Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/N8mV9awJGr3UBaDAWnXM1NPXyUc.roa
File: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (raw, json)
Hash identifier: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=
Subject key identifier: 37:C9:95:F5:AC:09:1A:BD:D4:05:A0:C0:5A:75:CC:D4:D3:D7:C9:47
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 019423D6F70AFB78FA872E96ED72CACFF8C9
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/N8mV9awJGr3UBaDAWnXM1NPXyUc.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39583
IP address blocks: 185.7.4.0/22 maxlen: 22
195.244.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f7:0a:fb:78:fa:87:2e:96:ed:72:ca:cf:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37c995f5ac091abdd405a0c05a75ccd4d3d7c947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:44:90:5e:b4:58:06:6d:5b:31:d9:f6:af:
ba:7c:60:9e:9f:d7:1f:d3:45:70:b5:ba:d4:82:7d:
aa:da:6b:0d:01:a0:5e:2c:2c:28:f2:b8:2c:6a:6f:
3b:cf:2b:a7:bb:fb:5f:e6:bb:f8:17:52:7c:d1:00:
7e:9a:de:e9:41:2a:8e:e9:5b:03:a5:ff:77:1b:db:
73:dd:f1:62:94:e8:de:1b:a6:9c:4a:68:53:9f:ea:
90:04:1c:64:7a:6e:0d:51:11:65:87:66:19:3c:d0:
6a:fa:56:10:a0:dc:16:ad:d3:65:8e:37:21:93:49:
64:b7:99:3c:64:af:1d:a9:4c:9c:45:0f:9b:6c:88:
93:88:94:93:e1:f5:2e:ed:83:c5:b0:37:68:1d:43:
98:62:25:47:a0:93:8e:9f:5f:82:1d:5a:af:0e:04:
ad:c2:76:e2:d1:01:ef:a9:b4:4b:5c:93:a3:4e:4e:
3b:c5:ff:0e:11:e0:87:de:47:c2:53:86:25:14:68:
ff:b4:16:c7:7b:03:f2:a5:f6:29:6f:ca:03:a6:d2:
a6:e1:41:80:30:fc:98:a0:86:c4:f8:88:55:76:72:
d0:97:39:e0:43:95:83:ef:68:f9:46:7e:aa:24:08:
66:be:a6:2f:86:7c:64:a2:80:44:16:ac:42:02:f7:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C9:95:F5:AC:09:1A:BD:D4:05:A0:C0:5A:75:CC:D4:D3:D7:C9:47
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/N8mV9awJGr3UBaDAWnXM1NPXyUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.4.0/22
195.244.20.0/23
Signature Algorithm: sha256WithRSAEncryption
47:c8:44:95:72:76:4c:d5:10:4c:e8:c3:34:5e:89:d9:8c:a1:
b1:a0:b1:e3:b7:eb:96:8f:05:7b:3d:3c:cb:f5:3b:56:9e:85:
96:80:88:20:8d:6f:fc:29:b9:a2:1a:6a:57:be:5b:0c:16:8d:
12:da:db:e6:63:16:29:ee:91:17:c3:8c:92:41:2b:9e:ba:44:
1b:c9:df:5b:24:28:12:c0:11:0e:5e:13:c7:06:ac:b5:16:b7:
31:cd:8b:fb:21:de:69:b5:7d:f7:a4:ce:4b:a7:5f:9f:fb:3b:
0f:2a:39:a2:a4:2b:6a:ee:6d:86:75:49:7c:21:f2:d9:2c:f4:
1a:c4:66:36:ab:78:a0:03:04:f8:49:cb:d6:62:60:f1:87:de:
3c:ef:06:c6:a2:02:c9:99:56:f0:6f:de:a2:cd:be:1d:44:59:
ad:02:43:1a:99:d7:5a:69:ec:01:e9:86:e7:8b:04:60:e1:3a:
02:02:6a:ff:a5:6c:9b:6e:08:d9:9c:13:f7:86:40:61:b2:a2:
47:ec:b1:33:e3:2b:c8:ef:62:f2:e2:ea:b4:23:29:19:65:65:
2e:ea:79:5c:32:68:da:ca:52:cc:81:fe:da:68:5d:b9:27:fd:
04:6d:fe:1f:72:df:1f:ab:0e:d5:dd:8c:80:30:b4:c3:81:c5:
a6:26:59:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1vcK+3j6hy6W7XLKz/jJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4
NzFmNzgwHhcNMjUwMTAxMjE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2M5OTVmNWFjMDkxYWJkZDQwNWEwYzA1YTc1Y2NkNGQzZDdjOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E5EkF60WAZtWzHZ9q+6fGCen9cf
00VwtbrUgn2q2msNAaBeLCwo8rgsam87zyunu/tf5rv4F1J80QB+mt7pQSqO6VsD
pf93G9tz3fFilOjeG6acSmhTn+qQBBxkem4NURFlh2YZPNBq+lYQoNwWrdNljjch
k0lkt5k8ZK8dqUycRQ+bbIiTiJST4fUu7YPFsDdoHUOYYiVHoJOOn1+CHVqvDgSt
wnbi0QHvqbRLXJOjTk47xf8OEeCH3kfCU4YlFGj/tBbHewPypfYpb8oDptKm4UGA
MPyYoIbE+IhVdnLQlzngQ5WD72j5Rn6qJAhmvqYvhnxkooBEFqxCAvcuZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDfJlfWsCRq91AWgwFp1zNTT18lHMB8GA1UdIwQY
MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt
YWVhMjUyZGM2M2IzLzEvTjhtVjlhd0pHcjNVQmFEQVduWE0xTlBYeVVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz
LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQcEAwQB
w/QUMA0GCSqGSIb3DQEBCwUAA4IBAQBHyESVcnZM1RBM6MM0XonZjKGxoLHjt+uW
jwV7PTzL9TtWnoWWgIggjW/8KbmiGmpXvlsMFo0S2tvmYxYp7pEXw4ySQSueukQb
yd9bJCgSwBEOXhPHBqy1FrcxzYv7Id5ptX33pM5Lp1+f+zsPKjmipCtq7m2GdUl8
IfLZLPQaxGY2q3igAwT4ScvWYmDxh9487wbGogLJmVbwb96izb4dRFmtAkMamdda
aewB6YbniwRg4ToCAmr/pWybbgjZnBP3hkBhsqJH7LEz4yvI72Ly4uq0IykZZWUu
6nlcMmjaylLMgf7aaF25J/0Ebf4fct8fqw7V3YyAMLTDgcWmJlkT
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net