Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/cdVg1eOExuEzM_GDEjiUW-2AeeM.roa
File: cdVg1eOExuEzM_GDEjiUW-2AeeM.roa (raw, json)
Hash identifier: /28kpHy7iis1Z7Zny4YeAGfRKXcjWUiDrkmF9YWntME=
Subject key identifier: 71:D5:60:D5:E3:84:C6:E1:33:33:F1:83:12:38:94:5B:ED:80:79:E3
Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial: 0195378E88A1C8103B82ABF98757468FDC9F
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/cdVg1eOExuEzM_GDEjiUW-2AeeM.roa
Signing time: Mon 24 Feb 2025 10:44:02 +0000
ROA not before: Mon 24 Feb 2025 10:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60277
IP address blocks: 185.111.112.0/22 maxlen: 22
195.5.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:8e:88:a1:c8:10:3b:82:ab:f9:87:57:46:8f:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Validity
Not Before: Feb 24 10:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71d560d5e384c6e13333f1831238945bed8079e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:46:7b:36:a5:7b:ac:c0:4d:bf:96:a5:4a:
3b:2a:b0:e2:01:50:a4:80:44:35:85:20:53:dd:f3:
56:20:8b:31:3b:fb:d4:ce:98:e7:1f:36:f6:d1:d7:
33:56:b7:4c:24:d0:de:47:d4:37:7b:99:c2:c5:ce:
1e:e9:d7:f4:a6:5a:18:96:43:5e:e8:f2:3a:66:80:
89:c1:40:59:48:32:ae:d8:88:85:78:76:2f:45:00:
de:01:a9:74:01:9a:03:c1:6d:0d:38:e9:a3:10:ca:
b4:b2:13:92:3c:77:0a:a1:1d:39:17:8b:20:7a:52:
ee:40:48:8b:29:f5:e9:5d:16:12:c1:bd:63:e6:69:
00:af:27:ec:7b:8f:66:3d:aa:15:6b:a5:64:8b:4b:
a5:06:f9:39:77:9b:3c:fa:7e:15:42:d1:3a:86:94:
f0:19:4a:ae:1a:8b:5e:51:fc:cb:cf:c4:24:34:ff:
fb:17:88:2b:69:c8:f5:9f:c2:56:d9:86:d8:f6:70:
cf:8a:76:ad:3d:e3:ac:78:ae:2a:fe:67:46:56:74:
2e:41:62:08:b1:fe:5d:e9:6a:26:3b:0f:b2:76:f3:
34:38:ea:71:19:bb:6d:75:a8:cf:f7:1f:82:72:5c:
4f:35:00:08:2d:99:b4:f0:85:71:92:af:60:36:33:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D5:60:D5:E3:84:C6:E1:33:33:F1:83:12:38:94:5B:ED:80:79:E3
X509v3 Authority Key Identifier:
keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/cdVg1eOExuEzM_GDEjiUW-2AeeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.112.0/22
195.5.172.0/24
Signature Algorithm: sha256WithRSAEncryption
78:63:1e:a9:a1:be:76:ee:82:8d:0a:56:d9:eb:12:7e:02:1e:
bb:ab:7b:60:28:10:dd:1a:c1:70:2d:41:6c:99:9e:a8:00:ec:
c3:75:66:f7:35:b6:7a:8e:81:30:c2:4d:bf:6c:ea:a0:9a:ff:
f4:58:cc:8c:8b:96:a4:0b:2b:aa:25:aa:1f:f3:20:47:60:00:
d5:20:3c:c2:0a:52:9c:f6:8d:74:69:d2:00:dc:b2:dc:8e:b3:
74:12:27:18:73:eb:c1:2c:db:e2:de:b8:06:5f:6e:f6:e7:8e:
71:f4:cd:e8:1d:1d:c1:e1:ac:4a:ff:65:10:89:94:59:96:59:
1e:30:73:44:f1:52:5b:88:76:9d:89:ff:75:e6:e7:07:a1:a6:
e5:da:62:42:83:05:8c:28:ec:02:e7:6a:bb:2a:20:d6:d0:03:
bf:7f:89:10:ae:9e:ae:19:e0:a5:a3:8e:11:48:9b:fa:a0:ce:
14:ff:e8:af:d2:a8:3c:81:31:d6:69:d1:c2:fd:2c:49:13:16:
b5:11:5b:13:f5:93:60:a3:89:a5:85:68:22:c9:e4:6d:e2:d8:
32:a3:80:a2:f7:8b:21:b8:1f:e1:b4:2b:c2:c7:5a:c9:8d:78:
fd:2f:35:44:71:56:19:64:ea:2c:41:fe:18:fb:29:37:5e:51:
a8:89:5b:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZU3joihyBA7gqv5h1dGj9yfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOWE5YTFiN2UxMWZkZTc3ZTRlMWY1N2ZmMTE4NjRjZWUy
MWYxNjUwHhcNMjUwMjI0MTA0NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWQ1NjBkNWUzODRjNmUxMzMzM2YxODMxMjM4OTQ1YmVkODA3OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMVGezale6zATb+WpUo7KrDiAVCk
gEQ1hSBT3fNWIIsxO/vUzpjnHzb20dczVrdMJNDeR9Q3e5nCxc4e6df0ploYlkNe
6PI6ZoCJwUBZSDKu2IiFeHYvRQDeAal0AZoDwW0NOOmjEMq0shOSPHcKoR05F4sg
elLuQEiLKfXpXRYSwb1j5mkAryfse49mPaoVa6Vki0ulBvk5d5s8+n4VQtE6hpTw
GUquGoteUfzLz8QkNP/7F4gracj1n8JW2YbY9nDPinatPeOseK4q/mdGVnQuQWII
sf5d6WomOw+ydvM0OOpxGbttdajP9x+CclxPNQAILZm08IVxkq9gNjO1dQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHHVYNXjhMbhMzPxgxI4lFvtgHnjMB8GA1UdIwQY
MBaAFIOamht+Ef3nfk4fV/8RhkzuIfFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVxYUczNFJfZWQtVGg5WF94R0dUTzRoOFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NjdiZDAtYjBlZi00MTE0LWE1OGUt
ZmY4NmJmODgxNjQ4LzEvY2RWZzFlT0V4dUV6TV9HREVqaVVXLTJBZWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NjdiZDAtYjBlZi00MTE0LWE1OGUtZmY4NmJmODgxNjQ4
LzEvZzVxYUczNFJfZWQtVGg5WF94R0dUTzRoOFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuW9wAwQA
wwWsMA0GCSqGSIb3DQEBCwUAA4IBAQB4Yx6pob527oKNClbZ6xJ+Ah67q3tgKBDd
GsFwLUFsmZ6oAOzDdWb3NbZ6joEwwk2/bOqgmv/0WMyMi5akCyuqJaof8yBHYADV
IDzCClKc9o10adIA3LLcjrN0EicYc+vBLNvi3rgGX272545x9M3oHR3B4axK/2UQ
iZRZllkeMHNE8VJbiHadif915ucHoabl2mJCgwWMKOwC52q7KiDW0AO/f4kQrp6u
GeClo44RSJv6oM4U/+iv0qg8gTHWadHC/SxJExa1EVsT9ZNgo4mlhWgiyeRt4tgy
o4Ci94shuB/htCvCx1rJjXj9LzVEcVYZZOosQf4Y+yk3XlGoiVux
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:47:03 2025 by rpki-client on console.sobornost.net