Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/eSjPZbIfbzV_-2dY3DLb0TWTSdM.roa
File: eSjPZbIfbzV_-2dY3DLb0TWTSdM.roa (raw, json)
Hash identifier: AL9fqh7ceKqnHM3PxeRD473MOSaIbFz8D+64dfZV0bI=
Subject key identifier: 79:28:CF:65:B2:1F:6F:35:7F:FB:67:58:DC:32:DB:D1:35:93:49:D3
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 0195D7BA0EB216AE3B5B6147BBC0994C4B60
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/eSjPZbIfbzV_-2dY3DLb0TWTSdM.roa
Signing time: Thu 27 Mar 2025 13:10:49 +0000
ROA not before: Thu 27 Mar 2025 13:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61106
IP address blocks: 81.162.54.0/23 maxlen: 24
82.115.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:ba:0e:b2:16:ae:3b:5b:61:47:bb:c0:99:4c:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Mar 27 13:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7928cf65b21f6f357ffb6758dc32dbd1359349d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:fe:c0:e2:3c:46:8f:02:c9:e9:ad:b9:54:
0c:3a:03:6f:6e:55:ff:41:d2:5d:cc:0e:64:37:1a:
9b:3e:54:3f:f8:92:81:71:78:5c:50:fe:7e:f9:29:
75:32:ed:e9:38:f9:28:b6:b4:0a:88:03:31:68:dd:
71:12:a4:3c:e5:9a:5d:e0:ae:e9:09:91:fa:49:d0:
a9:c6:26:17:06:d2:df:0e:38:00:90:58:4b:85:e0:
2e:3d:4e:d9:6e:29:45:70:56:ea:fc:b2:31:2b:0b:
c4:f5:c7:8b:0c:d1:5b:e7:ad:9c:a1:be:c2:91:79:
db:ce:97:25:14:ed:e2:7e:32:af:6e:83:d3:d9:ad:
1d:41:08:8b:aa:f8:9e:76:d3:ec:ed:b7:e4:aa:60:
2d:4b:09:45:a5:a1:84:dd:19:c3:18:21:bd:54:53:
a0:cb:2f:26:5c:de:15:24:9b:90:d7:80:ed:3f:2f:
00:9c:e6:95:b1:53:ce:73:84:70:85:12:18:93:40:
9e:46:54:1f:ee:27:27:79:1d:50:3c:eb:53:9b:29:
30:04:2e:70:27:69:7c:7a:7c:ae:dc:91:07:bf:8a:
86:74:00:7c:7d:89:42:81:cb:07:6e:da:b2:6c:22:
e2:87:f4:2a:44:bf:5c:7c:6f:45:bb:b2:38:28:f9:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:CF:65:B2:1F:6F:35:7F:FB:67:58:DC:32:DB:D1:35:93:49:D3
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/eSjPZbIfbzV_-2dY3DLb0TWTSdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.54.0/23
82.115.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6d:89:46:82:8f:53:e8:af:52:1e:5f:80:5f:08:e5:81:71:
f8:45:d7:41:d9:b0:ae:5b:02:5d:59:9c:87:98:91:4d:b6:9c:
ca:53:63:23:26:c1:15:38:5f:d6:86:fa:bb:d1:c6:28:57:0a:
02:38:90:bf:f3:0b:ff:30:71:11:6c:6a:34:94:f4:7a:d9:4c:
5f:5b:24:d1:6b:aa:8c:06:04:84:51:b2:4f:f2:67:10:eb:42:
c7:ec:36:62:6c:81:4e:85:6e:ec:8e:5c:c2:6f:0d:60:27:0d:
4b:b1:46:65:d5:f9:ff:f8:0d:3a:07:5c:67:de:50:dc:a7:b5:
0c:24:fd:d9:17:3a:9d:ff:98:eb:2a:e0:68:86:99:3f:ec:dd:
3f:bf:44:bd:86:20:3a:9c:e2:a2:18:3a:50:5d:f7:9e:d4:29:
03:cd:05:02:f1:83:32:e5:3a:46:94:af:39:77:b0:94:d2:19:
4a:b6:a1:bb:94:e3:a9:1d:cf:10:a0:51:46:8c:ff:3a:f6:73:
d9:41:dd:3e:e6:85:c2:54:43:48:53:2e:29:86:43:18:3b:51:
16:0e:7c:7e:30:04:a3:ce:a6:d3:d9:de:6a:36:18:1f:64:eb:
a4:ef:7d:0b:f4:0a:5b:cc:9c:e3:7c:06:8a:b2:4a:2c:7c:0b:
ca:f4:93:5b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXXug6yFq47W2FHu8CZTEtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm
NTExOWEwHhcNMjUwMzI3MTMxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTI4Y2Y2NWIyMWY2ZjM1N2ZmYjY3NThkYzMyZGJkMTM1OTM0OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g/+wOI8Ro8CyemtuVQMOgNvblX/
QdJdzA5kNxqbPlQ/+JKBcXhcUP5++Sl1Mu3pOPkotrQKiAMxaN1xEqQ85Zpd4K7p
CZH6SdCpxiYXBtLfDjgAkFhLheAuPU7ZbilFcFbq/LIxKwvE9ceLDNFb562cob7C
kXnbzpclFO3ifjKvboPT2a0dQQiLqviedtPs7bfkqmAtSwlFpaGE3RnDGCG9VFOg
yy8mXN4VJJuQ14DtPy8AnOaVsVPOc4RwhRIYk0CeRlQf7icneR1QPOtTmykwBC5w
J2l8enyu3JEHv4qGdAB8fYlCgcsHbtqybCLih/QqRL9cfG9Fu7I4KPnSxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHkoz2WyH281f/tnWNwy29E1k0nTMB8GA1UdIwQY
MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt
ZjkxYmI1MTc5MjE3LzEvZVNqUFpiSWZielZfLTJkWTNETGIwVFdUU2RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3
LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUaI2AwQA
UnMwMA0GCSqGSIb3DQEBCwUAA4IBAQA6bYlGgo9T6K9SHl+AXwjlgXH4RddB2bCu
WwJdWZyHmJFNtpzKU2MjJsEVOF/Whvq70cYoVwoCOJC/8wv/MHERbGo0lPR62Uxf
WyTRa6qMBgSEUbJP8mcQ60LH7DZibIFOhW7sjlzCbw1gJw1LsUZl1fn/+A06B1xn
3lDcp7UMJP3ZFzqd/5jrKuBohpk/7N0/v0S9hiA6nOKiGDpQXfee1CkDzQUC8YMy
5TpGlK85d7CU0hlKtqG7lOOpHc8QoFFGjP869nPZQd0+5oXCVENIUy4phkMYO1EW
Dnx+MASjzqbT2d5qNhgfZOuk730L9ApbzJzjfAaKskosfAvK9JNb
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net