Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa
File: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (raw, json)
Hash identifier: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=
Subject key identifier: 8C:D9:AB:FE:E0:39:22:4D:5E:BF:59:22:B5:2D:C7:D1:74:5F:4A:CD
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 0194266B48F6452F6550A9BE645C87BFF968
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201250
IP address blocks: 213.59.132.0/22 maxlen: 22
213.59.155.0/24 maxlen: 24
213.59.158.0/24 maxlen: 24
217.107.196.0/22 maxlen: 22
217.107.197.0/24 maxlen: 24
217.107.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:48:f6:45:2f:65:50:a9:be:64:5c:87:bf:f9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cd9abfee039224d5ebf5922b52dc7d1745f4acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e5:32:8a:86:70:46:2f:8e:4a:8d:4e:2f:20:
75:77:fc:1b:50:41:91:b1:48:64:87:15:54:b5:e1:
a9:da:c2:21:32:0b:77:46:06:a7:14:d5:60:a1:a3:
6c:63:5d:1c:61:05:cb:ee:d4:b6:14:cf:ff:67:ab:
1a:59:79:06:3e:3c:7f:07:16:32:12:57:87:39:37:
90:77:3c:cd:7f:1a:85:9b:39:35:9b:01:b3:09:b4:
e8:ef:41:64:13:2d:a0:b1:e7:ff:d8:a7:03:0e:bd:
17:43:36:58:b9:d6:5c:c1:5e:e3:ea:60:6f:77:a3:
26:8f:41:41:81:f1:ec:68:3a:f7:0c:63:ea:67:b1:
ef:4f:68:74:a0:60:a8:ec:0c:17:aa:f9:f3:62:20:
e8:83:f6:0e:a7:c5:ac:42:ee:59:4a:c0:f3:bc:25:
50:37:a3:b8:bb:75:c3:47:de:44:8e:a9:b3:92:1c:
f9:27:2d:3e:7d:14:5b:a5:d3:99:cd:68:56:1d:f0:
24:af:2b:0b:df:7f:99:8a:b2:63:c2:32:a4:20:70:
57:3d:ef:63:0d:0f:51:ed:08:8e:df:8f:1f:77:f8:
b5:88:88:20:e0:0f:80:8c:99:23:a0:0a:a4:56:3e:
85:1b:97:f7:61:32:7d:53:c9:90:b7:45:d7:df:74:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:AB:FE:E0:39:22:4D:5E:BF:59:22:B5:2D:C7:D1:74:5F:4A:CD
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.132.0/22
213.59.155.0/24
213.59.158.0/24
217.107.196.0/22
Signature Algorithm: sha256WithRSAEncryption
41:28:8f:fc:c9:3a:08:7e:dc:b2:c5:e0:bc:23:e6:d1:1f:52:
0d:31:6f:ee:df:91:ca:34:d8:9e:ed:86:ec:8d:09:bf:a9:bd:
4a:6d:54:0f:34:ca:b6:dd:96:67:fd:fe:42:0e:c1:09:44:46:
2b:ed:0b:54:8c:b5:20:86:ed:04:cc:b6:de:4f:dd:59:64:33:
86:1a:d1:2a:5b:af:0e:b2:1d:e1:fc:f9:22:fc:cd:d6:20:8d:
d4:55:34:1e:54:f1:3e:33:86:da:9d:c9:b7:af:db:bf:9d:69:
21:82:46:75:d2:b5:f1:6c:9e:ed:c5:ec:1f:7f:65:76:0b:3f:
d7:49:94:fe:10:52:3b:63:14:1d:3c:96:0f:70:c8:ae:4f:de:
f5:93:36:4d:37:91:a5:b2:dc:cd:22:32:71:1b:28:db:50:fc:
05:0f:86:a0:85:1e:36:4f:f5:a3:22:53:f6:4d:75:68:b8:00:
51:93:ed:18:10:e2:d9:f0:fb:a6:44:dd:65:cf:16:23:cf:18:
db:53:7c:23:4c:fb:18:15:25:68:cc:0f:94:1d:91:76:6e:de:
5d:75:4e:99:03:11:e7:95:6a:57:d5:55:fb:18:eb:7d:70:d4:
6d:1a:43:10:54:51:9f:d2:86:f9:3d:73:17:89:05:63:5a:fb:
48:48:45:ca
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQma0j2RS9lUKm+ZFyHv/loMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjUwMTAyMDk0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2Q5YWJmZWUwMzkyMjRkNWViZjU5MjJiNTJkYzdkMTc0NWY0YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uUyioZwRi+OSo1OLyB1d/wbUEGR
sUhkhxVUteGp2sIhMgt3RganFNVgoaNsY10cYQXL7tS2FM//Z6saWXkGPjx/BxYy
EleHOTeQdzzNfxqFmzk1mwGzCbTo70FkEy2gsef/2KcDDr0XQzZYudZcwV7j6mBv
d6Mmj0FBgfHsaDr3DGPqZ7HvT2h0oGCo7AwXqvnzYiDog/YOp8WsQu5ZSsDzvCVQ
N6O4u3XDR95Ejqmzkhz5Jy0+fRRbpdOZzWhWHfAkrysL33+ZirJjwjKkIHBXPe9j
DQ9R7QiO348fd/i1iIgg4A+AjJkjoAqkVj6FG5f3YTJ9U8mQt0XX33RFkwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIzZq/7gOSJNXr9ZIrUtx9F0X0rNMB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEvak5tcl91QTVJazFldjFraXRTM0gwWFJmU3MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi
LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQC1TuEAwQA
1TubAwQA1TueAwQC2WvEMA0GCSqGSIb3DQEBCwUAA4IBAQBBKI/8yToIftyyxeC8
I+bRH1INMW/u35HKNNie7YbsjQm/qb1KbVQPNMq23ZZn/f5CDsEJREYr7QtUjLUg
hu0EzLbeT91ZZDOGGtEqW68Osh3h/Pki/M3WII3UVTQeVPE+M4bancm3r9u/nWkh
gkZ10rXxbJ7txewff2V2Cz/XSZT+EFI7YxQdPJYPcMiuT971kzZNN5GlstzNIjJx
GyjbUPwFD4aghR42T/WjIlP2TXVouABRk+0YEOLZ8PumRN1lzxYjzxjbU3wjTPsY
FSVozA+UHZF2bt5ddU6ZAxHnlWpX1VX7GOt9cNRtGkMQVFGf0ob5PXMXiQVjWvtI
SEXK
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net