Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/_rfOVyo7DuPsLTQU__hvST7kgv0.roa
File: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (raw, json)
Hash identifier: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=
Subject key identifier: FE:B7:CE:57:2A:3B:0E:E3:EC:2D:34:14:FF:F8:6F:49:3E:E4:82:FD
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 0195CD450E41F72D990F6612400C2A8FCF9D
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/_rfOVyo7DuPsLTQU__hvST7kgv0.roa
Signing time: Tue 25 Mar 2025 12:26:49 +0000
ROA not before: Tue 25 Mar 2025 12:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13251
IP address blocks: 213.179.64.0/24 maxlen: 24
213.179.65.0/24 maxlen: 24
213.179.66.0/24 maxlen: 24
213.179.67.0/24 maxlen: 24
213.179.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:45:0e:41:f7:2d:99:0f:66:12:40:0c:2a:8f:cf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Mar 25 12:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feb7ce572a3b0ee3ec2d3414fff86f493ee482fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e6:93:92:a9:89:89:ce:fe:7a:55:b0:3a:15:
10:7e:28:93:4e:97:ce:93:5d:ef:cc:ae:6a:94:3e:
e0:35:b4:9c:42:f3:98:16:21:88:c3:96:47:71:d5:
dc:81:e9:ab:0e:24:e5:00:15:0b:c6:db:42:d2:87:
04:6f:84:6e:c2:a7:0e:d0:71:83:c3:8c:96:0a:76:
b8:0d:83:f5:32:b4:d2:83:a9:85:85:e9:c6:77:09:
f4:64:07:2d:66:27:24:d9:77:59:99:f0:05:db:25:
39:5a:6d:d1:ae:53:5b:bc:5b:7e:1e:8f:be:a1:3f:
3c:98:6f:49:0e:de:af:bb:9d:21:2e:cf:9d:3e:71:
46:63:f7:b7:f6:04:0b:4e:83:ca:c7:4c:11:c4:8c:
e9:9c:1f:a8:98:f9:32:0c:41:09:a9:7c:de:b4:af:
10:6d:6e:c4:45:ec:47:71:87:73:f9:1a:7d:ba:c1:
82:26:db:ee:bd:5a:38:36:7a:80:91:70:59:e1:cd:
62:b1:8a:c0:2b:d8:61:36:96:ae:35:b6:63:ae:ea:
84:01:c7:38:9b:1f:87:eb:53:94:5e:a3:5b:cf:fb:
6d:06:c7:cc:7a:36:57:cf:48:c1:8d:14:53:fa:cc:
32:03:3a:0c:ed:30:88:07:c1:23:9b:93:e9:0b:0e:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B7:CE:57:2A:3B:0E:E3:EC:2D:34:14:FF:F8:6F:49:3E:E4:82:FD
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/_rfOVyo7DuPsLTQU__hvST7kgv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.179.64.0-213.179.68.255
Signature Algorithm: sha256WithRSAEncryption
97:9f:25:63:34:5d:b2:88:20:ca:fc:8d:8f:e0:bc:ee:e7:70:
d9:14:23:88:10:38:b4:76:84:f1:92:cc:48:05:bd:86:aa:02:
a0:ba:b4:29:87:e7:ab:8d:d5:16:6f:44:50:ae:5d:d0:25:1c:
2b:b4:c8:9e:0f:62:63:46:b0:ff:88:5f:8c:cc:cf:4b:f3:be:
ca:ea:45:62:d9:96:50:02:ce:cc:93:7f:9a:38:72:4d:3e:38:
0c:0c:39:75:d0:78:7b:77:f7:f8:05:b1:41:df:fc:63:d7:01:
df:50:53:eb:58:01:5b:95:d8:16:8f:7c:36:4e:c0:92:27:19:
59:c2:0b:0f:b9:52:47:62:8d:e2:b5:84:ad:6c:2d:63:fd:a8:
cb:8f:c3:72:3c:b8:2a:fb:38:f4:a7:b7:6d:72:56:93:52:82:
7f:22:7e:97:55:41:86:87:7e:4e:08:3f:20:90:ce:e5:51:f3:
1a:63:c4:44:0b:16:43:18:bf:71:4d:94:25:dc:c1:0c:c5:c5:
10:9a:0f:2f:6d:61:9e:09:3e:df:18:5e:32:40:04:fc:58:d9:
9f:d8:82:6d:8f:08:96:1d:c4:8c:e9:8f:aa:9a:4c:77:d1:2b:
ca:85:b5:1d:07:a5:3a:f0:f6:ff:54:8a:0a:df:c6:0e:3d:71:
61:d4:34:d8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZXNRQ5B9y2ZD2YSQAwqj8+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz
Y2U3ODIwHhcNMjUwMzI1MTIyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWI3Y2U1NzJhM2IwZWUzZWMyZDM0MTRmZmY4NmY0OTNlZTQ4MmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OaTkqmJic7+elWwOhUQfiiTTpfO
k13vzK5qlD7gNbScQvOYFiGIw5ZHcdXcgemrDiTlABULxttC0ocEb4RuwqcO0HGD
w4yWCna4DYP1MrTSg6mFhenGdwn0ZActZick2XdZmfAF2yU5Wm3RrlNbvFt+Ho++
oT88mG9JDt6vu50hLs+dPnFGY/e39gQLToPKx0wRxIzpnB+omPkyDEEJqXzetK8Q
bW7ERexHcYdz+Rp9usGCJtvuvVo4NnqAkXBZ4c1isYrAK9hhNpauNbZjruqEAcc4
mx+H61OUXqNbz/ttBsfMejZXz0jBjRRT+swyAzoM7TCIB8Ejm5PpCw4jdQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFP63zlcqOw7j7C00FP/4b0k+5IL9MB8GA1UdIwQY
MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt
YWQ0YTFkYTM5M2ExLzEvX3JmT1Z5bzdEdVBzTFRRVV9faHZTVDdrZ3YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex
LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAbVs0AD
BADVs0QwDQYJKoZIhvcNAQELBQADggEBAJefJWM0XbKIIMr8jY/gvO7ncNkUI4gQ
OLR2hPGSzEgFvYaqAqC6tCmH56uN1RZvRFCuXdAlHCu0yJ4PYmNGsP+IX4zMz0vz
vsrqRWLZllACzsyTf5o4ck0+OAwMOXXQeHt39/gFsUHf/GPXAd9QU+tYAVuV2BaP
fDZOwJInGVnCCw+5UkdijeK1hK1sLWP9qMuPw3I8uCr7OPSnt21yVpNSgn8ifpdV
QYaHfk4IPyCQzuVR8xpjxEQLFkMYv3FNlCXcwQzFxRCaDy9tYZ4JPt8YXjJABPxY
2Z/Ygm2PCJYdxIzpj6qaTHfRK8qFtR0HpTrw9v9Uigrfxg49cWHUNNg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net