Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/kSLVwGt_NyDYhkUM69fkyKqLKhE.roa
File: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (raw, json)
Hash identifier: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=
Subject key identifier: 91:22:D5:C0:6B:7F:37:20:D8:86:45:0C:EB:D7:E4:C8:AA:8B:2A:11
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0194228DCC069F79B79D1DB51F86CCE12281
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/kSLVwGt_NyDYhkUM69fkyKqLKhE.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2792
IP address blocks: 80.159.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cc:06:9f:79:b7:9d:1d:b5:1f:86:cc:e1:22:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9122d5c06b7f3720d886450cebd7e4c8aa8b2a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:b3:1c:6b:3e:c8:ee:3f:16:09:3c:4c:85:
96:d0:dc:e3:70:48:71:e9:b7:15:fb:3e:e6:01:05:
5e:0f:db:14:62:e1:67:ed:91:ea:55:32:84:ce:36:
4e:5a:57:fa:03:79:ac:08:44:27:27:b0:6a:d2:57:
d8:91:c7:32:f7:a5:93:9d:66:1a:16:21:99:9a:0b:
13:b7:fd:39:3d:d7:ba:2f:cd:e5:cb:16:ef:b4:df:
77:41:67:d7:3a:6a:ef:ec:81:9e:f0:51:c5:f4:ba:
84:22:dc:c5:c7:e2:05:1b:08:55:1e:3c:18:d3:65:
a8:30:f0:09:c2:56:7c:98:59:a1:0b:cf:11:8e:2b:
8b:58:c4:51:b1:31:d2:27:59:e1:18:66:29:38:98:
50:71:60:0d:c1:c9:33:38:3f:1c:d7:bd:ab:55:b2:
9d:48:d3:4a:7a:f0:9e:32:60:25:e3:07:84:64:df:
08:e3:cd:b0:41:45:06:28:de:0a:0f:91:45:d7:fd:
74:3c:5f:94:b0:61:03:e0:62:53:5f:a2:41:fe:5f:
3d:be:e6:47:12:04:2b:d3:8f:cb:87:a3:28:07:65:
7f:31:86:93:ab:3c:75:ad:21:0f:31:0e:6a:da:6d:
57:01:53:fd:23:dd:05:2b:55:fe:a3:72:31:7f:64:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:D5:C0:6B:7F:37:20:D8:86:45:0C:EB:D7:E4:C8:AA:8B:2A:11
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/kSLVwGt_NyDYhkUM69fkyKqLKhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.159.224.0/19
Signature Algorithm: sha256WithRSAEncryption
92:96:79:5e:96:07:e6:d5:50:b4:df:73:fa:08:5c:30:70:81:
45:86:cd:60:80:90:6a:7d:8e:f7:c4:0a:dd:e1:44:16:60:f5:
f0:81:36:5b:b6:e1:55:92:cf:5e:6a:13:ef:97:c8:c8:d4:8a:
ae:13:34:73:34:70:45:df:6d:73:52:86:ab:1b:07:1f:75:a3:
ad:b9:a9:e5:2e:9e:56:7a:ad:c9:8f:9e:c7:eb:82:f9:72:cf:
d9:3c:62:b5:2b:a4:c2:2b:84:ee:f5:54:63:7e:c8:40:ea:19:
f7:3a:d4:e3:a7:c7:35:c9:80:76:28:56:22:8c:b8:c0:4e:16:
ea:3e:13:1a:6a:06:51:db:66:93:85:06:b9:52:e5:47:38:72:
c2:99:77:88:3a:cd:0c:d6:85:e3:dc:fc:ee:bb:e9:fa:9e:4d:
e3:c2:0f:f1:79:8b:b3:ee:43:e0:8c:1d:9a:41:fc:f9:6d:b0:
d6:ad:24:2f:19:47:4e:05:87:80:44:d9:a8:55:63:59:05:ef:
6e:fd:d2:d7:d8:1d:9a:9b:f7:be:de:9e:2f:b6:7d:06:c3:49:
c7:67:6e:d1:00:94:70:6d:13:f5:10:9d:61:cb:a2:69:95:0f:
dd:de:f9:0c:9f:ae:34:be:62:23:28:91:e1:e0:d5:a0:16:93:
f2:51:ab:89
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijcwGn3m3nR21H4bM4SKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2
MDk4MmIwHhcNMjUwMTAxMTU0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTIyZDVjMDZiN2YzNzIwZDg4NjQ1MGNlYmQ3ZTRjOGFhOGIyYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusCzHGs+yO4/Fgk8TIWW0NzjcEhx
6bcV+z7mAQVeD9sUYuFn7ZHqVTKEzjZOWlf6A3msCEQnJ7Bq0lfYkccy96WTnWYa
FiGZmgsTt/05Pde6L83lyxbvtN93QWfXOmrv7IGe8FHF9LqEItzFx+IFGwhVHjwY
02WoMPAJwlZ8mFmhC88RjiuLWMRRsTHSJ1nhGGYpOJhQcWANwckzOD8c172rVbKd
SNNKevCeMmAl4weEZN8I482wQUUGKN4KD5FF1/10PF+UsGED4GJTX6JB/l89vuZH
EgQr04/Lh6MoB2V/MYaTqzx1rSEPMQ5q2m1XAVP9I90FK1X+o3Ixf2R/sQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJEi1cBrfzcg2IZFDOvX5MiqiyoRMB8GA1UdIwQY
MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy
LTc2YjBkZGEyYmYzZS8xL2tTTFZ3R3RfTnlEWWhrVU02OWZreUtxTEtoRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUyLTc2YjBkZGEyYmYz
ZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVQn+Aw
DQYJKoZIhvcNAQELBQADggEBAJKWeV6WB+bVULTfc/oIXDBwgUWGzWCAkGp9jvfE
Ct3hRBZg9fCBNlu24VWSz15qE++XyMjUiq4TNHM0cEXfbXNShqsbBx91o625qeUu
nlZ6rcmPnsfrgvlyz9k8YrUrpMIrhO71VGN+yEDqGfc61OOnxzXJgHYoViKMuMBO
Fuo+ExpqBlHbZpOFBrlS5Uc4csKZd4g6zQzWhePc/O676fqeTePCD/F5i7PuQ+CM
HZpB/PltsNatJC8ZR04Fh4BE2ahVY1kF72790tfYHZqb977eni+2fQbDScdnbtEA
lHBtE/UQnWHLommVD93e+QyfrjS+YiMokeHg1aAWk/JRq4k=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net