Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa
File: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (raw, json)
Hash identifier: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=
Subject key identifier: F8:EA:B5:FB:88:45:E3:20:9C:5D:9A:6C:24:60:EE:B2:3F:E1:57:3E
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 0194266B48BAC5F51CBE41A52BA79FBF0EDA
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201123
IP address blocks: 81.177.192.0/24 maxlen: 24
213.59.128.0/22 maxlen: 22
213.59.151.0/24 maxlen: 24
213.59.152.0/23 maxlen: 23
213.59.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:48:ba:c5:f5:1c:be:41:a5:2b:a7:9f:bf:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8eab5fb8845e3209c5d9a6c2460eeb23fe1573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:b2:ee:51:28:df:3e:05:8c:da:74:a1:b5:
3f:95:f0:e4:68:3c:39:52:a0:7b:4d:70:1a:7a:9f:
b2:47:7a:ab:55:38:50:a9:e7:51:67:cd:14:51:e9:
94:d3:d8:36:8b:94:3d:f1:1f:55:a0:5a:43:f6:da:
04:16:d6:a0:64:82:da:d3:d8:5b:e8:dc:22:f5:2b:
cf:3d:f8:7a:10:ee:43:89:48:0d:fc:38:d2:57:8a:
08:3b:d7:a4:39:02:f1:f5:90:0b:e3:33:0b:f2:6b:
87:0c:cc:45:4c:11:b1:3f:5f:f7:46:5d:22:78:3e:
a2:48:3b:c9:c2:21:66:75:d6:db:8f:4e:ed:3e:78:
38:d9:7f:64:c0:76:b2:68:95:d6:c4:3f:7f:ce:60:
83:45:b0:c9:8a:36:a6:62:3d:5e:a4:7c:1a:29:7b:
ec:f1:2f:91:85:8a:ed:1f:98:05:e6:53:8b:34:4a:
f5:99:0d:52:ef:6e:b1:0d:ae:57:6f:08:e2:ff:54:
77:8c:98:47:51:17:f9:81:f3:90:a6:d2:f1:4d:24:
9a:b3:5d:ae:35:3a:03:40:b6:ce:eb:5c:54:d0:48:
fa:a5:2e:56:15:ba:73:66:f6:0c:03:22:49:9d:62:
80:88:fd:75:72:fc:cb:37:c6:4d:26:24:40:fd:d8:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:B5:FB:88:45:E3:20:9C:5D:9A:6C:24:60:EE:B2:3F:E1:57:3E
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.192.0/24
213.59.128.0/22
213.59.151.0-213.59.153.255
213.59.159.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9a:64:13:87:ed:29:77:a3:6b:5a:67:40:61:f4:e4:c1:5b:
1a:8c:7a:e8:fc:62:07:e5:9c:28:95:4f:e7:fa:61:5e:1c:53:
91:08:76:6d:36:84:35:13:50:22:fa:df:8a:d2:e9:e9:f2:55:
d8:53:92:bf:b8:d6:25:c4:85:00:df:71:6e:b9:b3:be:b3:14:
a7:7b:f2:0c:b1:0d:d0:15:9f:60:71:bb:13:6d:f9:1e:f6:45:
a4:a4:cb:22:af:43:ef:04:8f:1c:1c:f3:91:b0:f7:2d:b6:eb:
7e:5b:2b:27:31:19:a7:8f:a6:3a:80:58:f7:a1:f9:32:bd:cd:
59:0e:3f:18:96:ec:85:0c:cb:1f:4e:ec:bd:e2:ad:43:8e:f9:
fe:e7:cc:70:f5:2d:3c:3b:00:52:2f:6f:e5:fc:35:2b:d3:ac:
58:5a:c6:32:5e:e6:91:d9:c8:02:d0:53:1b:3a:d4:f4:6b:fc:
7d:df:0b:47:59:25:7f:06:b5:29:8d:d1:1d:a3:34:44:3e:2f:
1b:7c:63:f5:b6:8f:68:35:f6:2a:e3:be:c2:5f:6f:64:de:af:
4d:0d:51:c4:22:d5:ad:7d:01:da:d0:d2:aa:24:d9:27:56:f9:
d3:28:20:f9:40:e7:1e:a6:bb:82:ac:77:23:be:57:b7:7d:0b:
cc:24:34:dd
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQma0i6xfUcvkGlK6efvw7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjUwMTAyMDk0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGVhYjVmYjg4NDVlMzIwOWM1ZDlhNmMyNDYwZWViMjNmZTE1NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0ey7lEo3z4FjNp0obU/lfDkaDw5
UqB7TXAaep+yR3qrVThQqedRZ80UUemU09g2i5Q98R9VoFpD9toEFtagZILa09hb
6Nwi9SvPPfh6EO5DiUgN/DjSV4oIO9ekOQLx9ZAL4zML8muHDMxFTBGxP1/3Rl0i
eD6iSDvJwiFmddbbj07tPng42X9kwHayaJXWxD9/zmCDRbDJijamYj1epHwaKXvs
8S+RhYrtH5gF5lOLNEr1mQ1S726xDa5Xbwji/1R3jJhHURf5gfOQptLxTSSas12u
NToDQLbO61xU0Ej6pS5WFbpzZvYMAyJJnWKAiP11cvzLN8ZNJiRA/dhmawIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPjqtfuIReMgnF2abCRg7rI/4Vc+MB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEvMS1PcTEtNGhGNHlDY1hacHNKR0R1c2pfaFZ6NC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTIvNGY4NTE0LTJlMjAtNDkzNS05OTVjLWEwODRmNzZjOGUy
Yi8xL2t2U3h3TC02MUd1Qkh1NVdpaGo3cWhTcDFvYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAFGxwAME
AtU7gDAMAwQA1TuXAwQB1TuYAwQA1TufMA0GCSqGSIb3DQEBCwUAA4IBAQAJmmQT
h+0pd6NrWmdAYfTkwVsajHro/GIH5ZwolU/n+mFeHFORCHZtNoQ1E1Ai+t+K0unp
8lXYU5K/uNYlxIUA33FuubO+sxSne/IMsQ3QFZ9gcbsTbfke9kWkpMsir0PvBI8c
HPORsPcttut+WysnMRmnj6Y6gFj3ofkyvc1ZDj8YluyFDMsfTuy94q1Djvn+58xw
9S08OwBSL2/l/DUr06xYWsYyXuaR2cgC0FMbOtT0a/x93wtHWSV/BrUpjdEdozRE
Pi8bfGP1to9oNfYq477CX29k3q9NDVHEItWtfQHa0NKqJNknVvnTKCD5QOcepruC
rHcjvle3fQvMJDTd
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net