Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/RgoujS8tNzc1trUClXjXdgm9GW4.roa
File: RgoujS8tNzc1trUClXjXdgm9GW4.roa (raw, json)
Hash identifier: ssh990VYVMLkS9OzvQXonmU08pFpUGjRLMlpdq2MiNA=
Subject key identifier: 46:0A:2E:8D:2F:2D:37:37:35:B6:B5:02:95:78:D7:76:09:BD:19:6E
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 0195998E88B9B59453CD7A265F3A59EC9E7C
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/RgoujS8tNzc1trUClXjXdgm9GW4.roa
Signing time: Sat 15 Mar 2025 11:26:49 +0000
ROA not before: Sat 15 Mar 2025 11:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207160
IP address blocks: 2001:67c:232c::/48 maxlen: 48
2a14:d100::/33 maxlen: 33
2a14:d100::/34 maxlen: 34
2a14:d100:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:99:8e:88:b9:b5:94:53:cd:7a:26:5f:3a:59:ec:9e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Mar 15 11:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=460a2e8d2f2d373735b6b5029578d77609bd196e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:aa:46:39:a8:07:9f:ec:2e:64:bb:29:d7:
78:51:33:4d:59:97:20:d7:04:ec:d1:32:b7:b1:27:
0b:3a:af:ac:98:b3:45:02:e4:4e:ba:86:f0:ae:a3:
09:40:d9:e6:50:87:dd:40:3b:46:f9:8e:db:87:19:
1b:a5:58:2c:76:34:93:85:b2:a7:3b:ac:de:ea:eb:
54:9d:fc:71:0d:ae:24:56:f5:25:15:49:c5:bb:83:
c0:e0:30:c3:37:9f:24:0d:1f:49:1b:5c:5b:a4:21:
30:55:82:bf:f4:6f:3c:6d:57:fb:30:50:17:41:b1:
b9:c3:ee:e4:ff:5e:96:b3:d2:51:63:09:ce:f2:3d:
f8:bf:31:73:f7:f7:f0:49:44:8d:04:fc:e6:8c:55:
3a:8e:2b:ac:49:40:2e:ce:4d:0d:f8:b8:9b:56:9a:
4f:66:ea:b1:7e:d8:77:dc:b7:38:43:e7:f4:be:f2:
c1:15:24:82:c7:8c:e0:d0:f9:39:6a:d9:7a:62:af:
96:89:64:b8:48:2f:b1:e5:2e:49:c1:c3:a5:85:d2:
88:ac:8c:b6:06:06:3f:78:4e:ab:63:44:e4:0f:1e:
89:aa:9f:37:95:7d:5c:9d:4a:d0:b4:d7:31:ed:ad:
55:15:f0:3a:91:44:78:7c:3b:5a:05:de:96:1f:8e:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0A:2E:8D:2F:2D:37:37:35:B6:B5:02:95:78:D7:76:09:BD:19:6E
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/RgoujS8tNzc1trUClXjXdgm9GW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:232c::/48
2a14:d100::/33
2a14:d100:f000::/48
Signature Algorithm: sha256WithRSAEncryption
7d:b3:6d:93:cf:28:99:d6:e4:03:99:f5:ab:ce:b3:a1:bc:04:
c7:28:25:f2:5a:1f:da:17:ed:85:83:54:3b:7a:85:5e:3e:3e:
68:c1:c5:be:f6:41:e8:60:19:f9:05:01:ec:4d:6c:fa:d5:39:
03:51:68:d7:33:a8:2c:ae:f0:63:82:c7:59:a9:23:cc:b5:2e:
64:32:73:78:6b:56:b7:05:7b:cb:b5:cc:6d:0e:c8:2a:07:bf:
3c:e5:43:f0:aa:e5:61:cb:da:36:09:ad:2f:f0:74:48:0d:8d:
92:3e:e2:23:24:5f:dc:c7:50:0a:0d:4c:3f:f0:fc:ab:bc:0f:
48:76:e1:2f:2a:a6:de:08:cc:79:60:bd:12:94:21:70:ae:09:
9f:6a:f8:2a:96:1d:4d:d4:d8:70:c8:ff:5f:69:aa:f5:45:46:
59:80:2b:98:07:6f:a3:61:2f:98:bb:61:dd:4b:bd:ac:6f:55:
4c:eb:af:94:a2:3e:e7:70:48:f5:32:75:95:4f:12:6c:4f:56:
50:07:70:05:03:43:fb:0e:89:47:f1:39:c2:4d:cb:74:6c:67:
c6:4c:e3:99:2a:51:d1:d8:7f:8a:40:34:14:99:56:f6:85:23:
7b:0c:c9:85:34:65:9d:4f:db:b8:84:79:66:d9:20:ea:3a:e6:
73:aa:d1:0e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZWZjoi5tZRTzXomXzpZ7J58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWZjZmQyODc1YWJkZjYxZTE5ZDMyNzBlYWZlMWVmZmFk
YzY2NjIwHhcNMjUwMzE1MTEyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjBhMmU4ZDJmMmQzNzM3MzViNmI1MDI5NTc4ZDc3NjA5YmQxOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm2qRjmoB5/sLmS7Kdd4UTNNWZcg
1wTs0TK3sScLOq+smLNFAuROuobwrqMJQNnmUIfdQDtG+Y7bhxkbpVgsdjSThbKn
O6ze6utUnfxxDa4kVvUlFUnFu4PA4DDDN58kDR9JG1xbpCEwVYK/9G88bVf7MFAX
QbG5w+7k/16Ws9JRYwnO8j34vzFz9/fwSUSNBPzmjFU6jiusSUAuzk0N+LibVppP
Zuqxfth33Lc4Q+f0vvLBFSSCx4zg0Pk5atl6Yq+WiWS4SC+x5S5JwcOlhdKIrIy2
BgY/eE6rY0TkDx6Jqp83lX1cnUrQtNcx7a1VFfA6kUR4fDtaBd6WH471dQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFEYKLo0vLTc3Nba1ApV413YJvRluMB8GA1UdIwQY
MBaAFPefz9KHWr32HhnTJw6v4e/63GZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEt
OTA3NzZmODRjOWI3LzEvUmdvdWpTOHROemMxdHJVQ2xYalhkZ205R1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEtOTA3NzZmODRjOWI3
LzEvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcAIAEGfCMs
AwYHKhTRAAADBwAqFNEA8AAwDQYJKoZIhvcNAQELBQADggEBAH2zbZPPKJnW5AOZ
9avOs6G8BMcoJfJaH9oX7YWDVDt6hV4+PmjBxb72QehgGfkFAexNbPrVOQNRaNcz
qCyu8GOCx1mpI8y1LmQyc3hrVrcFe8u1zG0OyCoHvzzlQ/Cq5WHL2jYJrS/wdEgN
jZI+4iMkX9zHUAoNTD/w/Ku8D0h24S8qpt4IzHlgvRKUIXCuCZ9q+CqWHU3U2HDI
/19pqvVFRlmAK5gHb6NhL5i7Yd1LvaxvVUzrr5SiPudwSPUydZVPEmxPVlAHcAUD
Q/sOiUfxOcJNy3RsZ8ZM45kqUdHYf4pANBSZVvaFI3sMyYU0ZZ1P27iEeWbZIOo6
5nOq0Q4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net