Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PT5V9DI-vTGcX-g7Png7Cy1LYh8.roa
File: PT5V9DI-vTGcX-g7Png7Cy1LYh8.roa (raw, json)
Hash identifier: mbbkqBuIkuxl1XHSOYFImXOP6BpkovOruDLkWb6LgCU=
Subject key identifier: 3D:3E:55:F4:32:3E:BD:31:9C:5F:E8:3B:3E:78:3B:0B:2D:4B:62:1F
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0196062FADAF02BAEB6C7DCB43331C342ED7
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PT5V9DI-vTGcX-g7Png7Cy1LYh8.roa
Signing time: Sat 05 Apr 2025 13:41:49 +0000
ROA not before: Sat 05 Apr 2025 13:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.11.190.0/24 maxlen: 24
45.11.191.0/24 maxlen: 24
188.209.137.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
194.15.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:2f:ad:af:02:ba:eb:6c:7d:cb:43:33:1c:34:2e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 5 13:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3e55f4323ebd319c5fe83b3e783b0b2d4b621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:83:f8:a1:bf:f8:08:88:b7:48:36:63:4a:
a2:d9:da:d4:9f:b1:d4:e6:3d:a5:82:86:50:fc:04:
ec:d8:f8:74:eb:f2:42:2c:f0:d4:fd:0a:70:4e:38:
f9:81:7b:76:16:8e:56:26:93:c3:b7:63:7e:57:a5:
87:91:83:b8:06:03:2a:ea:90:32:e5:b7:53:55:d7:
db:c4:b1:2e:dd:71:47:c7:d0:15:f5:04:38:a2:94:
bc:cb:e4:0c:15:05:0f:04:a6:47:23:00:c1:f2:9a:
4f:d9:f4:5a:66:de:ab:df:ff:92:d1:98:52:79:d8:
b9:22:86:3d:85:f8:92:5f:31:92:76:8b:85:59:c5:
e4:48:63:dd:2b:2a:c2:70:4a:a7:e4:34:32:20:d0:
7a:83:ff:3d:01:c1:e7:9c:b5:d8:66:aa:30:42:96:
c4:69:b3:20:88:b9:a7:2a:84:18:ad:cc:73:b3:da:
b8:11:6e:c7:90:2c:68:7b:94:6d:73:40:0b:32:72:
ad:b9:f1:3a:da:b7:2c:77:80:5d:08:b2:77:5b:ae:
96:2a:85:1f:5d:85:25:8a:ed:dd:0a:23:e4:ce:96:
75:95:d4:df:c3:73:32:ba:40:26:16:4f:44:c1:e2:
b4:a9:13:0a:47:e8:e2:c1:05:57:a0:7d:76:11:7e:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3E:55:F4:32:3E:BD:31:9C:5F:E8:3B:3E:78:3B:0B:2D:4B:62:1F
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/PT5V9DI-vTGcX-g7Png7Cy1LYh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.190.0/23
188.209.137.0/24
188.209.139.0/24
194.15.96.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6e:44:c9:97:62:ab:3a:f8:40:b1:76:8b:05:37:fd:2f:7d:
01:d8:e5:fc:b7:d3:ca:4c:22:3d:df:2e:34:78:a4:69:a3:14:
ef:a9:ab:d7:d2:ab:30:60:0c:0d:2d:6a:6e:d2:a4:fa:91:73:
9b:9e:83:59:29:1b:9c:58:7d:ab:4e:5c:23:97:bd:13:f1:2d:
05:b6:7c:01:bc:b0:d0:e4:3f:f2:f7:a4:60:0b:b4:03:55:84:
c1:d5:3f:82:33:67:43:c8:2d:e6:9e:fb:a1:24:4a:57:dd:75:
7d:2f:6e:46:8e:0c:ed:0e:d1:de:1c:f5:a9:69:be:3f:2a:53:
3e:93:8d:a7:4a:07:44:92:d9:8e:77:8c:43:dc:53:a8:94:83:
19:53:39:d7:6c:0d:cb:ac:43:f5:53:c1:65:3a:9f:1e:bf:6c:
af:74:8e:31:64:d7:d1:8b:30:71:d8:07:81:ce:72:d8:e3:96:
f1:9a:56:6b:11:49:a4:b6:b7:b2:e9:c0:f6:d0:54:f6:ea:55:
f5:47:9d:8c:45:d5:3b:a3:40:a0:23:46:e8:f7:f1:0f:21:18:
2d:07:b3:a6:27:da:5a:e9:74:3a:41:63:cb:4f:a6:c6:9a:39:
32:9d:2f:74:ce:e3:42:d7:5a:d1:78:9f:5b:c6:2a:fb:56:89:
2d:62:b3:e9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZYGL62vArrrbH3LQzMcNC7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjUwNDA1MTM0MTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDNlNTVmNDMyM2ViZDMxOWM1ZmU4M2IzZTc4M2IwYjJkNGI2MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn2D+KG/+AiIt0g2Y0qi2drUn7HU
5j2lgoZQ/ATs2Ph06/JCLPDU/QpwTjj5gXt2Fo5WJpPDt2N+V6WHkYO4BgMq6pAy
5bdTVdfbxLEu3XFHx9AV9QQ4opS8y+QMFQUPBKZHIwDB8ppP2fRaZt6r3/+S0ZhS
edi5IoY9hfiSXzGSdouFWcXkSGPdKyrCcEqn5DQyINB6g/89AcHnnLXYZqowQpbE
abMgiLmnKoQYrcxzs9q4EW7HkCxoe5Rtc0ALMnKtufE62rcsd4BdCLJ3W66WKoUf
XYUliu3dCiPkzpZ1ldTfw3MyukAmFk9EweK0qRMKR+jiwQVXoH12EX6bDQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFD0+VfQyPr0xnF/oOz54OwstS2IfMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvUFQ1VjlESS12VEdjWC1nN1BuZzdDeTFMWWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLQu+AwQA
vNGJAwQAvNGLAwQAwg9gMA0GCSqGSIb3DQEBCwUAA4IBAQCWbkTJl2KrOvhAsXaL
BTf9L30B2OX8t9PKTCI93y40eKRpoxTvqavX0qswYAwNLWpu0qT6kXObnoNZKRuc
WH2rTlwjl70T8S0FtnwBvLDQ5D/y96RgC7QDVYTB1T+CM2dDyC3mnvuhJEpX3XV9
L25GjgztDtHeHPWpab4/KlM+k42nSgdEktmOd4xD3FOolIMZUznXbA3LrEP1U8Fl
Op8ev2yvdI4xZNfRizBx2AeBznLY45bxmlZrEUmktrey6cD20FT26lX1R52MRdU7
o0CgI0bo9/EPIRgtB7OmJ9pa6XQ6QWPLT6bGmjkynS90zuNC11rReJ9bxir7Vokt
YrPp
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net