Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/mNQNg6ZKdlLQ3NqiFB_KrbCNOcU.roa
File: mNQNg6ZKdlLQ3NqiFB_KrbCNOcU.roa (raw, json)
Hash identifier: gKdxeREIFQpXJfwZxhNKp4PjlbYyI4ZztcF8FLwtBh4=
Subject key identifier: 98:D4:0D:83:A6:4A:76:52:D0:DC:DA:A2:14:1F:CA:AD:B0:8D:39:C5
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0195C6E93FD937B2228D6C25332641C4B8C6
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/mNQNg6ZKdlLQ3NqiFB_KrbCNOcU.roa
Signing time: Mon 24 Mar 2025 06:48:49 +0000
ROA not before: Mon 24 Mar 2025 06:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.251.22.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:e9:3f:d9:37:b2:22:8d:6c:25:33:26:41:c4:b8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 24 06:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98d40d83a64a7652d0dcdaa2141fcaadb08d39c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:c2:69:41:df:08:a7:be:98:d2:88:bc:07:
37:05:c3:61:79:d6:eb:4d:2f:e6:61:40:8b:83:7b:
54:89:0c:b2:71:de:66:a3:df:28:e4:47:94:12:c3:
84:bf:5c:1e:78:6e:13:08:50:ed:43:14:4e:6b:dc:
75:ba:15:cc:48:cf:54:7a:ab:b6:12:1a:aa:0c:de:
58:cc:2a:aa:c1:2f:09:83:a3:b2:04:2f:46:95:c0:
56:8a:c8:60:f8:ca:b6:a8:3e:bd:92:38:f9:62:5f:
05:90:8c:ee:d0:04:72:f4:9f:0a:15:c2:04:59:9e:
96:cd:c8:e7:f7:e9:ee:d4:11:09:b7:e1:5e:83:f5:
00:a1:9e:83:1b:e8:ea:0d:8b:da:cc:bd:b6:48:da:
35:18:5e:a1:8e:42:b8:67:c5:3f:2d:77:d1:1d:f3:
1e:b7:48:9d:8d:c4:58:f0:d7:2e:c7:45:ff:a4:d6:
ff:69:98:3a:f6:fb:6a:a9:a4:d1:6d:88:56:18:02:
f1:23:91:0b:d3:7d:9b:6f:00:b7:62:8a:ef:89:63:
ad:06:41:41:bc:40:f1:be:67:bd:7b:01:bb:a7:da:
15:c0:ab:e3:83:31:a0:22:d5:44:2b:67:7c:68:19:
90:01:48:ff:97:7c:20:af:92:f3:37:e2:b0:6a:6b:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:0D:83:A6:4A:76:52:D0:DC:DA:A2:14:1F:CA:AD:B0:8D:39:C5
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/mNQNg6ZKdlLQ3NqiFB_KrbCNOcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.22.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b0:69:2c:14:43:ce:12:2b:45:c1:91:8d:4b:13:27:18:59:
0d:0e:30:b6:91:5f:a5:3a:37:14:c3:21:15:2e:54:ce:c7:cf:
47:76:1c:05:9a:91:6d:76:63:2b:b3:95:99:ec:6f:f7:b2:b8:
ef:3a:6c:2e:6e:51:6f:db:de:9a:ad:9a:01:09:6c:0b:31:45:
e9:32:85:71:1d:14:1f:91:15:64:c1:ff:de:e5:35:4b:f9:d7:
11:7a:12:ec:62:d5:59:17:15:2c:50:03:19:a9:89:c7:60:48:
c9:2b:11:94:c7:c0:bc:d7:c9:cb:5a:20:e8:37:f4:35:e8:e6:
f0:7c:73:e0:b4:34:2a:a9:4c:0f:0f:f9:14:2f:df:eb:72:da:
be:a5:f9:02:44:67:6a:2a:ab:73:a9:7b:0a:3e:05:2a:93:ea:
ce:e1:1f:d1:94:02:a4:e1:41:e5:cf:bb:6b:5f:66:6f:46:a7:
37:7b:d4:6d:b8:9f:6d:c6:d3:3c:53:91:9d:87:0a:91:34:6c:
c0:23:b0:7f:86:1b:2c:d6:aa:8f:f2:0a:bb:ed:cd:2f:be:0a:
95:49:3b:ad:d0:25:29:7d:3a:86:96:62:69:4e:25:4b:b8:52:
eb:4f:d5:10:c2:ca:88:10:95:33:fa:e9:55:30:a8:99:49:63:
a7:d6:43:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXG6T/ZN7IijWwlMyZBxLjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwMzI0MDY0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGQ0MGQ4M2E2NGE3NjUyZDBkY2RhYTIxNDFmY2FhZGIwOGQzOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDTCaUHfCKe+mNKIvAc3BcNhedbr
TS/mYUCLg3tUiQyycd5mo98o5EeUEsOEv1weeG4TCFDtQxROa9x1uhXMSM9Uequ2
EhqqDN5YzCqqwS8Jg6OyBC9GlcBWishg+Mq2qD69kjj5Yl8FkIzu0ARy9J8KFcIE
WZ6Wzcjn9+nu1BEJt+Feg/UAoZ6DG+jqDYvazL22SNo1GF6hjkK4Z8U/LXfRHfMe
t0idjcRY8Ncux0X/pNb/aZg69vtqqaTRbYhWGALxI5EL032bbwC3YorviWOtBkFB
vEDxvme9ewG7p9oVwKvjgzGgItVEK2d8aBmQAUj/l3wgr5LzN+KwamvypQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJjUDYOmSnZS0NzaohQfyq2wjTnFMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvbU5RTmc2WktkbExRM05xaUZCX0tyYkNOT2NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsWAwQA
bXouMA0GCSqGSIb3DQEBCwUAA4IBAQA9sGksFEPOEitFwZGNSxMnGFkNDjC2kV+l
OjcUwyEVLlTOx89HdhwFmpFtdmMrs5WZ7G/3srjvOmwublFv296arZoBCWwLMUXp
MoVxHRQfkRVkwf/e5TVL+dcRehLsYtVZFxUsUAMZqYnHYEjJKxGUx8C818nLWiDo
N/Q16ObwfHPgtDQqqUwPD/kUL9/rctq+pfkCRGdqKqtzqXsKPgUqk+rO4R/RlAKk
4UHlz7trX2ZvRqc3e9RtuJ9txtM8U5GdhwqRNGzAI7B/hhss1qqP8gq77c0vvgqV
STut0CUpfTqGlmJpTiVLuFLrT9UQwsqIEJUz+ulVMKiZSWOn1kN/
-----END CERTIFICATE-----
Generated at Tue Mar 25 18:22:27 2025 by rpki-client on console.sobornost.net