Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/j3xZulLfDMJveD2iaoz5v1QjB24.roa
File: j3xZulLfDMJveD2iaoz5v1QjB24.roa (raw, json)
Hash identifier: yTwhWFan3ElJaAmuiXamCJhTUnMKqmaxGR0I3vacTVM=
Subject key identifier: 8F:7C:59:BA:52:DF:0C:C2:6F:78:3D:A2:6A:8C:F9:BF:54:23:07:6E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019628C8A4A8135C9B7784CFFF329E61871A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/j3xZulLfDMJveD2iaoz5v1QjB24.roa
Signing time: Sat 12 Apr 2025 06:56:00 +0000
ROA not before: Sat 12 Apr 2025 06:56:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.200.221.0/24 maxlen: 24
109.122.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:c8:a4:a8:13:5c:9b:77:84:cf:ff:32:9e:61:87:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 12 06:56:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f7c59ba52df0cc26f783da26a8cf9bf5423076e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:dc:ec:72:1c:04:01:3a:65:12:8c:04:75:
61:fb:e9:02:52:ba:2b:cf:9b:71:72:4b:4a:03:91:
b7:aa:8e:d1:e9:97:dc:0b:d0:e2:1f:ff:e2:27:67:
7d:de:19:5e:65:28:23:c4:b5:8f:85:f9:86:c5:c2:
c9:68:6b:23:fa:c2:bc:28:b7:6e:ff:7b:7a:1c:77:
e9:01:b1:b0:2e:83:8f:48:77:86:27:6a:d5:10:0c:
a9:35:f2:01:f9:91:fe:c8:65:25:35:9c:cb:35:46:
46:0b:b1:e2:35:da:6d:71:e1:84:0e:f0:48:39:83:
3b:e1:08:98:bb:40:39:02:98:5e:9c:3b:40:f3:a4:
bb:9c:22:00:a3:23:15:07:51:2d:b6:2a:0f:68:da:
c9:02:42:fc:ef:53:14:b7:b7:30:f1:f5:9d:e3:21:
c1:38:bc:bc:84:01:ec:6b:09:97:d5:cb:92:64:df:
03:e7:53:79:1b:ad:62:6c:94:34:fe:a9:e6:01:6e:
b6:d2:ed:45:c5:c0:e9:d8:fd:05:56:39:fc:8d:33:
03:da:7f:f4:bc:d8:a0:9e:59:ea:cf:24:73:55:7c:
64:67:4d:03:0c:a6:93:e9:7d:67:33:50:04:11:a2:
31:75:c9:74:40:76:22:e9:f0:7f:aa:8f:c2:b4:a6:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7C:59:BA:52:DF:0C:C2:6F:78:3D:A2:6A:8C:F9:BF:54:23:07:6E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/j3xZulLfDMJveD2iaoz5v1QjB24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f4:2f:9d:03:09:70:51:27:f7:60:31:32:8d:f1:bb:2b:75:
e3:bb:1b:3b:15:b6:86:ed:40:3e:90:e4:e0:e8:d4:56:7c:1d:
ad:c5:6d:a0:2c:63:77:d8:a6:dc:0f:92:17:8e:bd:6c:fe:72:
bd:4b:58:60:54:9b:a9:bd:6f:d8:5b:f2:e7:15:ba:fa:45:a9:
31:27:8c:f6:7a:e5:d9:8a:12:b4:47:18:2e:c7:f4:f3:dc:a9:
f1:1a:e3:61:b0:a3:19:5a:3a:07:d0:7b:ef:23:0b:9f:79:6c:
eb:48:bb:7c:22:99:3f:74:79:ca:b7:fb:94:96:3b:28:d0:9a:
7b:3c:5a:8a:eb:fc:39:da:c7:80:b0:86:35:db:be:1e:6c:e6:
5c:c4:92:3f:0b:1a:40:78:05:72:45:24:69:f0:a6:92:ef:05:
eb:c2:51:56:2f:cb:44:5a:38:42:1f:a9:c2:2c:d4:14:a7:f6:
e5:15:4a:65:ec:23:09:6e:b7:83:bb:a2:94:78:f6:cd:8b:81:
fb:c1:bb:fc:38:98:8e:5f:22:a1:72:0e:fe:54:45:5c:aa:e0:
45:a6:38:ab:93:87:9b:0f:65:1b:6d:fa:3f:1f:b0:c0:c0:06:
00:fa:0a:a6:f6:32:f3:62:fd:3b:a5:99:fe:30:aa:27:59:7e:
90:6d:e5:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYoyKSoE1ybd4TP/zKeYYcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwNDEyMDY1NjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjdjNTliYTUyZGYwY2MyNmY3ODNkYTI2YThjZjliZjU0MjMwNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QXc7HIcBAE6ZRKMBHVh++kCUror
z5txcktKA5G3qo7R6ZfcC9DiH//iJ2d93hleZSgjxLWPhfmGxcLJaGsj+sK8KLdu
/3t6HHfpAbGwLoOPSHeGJ2rVEAypNfIB+ZH+yGUlNZzLNUZGC7HiNdptceGEDvBI
OYM74QiYu0A5AphenDtA86S7nCIAoyMVB1EttioPaNrJAkL871MUt7cw8fWd4yHB
OLy8hAHsawmX1cuSZN8D51N5G61ibJQ0/qnmAW620u1FxcDp2P0FVjn8jTMD2n/0
vNignlnqzyRzVXxkZ00DDKaT6X1nM1AEEaIxdcl0QHYi6fB/qo/CtKaUZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI98WbpS3wzCb3g9omqM+b9UIwduMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvajN4WnVsTGZETUp2ZUQyaWFvejV2MVFqQjI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8jdAwQA
bXoqMA0GCSqGSIb3DQEBCwUAA4IBAQBB9C+dAwlwUSf3YDEyjfG7K3Xjuxs7FbaG
7UA+kOTg6NRWfB2txW2gLGN32KbcD5IXjr1s/nK9S1hgVJupvW/YW/LnFbr6Rakx
J4z2euXZihK0Rxgux/Tz3KnxGuNhsKMZWjoH0HvvIwufeWzrSLt8Ipk/dHnKt/uU
ljso0Jp7PFqK6/w52seAsIY1274ebOZcxJI/CxpAeAVyRSRp8KaS7wXrwlFWL8tE
WjhCH6nCLNQUp/blFUpl7CMJbreDu6KUePbNi4H7wbv8OJiOXyKhcg7+VEVcquBF
pjirk4ebD2Ubbfo/H7DAwAYA+gqm9jLzYv07pZn+MKonWX6QbeXq
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net