:0b:af:62:ca:fc:a8:2c:c7:
1f:f0:7e:a6:28:a1:0e:30:40:de:1f:73:0d:06:52:
97:f5:d2:fc:d8:e0:56:ff:ef:b3:22:27:03:ba:a3:
64:79:cf:f9:eb:e6:51:30:59:3a:48:03:f7:72:8c:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:1E:F5:6A:00:E0:2D:83:3D:57:88:72:16:45:3D:CC:FA:5D:A1
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/9p8e9WoA4C2DPVeIchZFPcz6XaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.120.0/21
46.19.32.0/21
84.22.96.0/19
91.213.195.0/24
164.138.24.0/21
185.24.220.0/22
IPv6:
2a02:2770::/32
Signature Algorithm: sha256WithRSAEncryption
ab:cb:2a:c7:9f:c3:86:00:4c:d8:a0:d2:8c:2c:21:b8:c7:c4:
25:5b:1a:70:13:73:65:91:df:79:c2:6b:fb:d3:dc:06:a3:8e:
67:e7:e2:15:b5:fb:91:01:7f:23:0e:ae:31:56:74:91:b8:7b:
5e:f4:f4:19:27:1f:f4:fe:81:db:14:ef:c6:66:43:e4:97:7c:
d5:1d:6f:9d:7b:3b:f1:90:68:c5:3c:9b:07:9b:38:60:42:00:
c8:ff:00:95:4b:42:2a:2e:74:21:b4:bb:2d:80:12:ae:b2:2d:
e9:71:00:2e:1a:1b:dc:62:71:34:9c:c9:7e:12:94:af:be:52:
70:dc:75:7c:9d:a5:5c:ac:1b:f8:09:5d:a6:fa:58:ec:86:bd:
ca:4e:96:bb:e2:e4:87:8d:3c:42:d8:21:30:b9:dc:35:28:c6:
77:7d:91:e9:8c:c4:14:9b:7d:48:76:33:df:22:5b:68:92:ef:
54:a1:1f:04:73:db:b3:a8:dc:61:ab:a4:ec:8f:c2:22:33:92:
2d:19:86:4b:46:cc:92:66:d8:c4:e3:47:0d:a0:18:0e:82:64:
1c:34:f8:d7:27:03:87:97:5b:50:90:f9:a7:23:37:07:92:f2:
4e:55:cf:14:c5:6a:b1:8b:f4:10:c3:b1:e5:a5:ad:7a:21:a0:
af:6a:46:25
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQm2c1zqzpAduWaPjPRDPUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjBiZWRiOTc4ZTE5MjhkMWU5NzBjYTJlZDk2OTM3MTE4
ZmZmNjgwHhcNMjUwMTAyMTE0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjlmMWVmNTZhMDBlMDJkODMzZDU3ODg3MjE2NDUzZGNjZmE1ZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk3yapmgRbBOutoKRHmxSMVbU0i9
OGmkHJxm1EyO6RxkFC+qRnCZn3BFznM4IP/4/nRnYlhqSKmkJWba1mOwcFYYP6MW
mlLuCf3ERBYgJmFSAX3S4jFoD3FN7mS+4t9iJCeZt54SCh8Rvqe8KtdcQuB8431e
0xjyPBwIE7306/5gehQcHNv0d3K7KJrqly9OM0ewNRk/aRrsmWouRY8LNfC080gq
F7TKtrXpGMfiLEuxbQGtuCdZKbl3Z0klF4rg75kq48wrNxINC69iyvyoLMcf8H6m
KKEOMEDeH3MNBlKX9dL82OBW/++zIicDuqNkec/56+ZRMFk6SAP3coyByQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFPafHvVqAOAtgz1XiHIWRT3M+l2hMB8GA1UdIwQY
MBaAFKTwvtuXjhko0elwyi7ZaTcRj/9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBDLTI1ZU9HU2pSNlhES0x0bHBOeEdQXzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOGQ3MDUtNjJlZi00ZTY2LWI3ZTYt
ZTgzZTVmZjYxOGRkLzEvOXA4ZTlXb0E0QzJEUFZlSWNoWkZQY3o2WGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kOGQ3MDUtNjJlZi00ZTY2LWI3ZTYtZTgzZTVmZjYxOGRk
LzEvcFBDLTI1ZU9HU2pSNlhES0x0bHBOeEdQXzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDJfx4AwQD
LhMgAwQFVBZgAwQAW9XDAwQDpIoYAwQCuRjcMA0EAgACMAcDBQAqAidwMA0GCSqG
SIb3DQEBCwUAA4IBAQCryyrHn8OGAEzYoNKMLCG4x8QlWxpwE3Nlkd95wmv709wG
o45n5+IVtfuRAX8jDq4xVnSRuHte9PQZJx/0/oHbFO/GZkPkl3zVHW+dezvxkGjF
PJsHmzhgQgDI/wCVS0IqLnQhtLstgBKusi3pcQAuGhvcYnE0nMl+EpSvvlJw3HV8
naVcrBv4CV2m+ljshr3KTpa74uSHjTxC2CEwudw1KMZ3fZHpjMQUm31IdjPfIlto
ku9UoR8Ec9uzqNxhq6Tsj8IiM5ItGYZLRsySZtjE40cNoBgOgmQcNPjXJwOHl1tQ
kPmnIzcHkvJOVc8UxWqxi/QQw7Hlpa16IaCvakYl
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net