Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa
File: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (raw, json)
Hash identifier: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=
Subject key identifier: 11:9F:71:70:FA:66:69:A8:83:76:68:39:0F:C5:E9:E3:B8:12:00:9C
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019421B1F58DC3193DF076FE33CF6DEF830E
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215946
IP address blocks: 185.120.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f5:8d:c3:19:3d:f0:76:fe:33:cf:6d:ef:83:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119f7170fa6669a8837668390fc5e9e3b812009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:b2:7e:7a:85:8c:2f:cb:a7:ec:8a:99:33:
38:86:c8:ba:79:83:d6:47:e3:56:ca:54:eb:a6:e5:
ee:0e:00:3a:08:37:ab:86:70:2e:ad:01:53:56:4a:
7a:1a:e6:9b:6e:88:ac:21:69:bc:9d:f7:a5:6d:4f:
46:c4:19:4a:6c:e6:12:44:4b:73:37:78:33:21:f1:
fd:8c:2d:16:63:fc:ae:3e:2f:d9:05:a9:b8:19:e0:
13:38:af:98:f8:0d:73:e5:9b:f5:ed:fb:99:6b:c2:
ba:3e:60:5f:3a:cb:7e:1a:c8:a8:30:23:53:01:49:
7c:5b:12:5c:eb:07:dc:ea:46:19:75:fd:91:33:18:
b7:07:f8:ff:fc:c5:42:ca:f7:d5:cd:59:dc:dd:7d:
78:c4:3e:e9:1e:c6:59:85:0e:f1:a2:d3:5e:d7:34:
6b:15:e4:0b:90:f2:e9:54:11:25:ba:6a:cf:1e:a9:
5f:66:79:44:a3:8a:8f:1b:0a:12:20:7a:f9:96:75:
9f:b1:2d:e3:8d:3f:61:48:06:d4:36:c5:89:72:82:
49:0b:20:24:41:4f:70:36:b5:1f:b2:69:b6:56:9f:
83:77:c2:55:ab:d5:84:64:af:3e:af:c7:f6:54:b4:
ef:67:31:91:9b:30:88:de:d3:86:9e:f0:01:25:a6:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9F:71:70:FA:66:69:A8:83:76:68:39:0F:C5:E9:E3:B8:12:00:9C
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c2:48:e2:5e:5d:71:cc:85:c3:9f:1b:49:f0:64:64:9f:df:
00:4f:6c:98:cd:05:1c:ef:5f:28:0c:0f:f9:7f:e5:3a:17:9c:
e0:20:3d:b9:99:39:51:88:94:76:a3:fe:e8:bf:38:cb:79:49:
de:31:61:71:52:66:3e:b9:4a:12:bf:d3:f0:b0:37:43:a1:a2:
27:3d:f1:8e:5c:35:19:f9:11:ee:94:70:19:41:b3:3d:db:bc:
a9:60:b5:b4:2b:3d:5f:4f:17:11:f1:6a:7d:f7:a0:fc:94:29:
06:31:c3:ba:fe:9a:58:be:75:1e:98:8b:64:18:d4:b7:b9:15:
bf:c6:75:4b:3a:94:e8:1f:8a:30:a1:48:31:83:4b:c7:3e:6e:
b9:0f:27:56:c9:4b:a9:12:4d:4a:c8:d3:49:52:4d:ba:00:39:
48:e0:25:dc:6d:37:ba:71:6a:57:f4:fc:5c:95:00:85:05:e3:
e3:c0:0e:6a:86:00:63:31:da:b3:2a:9c:1a:ab:b1:8d:0a:c8:
7b:70:d6:7f:60:20:0d:71:52:20:ff:99:6c:6f:4b:b5:2b:d8:
f1:0c:25:21:77:8c:13:79:bb:66:7e:a2:50:f4:0a:d4:be:f2:
70:db:97:f0:9a:1a:8f:ae:ad:14:22:2f:a8:1c:99:43:26:54:
2e:50:5a:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsfWNwxk98Hb+M89t74MOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk
NDE2MTUwHhcNMjUwMTAxMTE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTlmNzE3MGZhNjY2OWE4ODM3NjY4MzkwZmM1ZTllM2I4MTIwMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWqyfnqFjC/Lp+yKmTM4hsi6eYPW
R+NWylTrpuXuDgA6CDerhnAurQFTVkp6GuabboisIWm8nfelbU9GxBlKbOYSREtz
N3gzIfH9jC0WY/yuPi/ZBam4GeATOK+Y+A1z5Zv17fuZa8K6PmBfOst+GsioMCNT
AUl8WxJc6wfc6kYZdf2RMxi3B/j//MVCyvfVzVnc3X14xD7pHsZZhQ7xotNe1zRr
FeQLkPLpVBElumrPHqlfZnlEo4qPGwoSIHr5lnWfsS3jjT9hSAbUNsWJcoJJCyAk
QU9wNrUfsmm2Vp+Dd8JVq9WEZK8+r8f2VLTvZzGRmzCI3tOGnvABJaZZkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGfcXD6Zmmog3ZoOQ/F6eO4EgCcMB8GA1UdIwQY
MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt
MTgxZTY0MDU5ZDMxLzEvRVo5eGNQcG1hYWlEZG1nNUQ4WHA0N2dTQUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx
LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXgnMA0G
CSqGSIb3DQEBCwUAA4IBAQAKwkjiXl1xzIXDnxtJ8GRkn98AT2yYzQUc718oDA/5
f+U6F5zgID25mTlRiJR2o/7ovzjLeUneMWFxUmY+uUoSv9PwsDdDoaInPfGOXDUZ
+RHulHAZQbM927ypYLW0Kz1fTxcR8Wp996D8lCkGMcO6/ppYvnUemItkGNS3uRW/
xnVLOpToH4owoUgxg0vHPm65DydWyUupEk1KyNNJUk26ADlI4CXcbTe6cWpX9Pxc
lQCFBePjwA5qhgBjMdqzKpwaq7GNCsh7cNZ/YCANcVIg/5lsb0u1K9jxDCUhd4wT
ebtmfqJQ9ArUvvJw25fwmhqPrq0UIi+oHJlDJlQuUFpe
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net