Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa
File: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (raw, json)
Hash identifier: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=
Subject key identifier: D2:BC:0E:61:D3:D7:9B:74:85:DE:69:5A:30:54:A4:C6:97:C1:0E:3F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 0194252170953921BDF229C50BDE1E923D8B
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205365
IP address blocks: 195.191.80.0/24 maxlen: 24
195.191.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:70:95:39:21:bd:f2:29:c5:0b:de:1e:92:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2bc0e61d3d79b7485de695a3054a4c697c10e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:25:79:d9:50:df:65:49:8e:9e:05:5b:31:
92:c8:43:f8:cb:f2:80:69:ac:68:99:b1:20:c2:06:
06:e4:04:18:62:27:17:59:5b:b2:14:34:d0:27:c4:
06:cf:2f:e3:53:c7:08:17:23:02:bd:5a:5a:ae:4f:
4d:79:4b:67:0d:17:e0:60:5e:dd:5b:00:e6:3b:c7:
00:b2:31:22:8f:3b:19:d8:01:5e:a1:75:c7:b3:f5:
45:54:c7:18:3f:da:9b:60:12:49:20:ad:a4:8d:ec:
dd:c2:ce:44:c8:3c:a6:6e:6d:27:bf:e9:65:68:12:
30:dd:15:d5:f9:cd:dd:eb:87:c9:17:37:0e:65:32:
71:a2:34:31:c6:fe:03:07:d6:d7:fe:8f:72:e7:e6:
4f:87:e8:86:95:fc:bd:c8:81:33:84:e6:97:f0:bc:
97:a4:d7:71:e2:2f:22:32:91:70:20:ed:04:30:4b:
d2:53:b7:37:12:fd:b7:e4:a6:30:e2:e4:c0:4f:bc:
5d:ac:23:48:59:1d:07:a6:19:23:46:62:ea:57:ae:
8e:8d:2a:75:2c:ae:52:25:11:ec:4f:9d:7a:2f:2a:
94:65:ce:96:b0:80:c0:61:c8:aa:b0:b1:3b:cd:8f:
79:cf:d5:ff:a8:0a:71:f0:b7:be:fe:61:9d:0f:5a:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BC:0E:61:D3:D7:9B:74:85:DE:69:5A:30:54:A4:C6:97:C1:0E:3F
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.80.0/23
Signature Algorithm: sha256WithRSAEncryption
11:70:e4:a9:7f:7f:51:a9:fb:f1:64:0d:c3:ca:97:ea:72:f7:
6f:2c:43:52:02:72:d5:68:2c:c5:c8:09:55:26:90:10:52:31:
72:b6:c6:bc:2f:ea:11:87:d8:0a:44:57:a9:09:a3:70:d4:f4:
4c:8f:85:d1:7e:54:2c:6b:20:c7:59:6e:7e:9c:4a:4a:6b:4e:
ab:7a:d2:89:32:cb:ab:19:6a:d5:a1:72:26:e8:21:25:43:d9:
18:2a:81:bc:8a:4a:ce:5e:0b:4e:bc:89:f2:b7:03:31:00:cc:
38:ae:8a:2d:4e:b4:18:57:71:d8:62:9f:c1:cf:38:79:f5:79:
19:2b:f3:d4:a6:15:ad:48:db:51:04:ed:c3:33:ef:9a:42:19:
1a:30:eb:69:bf:20:7a:38:34:69:89:9a:9a:b1:7b:db:fa:4a:
6c:0b:dc:f4:c9:32:ad:66:6c:55:6b:a1:83:99:23:7a:b9:b9:
47:86:0f:c9:ee:bb:84:98:09:e8:72:32:fe:47:fa:be:2a:ef:
99:b3:02:27:1f:b0:6d:09:a7:9e:53:59:36:3b:0e:1d:34:d6:
1b:6c:ec:67:12:a8:3c:ae:f5:c8:75:55:0f:df:7a:f4:90:46:
7f:cd:26:b5:9d:df:f2:47:56:c5:3e:d7:52:e5:1d:04:f6:c9:
9d:14:83:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIXCVOSG98inFC94ekj2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw
NDc3OWYwHhcNMjUwMTAyMDM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmJjMGU2MWQzZDc5Yjc0ODVkZTY5NWEzMDU0YTRjNjk3YzEwZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtREledlQ32VJjp4FWzGSyEP4y/KA
aaxombEgwgYG5AQYYicXWVuyFDTQJ8QGzy/jU8cIFyMCvVpark9NeUtnDRfgYF7d
WwDmO8cAsjEijzsZ2AFeoXXHs/VFVMcYP9qbYBJJIK2kjezdws5EyDymbm0nv+ll
aBIw3RXV+c3d64fJFzcOZTJxojQxxv4DB9bX/o9y5+ZPh+iGlfy9yIEzhOaX8LyX
pNdx4i8iMpFwIO0EMEvSU7c3Ev235KYw4uTAT7xdrCNIWR0HphkjRmLqV66OjSp1
LK5SJRHsT516LyqUZc6WsIDAYciqsLE7zY95z9X/qApx8Le+/mGdD1pzwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNK8DmHT15t0hd5pWjBUpMaXwQ4/MB8GA1UdIwQY
MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt
ZjI2MWZlNTE2OTUxLzEvMHJ3T1lkUFhtM1NGM21sYU1GU2t4cGZCRGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx
LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79QMA0G
CSqGSIb3DQEBCwUAA4IBAQARcOSpf39RqfvxZA3DypfqcvdvLENSAnLVaCzFyAlV
JpAQUjFytsa8L+oRh9gKRFepCaNw1PRMj4XRflQsayDHWW5+nEpKa06retKJMsur
GWrVoXIm6CElQ9kYKoG8ikrOXgtOvInytwMxAMw4rootTrQYV3HYYp/Bzzh59XkZ
K/PUphWtSNtRBO3DM++aQhkaMOtpvyB6ODRpiZqasXvb+kpsC9z0yTKtZmxVa6GD
mSN6ublHhg/J7ruEmAnocjL+R/q+Ku+ZswInH7BtCaeeU1k2Ow4dNNYbbOxnEqg8
rvXIdVUP33r0kEZ/zSa1nd/yR1bFPtdS5R0E9smdFINt
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net