Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Twe7Fv4nwXN3Yvo6sdsNd1OD-5w.roa
File: Twe7Fv4nwXN3Yvo6sdsNd1OD-5w.roa (raw, json)
Hash identifier: 4lo0ynCIlfcPLfz2Wh3EvLLTpi/1ckZykqTqj0mWUMc=
Subject key identifier: 4F:07:BB:16:FE:27:C1:73:77:62:FA:3A:B1:DB:0D:77:53:83:FB:9C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019624BFEC3E0616EAF81D4AB67BE4D8DEBA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Twe7Fv4nwXN3Yvo6sdsNd1OD-5w.roa
Signing time: Fri 11 Apr 2025 12:07:59 +0000
ROA not before: Fri 11 Apr 2025 12:07:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 45.138.157.0/24 maxlen: 24
193.201.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:bf:ec:3e:06:16:ea:f8:1d:4a:b6:7b:e4:d8:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Apr 11 12:07:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f07bb16fe27c1737762fa3ab1db0d775383fb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:09:43:9d:16:b6:1d:e3:b5:c4:ae:0b:53:
0f:81:c8:66:0a:48:58:76:81:9a:86:71:f3:9d:fc:
b4:40:5d:62:25:9e:4c:2a:40:6c:55:86:09:ca:18:
5a:f9:19:c0:9a:4a:b8:4a:1b:6b:c1:8a:d4:67:06:
16:d9:f5:ad:ed:a5:43:b6:06:ee:02:28:dd:dc:ac:
fc:55:d3:1d:70:a8:d4:4a:53:9f:75:5f:8c:01:9c:
cf:ec:34:65:5d:78:99:86:f2:d8:18:59:e0:81:d7:
68:f4:e5:f3:59:19:ea:e1:2d:b7:7e:10:fb:1a:78:
1a:12:8b:75:6c:24:23:54:03:32:41:07:45:9b:b0:
a1:b5:0b:7b:b8:f5:bf:48:f8:eb:9f:9e:ea:eb:1d:
80:7d:9c:73:6a:0b:47:e4:57:da:4c:f5:5a:ae:f3:
49:49:09:89:fc:8a:07:38:54:bb:be:af:7e:6f:e9:
e6:0f:dc:98:a0:47:31:34:5e:7b:32:86:94:c0:85:
12:80:19:e0:ee:63:98:4e:87:58:b5:be:ae:e7:07:
ff:cc:68:3a:75:8d:cc:87:6c:67:55:68:7e:57:72:
e8:89:bf:17:e5:8d:19:62:91:12:83:2c:1d:3a:04:
e5:36:21:4f:89:7f:3b:77:60:6f:1a:67:75:75:dd:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:07:BB:16:FE:27:C1:73:77:62:FA:3A:B1:DB:0D:77:53:83:FB:9C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Twe7Fv4nwXN3Yvo6sdsNd1OD-5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.157.0/24
193.201.126.0/24
Signature Algorithm: sha256WithRSAEncryption
84:eb:95:a5:2d:91:a1:59:3b:e9:25:f8:35:62:bf:f7:a1:40:
68:22:00:bf:7f:cd:11:08:00:f2:9c:f0:06:60:01:1a:f3:cb:
66:76:78:a0:27:64:18:2e:2c:84:83:f5:41:7c:1c:b2:23:23:
ff:12:d8:cb:c4:7c:8e:b3:b7:a7:58:b1:3b:94:b5:a1:ba:b4:
c6:09:f6:dc:09:f6:ea:f5:f9:ae:0e:28:77:d5:0a:9a:02:08:
c4:24:e8:44:d1:8e:89:de:ef:6b:75:ab:6f:29:36:0a:d8:19:
9d:24:a0:4b:5c:83:43:60:c3:b7:72:dd:89:fa:df:13:50:3f:
50:33:1f:ca:45:29:51:23:4a:d1:e7:ca:8e:5e:d4:e1:5d:81:
7e:54:c9:91:a6:4f:d5:e4:f6:ee:51:1d:61:a4:ea:d0:6f:db:
55:95:62:58:0c:55:45:64:c9:64:df:0e:f0:69:ed:49:7a:ba:
6e:ac:a3:76:cf:43:ed:70:f4:7b:95:0a:09:d7:7f:e3:5e:5d:
9e:8f:4f:57:2f:8d:97:13:51:68:71:f4:30:d6:73:d5:c5:61:
88:a8:c7:3d:5d:d8:1e:d0:0a:c4:89:ef:fc:ae:89:70:2b:00:
86:dd:3e:94:79:87:51:fb:43:2e:67:47:69:e2:cb:49:32:10:
f9:a3:ba:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYkv+w+Bhbq+B1Ktnvk2N66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwNDExMTIwNzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjA3YmIxNmZlMjdjMTczNzc2MmZhM2FiMWRiMGQ3NzUzODNmYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAwJQ50Wth3jtcSuC1MPgchmCkhY
doGahnHznfy0QF1iJZ5MKkBsVYYJyhha+RnAmkq4ShtrwYrUZwYW2fWt7aVDtgbu
Aijd3Kz8VdMdcKjUSlOfdV+MAZzP7DRlXXiZhvLYGFnggddo9OXzWRnq4S23fhD7
GngaEot1bCQjVAMyQQdFm7ChtQt7uPW/SPjrn57q6x2AfZxzagtH5FfaTPVarvNJ
SQmJ/IoHOFS7vq9+b+nmD9yYoEcxNF57MoaUwIUSgBng7mOYTodYtb6u5wf/zGg6
dY3Mh2xnVWh+V3Loib8X5Y0ZYpESgywdOgTlNiFPiX87d2BvGmd1dd1vXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE8Huxb+J8Fzd2L6OrHbDXdTg/ucMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvVHdlN0Z2NG53WE4zWXZvNnNkc05kMU9ELTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYqdAwQA
wcl+MA0GCSqGSIb3DQEBCwUAA4IBAQCE65WlLZGhWTvpJfg1Yr/3oUBoIgC/f80R
CADynPAGYAEa88tmdnigJ2QYLiyEg/VBfByyIyP/EtjLxHyOs7enWLE7lLWhurTG
CfbcCfbq9fmuDih31QqaAgjEJOhE0Y6J3u9rdatvKTYK2BmdJKBLXINDYMO3ct2J
+t8TUD9QMx/KRSlRI0rR58qOXtThXYF+VMmRpk/V5PbuUR1hpOrQb9tVlWJYDFVF
ZMlk3w7wae1JerpurKN2z0PtcPR7lQoJ13/jXl2ej09XL42XE1FocfQw1nPVxWGI
qMc9Xdge0ArEie/8rolwKwCG3T6UeYdR+0MuZ0dp4stJMhD5o7qJ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:38 2025 by rpki-client on console.sobornost.net