Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/p14blZvuyTFQl4sjyccJsTsvOjE.roa
File: p14blZvuyTFQl4sjyccJsTsvOjE.roa (raw, json)
Hash identifier: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=
Subject key identifier: A7:5E:1B:95:9B:EE:C9:31:50:97:8B:23:C9:C7:09:B1:3B:2F:3A:31
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 01941FFA70A305BEC4B350CA039C88D73636
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/p14blZvuyTFQl4sjyccJsTsvOjE.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59472
IP address blocks: 5.152.160.0/21 maxlen: 24
185.94.68.0/22 maxlen: 24
2a01:8f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:70:a3:05:be:c4:b3:50:ca:03:9c:88:d7:36:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a75e1b959beec93150978b23c9c709b13b2f3a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:95:a6:32:b0:45:1c:cd:61:b1:4d:85:14:
f1:b6:d6:56:a7:07:cc:86:9c:bf:cd:fb:ce:ca:15:
7a:74:f8:26:ae:0e:b4:9e:08:3b:55:83:52:97:ce:
25:be:cb:30:aa:24:e6:fb:66:58:25:8e:c8:9f:6e:
69:8b:b5:fa:63:36:4f:88:03:e3:d6:1a:50:3f:7f:
ae:00:e0:75:34:1b:a2:17:da:de:5f:78:24:07:b7:
f6:08:74:d0:81:0e:56:df:a6:c4:e3:14:05:b0:38:
02:75:30:9b:01:1c:ba:66:6e:39:d1:ba:39:36:f2:
87:42:c1:5e:5c:f6:2e:99:7b:e1:bb:e3:7b:9f:e8:
f7:a8:b1:09:dc:c5:a7:40:c8:b6:94:d6:5d:8c:fc:
ae:ba:7d:5a:a7:f3:d5:7c:30:d7:f4:ae:1a:07:2f:
74:01:d3:49:1c:08:e7:73:28:8f:72:88:0c:36:b3:
56:5b:21:93:51:f3:d2:0c:36:24:00:10:ce:3f:2a:
d4:26:7e:bc:7e:87:d1:b5:96:12:fb:e4:47:c9:c6:
03:6c:47:e1:8f:7a:f1:2e:10:0f:51:ab:ef:49:92:
7e:28:59:bf:fa:c0:fc:76:e5:63:f4:4f:be:a3:fc:
11:c2:93:69:5f:9f:3a:b1:98:a1:b5:81:d1:c6:68:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:1B:95:9B:EE:C9:31:50:97:8B:23:C9:C7:09:B1:3B:2F:3A:31
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/p14blZvuyTFQl4sjyccJsTsvOjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.160.0/21
185.94.68.0/22
IPv6:
2a01:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
22:48:62:a5:77:00:b7:5f:02:e3:f5:68:9e:96:05:48:4e:1a:
06:a6:e3:59:f9:9f:54:b2:db:e2:a9:63:56:8b:ed:88:6d:a0:
b6:bf:b6:4d:e3:5e:dc:a2:27:ea:40:bc:28:c4:2c:19:47:8a:
63:8f:cc:44:63:87:e5:55:cf:79:ee:0d:c2:54:32:93:d3:eb:
64:00:fc:b5:be:56:23:4b:6d:48:48:d2:c1:f9:c1:5e:7d:2b:
f3:9c:6b:f0:85:71:ef:ec:2a:87:11:87:03:47:a0:3b:81:85:
9f:8c:41:96:4b:3b:20:58:99:97:37:44:ff:96:1f:a1:0f:f6:
48:3d:02:8c:ff:71:4c:e6:01:6f:83:a7:9e:22:c1:d9:93:e4:
31:73:31:43:b9:ca:72:47:4a:82:f5:1c:22:d1:25:b7:f7:0e:
3c:7d:19:7a:5d:d1:f9:04:15:57:ff:89:31:fc:40:4b:54:db:
a4:86:35:84:82:2a:3d:49:8e:9a:4d:a2:a2:54:38:d9:f1:c9:
67:e6:22:78:87:f1:ea:03:22:cc:1b:0e:f4:15:8d:44:05:65:
d9:03:54:ec:db:47:17:a1:96:22:ce:f4:35:8c:d6:1f:ae:04:
b0:f7:15:01:36:46:c0:21:53:b7:9f:20:0f:66:de:33:75:bc:
27:75:5c:07
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQf+nCjBb7Es1DKA5yI1zY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NmIwMDU4OTcxZDI5OTNhNTdhNWIxY2I2Y2RmZjVkMmVi
NDRlM2YwHhcNMjUwMTAxMDM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzVlMWI5NTliZWVjOTMxNTA5NzhiMjNjOWM3MDliMTNiMmYzYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIuVpjKwRRzNYbFNhRTxttZWpwfM
hpy/zfvOyhV6dPgmrg60ngg7VYNSl84lvsswqiTm+2ZYJY7In25pi7X6YzZPiAPj
1hpQP3+uAOB1NBuiF9reX3gkB7f2CHTQgQ5W36bE4xQFsDgCdTCbARy6Zm450bo5
NvKHQsFeXPYumXvhu+N7n+j3qLEJ3MWnQMi2lNZdjPyuun1ap/PVfDDX9K4aBy90
AdNJHAjncyiPcogMNrNWWyGTUfPSDDYkABDOPyrUJn68fofRtZYS++RHycYDbEfh
j3rxLhAPUavvSZJ+KFm/+sD8duVj9E++o/wRwpNpX586sZihtYHRxmiMhwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKdeG5Wb7skxUJeLI8nHCbE7LzoxMB8GA1UdIwQY
MBaAFElrAFiXHSmTpXpbHLbN/10utE4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1dzQVdKY2RLWk9sZWxzY3RzM19YUzYwVGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kNTVkYzEtNzYwNC00YzhkLWExYjQt
MzlmOGUyYjQ2NzVkLzEvcDE0YmxadnV5VEZRbDRzanljY0pzVHN2T2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kNTVkYzEtNzYwNC00YzhkLWExYjQtMzlmOGUyYjQ2NzVk
LzEvU1dzQVdKY2RLWk9sZWxzY3RzM19YUzYwVGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBZigAwQC
uV5EMA0EAgACMAcDBQAqAY9AMA0GCSqGSIb3DQEBCwUAA4IBAQAiSGKldwC3XwLj
9WielgVIThoGpuNZ+Z9UstviqWNWi+2IbaC2v7ZN417coifqQLwoxCwZR4pjj8xE
Y4flVc957g3CVDKT0+tkAPy1vlYjS21ISNLB+cFefSvznGvwhXHv7CqHEYcDR6A7
gYWfjEGWSzsgWJmXN0T/lh+hD/ZIPQKM/3FM5gFvg6eeIsHZk+QxczFDucpyR0qC
9Rwi0SW39w48fRl6XdH5BBVX/4kx/EBLVNukhjWEgio9SY6aTaKiVDjZ8cln5iJ4
h/HqAyLMGw70FY1EBWXZA1Ts20cXoZYizvQ1jNYfrgSw9xUBNkbAIVO3nyAPZt4z
dbwndVwH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net