Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa
File: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (raw, json)
Hash identifier: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=
Subject key identifier: 98:26:06:BC:96:E5:D4:5C:3A:8C:FC:7D:22:D9:78:94:70:1E:D3:58
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 019420D5EB013F7A97E38CD19E8625DA00B4
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa
Signing time: Wed 01 Jan 2025 07:47:57 +0000
ROA not before: Wed 01 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39872
IP address blocks: 195.170.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:eb:01:3f:7a:97:e3:8c:d1:9e:86:25:da:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=982606bc96e5d45c3a8cfc7d22d97894701ed358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:17:d9:25:e3:7f:bb:2f:50:02:d5:6e:0c:
14:b6:a5:7d:e1:05:9f:41:b0:07:d6:aa:91:04:c5:
c0:87:d9:32:a7:1a:a3:2c:ef:fc:c4:12:2d:b6:31:
9c:58:be:2c:e5:11:2a:9a:f5:61:c1:81:db:db:c6:
c4:f6:c6:41:9a:a6:2b:5a:c2:b0:ee:f8:46:25:d0:
a4:07:3c:1c:5f:fd:2c:e9:59:20:67:81:27:b5:bf:
29:b6:59:56:ef:c5:45:1b:0e:d0:32:a6:57:b5:d7:
5e:86:7c:5d:3e:a3:d1:e8:e3:5e:13:bc:3b:7f:3b:
b8:47:57:aa:f5:79:d1:2f:16:e5:2c:0b:7c:5d:8e:
37:f2:76:3a:4a:d3:1f:8a:2e:de:76:74:08:44:ee:
a7:56:ec:32:c5:94:53:37:9d:de:58:08:fc:b0:36:
39:fa:c8:1d:a2:d4:a5:f7:fd:e0:cb:51:52:58:fa:
06:ed:2e:fb:b6:e5:69:93:57:cf:dd:53:94:de:65:
89:d5:2d:9c:f1:a3:73:15:17:e8:b3:06:c6:3a:48:
fb:99:c0:8b:d2:67:b7:16:e1:15:0b:30:3f:a3:99:
f4:6a:b2:12:70:7f:b7:60:48:23:54:03:aa:79:c2:
d5:de:ac:5d:4f:6b:73:36:11:f4:7f:ef:8f:a9:42:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:06:BC:96:E5:D4:5C:3A:8C:FC:7D:22:D9:78:94:70:1E:D3:58
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:6e:8d:dc:22:8a:74:b8:14:5a:e5:88:b1:7f:b8:fd:3a:19:
1d:a0:75:a7:87:07:c3:dd:d1:6d:69:46:5f:b5:60:d6:65:b0:
87:d7:d9:c3:52:3e:21:0f:da:e1:d1:28:2f:ab:5e:ef:44:86:
36:45:35:2d:7e:ae:7a:41:c9:e7:d2:19:3b:88:5a:17:c2:7d:
f0:72:e7:0b:a9:fc:2a:d3:83:77:99:3e:4d:04:62:38:fb:3b:
5d:8a:c1:0e:ba:de:14:d0:4e:89:dd:d7:84:33:a6:9e:b4:f5:
9f:ca:67:7c:48:0a:1d:9e:03:43:95:7d:60:eb:e9:05:62:64:
ca:13:cf:0f:6a:11:6a:22:ce:0d:6e:ee:b9:34:23:89:0d:e9:
1e:a9:8a:fb:31:f3:1d:8c:5c:79:b9:43:7b:2b:7b:dd:43:1f:
05:03:32:de:0e:5b:45:98:bb:5d:d8:84:c4:d7:dc:90:bf:3e:
ef:76:a7:70:61:20:f3:46:f9:60:29:af:3c:4a:dd:08:36:a1:
86:ea:71:85:db:c3:c5:1c:e8:6d:cd:1e:fc:75:93:b2:bb:d1:
1a:26:33:a9:ac:37:3e:74:37:c4:dd:5a:2b:8b:7e:56:3b:13:
84:ff:b6:f2:7c:26:e6:ce:88:12:87:75:67:33:b7:0d:03:2c:
55:20:c3:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1esBP3qX44zRnoYl2gC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWJlMGUwNjkwMGQ3Yjk2MDc2YzAwYmI1MGQ0ZjlkYzAz
OTJmNTkwHhcNMjUwMTAxMDc0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODI2MDZiYzk2ZTVkNDVjM2E4Y2ZjN2QyMmQ5Nzg5NDcwMWVkMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGcX2SXjf7svUALVbgwUtqV94QWf
QbAH1qqRBMXAh9kypxqjLO/8xBIttjGcWL4s5REqmvVhwYHb28bE9sZBmqYrWsKw
7vhGJdCkBzwcX/0s6VkgZ4Entb8ptllW78VFGw7QMqZXtddehnxdPqPR6ONeE7w7
fzu4R1eq9XnRLxblLAt8XY438nY6StMfii7ednQIRO6nVuwyxZRTN53eWAj8sDY5
+sgdotSl9/3gy1FSWPoG7S77tuVpk1fP3VOU3mWJ1S2c8aNzFRfoswbGOkj7mcCL
0me3FuEVCzA/o5n0arIScH+3YEgjVAOqecLV3qxdT2tzNhH0f++PqUIziwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgmBryW5dRcOoz8fSLZeJRwHtNYMB8GA1UdIwQY
MBaAFCGr4OBpANe5YHbAC7UNT53AOS9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mMmVjMDktNTQ0NS00NGZmLTk5MTUt
ZGVlOWFhZWZmYzlkLzEvbUNZR3ZKYmwxRnc2alB4OUl0bDRsSEFlMDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mMmVjMDktNTQ0NS00NGZmLTk5MTUtZGVlOWFhZWZmYzlk
LzEvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6qxMA0G
CSqGSIb3DQEBCwUAA4IBAQCMbo3cIop0uBRa5Yixf7j9OhkdoHWnhwfD3dFtaUZf
tWDWZbCH19nDUj4hD9rh0Sgvq17vRIY2RTUtfq56Qcnn0hk7iFoXwn3wcucLqfwq
04N3mT5NBGI4+ztdisEOut4U0E6J3deEM6aetPWfymd8SAodngNDlX1g6+kFYmTK
E88PahFqIs4Nbu65NCOJDekeqYr7MfMdjFx5uUN7K3vdQx8FAzLeDltFmLtd2ITE
19yQvz7vdqdwYSDzRvlgKa88St0INqGG6nGF28PFHOhtzR78dZOyu9EaJjOprDc+
dDfE3Vori35WOxOE/7byfCbmzogSh3VnM7cNAyxVIMPt
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net