Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/x8qUgYPzT7g1nXs61F1j3vP06ZA.roa
File: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (raw, json)
Hash identifier: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=
Subject key identifier: C7:CA:94:81:83:F3:4F:B8:35:9D:7B:3A:D4:5D:63:DE:F3:F4:E9:90
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 0195DD505C22C78D3156C9A1B61A6D712C3D
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/x8qUgYPzT7g1nXs61F1j3vP06ZA.roa
Signing time: Fri 28 Mar 2025 15:13:05 +0000
ROA not before: Fri 28 Mar 2025 15:13:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12776
IP address blocks: 194.56.165.0/24 maxlen: 24
194.56.166.0/24 maxlen: 24
2a05:8140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:50:5c:22:c7:8d:31:56:c9:a1:b6:1a:6d:71:2c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Mar 28 15:13:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ca948183f34fb8359d7b3ad45d63def3f4e990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:ae:aa:81:61:76:01:45:16:7a:a5:49:c9:
84:67:87:7c:bd:a2:d8:42:ad:e5:f1:31:0d:6b:b3:
6a:58:8a:0e:29:a6:27:67:d9:ec:4b:8c:69:44:36:
cd:7a:36:db:6f:d2:83:c5:44:3c:61:48:d1:25:8f:
93:81:4a:7e:ef:c6:4f:e3:96:01:e2:18:79:a0:6a:
ab:82:c5:c6:f2:50:3b:f6:c2:ee:9e:d4:9c:cd:00:
ba:9f:6a:5d:bd:bf:05:c0:fc:c7:21:53:3a:e7:f4:
c2:6f:70:61:9e:47:c8:8f:eb:18:46:c9:66:9c:70:
50:4d:1a:e9:fc:10:77:16:7e:3c:cd:86:99:f9:e6:
30:14:34:c0:6d:d2:c5:09:56:ec:05:1e:86:bc:a6:
60:26:16:ca:04:b7:37:5f:14:9d:e6:c7:84:63:fd:
2a:58:bc:a0:d5:6e:cd:d6:37:97:a2:92:ba:f5:45:
a3:54:bc:de:6b:2f:b7:ff:d5:4c:be:0f:51:c7:99:
d8:1f:ab:d0:d1:2a:8d:27:67:74:93:ce:17:fd:92:
fd:04:b9:4f:8f:5b:45:88:71:3f:e4:36:16:b2:fc:
f8:d8:a5:1e:98:59:e6:e8:a6:25:bd:73:6d:7b:09:
37:06:f4:b6:98:55:cd:aa:48:35:0d:ca:2c:1b:c7:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:94:81:83:F3:4F:B8:35:9D:7B:3A:D4:5D:63:DE:F3:F4:E9:90
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/x8qUgYPzT7g1nXs61F1j3vP06ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.165.0-194.56.166.255
IPv6:
2a05:8140::/29
Signature Algorithm: sha256WithRSAEncryption
5e:5c:83:b5:1c:4e:bc:ed:3d:bd:35:2d:18:25:4e:3d:45:5d:
5a:81:92:14:f1:35:5d:8a:fc:63:6a:5c:71:10:a9:d7:c0:f4:
54:d6:fc:f4:fd:52:e1:38:69:9b:ab:51:95:64:13:b5:21:fc:
31:bf:af:ce:b6:6e:e4:bb:e6:7d:c1:40:00:50:7f:61:20:ec:
24:6d:54:36:ab:d8:cf:f6:08:06:27:5e:60:a9:54:87:fe:ba:
e9:a8:88:8f:02:bf:d2:b1:d3:3d:e8:4f:f3:e8:cd:d2:ea:f3:
b6:06:e7:16:db:a5:14:1a:ab:0f:84:5c:11:f4:e0:76:08:f1:
e7:27:e0:1f:20:34:36:36:9f:b8:d4:db:c6:e5:05:e0:4a:a8:
e4:7e:f9:0d:b9:f5:5a:29:b7:30:5e:82:aa:d8:39:cb:1d:03:
76:4e:99:44:1f:5c:08:60:77:ea:3b:d3:39:d7:af:68:b4:f4:
fc:1b:f1:3e:4b:6c:e3:f0:51:97:8e:91:d0:bf:6f:85:54:81:
2c:82:07:e2:18:6b:3b:72:6a:16:0d:76:a5:4c:7c:c0:4f:df:
f6:43:72:fb:79:de:8f:41:bd:f5:4a:e5:66:c4:f0:5d:86:72:
62:ae:61:3c:88:5e:9c:ca:a3:9c:76:0e:82:b4:e2:dd:af:02:
9b:38:0a:34
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZXdUFwix40xVsmhthptcSw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGVmNzZlYjc5MDc0ZTY5YzczMzAyY2U0YzJlMGFmNDdm
NDUzMDcwHhcNMjUwMzI4MTUxMzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2NhOTQ4MTgzZjM0ZmI4MzU5ZDdiM2FkNDVkNjNkZWYzZjRlOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YOuqoFhdgFFFnqlScmEZ4d8vaLY
Qq3l8TENa7NqWIoOKaYnZ9nsS4xpRDbNejbbb9KDxUQ8YUjRJY+TgUp+78ZP45YB
4hh5oGqrgsXG8lA79sLuntSczQC6n2pdvb8FwPzHIVM65/TCb3BhnkfIj+sYRslm
nHBQTRrp/BB3Fn48zYaZ+eYwFDTAbdLFCVbsBR6GvKZgJhbKBLc3XxSd5seEY/0q
WLyg1W7N1jeXopK69UWjVLzeay+3/9VMvg9Rx5nYH6vQ0SqNJ2d0k84X/ZL9BLlP
j1tFiHE/5DYWsvz42KUemFnm6KYlvXNtewk3BvS2mFXNqkg1DcosG8dQowIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFMfKlIGD80+4NZ17OtRdY97z9OmQMB8GA1UdIwQY
MBaAFDJO9263kHTmnHMwLOTC4K9H9FMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzIt
MmNhZGNmNjY1OGNhLzEveDhxVWdZUHpUN2cxblhzNjFGMWozdlAwNlpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzItMmNhZGNmNjY1OGNh
LzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBADCOKUD
BADCOKYwDQQCAAIwBwMFAyoFgUAwDQYJKoZIhvcNAQELBQADggEBAF5cg7UcTrzt
Pb01LRglTj1FXVqBkhTxNV2K/GNqXHEQqdfA9FTW/PT9UuE4aZurUZVkE7Uh/DG/
r862buS75n3BQABQf2Eg7CRtVDar2M/2CAYnXmCpVIf+uumoiI8Cv9Kx0z3oT/Po
zdLq87YG5xbbpRQaqw+EXBH04HYI8ecn4B8gNDY2n7jU28blBeBKqOR++Q259Vop
tzBegqrYOcsdA3ZOmUQfXAhgd+o70znXr2i09Pwb8T5LbOPwUZeOkdC/b4VUgSyC
B+IYaztyahYNdqVMfMBP3/ZDcvt53o9BvfVK5WbE8F2GcmKuYTyIXpzKo5x2DoK0
4t2vAps4CjQ=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net