Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/4GHtaL2ENr8x0dHCgzjR-2oufsc.roa
File: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (raw, json)
Hash identifier: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=
Subject key identifier: E0:61:ED:68:BD:84:36:BF:31:D1:D1:C2:83:38:D1:FB:6A:2E:7E:C7
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 019427B68AE42E557E89C6CF9A02CC07238F
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/4GHtaL2ENr8x0dHCgzjR-2oufsc.roa
Signing time: Thu 02 Jan 2025 15:51:02 +0000
ROA not before: Thu 02 Jan 2025 15:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21473
IP address blocks: 94.176.168.0/22 maxlen: 22
185.142.8.0/22 maxlen: 22
2a07:2800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8a:e4:2e:55:7e:89:c6:cf:9a:02:cc:07:23:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Jan 2 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e061ed68bd8436bf31d1d1c28338d1fb6a2e7ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:de:12:3c:71:aa:8f:cc:b5:eb:79:21:ea:7d:
23:10:f6:0f:d9:8e:22:b5:18:fc:8c:c2:51:a8:64:
84:06:9b:97:fc:56:db:5f:9d:02:8b:81:05:cf:9e:
e2:01:a2:b2:50:95:0f:3f:50:fd:79:6d:29:e8:3c:
ac:ea:68:1d:43:9c:0b:d3:6a:f5:8d:3a:41:ec:2d:
e3:26:f5:21:96:0c:9c:80:39:55:ab:20:08:04:f2:
e7:03:27:60:b4:bd:05:c7:06:94:70:3a:1f:23:e2:
c9:a3:47:03:35:ca:f4:27:9d:b6:dd:b6:b7:1e:80:
db:10:94:87:e2:6e:58:fc:55:4e:24:b3:da:d3:80:
56:fd:ac:60:37:ec:4c:e6:64:53:ed:44:63:b9:1c:
f1:ad:52:d4:9b:07:85:0e:c4:ee:f2:d8:6c:e7:ec:
6a:d1:8d:79:f5:45:2c:d1:e9:f8:df:0a:a0:72:9f:
a0:af:df:ca:8a:a5:9c:26:bf:00:2a:74:62:ec:5b:
dd:86:88:9e:4b:7c:cf:7d:0c:a6:32:fc:70:50:d1:
6f:7c:33:d8:94:e5:40:76:a8:e7:39:bb:48:1b:8d:
c5:28:3b:1a:c0:99:87:3d:c9:56:2f:d5:31:1e:e2:
be:58:e8:e8:c4:a6:6f:d1:ff:16:68:82:3d:0b:53:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:61:ED:68:BD:84:36:BF:31:D1:D1:C2:83:38:D1:FB:6A:2E:7E:C7
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/4GHtaL2ENr8x0dHCgzjR-2oufsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.168.0/22
185.142.8.0/22
IPv6:
2a07:2800::/29
Signature Algorithm: sha256WithRSAEncryption
01:b3:1a:02:11:97:fc:a3:d0:c3:9d:19:94:da:3e:47:50:11:
d9:e0:2d:f2:4d:3c:be:a1:9e:ed:07:b3:7e:25:b9:c6:44:d6:
5d:7a:7d:5f:50:70:ac:c7:40:49:fc:58:5e:e6:39:c4:97:69:
d4:0a:5b:49:e0:f3:e1:67:03:3b:9d:84:bb:0a:b3:7a:24:45:
d3:99:de:90:45:8a:f9:9a:7f:72:04:b9:c6:32:ce:04:61:9b:
1f:ee:36:c8:c0:65:70:57:eb:4a:58:dc:a5:f4:8d:a2:cc:bf:
be:5d:3b:e7:2d:54:d2:da:66:7a:71:29:61:06:3b:1e:f9:9e:
b0:78:62:f9:a6:02:35:b0:80:b8:ab:9c:0f:fb:b3:3f:b5:18:
1c:f9:db:ba:fb:05:0e:bc:ef:52:d3:47:94:2b:b8:3c:0e:0b:
a5:f4:a1:bb:fb:11:79:14:21:66:62:b1:e4:be:92:b4:b6:8b:
49:6d:f2:50:55:9f:53:fe:db:81:01:f6:5d:f3:2a:10:80:9d:
6b:6d:12:72:11:67:9c:a5:eb:b2:cd:94:2e:ab:61:76:43:3a:
46:c1:4a:ef:dc:cf:0f:43:35:eb:58:9c:47:ea:97:89:fb:e2:
74:d0:b4:2c:2e:52:33:e0:9d:d6:23:5c:34:d1:8f:4c:74:ce:
ad:0a:d5:c6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQntorkLlV+icbPmgLMByOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx
NGE0ZjAwHhcNMjUwMTAyMTU1MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDYxZWQ2OGJkODQzNmJmMzFkMWQxYzI4MzM4ZDFmYjZhMmU3ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/N4SPHGqj8y163kh6n0jEPYP2Y4i
tRj8jMJRqGSEBpuX/FbbX50Ci4EFz57iAaKyUJUPP1D9eW0p6Dys6mgdQ5wL02r1
jTpB7C3jJvUhlgycgDlVqyAIBPLnAydgtL0FxwaUcDofI+LJo0cDNcr0J5223ba3
HoDbEJSH4m5Y/FVOJLPa04BW/axgN+xM5mRT7URjuRzxrVLUmweFDsTu8ths5+xq
0Y159UUs0en43wqgcp+gr9/KiqWcJr8AKnRi7FvdhoieS3zPfQymMvxwUNFvfDPY
lOVAdqjnObtIG43FKDsawJmHPclWL9UxHuK+WOjoxKZv0f8WaII9C1Mk1wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOBh7Wi9hDa/MdHRwoM40ftqLn7HMB8GA1UdIwQY
MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt
YTQxNTI1NThkMThjLzEvNEdIdGFMMkVOcjh4MGRIQ2d6alItMm91ZnNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj
LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCXrCoAwQC
uY4IMA0EAgACMAcDBQMqBygAMA0GCSqGSIb3DQEBCwUAA4IBAQABsxoCEZf8o9DD
nRmU2j5HUBHZ4C3yTTy+oZ7tB7N+JbnGRNZden1fUHCsx0BJ/Fhe5jnEl2nUCltJ
4PPhZwM7nYS7CrN6JEXTmd6QRYr5mn9yBLnGMs4EYZsf7jbIwGVwV+tKWNyl9I2i
zL++XTvnLVTS2mZ6cSlhBjse+Z6weGL5pgI1sIC4q5wP+7M/tRgc+du6+wUOvO9S
00eUK7g8Dgul9KG7+xF5FCFmYrHkvpK0totJbfJQVZ9T/tuBAfZd8yoQgJ1rbRJy
EWecpeuyzZQuq2F2QzpGwUrv3M8PQzXrWJxH6peJ++J00LQsLlIz4J3WI1w00Y9M
dM6tCtXG
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net