Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa
File: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (raw, json)
Hash identifier: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=
Subject key identifier: 0D:00:39:C1:B7:4B:48:49:B8:FC:5D:24:D0:2A:DC:39:87:E5:F2:79
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 019427480A7E3F22B8C9F92642606E0FE378
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa
Signing time: Thu 02 Jan 2025 13:50:20 +0000
ROA not before: Thu 02 Jan 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209472
IP address blocks: 88.218.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0a:7e:3f:22:b8:c9:f9:26:42:60:6e:0f:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d0039c1b74b4849b8fc5d24d02adc3987e5f279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:7e:cb:e0:df:ff:41:c9:26:4f:f8:dd:a7:
40:11:5e:94:ac:ae:df:79:2f:83:40:c7:5f:43:36:
c2:4b:7c:d5:8d:4f:a5:ae:03:6c:06:1a:1d:58:f3:
9f:0c:ca:88:bf:3d:d0:e6:64:7b:51:48:28:1b:7e:
f4:8a:49:12:76:2a:c1:94:3a:ca:f8:18:7b:36:97:
6a:57:e4:31:56:62:bb:ee:c0:f6:57:04:22:43:c4:
e1:c4:fa:a1:b3:46:33:53:39:b6:61:ff:61:26:13:
05:e1:76:72:e0:a0:92:bb:18:34:eb:83:dd:6c:19:
2d:fe:bd:b1:2b:8d:af:92:1b:ae:3a:21:a6:01:46:
ff:82:40:ac:7c:f2:69:19:e4:b7:5e:ba:46:0b:f2:
00:cb:ec:85:8a:be:5a:53:83:a2:f2:c0:7a:f5:e9:
10:fc:08:80:48:2c:2a:de:0e:a7:7c:a1:8a:f5:ad:
96:0b:f2:4f:dc:2e:73:4d:7a:56:24:e7:73:64:f5:
af:1f:2d:8f:e4:85:a4:92:1f:1c:00:77:58:62:bd:
bc:81:d8:d3:74:92:3b:6a:85:32:21:85:0b:c3:23:
94:0c:d4:b0:c9:2b:5c:04:d4:08:37:3b:3a:5b:e5:
dc:c4:0e:f4:c8:66:ac:71:bf:b9:79:8a:48:40:63:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:00:39:C1:B7:4B:48:49:B8:FC:5D:24:D0:2A:DC:39:87:E5:F2:79
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6d:37:1b:f4:b0:d3:a6:02:e4:8b:4a:7f:bc:0d:88:d8:f8:
97:db:9b:c9:b1:e0:36:a3:9a:91:f7:9a:88:fd:ad:67:c4:ac:
44:bb:a2:e5:10:55:e1:8d:2a:e4:66:b0:ce:02:0b:75:3a:fe:
4a:a9:1e:b9:b2:89:62:c5:ea:09:1e:57:6e:95:af:79:46:4d:
79:de:98:20:8f:73:8d:73:a7:35:54:88:56:56:52:c5:9c:8a:
63:dc:09:a8:fd:35:5e:58:2d:a8:aa:7a:3e:75:05:eb:00:5d:
f4:52:18:51:d9:3e:c6:aa:ec:df:9b:b1:5e:2b:fa:90:ea:4b:
74:c9:cd:bb:34:9b:62:95:96:0a:71:6c:7c:57:9a:b9:91:26:
8c:c4:41:74:1c:23:14:b2:79:3b:1f:ab:a1:b3:18:d4:20:f2:
dc:65:d5:e5:0b:37:e5:1d:d9:5c:bb:59:9f:e2:15:fc:a6:05:
a7:94:54:d2:d8:94:d6:9f:b6:14:86:fa:e0:32:f6:2e:58:c8:
55:b8:42:ec:a7:60:25:0a:6e:77:3a:46:d7:af:c1:49:3a:4f:
6d:b6:0f:58:4b:8e:fe:72:01:69:01:e7:58:07:44:60:47:eb:
d9:3c:75:08:26:95:1b:56:fa:d0:f8:b5:b2:40:0e:ca:6e:69:
b7:77:e0:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSAp+PyK4yfkmQmBuD+N4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTU3ODI0YzYzOGM3MThhMDdiNTM1ZTBkODI0Y2IyNGFm
YzA3MGMwHhcNMjUwMTAyMTM1MDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDAwMzljMWI3NGI0ODQ5YjhmYzVkMjRkMDJhZGMzOTg3ZTVmMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl51+y+Df/0HJJk/43adAEV6UrK7f
eS+DQMdfQzbCS3zVjU+lrgNsBhodWPOfDMqIvz3Q5mR7UUgoG370ikkSdirBlDrK
+Bh7NpdqV+QxVmK77sD2VwQiQ8ThxPqhs0YzUzm2Yf9hJhMF4XZy4KCSuxg064Pd
bBkt/r2xK42vkhuuOiGmAUb/gkCsfPJpGeS3XrpGC/IAy+yFir5aU4Oi8sB69ekQ
/AiASCwq3g6nfKGK9a2WC/JP3C5zTXpWJOdzZPWvHy2P5IWkkh8cAHdYYr28gdjT
dJI7aoUyIYULwyOUDNSwyStcBNQINzs6W+XcxA70yGascb+5eYpIQGMWKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0AOcG3S0hJuPxdJNAq3DmH5fJ5MB8GA1UdIwQY
MBaAFB0VeCTGOMcYoHtTXg2CTLJK/AcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTct
ZTU3NDQwMjYwYmUwLzEvRFFBNXdiZExTRW00X0YwazBDcmNPWWZsOG5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTctZTU3NDQwMjYwYmUw
LzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNrcMA0G
CSqGSIb3DQEBCwUAA4IBAQAtbTcb9LDTpgLki0p/vA2I2PiX25vJseA2o5qR95qI
/a1nxKxEu6LlEFXhjSrkZrDOAgt1Ov5KqR65solixeoJHldula95Rk153pggj3ON
c6c1VIhWVlLFnIpj3Amo/TVeWC2oqno+dQXrAF30UhhR2T7Gquzfm7FeK/qQ6kt0
yc27NJtilZYKcWx8V5q5kSaMxEF0HCMUsnk7H6uhsxjUIPLcZdXlCzflHdlcu1mf
4hX8pgWnlFTS2JTWn7YUhvrgMvYuWMhVuELsp2AlCm53OkbXr8FJOk9ttg9YS47+
cgFpAedYB0RgR+vZPHUIJpUbVvrQ+LWyQA7Kbmm3d+DJ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net