Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/8_cQRjzqzZHtBUadp-m1RHbfYtA.roa
File: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (raw, json)
Hash identifier: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=
Subject key identifier: F3:F7:10:46:3C:EA:CD:91:ED:05:46:9D:A7:E9:B5:44:76:DF:62:D0
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019426D9B865A713C741C1E94DB7599B88FA
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/8_cQRjzqzZHtBUadp-m1RHbfYtA.roa
Signing time: Thu 02 Jan 2025 11:49:50 +0000
ROA not before: Thu 02 Jan 2025 11:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57389
IP address blocks: 82.150.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b8:65:a7:13:c7:41:c1:e9:4d:b7:59:9b:88:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3f710463ceacd91ed05469da7e9b54476df62d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:25:30:10:a1:8b:ab:e4:62:97:ef:b0:d0:
1c:1b:95:5c:1e:77:c8:b9:2f:2c:f2:6c:b6:21:e5:
06:2c:08:0d:6e:68:ac:7a:95:e0:18:d8:dd:8b:fe:
d6:4e:46:05:be:5a:66:65:17:f0:07:8f:36:a5:35:
55:1b:cd:8a:c4:85:40:1a:3d:30:16:f0:59:40:df:
67:f2:c8:e2:ae:99:8a:73:f3:56:ef:9c:2e:88:e3:
cd:57:58:b2:7e:35:70:78:ca:67:b0:84:31:a6:5e:
82:88:2e:ae:b1:4f:14:f0:2b:d0:ab:f2:a2:1a:0b:
f3:93:fd:7f:53:cf:d5:b1:b9:42:ad:44:a2:09:12:
5e:81:ee:79:18:95:52:0f:4d:bd:55:bc:93:8b:84:
32:71:3b:75:bc:25:3b:59:58:e4:5c:3e:1c:97:2b:
92:2b:25:fa:e1:94:87:fe:9a:64:cd:ab:14:95:97:
f5:5c:06:0f:25:73:a9:c0:e0:df:d1:3d:e4:30:f1:
a8:0b:65:cf:ec:6e:d2:3b:e9:b9:31:ef:b9:13:c8:
04:b8:5f:3f:2f:11:38:71:ce:33:5b:48:68:45:d7:
10:57:d0:6a:4e:a2:1f:db:58:01:37:d2:33:dd:54:
16:64:a2:73:b6:0d:a0:30:14:ff:4b:f5:fd:67:cf:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:10:46:3C:EA:CD:91:ED:05:46:9D:A7:E9:B5:44:76:DF:62:D0
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/8_cQRjzqzZHtBUadp-m1RHbfYtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.62.0/24
Signature Algorithm: sha256WithRSAEncryption
32:28:01:28:84:bd:69:15:b4:9d:ee:51:ad:66:e5:6f:b5:2d:
f9:25:aa:77:b3:56:2c:50:3a:3e:e2:b4:a9:84:8f:8a:dd:5a:
e7:4e:0d:4b:bf:7a:95:d6:41:ee:26:01:0b:09:09:69:37:96:
c7:59:47:3c:ed:a4:9c:53:39:fb:86:0b:1a:e6:de:a9:a9:83:
fa:52:b8:52:8e:13:16:74:af:d9:4c:cb:47:d7:cb:78:5f:95:
04:98:01:1d:b7:cb:09:6f:95:b4:58:d7:09:a4:00:e0:ed:76:
08:13:90:6f:23:66:5d:46:88:8a:a3:39:c4:f2:2b:96:50:50:
51:a2:b8:df:ff:17:3a:7b:14:fd:b5:40:95:11:da:32:7d:9f:
53:b8:9a:3e:fe:75:fa:9c:12:3c:e2:26:b7:e4:a0:25:df:b4:
62:32:a3:1b:1f:15:be:1d:99:c4:8b:2d:6b:2f:ef:84:40:f3:
79:49:17:df:9b:30:0a:74:ad:30:d8:e2:d6:5b:84:f8:ce:7f:
9b:ab:b5:82:ed:e6:a9:ce:e2:6d:79:55:03:50:d6:47:f8:40:
7a:d6:ec:5b:2c:a0:d7:2b:98:33:19:28:a6:14:05:66:b0:ab:
4c:76:de:82:2e:42:32:4f:a1:93:0a:61:25:68:75:e3:ba:82:
28:29:29:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2bhlpxPHQcHpTbdZm4j6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm
OWUyMzMwHhcNMjUwMTAyMTE0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2Y3MTA0NjNjZWFjZDkxZWQwNTQ2OWRhN2U5YjU0NDc2ZGY2MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFQlMBChi6vkYpfvsNAcG5VcHnfI
uS8s8my2IeUGLAgNbmisepXgGNjdi/7WTkYFvlpmZRfwB482pTVVG82KxIVAGj0w
FvBZQN9n8sjirpmKc/NW75wuiOPNV1iyfjVweMpnsIQxpl6CiC6usU8U8CvQq/Ki
Ggvzk/1/U8/VsblCrUSiCRJege55GJVSD029VbyTi4QycTt1vCU7WVjkXD4clyuS
KyX64ZSH/ppkzasUlZf1XAYPJXOpwODf0T3kMPGoC2XP7G7SO+m5Me+5E8gEuF8/
LxE4cc4zW0hoRdcQV9BqTqIf21gBN9Iz3VQWZKJztg2gMBT/S/X9Z8+g0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPP3EEY86s2R7QVGnafptUR232LQMB8GA1UdIwQY
MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt
MGFjYzg5MmIxMWQyLzEvOF9jUVJqenF6Wkh0QlVhZHAtbTFSSGJmWXRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy
LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpY+MA0G
CSqGSIb3DQEBCwUAA4IBAQAyKAEohL1pFbSd7lGtZuVvtS35Jap3s1YsUDo+4rSp
hI+K3VrnTg1Lv3qV1kHuJgELCQlpN5bHWUc87aScUzn7hgsa5t6pqYP6UrhSjhMW
dK/ZTMtH18t4X5UEmAEdt8sJb5W0WNcJpADg7XYIE5BvI2ZdRoiKoznE8iuWUFBR
orjf/xc6exT9tUCVEdoyfZ9TuJo+/nX6nBI84ia35KAl37RiMqMbHxW+HZnEiy1r
L++EQPN5SRffmzAKdK0w2OLWW4T4zn+bq7WC7eapzuJteVUDUNZH+EB61uxbLKDX
K5gzGSimFAVmsKtMdt6CLkIyT6GTCmElaHXjuoIoKSm6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net