Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9WCjJCdWJm0W14hLRVVjEmWGSlc.roa
File: 9WCjJCdWJm0W14hLRVVjEmWGSlc.roa (raw, json)
Hash identifier: iF/jbjR1rJmWbhMJ6VA3SjZyYONEjyZolETXauUosYE=
Subject key identifier: F5:60:A3:24:27:56:26:6D:16:D7:88:4B:45:55:63:12:65:86:4A:57
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01960FD5C57735455A76D8412AF0C42F78EC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9WCjJCdWJm0W14hLRVVjEmWGSlc.roa
Signing time: Mon 07 Apr 2025 10:39:49 +0000
ROA not before: Mon 07 Apr 2025 10:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34304
IP address blocks: 80.96.99.0/24 maxlen: 24
80.96.106.0/24 maxlen: 24
81.180.172.0/23 maxlen: 23
81.180.252.0/23 maxlen: 23
81.181.173.0/24 maxlen: 24
85.122.84.0/24 maxlen: 24
194.102.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:d5:c5:77:35:45:5a:76:d8:41:2a:f0:c4:2f:78:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 7 10:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f560a3242756266d16d7884b4555631265864a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:e2:e3:81:60:ca:b2:e5:e1:21:62:73:b8:
f8:b0:c5:8f:5d:9e:8b:96:6f:56:57:af:8c:68:ee:
2d:21:92:5a:ed:42:ad:c2:22:5f:6d:d1:21:08:e6:
7b:24:ee:1a:cc:46:d8:26:62:98:6f:fe:c1:f8:77:
99:41:cc:14:a2:05:bc:4d:f9:e0:22:69:8e:69:f1:
b8:60:8b:ee:b0:8f:53:da:f7:7d:64:03:49:15:70:
0a:e2:47:e4:39:9e:af:21:1e:21:b6:ca:c3:a3:4a:
15:7e:d6:11:6e:e3:87:61:f6:67:08:38:d9:e4:9f:
5a:98:96:7b:fd:5d:9b:56:ba:c9:06:af:4d:0e:64:
d6:83:9a:63:70:aa:26:f2:23:65:27:f9:e0:16:ab:
97:d5:a8:75:d1:24:09:23:73:16:78:be:02:e8:f3:
1e:6c:e0:4f:02:8c:c0:0f:36:53:6a:bf:8d:98:6d:
62:7a:71:ad:4c:c7:4b:fd:e8:ff:be:ec:fc:74:5b:
f3:19:65:03:ce:95:91:fc:ed:b8:8c:05:cf:24:c9:
de:03:e0:33:c2:c8:0f:dc:53:a0:c1:36:8f:0e:aa:
fa:bb:42:3a:1a:80:a2:d2:7d:eb:7c:3f:a9:7b:c6:
ab:5a:92:64:6f:db:52:32:c0:d5:a0:79:33:ca:e6:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:60:A3:24:27:56:26:6D:16:D7:88:4B:45:55:63:12:65:86:4A:57
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9WCjJCdWJm0W14hLRVVjEmWGSlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
80.96.106.0/24
81.180.172.0/23
81.180.252.0/23
81.181.173.0/24
85.122.84.0/24
194.102.217.0/24
Signature Algorithm: sha256WithRSAEncryption
19:86:e7:3b:ca:8c:6c:91:80:aa:c8:ff:c3:e4:f3:3b:87:b2:
e1:d2:33:af:4e:a2:d2:e0:97:e2:19:ef:d5:ea:c0:0f:df:52:
4c:94:9f:d6:5a:a7:4c:1e:06:b6:45:0f:b9:ed:90:12:1c:3b:
2d:20:5c:e5:a9:c4:8c:ba:e9:8d:c3:66:da:3b:58:47:ee:f6:
8e:44:2a:74:e8:a0:7d:0c:b3:a7:0f:63:20:78:00:95:c9:a5:
b7:02:9d:0d:09:99:89:9c:a8:86:f4:86:2d:d7:8a:28:3c:42:
e8:d0:82:a4:4b:29:ea:8c:7f:87:76:87:fa:68:4d:17:69:0a:
8a:c9:62:cf:57:06:60:7f:b3:2d:60:54:1a:cc:47:b1:67:40:
8f:9c:a3:35:00:06:c4:75:82:73:62:70:13:28:04:eb:a7:85:
ba:ae:bf:b7:c9:92:96:8e:63:87:cc:9d:cd:a1:2d:fd:2d:35:
1f:70:5a:1c:0e:a6:ba:7b:32:8c:44:36:87:bc:08:5b:4c:7a:
cd:39:68:dd:d7:57:54:9f:fd:82:fa:63:0f:db:14:1b:88:2d:
a1:e9:0a:48:fc:24:25:a0:17:bd:e7:1a:f5:8b:9f:c9:3e:1c:
ff:67:b0:d1:ee:ab:a4:de:56:fb:19:7d:79:23:fd:82:ac:ce:
bf:cb:77:ac
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZYP1cV3NUVadthBKvDEL3jsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwNDA3MTAzOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTYwYTMyNDI3NTYyNjZkMTZkNzg4NGI0NTU1NjMxMjY1ODY0YTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjPi44FgyrLl4SFic7j4sMWPXZ6L
lm9WV6+MaO4tIZJa7UKtwiJfbdEhCOZ7JO4azEbYJmKYb/7B+HeZQcwUogW8Tfng
ImmOafG4YIvusI9T2vd9ZANJFXAK4kfkOZ6vIR4htsrDo0oVftYRbuOHYfZnCDjZ
5J9amJZ7/V2bVrrJBq9NDmTWg5pjcKom8iNlJ/ngFquX1ah10SQJI3MWeL4C6PMe
bOBPAozADzZTar+NmG1ienGtTMdL/ej/vuz8dFvzGWUDzpWR/O24jAXPJMneA+Az
wsgP3FOgwTaPDqr6u0I6GoCi0n3rfD+pe8arWpJkb9tSMsDVoHkzyubijwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPVgoyQnViZtFteIS0VVYxJlhkpXMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvOVdDakpDZFdKbTBXMTRoTFJWVmpFbVdHU2xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUGBjAwQA
UGBqAwQBUbSsAwQBUbT8AwQAUbWtAwQAVXpUAwQAwmbZMA0GCSqGSIb3DQEBCwUA
A4IBAQAZhuc7yoxskYCqyP/D5PM7h7Lh0jOvTqLS4JfiGe/V6sAP31JMlJ/WWqdM
Hga2RQ+57ZASHDstIFzlqcSMuumNw2baO1hH7vaORCp06KB9DLOnD2MgeACVyaW3
Ap0NCZmJnKiG9IYt14ooPELo0IKkSynqjH+Hdof6aE0XaQqKyWLPVwZgf7MtYFQa
zEexZ0CPnKM1AAbEdYJzYnATKATrp4W6rr+3yZKWjmOHzJ3NoS39LTUfcFocDqa6
ezKMRDaHvAhbTHrNOWjd11dUn/2C+mMP2xQbiC2h6QpI/CQloBe95xr1i5/JPhz/
Z7DR7quk3lb7GX15I/2CrM6/y3es
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net