Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/wHg73xFUBpf9J7Sbkd5k-txeIuI.roa
File: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (raw, json)
Hash identifier: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=
Subject key identifier: C0:78:3B:DF:11:54:06:97:FD:27:B4:9B:91:DE:64:FA:DC:5E:22:E2
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 019424B2791987ED8EA0F1EF8C8D8F7ED004
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/wHg73xFUBpf9J7Sbkd5k-txeIuI.roa
Signing time: Thu 02 Jan 2025 01:47:43 +0000
ROA not before: Thu 02 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197289
IP address blocks: 95.215.132.0/22 maxlen: 22
185.18.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:79:19:87:ed:8e:a0:f1:ef:8c:8d:8f:7e:d0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Jan 2 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0783bdf11540697fd27b49b91de64fadc5e22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:67:13:1f:c3:d5:27:fa:1d:e6:a0:00:22:
56:9c:49:fe:4a:0a:26:8c:16:62:af:5d:d2:22:de:
ad:bd:b8:3e:d3:b8:3b:ba:99:7b:02:af:2f:66:c3:
ac:53:97:4b:d3:3e:0b:33:18:39:13:e6:58:4b:e9:
6a:1a:e5:cc:42:cb:37:c8:be:56:a0:13:62:9b:9f:
57:ed:2c:68:e8:d5:da:c5:ad:6e:ec:47:f6:4f:b4:
8d:63:71:f1:de:98:fb:23:40:73:1a:89:5c:f9:5b:
67:84:1a:2e:b6:d4:99:a0:ac:6e:6f:1c:42:d9:81:
58:8d:fa:2a:ca:0a:56:80:71:9d:e7:ad:22:94:8a:
86:49:72:e5:db:0c:30:5a:a3:3d:cf:18:7d:c9:01:
43:b2:fa:9e:34:88:f6:92:49:75:1d:0f:fe:ac:91:
fd:5b:90:2a:de:31:c6:61:d9:2b:dd:97:82:ba:ea:
b1:84:bd:f1:8a:c1:fb:09:e2:d3:03:36:47:0a:44:
13:10:c1:69:a6:bb:6a:d7:25:64:2c:f8:4d:27:c0:
9d:a8:86:5e:c9:43:2f:77:92:83:7f:e6:fc:fa:7a:
fb:81:e7:be:d1:c2:92:8c:20:6a:ab:a8:af:66:4f:
d5:24:7d:dc:3d:69:35:fb:14:e0:27:ce:3b:15:c0:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:3B:DF:11:54:06:97:FD:27:B4:9B:91:DE:64:FA:DC:5E:22:E2
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/wHg73xFUBpf9J7Sbkd5k-txeIuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.132.0/22
185.18.160.0/22
Signature Algorithm: sha256WithRSAEncryption
91:4e:ca:85:c1:3e:b4:dd:a2:fb:af:f9:b2:73:25:7d:fc:be:
e1:c1:b3:ff:7e:52:0a:23:ab:bb:d4:7b:06:63:d1:81:8e:1c:
bb:d2:63:1e:36:b7:66:e1:cf:f6:c2:1b:d4:70:68:39:65:33:
08:2d:b0:72:e9:63:02:0d:0a:fa:9e:02:f4:42:c5:0d:f5:9a:
64:29:f7:df:98:15:83:90:e4:90:67:98:6d:37:0f:4c:d6:44:
0d:2a:55:67:0f:0f:55:86:4c:ba:f6:70:3a:2b:6b:47:14:19:
ab:ea:dc:c5:db:ef:00:fe:8e:2d:18:2a:42:ab:60:e5:46:60:
ea:b2:af:9c:39:aa:65:35:5e:1f:5a:08:d6:f5:93:05:12:35:
c3:df:f6:3f:78:42:59:ab:98:84:57:b9:1b:73:da:25:cd:6a:
a1:ae:11:a4:b7:fb:4d:db:b5:10:4a:d1:ec:6d:e1:ff:37:2a:
88:9a:0a:3e:6f:a9:ad:ef:17:6b:81:3a:69:5d:57:9a:9a:4c:
a5:0a:bf:9e:ac:70:82:cf:c9:6c:14:60:ad:57:74:eb:dd:14:
1b:fb:8b:b6:49:55:79:45:03:4c:97:d7:f5:fa:c2:31:19:f4:
fd:c8:fd:02:e9:5b:7d:d8:eb:57:fe:13:c6:f7:27:79:3f:8e:
9e:31:31:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQksnkZh+2OoPHvjI2PftAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjUwMTAyMDE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDc4M2JkZjExNTQwNjk3ZmQyN2I0OWI5MWRlNjRmYWRjNWUyMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtupnEx/D1Sf6HeagACJWnEn+Sgom
jBZir13SIt6tvbg+07g7upl7Aq8vZsOsU5dL0z4LMxg5E+ZYS+lqGuXMQss3yL5W
oBNim59X7Sxo6NXaxa1u7Ef2T7SNY3Hx3pj7I0BzGolc+VtnhBouttSZoKxubxxC
2YFYjfoqygpWgHGd560ilIqGSXLl2wwwWqM9zxh9yQFDsvqeNIj2kkl1HQ/+rJH9
W5Aq3jHGYdkr3ZeCuuqxhL3xisH7CeLTAzZHCkQTEMFpprtq1yVkLPhNJ8CdqIZe
yUMvd5KDf+b8+nr7gee+0cKSjCBqq6ivZk/VJH3cPWk1+xTgJ847FcABBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMB4O98RVAaX/Se0m5HeZPrcXiLiMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvd0hnNzN4RlVCcGY5SjdTYmtkNWstdHhlSXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX9eEAwQC
uRKgMA0GCSqGSIb3DQEBCwUAA4IBAQCRTsqFwT603aL7r/mycyV9/L7hwbP/flIK
I6u71HsGY9GBjhy70mMeNrdm4c/2whvUcGg5ZTMILbBy6WMCDQr6ngL0QsUN9Zpk
KfffmBWDkOSQZ5htNw9M1kQNKlVnDw9Vhky69nA6K2tHFBmr6tzF2+8A/o4tGCpC
q2DlRmDqsq+cOaplNV4fWgjW9ZMFEjXD3/Y/eEJZq5iEV7kbc9olzWqhrhGkt/tN
27UQStHsbeH/NyqImgo+b6mt7xdrgTppXVeamkylCr+erHCCz8lsFGCtV3Tr3RQb
+4u2SVV5RQNMl9f1+sIxGfT9yP0C6Vt92OtX/hPG9yd5P46eMTEp
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net