Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aOY0w24XvVYJIUPkDDF4TALm9xg.roa
File: aOY0w24XvVYJIUPkDDF4TALm9xg.roa (raw, json)
Hash identifier: rRN2hG+BRGwy7XhHBtSbMXOLy4BjJpoUsjjO28H1LRY=
Subject key identifier: 68:E6:34:C3:6E:17:BD:56:09:21:43:E4:0C:31:78:4C:02:E6:F7:18
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F07EE9993586C3E26A82E84989B5
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aOY0w24XvVYJIUPkDDF4TALm9xg.roa
Signing time: Thu 02 Jan 2025 01:48:14 +0000
ROA not before: Thu 02 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47814
IP address blocks: 46.19.204.251/32 maxlen: 32
46.19.205.0/24 maxlen: 24
46.19.206.0/24 maxlen: 24
80.81.44.0/24 maxlen: 24
80.81.46.0/23 maxlen: 23
83.223.139.0/24 maxlen: 24
83.223.149.0/24 maxlen: 24
94.101.224.0/24 maxlen: 24
94.101.228.0/24 maxlen: 24
94.101.233.206/32 maxlen: 32
94.101.234.0/24 maxlen: 24
94.101.238.0/24 maxlen: 24
217.69.115.0/24 maxlen: 24
217.69.117.0/24 maxlen: 24
217.69.118.0/24 maxlen: 24
2001:1bf8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f0:7e:e9:99:35:86:c3:e2:6a:82:e8:49:89:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68e634c36e17bd56092143e40c31784c02e6f718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:ef:b9:af:3e:37:7a:f8:ce:a8:44:18:b1:
c9:44:53:a1:76:6b:67:c8:8f:01:2e:db:68:85:56:
d7:4a:84:99:f6:f1:ed:64:fa:12:5d:5f:b5:0d:9f:
7a:15:60:5a:6a:ba:ff:fb:13:e2:86:75:cd:d9:7f:
b7:bd:e3:d4:6d:50:aa:02:57:8d:68:ed:31:cb:5c:
0f:58:eb:86:f6:d0:37:d8:9a:70:6d:39:96:48:be:
a7:bf:e4:ca:ac:a9:67:dc:f8:ce:d3:20:da:0c:cf:
3b:8e:15:57:12:0c:b6:4c:f9:a5:8a:14:ad:10:15:
30:a0:f5:3e:68:f2:b6:25:70:5f:a0:dc:2c:af:4f:
9e:4e:06:a9:45:b3:a8:f3:f2:48:9a:c9:29:3d:3a:
b7:93:45:4c:91:09:d5:f9:3a:e2:33:8d:37:83:aa:
84:6d:4a:45:74:43:a2:cb:24:f8:c4:89:e7:6d:c2:
83:75:07:63:ca:4b:dd:bb:97:b4:7d:23:c9:dd:e8:
a1:cc:2a:14:88:2c:fc:a9:32:c7:0b:13:80:3b:cd:
07:92:46:04:69:b0:33:c4:8a:20:ad:e9:6b:9a:0c:
97:b6:34:ff:51:10:7a:09:f2:e5:e8:11:b4:15:53:
be:6a:7a:18:0b:6d:93:0a:84:d4:22:b9:09:b9:f1:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:34:C3:6E:17:BD:56:09:21:43:E4:0C:31:78:4C:02:E6:F7:18
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aOY0w24XvVYJIUPkDDF4TALm9xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.204.251/32
46.19.205.0-46.19.206.255
80.81.44.0/24
80.81.46.0/23
83.223.139.0/24
83.223.149.0/24
94.101.224.0/24
94.101.228.0/24
94.101.233.206/32
94.101.234.0/24
94.101.238.0/24
217.69.115.0/24
217.69.117.0-217.69.118.255
IPv6:
2001:1bf8::/29
Signature Algorithm: sha256WithRSAEncryption
0a:06:8b:8e:81:d2:c4:e2:0f:06:7c:49:a7:78:7e:d4:5f:46:
51:66:5e:20:0c:62:b7:8f:7a:05:d8:ee:e8:3d:c2:e9:59:fd:
98:4e:2b:0d:91:76:ee:ca:b4:92:b6:6f:51:e6:20:38:be:53:
8d:4f:09:67:dd:69:19:2e:13:48:ed:01:4a:47:80:7a:80:79:
3f:27:89:54:75:22:58:8d:02:54:88:fc:9c:24:b9:db:b6:11:
25:8c:03:1e:c1:4e:fd:bf:a6:59:c3:9c:e6:43:56:77:44:cb:
77:f0:cc:d5:46:86:59:f2:2e:f9:b1:af:4e:a5:69:5a:40:2e:
c5:91:fd:41:7b:e3:3e:7d:a3:cf:da:29:ef:ce:a6:4f:e0:f7:
1a:1d:7c:48:79:4c:b9:8e:97:49:39:2a:6a:93:83:e8:34:98:
fa:9e:01:0b:69:ca:15:7b:d6:19:78:94:24:5b:c8:5a:68:f5:
19:d2:97:cb:75:fb:56:67:54:ce:14:d2:79:d2:25:8f:20:49:
33:ab:e9:89:43:2c:39:62:67:f6:cc:c0:1e:49:79:d9:66:8c:
db:35:4e:93:74:95:d8:8b:a0:ee:2b:ca:e1:e3:e1:1e:8e:51:
9f:61:59:c6:4d:f1:d8:da:87:4a:ac:c0:36:86:4f:d8:df:13:
2a:2b:59:b2
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgISAZQksvB+6Zk1hsPiaoLoSYm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGU2MzRjMzZlMTdiZDU2MDkyMTQzZTQwYzMxNzg0YzAyZTZmNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQrvua8+N3r4zqhEGLHJRFOhdmtn
yI8BLttohVbXSoSZ9vHtZPoSXV+1DZ96FWBaarr/+xPihnXN2X+3vePUbVCqAleN
aO0xy1wPWOuG9tA32JpwbTmWSL6nv+TKrKln3PjO0yDaDM87jhVXEgy2TPmlihSt
EBUwoPU+aPK2JXBfoNwsr0+eTgapRbOo8/JImskpPTq3k0VMkQnV+TriM403g6qE
bUpFdEOiyyT4xInnbcKDdQdjykvdu5e0fSPJ3eihzCoUiCz8qTLHCxOAO80HkkYE
abAzxIogrelrmgyXtjT/URB6CfLl6BG0FVO+anoYC22TCoTUIrkJufFkWwIDAQAB
o4ICczCCAm8wHQYDVR0OBBYEFGjmNMNuF71WCSFD5AwxeEwC5vcYMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvYU9ZMHcyNFh2VllKSVVQa0RERjRUQUxtOXhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMFAC4TzPsw
DAMEAC4TzQMEAC4TzgMEAFBRLAMEAVBRLgMEAFPfiwMEAFPflQMEAF5l4AMEAF5l
5AMFAF5l6c4DBABeZeoDBABeZe4DBADZRXMwDAMEANlFdQMEANlFdjANBAIAAjAH
AwUDIAEb+DANBgkqhkiG9w0BAQsFAAOCAQEACgaLjoHSxOIPBnxJp3h+1F9GUWZe
IAxit496Bdju6D3C6Vn9mE4rDZF27sq0krZvUeYgOL5TjU8JZ91pGS4TSO0BSkeA
eoB5PyeJVHUiWI0CVIj8nCS527YRJYwDHsFO/b+mWcOc5kNWd0TLd/DM1UaGWfIu
+bGvTqVpWkAuxZH9QXvjPn2jz9op786mT+D3Gh18SHlMuY6XSTkqapOD6DSY+p4B
C2nKFXvWGXiUJFvIWmj1GdKXy3X7VmdUzhTSedIljyBJM6vpiUMsOWJn9szAHkl5
2WaM2zVOk3SV2Iug7ivK4ePhHo5Rn2FZxk3x2NqHSqzANoZP2N8TKitZsg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net