Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/1pDN_cqLTEaLa3FpHJ0nDprfyGU.roa
File: 1pDN_cqLTEaLa3FpHJ0nDprfyGU.roa (raw, json)
Hash identifier: SGGICeKS+UCFERj3bY2e8n18D/0WE7ihQBfVbxRvt70=
Subject key identifier: D6:90:CD:FD:CA:8B:4C:46:8B:6B:71:69:1C:9D:27:0E:9A:DF:C8:65
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 01951FF322D4B3AFC265D2013A762E54065B
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/1pDN_cqLTEaLa3FpHJ0nDprfyGU.roa
Signing time: Wed 19 Feb 2025 20:43:02 +0000
ROA not before: Wed 19 Feb 2025 20:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214967
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:f3:22:d4:b3:af:c2:65:d2:01:3a:76:2e:54:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Feb 19 20:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d690cdfdca8b4c468b6b71691c9d270e9adfc865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:71:12:87:c2:6d:08:f1:a0:e8:5b:6a:58:
27:a2:37:78:96:1b:db:e3:29:5b:9d:e4:29:81:d9:
13:fc:d3:86:5e:41:e9:09:89:09:55:3b:a2:dc:f8:
fd:91:85:2d:6f:77:d4:e1:27:ad:a7:fc:09:da:6d:
21:31:d4:43:5f:93:60:84:e9:30:a2:42:16:b3:e8:
72:7e:dd:7b:34:d3:19:ed:c1:87:1f:31:99:2e:e6:
1d:99:0c:61:24:02:09:0c:69:2c:7a:f5:d5:e0:4a:
43:e7:2e:52:53:05:de:df:54:d9:a2:a0:91:04:c7:
b8:62:70:90:9a:a4:00:ed:8f:1d:d8:6a:ac:84:c2:
e8:61:25:de:7c:72:c6:a7:dd:db:ec:57:a5:a3:ff:
a8:50:8a:e8:06:f5:4b:49:10:fb:e3:ba:06:c6:16:
14:1a:e9:c3:70:2d:67:4f:58:5f:aa:9a:80:43:81:
f0:cc:39:c4:de:01:05:c7:ad:23:51:fc:ca:f1:9b:
fe:ec:e5:35:87:cf:4e:0a:13:a9:17:4d:da:ad:32:
ca:55:6e:a2:de:bb:13:1b:f3:d8:f6:58:4d:0a:cd:
de:f2:39:fb:42:ff:69:d9:8f:64:23:93:58:47:ac:
c3:36:b6:49:23:b6:e6:2c:d1:5f:3e:fd:c4:18:0a:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:CD:FD:CA:8B:4C:46:8B:6B:71:69:1C:9D:27:0E:9A:DF:C8:65
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/1pDN_cqLTEaLa3FpHJ0nDprfyGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
80:34:82:8a:85:56:97:7f:10:c7:5c:4f:e8:e3:0c:38:f9:40:
32:6f:9f:f4:35:05:a9:d1:c8:48:91:b2:41:82:b0:37:9b:cf:
39:db:ec:04:00:45:42:5f:0a:17:0e:65:f2:67:7d:04:99:2c:
45:5f:1e:ed:a1:16:b0:dd:b2:eb:a0:99:f0:29:ef:5d:d0:f2:
9b:3a:36:cb:23:75:4d:04:51:b7:b9:8d:06:8b:ce:9e:80:8a:
1b:43:f9:bd:94:ce:af:de:24:b7:25:d7:2d:62:44:24:88:e3:
e8:3a:0f:91:1f:ba:20:b8:74:2b:49:59:5c:26:50:81:6f:d0:
fc:5c:92:92:73:05:d4:29:d9:f8:c9:d0:fa:18:ba:e6:10:a7:
a4:bb:d0:8a:5e:de:df:6a:ed:94:dc:fd:96:06:95:77:87:e7:
57:19:67:18:93:c3:ff:ab:53:da:8a:7f:09:c7:c8:36:16:c5:
c9:e6:fe:12:52:88:e7:00:a5:35:b8:aa:80:ea:53:34:a9:6c:
e4:7f:d7:12:07:57:2a:ca:b3:b9:50:a2:a3:95:1e:53:1a:66:
a6:9b:2d:c0:38:90:fe:e0:81:74:61:d2:db:38:45:f3:9a:f0:
38:f4:15:64:c7:a0:32:de:d0:9e:ac:73:74:ce:d7:29:6b:46:
84:51:1a:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUf8yLUs6/CZdIBOnYuVAZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5
MmVlNjUwHhcNMjUwMjE5MjA0MzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjkwY2RmZGNhOGI0YzQ2OGI2YjcxNjkxYzlkMjcwZTlhZGZjODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9RxEofCbQjxoOhbalgnojd4lhvb
4ylbneQpgdkT/NOGXkHpCYkJVTui3Pj9kYUtb3fU4Setp/wJ2m0hMdRDX5NghOkw
okIWs+hyft17NNMZ7cGHHzGZLuYdmQxhJAIJDGksevXV4EpD5y5SUwXe31TZoqCR
BMe4YnCQmqQA7Y8d2GqshMLoYSXefHLGp93b7Felo/+oUIroBvVLSRD747oGxhYU
GunDcC1nT1hfqpqAQ4HwzDnE3gEFx60jUfzK8Zv+7OU1h89OChOpF03arTLKVW6i
3rsTG/PY9lhNCs3e8jn7Qv9p2Y9kI5NYR6zDNrZJI7bmLNFfPv3EGApjywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNaQzf3Ki0xGi2txaRydJw6a38hlMB8GA1UdIwQY
MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt
NDZmMDA0YTE5NTkxLzEvMXBETl9jcUxURWFMYTNGcEhKMG5EcHJmeUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx
LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwchOMA0G
CSqGSIb3DQEBCwUAA4IBAQCANIKKhVaXfxDHXE/o4ww4+UAyb5/0NQWp0chIkbJB
grA3m8852+wEAEVCXwoXDmXyZ30EmSxFXx7toRaw3bLroJnwKe9d0PKbOjbLI3VN
BFG3uY0Gi86egIobQ/m9lM6v3iS3JdctYkQkiOPoOg+RH7oguHQrSVlcJlCBb9D8
XJKScwXUKdn4ydD6GLrmEKeku9CKXt7fau2U3P2WBpV3h+dXGWcYk8P/q1Pain8J
x8g2FsXJ5v4SUojnAKU1uKqA6lM0qWzkf9cSB1cqyrO5UKKjlR5TGmammy3AOJD+
4IF0YdLbOEXzmvA49BVkx6Ay3tCerHN0ztcpa0aEURpW
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net