Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/s7pdPnsOB8imHTQwb8o3CB7JIMI.roa
File: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (raw, json)
Hash identifier: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=
Subject key identifier: B3:BA:5D:3E:7B:0E:07:C8:A6:1D:34:30:6F:CA:37:08:1E:C9:20:C2
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 019420686E20948049BF0172CFF2C69AC0B9
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/s7pdPnsOB8imHTQwb8o3CB7JIMI.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2134
IP address blocks: 195.43.48.0/22 maxlen: 22
195.43.48.0/24 maxlen: 24
195.43.49.0/24 maxlen: 24
195.43.50.0/24 maxlen: 24
195.43.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6e:20:94:80:49:bf:01:72:cf:f2:c6:9a:c0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3ba5d3e7b0e07c8a61d34306fca37081ec920c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:53:66:7e:da:2c:c4:7d:4a:3e:2d:82:f8:
47:4b:30:ae:22:65:de:8b:4d:a4:f6:42:d0:7d:4d:
6f:98:fd:ba:f1:6c:f0:4b:71:4f:d7:6e:c5:f4:73:
0c:09:ec:0a:05:97:d8:70:3b:1d:a7:00:bd:db:20:
63:13:5e:69:77:f2:52:64:d2:71:1c:e6:57:10:77:
d9:fb:68:23:2a:5e:98:c2:48:b2:8a:66:21:01:41:
08:f5:d8:14:d4:3b:10:01:fd:79:16:67:20:51:5a:
92:13:6a:fb:3d:99:4c:b5:a4:1b:1d:c8:3e:85:72:
5c:cd:b6:ba:b0:ae:cd:e5:93:b2:d7:1d:e6:19:ce:
65:8b:8c:b5:3b:71:c7:64:38:b8:e5:0e:ac:96:56:
5f:8e:48:36:f6:35:74:c4:69:0a:37:dd:d9:86:27:
ad:68:09:e9:ba:ed:43:ee:20:4c:b6:6a:17:e9:de:
1c:56:2b:e0:c3:93:82:d1:25:30:01:4b:bc:75:a1:
70:72:5d:cb:1e:4d:18:7e:c1:72:c4:d3:29:99:37:
4d:9b:31:46:69:78:34:bd:27:3a:03:6d:1e:fa:13:
15:75:90:a9:3b:1c:1d:e5:4e:f1:93:05:4b:74:77:
6b:71:1a:36:43:a0:d1:61:ae:ce:70:2d:8e:10:bc:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:5D:3E:7B:0E:07:C8:A6:1D:34:30:6F:CA:37:08:1E:C9:20:C2
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/s7pdPnsOB8imHTQwb8o3CB7JIMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.48.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:ac:74:cd:18:0d:b3:5b:ac:e5:39:05:03:cd:13:17:84:3a:
3f:47:c3:cf:a0:9a:c1:bf:aa:16:c3:76:34:f2:ac:ff:71:a7:
fe:1e:32:6b:ee:bc:7d:93:f7:4e:f4:9a:64:fb:23:fc:10:e6:
16:bb:36:dc:dc:f8:72:3b:41:89:ac:76:e9:ef:a5:f1:e2:1c:
62:1f:07:75:a4:b0:7e:7e:18:d7:df:92:52:83:08:c9:91:9d:
95:28:2f:19:74:93:71:f9:c9:57:a6:e8:d3:d9:01:00:dd:2b:
fa:dc:4a:98:8a:f7:99:4a:5d:d3:8a:9a:e9:d6:da:95:01:8c:
52:ad:d9:08:82:15:86:66:d7:98:2a:0a:a2:f4:87:aa:d0:da:
fe:fa:8a:09:a9:fa:ec:7b:4f:5c:41:02:6b:aa:e6:8e:db:21:
76:4a:4c:f4:91:e0:7e:0f:fb:d6:b3:1e:f7:9e:a1:d6:26:2e:
08:10:96:1f:ae:75:a4:8b:15:ad:bb:49:eb:4d:f9:d4:c9:85:
6a:f1:4a:46:3a:7d:b5:b4:38:0b:35:9c:0a:61:98:69:36:95:
3f:24:b9:42:48:a2:97:4e:3c:d7:60:5a:06:ef:50:4a:90:53:
bd:5a:50:f6:18:e8:c3:c1:8c:0f:63:90:af:d9:5b:a2:56:65:
aa:ab:55:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaG4glIBJvwFyz/LGmsC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjBjNjcwNDM0ZGE1MTAyMjYxMDk5ZGExMDFmMjVkZDNm
N2FhZGEwHhcNMjUwMTAxMDU0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2JhNWQzZTdiMGUwN2M4YTYxZDM0MzA2ZmNhMzcwODFlYzkyMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvJTZn7aLMR9Sj4tgvhHSzCuImXe
i02k9kLQfU1vmP268WzwS3FP127F9HMMCewKBZfYcDsdpwC92yBjE15pd/JSZNJx
HOZXEHfZ+2gjKl6YwkiyimYhAUEI9dgU1DsQAf15FmcgUVqSE2r7PZlMtaQbHcg+
hXJczba6sK7N5ZOy1x3mGc5li4y1O3HHZDi45Q6sllZfjkg29jV0xGkKN93Zhiet
aAnpuu1D7iBMtmoX6d4cVivgw5OC0SUwAUu8daFwcl3LHk0YfsFyxNMpmTdNmzFG
aXg0vSc6A20e+hMVdZCpOxwd5U7xkwVLdHdrcRo2Q6DRYa7OcC2OELxTzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLO6XT57DgfIph00MG/KNwgeySDCMB8GA1UdIwQY
MBaAFHcgxnBDTaUQImEJnaEB8l3T96raMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUt
ZDg0NTk5NTk5MWFjLzEvczdwZFBuc09COGltSFRRd2I4bzNDQjdKSU1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUtZDg0NTk5NTk5MWFj
LzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwyswMA0G
CSqGSIb3DQEBCwUAA4IBAQCerHTNGA2zW6zlOQUDzRMXhDo/R8PPoJrBv6oWw3Y0
8qz/caf+HjJr7rx9k/dO9Jpk+yP8EOYWuzbc3PhyO0GJrHbp76Xx4hxiHwd1pLB+
fhjX35JSgwjJkZ2VKC8ZdJNx+clXpujT2QEA3Sv63EqYiveZSl3Tiprp1tqVAYxS
rdkIghWGZteYKgqi9Ieq0Nr++ooJqfrse09cQQJrquaO2yF2Skz0keB+D/vWsx73
nqHWJi4IEJYfrnWkixWtu0nrTfnUyYVq8UpGOn21tDgLNZwKYZhpNpU/JLlCSKKX
TjzXYFoG71BKkFO9WlD2GOjDwYwPY5Cv2VuiVmWqq1V0
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net