Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/1aR-_v953E36WGgYgibzeTBiCDE.roa
File: 1aR-_v953E36WGgYgibzeTBiCDE.roa (raw, json)
Hash identifier: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=
Subject key identifier: D5:A4:7E:FE:FF:79:DC:4D:FA:58:68:18:82:26:F3:79:30:62:08:31
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019427B60F224D83E183F93213EA3786DA4A
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/1aR-_v953E36WGgYgibzeTBiCDE.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200264
IP address blocks: 81.95.42.0/24 maxlen: 24
82.194.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0f:22:4d:83:e1:83:f9:32:13:ea:37:86:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5a47efeff79dc4dfa5868188226f37930620831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:9f:8a:fa:af:e5:e1:26:e9:32:d0:60:26:
c6:53:7c:10:ec:27:93:61:58:c9:42:43:39:4f:b6:
b4:33:d1:45:5b:13:ac:ac:f6:66:c9:5f:69:76:26:
5f:c8:a9:93:4c:fa:c4:9e:c3:c7:bc:0d:e3:e8:9b:
07:5b:04:9e:1d:57:be:d5:25:a2:c7:f0:3b:79:e9:
90:0d:4e:d8:db:c5:d9:17:23:5e:25:00:c4:2c:16:
d0:42:91:cf:03:a8:56:48:d2:4c:34:40:85:13:94:
ae:97:09:63:5f:0c:af:f3:23:2b:72:78:77:b0:77:
64:d1:e8:2a:7e:72:5f:ea:f0:d0:4e:6e:98:76:33:
ef:cb:1c:0f:93:04:e1:d9:42:da:9e:26:ac:c5:d1:
9e:8d:84:e4:70:ed:a8:38:81:a6:76:97:a3:a1:b3:
08:90:fe:5a:75:1d:e8:1e:b0:da:2b:9e:f0:8b:01:
45:23:e5:f1:43:6e:be:fa:38:89:5f:2c:66:6c:37:
ad:f6:52:99:da:a3:88:c4:d6:7d:68:ec:68:68:29:
4f:21:b2:a9:37:21:da:8e:4e:99:f6:ad:c1:a9:ed:
1b:5f:a0:8f:17:5d:6c:a7:f6:27:fc:9a:35:27:cf:
33:6f:31:b7:d5:13:e4:e4:53:2f:2e:5c:55:fc:f5:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A4:7E:FE:FF:79:DC:4D:FA:58:68:18:82:26:F3:79:30:62:08:31
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/1aR-_v953E36WGgYgibzeTBiCDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.42.0/24
82.194.237.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6c:64:ae:02:4d:2a:e5:d5:be:6a:4a:47:8e:11:26:1e:4e:
15:bd:df:2f:f9:c9:b2:2b:9a:2f:a4:c8:c1:2d:e1:e1:08:29:
1f:b3:25:75:bb:1a:8c:ce:2f:9d:c4:93:5d:52:ae:af:aa:c3:
05:af:5a:6e:52:b8:f6:f6:09:a2:a3:e4:5e:d8:81:63:a8:27:
37:75:b9:48:20:bd:e5:cd:56:90:85:1b:78:27:15:32:ba:6c:
ff:c8:17:00:77:c8:dc:79:6c:58:15:8c:ef:7d:0d:27:e4:0b:
86:14:b3:e0:7f:24:ff:ea:c9:c7:f3:b3:12:22:53:e8:26:3b:
76:98:a0:4d:e8:93:3c:ee:94:39:33:3f:86:49:12:43:49:f0:
4e:68:91:09:d6:e9:f7:ef:e6:e6:47:38:22:c4:81:24:8e:d5:
2f:dd:a5:e0:87:83:38:8c:fc:7f:ac:65:c1:2a:d6:99:e6:59:
65:46:a0:34:b0:37:57:1f:28:4b:bd:5c:97:5a:59:8a:67:6b:
de:d7:2d:c9:f6:06:36:88:c8:b4:de:37:f3:58:1e:e3:a2:95:
a5:95:f3:3f:1e:bc:be:86:ca:a3:e7:24:29:17:fa:16:08:55:
46:4e:78:46:ea:16:d7:ba:8a:87:48:b7:79:fa:76:38:20:bd:
b3:b7:b5:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntg8iTYPhg/kyE+o3htpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj
YTBjNDcwHhcNMjUwMTAyMTU1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWE0N2VmZWZmNzlkYzRkZmE1ODY4MTg4MjI2ZjM3OTMwNjIwODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuefivqv5eEm6TLQYCbGU3wQ7CeT
YVjJQkM5T7a0M9FFWxOsrPZmyV9pdiZfyKmTTPrEnsPHvA3j6JsHWwSeHVe+1SWi
x/A7eemQDU7Y28XZFyNeJQDELBbQQpHPA6hWSNJMNECFE5SulwljXwyv8yMrcnh3
sHdk0egqfnJf6vDQTm6YdjPvyxwPkwTh2ULaniasxdGejYTkcO2oOIGmdpejobMI
kP5adR3oHrDaK57wiwFFI+XxQ26++jiJXyxmbDet9lKZ2qOIxNZ9aOxoaClPIbKp
NyHajk6Z9q3Bqe0bX6CPF11sp/Yn/Jo1J88zbzG31RPk5FMvLlxV/PV2DQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNWkfv7/edxN+lhoGIIm83kwYggxMB8GA1UdIwQY
MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt
ZjFiZjBjMzNhOTA4LzEvMWFSLV92OTUzRTM2V0dnWWdpYnplVEJpQ0RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4
LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUV8qAwQA
UsLtMA0GCSqGSIb3DQEBCwUAA4IBAQBHbGSuAk0q5dW+akpHjhEmHk4Vvd8v+cmy
K5ovpMjBLeHhCCkfsyV1uxqMzi+dxJNdUq6vqsMFr1puUrj29gmio+Re2IFjqCc3
dblIIL3lzVaQhRt4JxUyumz/yBcAd8jceWxYFYzvfQ0n5AuGFLPgfyT/6snH87MS
IlPoJjt2mKBN6JM87pQ5Mz+GSRJDSfBOaJEJ1un37+bmRzgixIEkjtUv3aXgh4M4
jPx/rGXBKtaZ5lllRqA0sDdXHyhLvVyXWlmKZ2ve1y3J9gY2iMi03jfzWB7jopWl
lfM/Hry+hsqj5yQpF/oWCFVGTnhG6hbXuoqHSLd5+nY4IL2zt7XM
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net