Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/T2MgSfJhA--awsv_yLzhSgCTR5o.roa
File: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (raw, json)
Hash identifier: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=
Subject key identifier: 4F:63:20:49:F2:61:03:EF:9A:C2:CB:FF:C8:BC:E1:4A:00:93:47:9A
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 01942521E5D4F8FD7FDC8C99DF25A83E4840
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/T2MgSfJhA--awsv_yLzhSgCTR5o.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207464
IP address blocks: 84.214.116.0/22 maxlen: 22
84.214.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e5:d4:f8:fd:7f:dc:8c:99:df:25:a8:3e:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f632049f26103ef9ac2cbffc8bce14a0093479a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:1f:82:3a:f7:d2:37:11:1d:f5:e0:f4:b1:
c3:a5:aa:e1:00:1d:d3:4c:61:77:90:e2:ad:be:ca:
f7:1b:24:a6:71:01:1d:21:d7:c1:6d:5a:01:a5:82:
7c:56:7f:07:4d:8f:6e:90:8b:96:f2:63:a6:01:34:
4f:4f:1c:35:92:4b:17:44:6c:7e:49:bb:77:06:e5:
fc:9c:21:68:81:52:43:4a:92:67:4e:2a:e0:f4:73:
5e:79:17:06:d0:b5:f5:fe:ee:f5:41:97:03:4d:73:
9a:83:bb:4a:e9:f6:79:17:de:e1:b0:b9:8c:92:14:
d6:df:db:46:08:ec:d0:5c:5a:f3:c8:76:8b:27:b9:
2b:02:75:60:6a:36:f1:99:b1:19:2f:11:93:53:f2:
12:44:f5:02:a0:97:35:21:df:c2:c7:3f:a0:69:de:
1a:80:b6:e8:c5:de:83:0a:2a:53:38:4a:67:0b:12:
4c:0c:12:cd:38:c1:57:92:5f:73:45:e0:7e:7c:5f:
e6:41:59:b5:3d:0e:72:df:23:49:03:4c:5d:0e:6b:
9e:f2:13:8c:16:f0:b1:af:ec:74:6f:c1:5d:90:20:
e2:dc:c4:0a:5b:9a:b3:af:62:20:b9:17:d6:97:8d:
4e:d4:ee:99:f1:d4:e7:0d:9b:8d:f7:71:24:f6:be:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:20:49:F2:61:03:EF:9A:C2:CB:FF:C8:BC:E1:4A:00:93:47:9A
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/T2MgSfJhA--awsv_yLzhSgCTR5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.214.116.0/22
84.214.232.0/22
Signature Algorithm: sha256WithRSAEncryption
15:46:66:ad:5c:5e:51:1b:a5:f4:b1:a9:46:fc:06:fc:f1:ab:
91:5f:3d:56:ef:c7:55:60:6a:d4:da:10:2f:59:f0:d2:c4:5e:
a6:dc:92:b4:0f:a2:f9:39:7e:84:cc:df:1e:a2:04:9d:8d:33:
57:a4:53:29:ff:f3:28:e4:c1:3e:85:5f:69:b0:ba:47:a1:27:
80:c0:93:74:b0:1d:45:ff:76:5d:61:ee:6f:d3:65:93:4b:b2:
ef:fb:af:2f:5d:8d:6f:4e:ac:ce:0a:d9:49:06:29:27:30:e9:
65:1a:28:88:67:86:cf:6b:e3:74:10:33:01:01:5c:98:f3:3d:
6e:3f:c2:10:4c:e4:4b:e5:44:22:64:2c:3b:af:72:aa:7d:06:
92:8c:fd:f0:86:be:ab:70:e5:9b:0d:49:f2:cb:d8:59:c1:2a:
42:b1:95:12:02:3e:20:aa:ec:be:0b:84:b8:c8:08:84:f3:ff:
fe:23:ae:f2:2c:f0:82:c5:7d:8c:c9:21:95:b8:3d:d7:e2:36:
f3:1e:d5:e3:3c:35:f3:34:b7:7a:e5:3e:3a:f0:f3:9e:a3:e1:
09:d1:03:4e:a3:92:1a:3d:d2:07:8f:b8:7d:da:3d:b9:8d:9d:
98:ef:35:e8:ef:0f:ab:b6:8b:70:cf:74:ab:18:a4:1d:11:92:
61:70:4b:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIeXU+P1/3IyZ3yWoPkhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0
Y2Y0NTYwHhcNMjUwMTAyMDM0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjYzMjA0OWYyNjEwM2VmOWFjMmNiZmZjOGJjZTE0YTAwOTM0NzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCcfgjr30jcRHfXg9LHDparhAB3T
TGF3kOKtvsr3GySmcQEdIdfBbVoBpYJ8Vn8HTY9ukIuW8mOmATRPTxw1kksXRGx+
Sbt3BuX8nCFogVJDSpJnTirg9HNeeRcG0LX1/u71QZcDTXOag7tK6fZ5F97hsLmM
khTW39tGCOzQXFrzyHaLJ7krAnVgajbxmbEZLxGTU/ISRPUCoJc1Id/Cxz+gad4a
gLboxd6DCipTOEpnCxJMDBLNOMFXkl9zReB+fF/mQVm1PQ5y3yNJA0xdDmue8hOM
FvCxr+x0b8FdkCDi3MQKW5qzr2IguRfWl41O1O6Z8dTnDZuN93Ek9r6PFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE9jIEnyYQPvmsLL/8i84UoAk0eaMB8GA1UdIwQY
MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt
YjlmMjk4YTc5OGU0LzEvVDJNZ1NmSmhBLS1hd3N2X3lMemhTZ0NUUjVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0
LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVNZ0AwQC
VNboMA0GCSqGSIb3DQEBCwUAA4IBAQAVRmatXF5RG6X0salG/Ab88auRXz1W78dV
YGrU2hAvWfDSxF6m3JK0D6L5OX6EzN8eogSdjTNXpFMp//Mo5ME+hV9psLpHoSeA
wJN0sB1F/3ZdYe5v02WTS7Lv+68vXY1vTqzOCtlJBiknMOllGiiIZ4bPa+N0EDMB
AVyY8z1uP8IQTORL5UQiZCw7r3KqfQaSjP3whr6rcOWbDUnyy9hZwSpCsZUSAj4g
quy+C4S4yAiE8//+I67yLPCCxX2MySGVuD3X4jbzHtXjPDXzNLd65T468POeo+EJ
0QNOo5IaPdIHj7h92j25jZ2Y7zXo7w+rtotwz3SrGKQdEZJhcEsH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net