Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Gh9Og9V9Mww4VDoFuHBszWBQDXQ.roa
File: Gh9Og9V9Mww4VDoFuHBszWBQDXQ.roa (raw, json)
Hash identifier: woYsser3sA8HLeMbkafBPb9sqTX+agRsWz9pLqDUqoo=
Subject key identifier: 1A:1F:4E:83:D5:7D:33:0C:38:54:3A:05:B8:70:6C:CD:60:50:0D:74
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019518F45D75DCAC76AA12276DAA67705117
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Gh9Og9V9Mww4VDoFuHBszWBQDXQ.roa
Signing time: Tue 18 Feb 2025 12:07:02 +0000
ROA not before: Tue 18 Feb 2025 12:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13852
IP address blocks: 2a0d:d940:50::/44 maxlen: 44
2a0d:d940:50::/46 maxlen: 46
2a0d:d940:54::/48 maxlen: 48
2a0d:d940:56::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:f4:5d:75:dc:ac:76:aa:12:27:6d:aa:67:70:51:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Feb 18 12:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a1f4e83d57d330c38543a05b8706ccd60500d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:09:f6:ae:93:25:c7:cb:43:ed:fd:8f:07:
ef:4b:ed:30:6e:cb:4d:9b:f6:69:60:40:b1:84:fa:
b9:e2:6d:15:b2:47:7e:1e:9b:38:17:73:4a:75:65:
7e:62:9b:64:0f:b2:fc:8c:95:3c:0c:69:87:35:9c:
a0:bd:c9:a0:91:d7:ca:5c:0c:7a:9d:6a:85:df:bd:
6a:09:ca:d9:95:a5:9e:40:79:72:71:72:d1:e5:40:
7c:e0:50:99:17:42:a9:d9:26:d7:cc:2a:f9:5b:c7:
2b:49:63:4e:e6:b0:9c:22:6f:c9:fc:a9:b4:b0:4f:
10:2b:10:9d:5a:e8:6c:db:f4:e8:cb:e9:93:62:82:
0d:9a:d8:31:79:27:24:a1:14:5b:24:ba:52:13:36:
8f:37:1d:33:89:82:e9:bc:58:e4:19:7a:23:1b:fd:
48:e5:ae:89:37:3f:da:5f:99:5f:6a:63:17:5e:e8:
e3:0b:0c:d0:fe:c3:c1:a4:2f:2b:53:e4:ac:1c:bc:
ee:db:74:fe:b2:37:c1:aa:63:31:8a:cc:1a:d9:c1:
88:0a:ce:e3:c8:09:4c:c8:80:1a:ac:01:42:38:13:
f2:58:94:37:ea:41:88:f5:fc:42:0d:2d:8f:98:bf:
35:cc:f8:4b:da:8f:d2:32:53:09:a0:09:d3:bd:43:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1F:4E:83:D5:7D:33:0C:38:54:3A:05:B8:70:6C:CD:60:50:0D:74
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Gh9Og9V9Mww4VDoFuHBszWBQDXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:50::/44
Signature Algorithm: sha256WithRSAEncryption
db:32:a9:8c:e4:95:fe:4a:eb:aa:04:95:c5:c2:d2:46:32:8b:
c2:b1:14:d7:2d:34:a7:c4:c3:e7:85:5f:42:82:df:8b:c6:98:
a5:9a:28:6d:10:d9:41:df:bf:c4:d9:40:3c:7c:12:c2:0d:4f:
08:12:67:c7:16:7c:77:ac:c5:1a:50:5b:00:b1:64:80:c9:fb:
35:37:67:4c:a0:64:8e:b1:5e:75:ca:23:21:b2:06:8a:a7:9a:
17:8c:6f:a6:aa:f9:39:74:17:7f:60:8c:32:a8:f7:64:f8:3f:
58:80:c7:7a:a2:48:bf:20:97:52:4d:f2:f1:87:72:83:12:85:
06:35:ab:bf:cb:d2:19:95:82:46:44:06:5f:d8:f5:dc:3c:a8:
5d:82:04:60:e7:5a:96:c5:aa:7e:6d:95:af:d6:4e:6d:7f:12:
66:1d:2b:d9:41:39:e3:d9:8b:5b:0c:6e:8d:30:5b:69:f8:39:
37:b7:5f:d3:ed:fd:84:ed:ac:84:63:b3:5b:6d:8e:9e:3a:63:
df:9a:32:0d:a8:e1:20:1b:02:a6:a9:97:18:58:bd:9c:53:da:
59:af:1b:38:d3:15:e1:57:a2:64:16:be:06:52:61:13:79:d4:
17:9f:62:f2:09:7a:88:18:30:f3:42:ad:bb:c4:84:03:0e:17:
62:6c:8f:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZUY9F113Kx2qhInbapncFEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwMjE4MTIwNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTFmNGU4M2Q1N2QzMzBjMzg1NDNhMDViODcwNmNjZDYwNTAwZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIMJ9q6TJcfLQ+39jwfvS+0wbstN
m/ZpYECxhPq54m0Vskd+Hps4F3NKdWV+YptkD7L8jJU8DGmHNZygvcmgkdfKXAx6
nWqF371qCcrZlaWeQHlycXLR5UB84FCZF0Kp2SbXzCr5W8crSWNO5rCcIm/J/Km0
sE8QKxCdWuhs2/Toy+mTYoINmtgxeSckoRRbJLpSEzaPNx0ziYLpvFjkGXojG/1I
5a6JNz/aX5lfamMXXujjCwzQ/sPBpC8rU+SsHLzu23T+sjfBqmMxiswa2cGICs7j
yAlMyIAarAFCOBPyWJQ36kGI9fxCDS2PmL81zPhL2o/SMlMJoAnTvUO79QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBofToPVfTMMOFQ6BbhwbM1gUA10MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvR2g5T2c5VjlNd3c0VkRvRnVIQnN6V0JRRFhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3ZQABQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDbMqmM5JX+SuuqBJXFwtJGMovCsRTXLTSnxMPn
hV9Cgt+LxpilmihtENlB37/E2UA8fBLCDU8IEmfHFnx3rMUaUFsAsWSAyfs1N2dM
oGSOsV51yiMhsgaKp5oXjG+mqvk5dBd/YIwyqPdk+D9YgMd6oki/IJdSTfLxh3KD
EoUGNau/y9IZlYJGRAZf2PXcPKhdggRg51qWxap+bZWv1k5tfxJmHSvZQTnj2Ytb
DG6NMFtp+Dk3t1/T7f2E7ayEY7NbbY6eOmPfmjINqOEgGwKmqZcYWL2cU9pZrxs4
0xXhV6JkFr4GUmETedQXn2LyCXqIGDDzQq27xIQDDhdibI99
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:09 2025 by rpki-client on console.sobornost.net