Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa
File: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (raw, json)
Hash identifier: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=
Subject key identifier: 74:27:92:78:4B:C9:F3:47:E2:0C:B2:43:37:57:C6:B2:85:5B:2B:E9
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 0195CE706F6922765F34D13B9DEBB4A6CE3B
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa
Signing time: Tue 25 Mar 2025 17:53:49 +0000
ROA not before: Tue 25 Mar 2025 17:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59829
IP address blocks: 45.133.242.0/24 maxlen: 24
94.176.97.0/24 maxlen: 24
185.131.206.0/24 maxlen: 24
212.6.50.0/24 maxlen: 24
2a0c:2f40::/29 maxlen: 29
2a12:b340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:70:6f:69:22:76:5f:34:d1:3b:9d:eb:b4:a6:ce:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Mar 25 17:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=742792784bc9f347e20cb2433757c6b2855b2be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:d6:23:b7:fc:7f:be:37:8e:a8:90:57:54:
d5:79:49:5b:31:eb:c1:03:8e:49:06:0e:39:53:e1:
23:80:47:90:53:13:dd:98:c4:e8:f6:78:4b:1a:e4:
97:40:af:e8:79:a2:79:5d:5d:27:ef:af:1e:8f:6c:
38:c1:c5:f2:c2:8c:25:55:3e:01:41:fd:e5:c9:18:
37:1c:67:80:c5:9b:a7:b5:fb:d6:09:b7:99:32:9c:
dc:06:18:5b:57:31:22:53:d4:a4:09:71:b6:86:f9:
fb:1f:2a:f1:46:b8:21:7e:43:37:48:b1:69:cf:b9:
6c:d3:0f:d9:7e:2e:8e:38:5a:aa:8b:9c:7f:e1:0d:
5d:3f:33:42:09:4b:3f:56:88:6d:59:4f:f5:1b:a8:
1f:a3:76:36:2a:51:e8:a1:03:e8:96:c3:e9:08:01:
06:85:98:5c:39:d2:69:16:eb:30:4e:5f:12:00:8d:
21:b2:dc:44:1f:3e:f9:3f:db:90:cf:cf:05:a1:ce:
96:d4:59:f0:95:76:c2:48:aa:1e:9b:a1:fe:65:62:
9a:5e:f2:76:85:98:6d:7a:eb:d9:51:f3:de:f6:0d:
ea:d7:34:1c:b5:ef:8b:96:33:4d:3e:65:64:02:d2:
22:d4:9a:49:54:f7:98:2f:32:d1:f3:fa:e4:90:93:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:92:78:4B:C9:F3:47:E2:0C:B2:43:37:57:C6:B2:85:5B:2B:E9
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.242.0/24
94.176.97.0/24
185.131.206.0/24
212.6.50.0/24
IPv6:
2a0c:2f40::/29
2a12:b340::/29
Signature Algorithm: sha256WithRSAEncryption
5c:81:e3:83:80:25:77:9a:48:45:85:db:f8:34:e1:20:a0:9e:
26:72:08:e5:1c:b8:06:30:f2:e7:f1:bc:78:8a:92:82:9e:a2:
b5:b8:63:30:75:5b:de:95:ba:c0:5e:34:d6:63:46:71:fc:4e:
c1:2e:7b:44:01:62:d9:2a:c2:90:99:b4:eb:a8:c2:8c:36:a0:
06:ad:f5:7a:3a:0f:6a:84:a2:11:da:ef:2a:9c:32:2c:05:ff:
0b:49:ad:2d:b6:65:7a:a0:35:ff:b8:85:dc:87:86:b8:93:28:
e0:84:c2:dc:91:84:c6:35:c5:68:da:a7:ce:d7:ca:f1:3c:fb:
c9:fc:79:26:74:cf:05:51:09:b0:0a:a2:5e:cf:83:19:1e:7e:
89:d7:28:94:88:a5:e9:60:c9:08:57:de:ef:77:89:5d:77:07:
49:8a:e9:60:5c:9a:0c:b6:35:98:64:38:57:92:92:17:02:f1:
03:9b:95:e1:06:19:dd:33:26:b4:0a:e4:20:b0:b3:18:51:63:
ba:09:cd:23:f9:2a:86:2f:a7:2e:d6:b0:90:0b:1c:f8:a1:90:
ae:b4:89:4f:f8:ab:87:e3:2a:d8:6e:9a:90:44:5b:f9:5e:72:
af:0f:e7:93:a8:86:c0:e8:78:47:ea:be:87:38:46:df:db:bc:
f6:0a:93:31
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZXOcG9pInZfNNE7neu0ps47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm
MjQzNTUwHhcNMjUwMzI1MTc1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDI3OTI3ODRiYzlmMzQ3ZTIwY2IyNDMzNzU3YzZiMjg1NWIyYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JzWI7f8f743jqiQV1TVeUlbMevB
A45JBg45U+EjgEeQUxPdmMTo9nhLGuSXQK/oeaJ5XV0n768ej2w4wcXywowlVT4B
Qf3lyRg3HGeAxZuntfvWCbeZMpzcBhhbVzEiU9SkCXG2hvn7HyrxRrghfkM3SLFp
z7ls0w/Zfi6OOFqqi5x/4Q1dPzNCCUs/VohtWU/1G6gfo3Y2KlHooQPolsPpCAEG
hZhcOdJpFuswTl8SAI0hstxEHz75P9uQz88Foc6W1FnwlXbCSKoem6H+ZWKaXvJ2
hZhteuvZUfPe9g3q1zQcte+LljNNPmVkAtIi1JpJVPeYLzLR8/rkkJODqQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFHQnknhLyfNH4gyyQzdXxrKFWyvpMB8GA1UdIwQY
MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt
ZDgxNTJiNTE1N2Q4LzEvZENlU2VFdko4MGZpRExKRE4xZkdzb1ZiSy1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4
LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQALYXyAwQA
XrBhAwQAuYPOAwQA1AYyMBQEAgACMA4DBQMqDC9AAwUDKhKzQDANBgkqhkiG9w0B
AQsFAAOCAQEAXIHjg4Ald5pIRYXb+DThIKCeJnII5Ry4BjDy5/G8eIqSgp6itbhj
MHVb3pW6wF401mNGcfxOwS57RAFi2SrCkJm066jCjDagBq31ejoPaoSiEdrvKpwy
LAX/C0mtLbZleqA1/7iF3IeGuJMo4ITC3JGExjXFaNqnztfK8Tz7yfx5JnTPBVEJ
sAqiXs+DGR5+idcolIil6WDJCFfe73eJXXcHSYrpYFyaDLY1mGQ4V5KSFwLxA5uV
4QYZ3TMmtArkILCzGFFjugnNI/kqhi+nLtawkAsc+KGQrrSJT/irh+Mq2G6akERb
+V5yrw/nk6iGwOh4R+q+hzhG39u89gqTMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net