Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/t2I34y0ofKpembvBe1b_-CyvIM8.roa
File: t2I34y0ofKpembvBe1b_-CyvIM8.roa (raw, json)
Hash identifier: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=
Subject key identifier: B7:62:37:E3:2D:28:7C:AA:5E:99:BB:C1:7B:56:FF:F8:2C:AF:20:CF
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 0194258F92999B826BCCAEC33F7637049536
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/t2I34y0ofKpembvBe1b_-CyvIM8.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43576
IP address blocks: 91.197.144.0/22 maxlen: 22
91.197.144.0/24 maxlen: 24
91.197.145.0/24 maxlen: 24
91.197.146.0/24 maxlen: 24
91.197.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:92:99:9b:82:6b:cc:ae:c3:3f:76:37:04:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b76237e32d287caa5e99bbc17b56fff82caf20cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:d5:bd:bd:e1:49:9f:12:bd:a7:53:0b:f6:
bd:e4:48:b2:a9:76:75:ee:92:88:cd:6d:3a:fa:c7:
c9:93:d9:67:a3:53:dc:af:a8:8e:78:56:e9:6e:a8:
9e:b3:f7:a2:6c:96:38:95:c9:0a:7d:50:8b:e8:69:
0a:ca:6b:f0:b1:42:49:9c:f4:b4:4c:0f:e2:66:58:
99:2a:ec:65:48:e8:d8:58:1e:21:f8:1e:a0:85:5f:
82:e2:1e:f7:15:9b:d6:21:75:81:74:05:aa:86:f6:
51:82:b0:34:ed:57:d8:f0:0a:cf:ef:36:b9:44:25:
3f:7e:1d:db:69:4e:5a:51:3d:cd:94:27:8b:1a:02:
0b:be:79:5b:93:27:bb:01:82:74:5b:b9:e1:e3:87:
c9:a2:c9:6a:69:94:15:3f:2f:6c:d1:d6:63:d1:e7:
76:95:79:dd:65:37:65:58:76:96:a6:24:eb:50:99:
b0:35:88:85:de:96:8e:21:24:46:7f:df:a9:9d:fc:
e4:4b:a8:80:d3:ba:e2:a3:5c:be:10:6b:75:76:cb:
b2:5a:94:57:75:a4:90:5b:27:c5:11:72:fe:e4:47:
5c:e1:a7:3c:b9:18:7f:f1:c7:22:58:d9:54:1a:47:
55:8e:db:63:d1:91:0a:13:9a:38:ba:23:4f:57:23:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:37:E3:2D:28:7C:AA:5E:99:BB:C1:7B:56:FF:F8:2C:AF:20:CF
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/t2I34y0ofKpembvBe1b_-CyvIM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.144.0/22
Signature Algorithm: sha256WithRSAEncryption
23:20:d4:01:a7:02:ed:36:30:ba:c1:1b:23:a7:d9:93:4b:72:
11:09:73:dd:17:78:e9:ed:39:79:83:3d:2d:03:71:45:49:91:
b2:7a:fa:d5:19:41:64:f6:67:61:dc:45:d3:0a:54:ba:79:13:
80:2c:a8:8b:a3:78:cf:01:f9:00:4d:ab:4f:62:90:95:60:57:
3d:df:7e:06:0a:02:5c:d0:9d:03:4b:2c:79:aa:f5:f6:7f:52:
1b:01:d8:dc:69:35:4c:e3:22:bc:31:45:01:9c:6a:f9:93:c4:
ab:47:7a:23:de:18:80:09:6b:16:d3:5b:a6:19:54:f1:55:5e:
db:e9:54:c7:3a:ec:0f:84:b2:f2:43:a1:32:79:e9:1e:1d:54:
9c:2e:29:88:b7:32:92:a9:d4:cb:2a:68:d2:c7:ea:65:5a:da:
59:e3:6f:33:23:3d:63:a5:37:28:93:e6:d0:53:60:8e:4e:2e:
3d:be:d9:7d:fc:31:07:29:0f:9d:ab:b3:a9:ef:6e:aa:84:4c:
a3:47:5c:c1:c1:f0:51:70:ce:ea:fa:b8:17:11:25:df:ee:21:
e6:36:35:fa:3c:0f:29:8c:f4:bd:8d:2d:2a:07:fe:35:f4:56:
54:20:9b:5f:cc:2d:15:69:de:f2:35:bd:ca:50:f4:5b:e7:66:
77:e6:c1:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5KZm4JrzK7DP3Y3BJU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5
NDhiM2UwHhcNMjUwMTAyMDU0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzYyMzdlMzJkMjg3Y2FhNWU5OWJiYzE3YjU2ZmZmODJjYWYyMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9/Vvb3hSZ8SvadTC/a95EiyqXZ1
7pKIzW06+sfJk9lno1Pcr6iOeFbpbqies/eibJY4lckKfVCL6GkKymvwsUJJnPS0
TA/iZliZKuxlSOjYWB4h+B6ghV+C4h73FZvWIXWBdAWqhvZRgrA07VfY8ArP7za5
RCU/fh3baU5aUT3NlCeLGgILvnlbkye7AYJ0W7nh44fJoslqaZQVPy9s0dZj0ed2
lXndZTdlWHaWpiTrUJmwNYiF3paOISRGf9+pnfzkS6iA07rio1y+EGt1dsuyWpRX
daSQWyfFEXL+5Edc4ac8uRh/8cciWNlUGkdVjttj0ZEKE5o4uiNPVyOUhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLdiN+MtKHyqXpm7wXtW//gsryDPMB8GA1UdIwQY
MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt
Y2U5ZTFiODI5NjdkLzEvdDJJMzR5MG9mS3BlbWJ2QmUxYl8tQ3l2SU04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk
LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8WQMA0G
CSqGSIb3DQEBCwUAA4IBAQAjINQBpwLtNjC6wRsjp9mTS3IRCXPdF3jp7Tl5gz0t
A3FFSZGyevrVGUFk9mdh3EXTClS6eROALKiLo3jPAfkATatPYpCVYFc9334GCgJc
0J0DSyx5qvX2f1IbAdjcaTVM4yK8MUUBnGr5k8SrR3oj3hiACWsW01umGVTxVV7b
6VTHOuwPhLLyQ6EyeekeHVScLimItzKSqdTLKmjSx+plWtpZ428zIz1jpTcok+bQ
U2COTi49vtl9/DEHKQ+dq7Op726qhEyjR1zBwfBRcM7q+rgXESXf7iHmNjX6PA8p
jPS9jS0qB/419FZUIJtfzC0Vad7yNb3KUPRb52Z35sEs
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net