Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/DmXSHAWyzkOoxqiFMJESxxoNQRE.roa
File: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (raw, json)
Hash identifier: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=
Subject key identifier: 0E:65:D2:1C:05:B2:CE:43:A8:C6:A8:85:30:91:12:C7:1A:0D:41:11
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 01942368F00F2EB689FF0761EA17AD218994
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/DmXSHAWyzkOoxqiFMJESxxoNQRE.roa
Signing time: Wed 01 Jan 2025 19:47:47 +0000
ROA not before: Wed 01 Jan 2025 19:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8211
IP address blocks: 145.72.94.0/23 maxlen: 23
145.72.94.0/24 maxlen: 24
145.72.95.0/24 maxlen: 24
145.72.96.0/22 maxlen: 22
145.72.96.0/23 maxlen: 23
145.72.98.0/23 maxlen: 23
145.72.100.0/22 maxlen: 22
145.72.108.0/22 maxlen: 22
145.72.108.0/23 maxlen: 23
145.72.110.0/23 maxlen: 23
145.72.120.0/21 maxlen: 21
145.72.120.0/22 maxlen: 22
145.72.124.0/22 maxlen: 22
2a02:cc4:210::/44 maxlen: 44
2a02:cc4:2f0::/44 maxlen: 44
2a02:cc4:2f0::/45 maxlen: 45
2a02:cc4:2f8::/45 maxlen: 45
2a02:cc4:2100::/41 maxlen: 41
2a02:cc4:2f00::/41 maxlen: 41
2a02:cc4:2f00::/42 maxlen: 42
2a02:cc4:2f40::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f0:0f:2e:b6:89:ff:07:61:ea:17:ad:21:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jan 1 19:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e65d21c05b2ce43a8c6a885309112c71a0d4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:99:28:6e:b6:60:87:29:c1:d0:90:7f:27:
a0:53:c5:af:61:68:60:ed:39:c4:e5:ca:92:50:be:
9f:1a:76:d3:78:d6:95:40:b9:62:28:08:bd:03:5b:
b9:d3:a3:7b:ec:d4:f3:78:85:29:62:2a:67:75:91:
92:5d:ae:b2:09:f2:9f:08:97:f0:0e:29:0e:c1:a6:
db:72:86:71:fc:d8:69:0a:5a:50:0f:ff:4b:bf:d9:
91:e9:43:6b:97:3b:a3:18:59:b6:17:69:c4:c6:12:
14:1e:3f:70:08:16:cf:20:17:90:24:31:a9:28:d4:
12:7c:38:8e:51:ba:80:c1:9f:ca:b0:cb:14:e9:9e:
d8:6b:89:0b:5b:ac:d3:5f:37:49:a5:45:7e:57:ae:
8a:16:e8:3f:cd:05:9f:7e:01:ae:9c:bc:e9:b5:c1:
c0:d6:e5:4a:f2:df:a5:95:36:7c:cd:90:3d:fd:5c:
55:06:5f:7c:5b:e1:ad:f4:a8:5a:f8:5f:fb:a0:c7:
d3:67:34:63:1d:39:bf:2e:96:27:c7:0f:c1:f7:03:
4c:b9:ae:93:04:c9:92:52:c9:8a:63:fe:66:2c:01:
bc:8e:ae:67:cf:e1:c8:86:a7:f7:a2:99:1c:19:0d:
76:81:b9:70:cf:d0:c8:bb:44:bf:81:1f:74:01:d0:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:65:D2:1C:05:B2:CE:43:A8:C6:A8:85:30:91:12:C7:1A:0D:41:11
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/DmXSHAWyzkOoxqiFMJESxxoNQRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.72.94.0-145.72.103.255
145.72.108.0/22
145.72.120.0/21
IPv6:
2a02:cc4:210::/44
2a02:cc4:2f0::/44
2a02:cc4:2100::/41
2a02:cc4:2f00::/41
Signature Algorithm: sha256WithRSAEncryption
79:cb:f7:23:e9:e1:60:6b:8b:fb:41:98:77:f3:2b:a4:e0:23:
01:70:ab:ca:6f:47:34:fb:ab:7e:0c:fd:29:03:3c:3e:65:06:
cc:d9:5f:01:9e:20:35:d2:d5:c8:f2:26:75:65:0b:6b:fa:63:
da:5f:a8:7b:51:12:d8:0d:fb:b8:b2:28:83:93:e4:8a:63:a4:
28:73:3d:36:bd:d0:95:b2:a8:09:69:d7:95:9e:67:02:1b:05:
d9:68:45:5e:8b:e5:a7:b8:e4:af:ff:63:02:94:86:fe:1b:18:
ee:c9:35:1b:39:a2:e6:ce:e7:b7:0b:91:de:4d:d0:3f:3a:45:
73:ef:4d:46:31:18:e3:0f:e1:18:e0:ae:7c:ba:59:d5:e2:5e:
35:76:a5:31:e6:ae:41:09:da:11:16:9b:b6:33:ad:b7:4e:82:
3b:f2:bd:6b:6d:dc:11:64:9f:c7:1a:b2:0e:8e:2d:fd:7c:03:
11:3d:b3:5b:47:19:b0:57:0d:dc:f7:91:30:82:8f:62:3b:ca:
df:f6:bb:bb:90:f9:5c:e9:81:fc:3a:76:56:66:6e:7e:ff:80:
8c:d7:3e:d3:c5:29:a0:50:af:6d:5e:a7:db:69:f0:5c:66:b5:
8d:4a:f9:84:40:ce:46:ba:4d:62:d7:03:de:4a:ff:80:0c:db:
0c:7d:81:2e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZQjaPAPLraJ/wdh6hetIYmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk
NTNiNGQwHhcNMjUwMTAxMTk0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTY1ZDIxYzA1YjJjZTQzYThjNmE4ODUzMDkxMTJjNzFhMGQ0MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvSZKG62YIcpwdCQfyegU8WvYWhg
7TnE5cqSUL6fGnbTeNaVQLliKAi9A1u506N77NTzeIUpYipndZGSXa6yCfKfCJfw
DikOwabbcoZx/NhpClpQD/9Lv9mR6UNrlzujGFm2F2nExhIUHj9wCBbPIBeQJDGp
KNQSfDiOUbqAwZ/KsMsU6Z7Ya4kLW6zTXzdJpUV+V66KFug/zQWffgGunLzptcHA
1uVK8t+llTZ8zZA9/VxVBl98W+Gt9Kha+F/7oMfTZzRjHTm/LpYnxw/B9wNMua6T
BMmSUsmKY/5mLAG8jq5nz+HIhqf3opkcGQ12gblwz9DIu0S/gR90AdAeqwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFA5l0hwFss5DqMaohTCREscaDUERMB8GA1UdIwQY
MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt
MzAwOTdhMjQ2YTljLzEvRG1YU0hBV3l6a09veHFpRk1KRVN4eG9OUVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj
LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAgBAIAATAaMAwDBAGRSF4D
BAORSGADBAKRSGwDBAORSHgwKgQCAAIwJAMHBCoCDMQCEAMHBCoCDMQC8AMHByoC
DMQhAAMHByoCDMQvADANBgkqhkiG9w0BAQsFAAOCAQEAecv3I+nhYGuL+0GYd/Mr
pOAjAXCrym9HNPurfgz9KQM8PmUGzNlfAZ4gNdLVyPImdWULa/pj2l+oe1ES2A37
uLIog5PkimOkKHM9Nr3QlbKoCWnXlZ5nAhsF2WhFXovlp7jkr/9jApSG/hsY7sk1
Gzmi5s7ntwuR3k3QPzpFc+9NRjEY4w/hGOCufLpZ1eJeNXalMeauQQnaERabtjOt
t06CO/K9a23cEWSfxxqyDo4t/XwDET2zW0cZsFcN3PeRMIKPYjvK3/a7u5D5XOmB
/Dp2VmZufv+AjNc+08UpoFCvbV6n22nwXGa1jUr5hEDORrpNYtcD3kr/gAzbDH2B
Lg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net