Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa
File: Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa (raw, json)
Hash identifier: pwgtrLZ9ZWVWEXXmTENsA08mvoGu1JfrrcaBMhazJW4=
Subject key identifier: 67:D6:97:B5:F6:4E:2C:72:D4:25:11:FB:42:A3:E2:D6:6A:86:8F:75
Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial: 019426D9D82D844E85EB380582865D9D31C9
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29691
IP address blocks: 5.148.160.0/19 maxlen: 19
92.42.184.0/21 maxlen: 21
94.230.208.0/20 maxlen: 20
178.209.32.0/19 maxlen: 19
185.88.236.0/22 maxlen: 22
193.17.85.0/24 maxlen: 24
217.150.240.0/20 maxlen: 20
2001:67c:2f98::/48 maxlen: 48
2a02:418::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d8:2d:84:4e:85:eb:38:05:82:86:5d:9d:31:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67d697b5f64e2c72d42511fb42a3e2d66a868f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:11:d6:41:dc:43:0e:40:9a:a8:77:cb:32:
89:cc:59:af:57:29:54:cf:f5:ee:2b:48:f2:d5:5f:
17:86:8c:b2:ab:d0:26:0d:53:44:ec:1d:aa:1d:79:
5a:37:52:5e:e2:95:4a:a4:de:77:16:1a:9a:a6:66:
49:5a:44:26:46:17:99:77:b8:b0:da:35:2b:9c:dc:
ab:80:68:e4:5b:33:8f:f5:83:d4:66:e5:bd:76:72:
df:cb:f4:22:be:a8:a9:6a:50:93:38:19:ae:5f:c5:
40:cd:d1:d3:4a:2e:e2:42:e8:27:af:71:4a:3e:e6:
89:2e:11:e4:be:5c:48:ca:d0:c3:85:4b:29:e1:be:
51:6c:b1:d3:f9:6f:ab:27:dd:1b:30:01:76:6c:14:
55:63:b8:03:eb:2d:ac:0f:6c:09:e9:e4:1e:2b:04:
b8:2e:1b:ec:9f:24:0a:79:48:69:4c:09:bf:83:32:
06:b1:98:68:4f:fe:e9:6f:8c:c3:70:17:e0:17:d5:
65:fc:73:7b:bd:55:70:e7:64:87:08:67:8f:b4:70:
1b:2e:05:93:33:27:97:d7:ae:5a:95:73:7f:2d:d7:
ce:57:be:c9:bc:d1:29:b3:fb:73:5d:3c:42:57:07:
d1:cd:6a:e4:98:ce:36:af:0d:7b:13:d5:2b:0f:4e:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:97:B5:F6:4E:2C:72:D4:25:11:FB:42:A3:E2:D6:6A:86:8F:75
X509v3 Authority Key Identifier:
keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.148.160.0/19
92.42.184.0/21
94.230.208.0/20
178.209.32.0/19
185.88.236.0/22
193.17.85.0/24
217.150.240.0/20
IPv6:
2001:67c:2f98::/48
2a02:418::/29
Signature Algorithm: sha256WithRSAEncryption
85:1c:16:79:9b:52:e4:f2:10:a5:e5:ec:3e:62:0a:a4:71:a2:
95:04:67:1b:e6:6e:29:c2:c0:f3:8d:d4:0b:fc:2c:0c:29:d9:
b1:c7:8d:46:16:30:4a:4b:89:20:da:fe:b4:d3:a1:0f:72:a6:
56:38:34:6a:93:14:17:68:21:b2:d6:be:dc:93:48:02:b7:7c:
a6:c8:7e:fd:9c:80:f3:89:1c:c5:c6:4b:de:01:5e:3a:d8:a8:
35:65:2e:c4:1a:49:99:eb:ec:6d:b1:09:ec:44:0b:6c:e9:76:
71:5c:9f:98:23:71:16:c2:c5:bd:23:ee:e5:8d:19:ec:07:bd:
cf:70:7c:b5:00:f3:d2:f9:6c:9f:8d:f2:4a:4e:d4:7b:a4:8d:
65:05:07:7f:ea:4c:48:9f:cb:b1:06:f8:2a:bc:21:e9:b4:2a:
cc:a7:2f:60:91:ca:1e:ef:5e:75:88:72:3a:90:a3:fb:db:6f:
f6:cd:90:bd:02:93:77:63:89:92:01:1b:c3:6f:f1:13:8d:54:
9c:fc:c5:0a:0c:8c:70:1b:51:f9:b8:61:ad:26:91:48:77:71:
17:e1:e7:bf:ea:3b:a0:dc:57:a6:c2:67:2d:6d:58:f8:00:1b:
d9:7b:3f:05:b0:dd:b8:9d:9a:48:02:e6:68:88:5e:26:15:b7:
cc:fa:ba:ab
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZQm2dgthE6F6zgFgoZdnTHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4
MTdlZTAwHhcNMjUwMTAyMTE0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2Q2OTdiNWY2NGUyYzcyZDQyNTExZmI0MmEzZTJkNjZhODY4Zjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLoR1kHcQw5Amqh3yzKJzFmvVylU
z/XuK0jy1V8Xhoyyq9AmDVNE7B2qHXlaN1Je4pVKpN53FhqapmZJWkQmRheZd7iw
2jUrnNyrgGjkWzOP9YPUZuW9dnLfy/QivqipalCTOBmuX8VAzdHTSi7iQugnr3FK
PuaJLhHkvlxIytDDhUsp4b5RbLHT+W+rJ90bMAF2bBRVY7gD6y2sD2wJ6eQeKwS4
LhvsnyQKeUhpTAm/gzIGsZhoT/7pb4zDcBfgF9Vl/HN7vVVw52SHCGePtHAbLgWT
MyeX165alXN/LdfOV77JvNEps/tzXTxCVwfRzWrkmM42rw17E9UrD06ptQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFGfWl7X2Tixy1CUR+0Kj4tZqho91MB8GA1UdIwQY
MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt
Njk2NzAzNzM2NjIxLzEvWjlhWHRmWk9MSExVSlJIN1FxUGkxbXFHajNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx
LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAwBAIAATAqAwQFBZSgAwQD
XCq4AwQEXubQAwQFstEgAwQCuVjsAwQAwRFVAwQE2ZbwMBYEAgACMBADBwAgAQZ8
L5gDBQMqAgQYMA0GCSqGSIb3DQEBCwUAA4IBAQCFHBZ5m1Lk8hCl5ew+YgqkcaKV
BGcb5m4pwsDzjdQL/CwMKdmxx41GFjBKS4kg2v6006EPcqZWODRqkxQXaCGy1r7c
k0gCt3ymyH79nIDziRzFxkveAV462Kg1ZS7EGkmZ6+xtsQnsRAts6XZxXJ+YI3EW
wsW9I+7ljRnsB73PcHy1APPS+WyfjfJKTtR7pI1lBQd/6kxIn8uxBvgqvCHptCrM
py9gkcoe7151iHI6kKP722/2zZC9ApN3Y4mSARvDb/ETjVSc/MUKDIxwG1H5uGGt
JpFId3EX4ee/6jug3FemwmctbVj4ABvZez8FsN24nZpIAuZoiF4mFbfM+rqr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net