Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa
File: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (raw, json)
Hash identifier: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=
Subject key identifier: 7F:AC:42:98:04:F5:12:F9:29:17:F7:4C:ED:5F:01:D1:66:76:27:36
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0195F6B0B3104F6FC88453FAC4C39D83D2F9
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa
Signing time: Wed 02 Apr 2025 13:28:49 +0000
ROA not before: Wed 02 Apr 2025 13:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41108
IP address blocks: 91.228.52.0/23 maxlen: 24
91.228.104.0/22 maxlen: 24
91.229.229.0/24 maxlen: 24
193.25.100.0/23 maxlen: 24
195.88.44.0/23 maxlen: 24
195.110.20.0/23 maxlen: 24
195.110.20.0/24 maxlen: 24
2001:67c:12a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:b0:b3:10:4f:6f:c8:84:53:fa:c4:c3:9d:83:d2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Apr 2 13:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fac429804f512f92917f74ced5f01d166762736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:06:f3:5d:b3:aa:66:23:b7:1e:65:84:3d:
4d:29:b2:cb:3f:33:85:fc:1e:18:4f:38:c4:1f:6e:
1c:56:a4:b0:34:e0:9a:b5:d7:73:92:71:b9:00:f6:
1a:bb:9e:1a:48:6b:5e:59:48:19:c7:9f:6a:e7:e6:
34:64:91:af:00:cb:30:da:1a:1c:b3:3b:ed:60:fa:
e8:d2:b9:38:23:81:41:fc:96:26:76:7b:b7:00:ba:
65:4a:76:ec:79:95:8f:db:89:9a:07:9f:9b:96:aa:
84:bb:fc:e2:eb:d8:ec:81:3e:d3:0e:d4:2e:82:d0:
4b:f5:79:2f:e2:c8:bb:af:1d:01:d4:05:14:0e:09:
6d:5e:68:af:92:d8:8f:c0:04:b7:0d:1e:2f:79:65:
18:e9:b7:c6:ad:d4:28:ac:21:c6:54:00:09:8b:8e:
7a:14:fa:5c:74:c1:b3:65:fe:fb:fe:7b:0e:a8:64:
95:56:53:74:7e:ee:cd:8a:77:bf:16:2b:d4:38:ec:
5c:8a:be:f2:64:66:32:e5:6f:d9:d2:eb:78:55:20:
38:91:85:ff:b6:d1:53:d4:db:10:a6:75:76:89:64:
f9:ff:f3:a3:4d:c7:21:e4:43:9a:35:a5:95:a1:97:
87:38:79:61:a1:12:0e:35:6b:61:91:0d:29:7b:23:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:42:98:04:F5:12:F9:29:17:F7:4C:ED:5F:01:D1:66:76:27:36
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.52.0/23
91.228.104.0/22
91.229.229.0/24
193.25.100.0/23
195.88.44.0/23
195.110.20.0/23
IPv6:
2001:67c:12a0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:4c:71:7a:3c:a7:0a:05:89:6b:bc:9a:ab:2f:07:bd:18:37:
fb:27:60:12:76:16:3c:1a:55:7a:24:0b:02:92:1e:f0:b0:ec:
3f:ac:b5:b4:2f:f9:64:bf:6c:87:cc:a6:3b:29:9a:02:2e:d0:
7d:25:c4:8f:db:bb:36:44:f3:9e:ac:b4:08:78:30:fe:bb:33:
1b:72:5f:71:f3:bf:77:a4:a2:2e:7c:0e:0d:02:55:3b:a8:59:
3b:ed:b7:03:d6:a7:83:a8:e4:9f:41:c0:fa:7e:51:ed:c0:16:
81:e7:d8:86:2c:27:c6:78:ef:53:64:e8:b4:ac:bc:29:d6:7e:
73:07:11:c0:75:5e:00:bf:70:98:90:e6:e0:d6:cf:df:72:f1:
15:04:15:3d:24:01:19:6a:c2:a0:5f:f4:2e:8b:82:bd:f2:77:
0d:c8:44:52:31:f8:91:39:73:39:0b:81:61:17:7d:c4:86:4b:
97:88:ae:c2:3d:bb:f9:72:44:87:68:88:76:2d:58:4e:86:a4:
2c:0d:da:ab:c9:a8:40:d8:9d:85:58:d1:75:c3:1d:3a:dd:a0:
4c:90:bb:b4:a4:73:10:6e:a7:ef:64:c7:d3:19:a3:4f:35:0b:
68:85:76:54:49:ef:43:3a:99:07:ed:6e:b2:11:0d:d0:46:3c:
e7:41:1e:48
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZX2sLMQT2/IhFP6xMOdg9L5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh
N2U1NjYwHhcNMjUwNDAyMTMyODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmFjNDI5ODA0ZjUxMmY5MjkxN2Y3NGNlZDVmMDFkMTY2NzYyNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfcG812zqmYjtx5lhD1NKbLLPzOF
/B4YTzjEH24cVqSwNOCatddzknG5APYau54aSGteWUgZx59q5+Y0ZJGvAMsw2hoc
szvtYPro0rk4I4FB/JYmdnu3ALplSnbseZWP24maB5+blqqEu/zi69jsgT7TDtQu
gtBL9Xkv4si7rx0B1AUUDgltXmivktiPwAS3DR4veWUY6bfGrdQorCHGVAAJi456
FPpcdMGzZf77/nsOqGSVVlN0fu7Nine/FivUOOxcir7yZGYy5W/Z0ut4VSA4kYX/
ttFT1NsQpnV2iWT5//OjTcch5EOaNaWVoZeHOHlhoRIONWthkQ0peyPItQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFH+sQpgE9RL5KRf3TO1fAdFmdic2MB8GA1UdIwQY
MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt
OTRlZmJmNWNlY2Q0LzEvZjZ4Q21BVDFFdmtwRl9kTTdWOEIwV1oySnpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0
LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQBW+Q0AwQC
W+RoAwQAW+XlAwQBwRlkAwQBw1gsAwQBw24UMA8EAgACMAkDBwAgAQZ8EqAwDQYJ
KoZIhvcNAQELBQADggEBAA9McXo8pwoFiWu8mqsvB70YN/snYBJ2FjwaVXokCwKS
HvCw7D+stbQv+WS/bIfMpjspmgIu0H0lxI/buzZE856stAh4MP67MxtyX3Hzv3ek
oi58Dg0CVTuoWTvttwPWp4Oo5J9BwPp+Ue3AFoHn2IYsJ8Z471Nk6LSsvCnWfnMH
EcB1XgC/cJiQ5uDWz99y8RUEFT0kARlqwqBf9C6Lgr3ydw3IRFIx+JE5czkLgWEX
fcSGS5eIrsI9u/lyRIdoiHYtWE6GpCwN2qvJqEDYnYVY0XXDHTrdoEyQu7SkcxBu
p+9kx9MZo081C2iFdlRJ70M6mQftbrIRDdBGPOdBHkg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net