Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa
File: z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa (raw, json)
Hash identifier: UVS5jjAa9OEvk26uuzlwcbiMZWOU5g+RlzuAxXPKfXY=
Subject key identifier: CF:F1:23:E8:2A:19:6E:B2:B1:AF:32:D0:87:3D:75:00:74:8A:2D:18
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 0194236A499C2F5A492FE356A34EA98F5C12
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8351
IP address blocks: 194.59.16.0/23 maxlen: 24
195.98.192.0/19 maxlen: 24
213.254.32.0/19 maxlen: 24
213.254.36.0/24 maxlen: 24
2a02:320::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:49:9c:2f:5a:49:2f:e3:56:a3:4e:a9:8f:5c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cff123e82a196eb2b1af32d0873d7500748a2d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:17:5b:5d:3b:27:eb:de:44:c8:0c:5e:a6:
e5:46:7e:d6:0a:19:ff:fc:56:f7:ea:f9:74:8d:20:
e1:db:96:89:e5:72:8b:9e:9f:92:c6:d1:76:25:93:
59:4d:c5:08:52:08:52:dd:b6:95:f7:db:e1:8a:44:
9b:3f:5c:ba:11:18:41:4e:2e:6a:c0:99:77:07:a7:
b4:2c:e1:f9:e2:0f:2c:da:5e:dd:f3:c1:74:ce:30:
75:ac:49:01:7b:1c:7f:93:39:62:8a:07:44:69:5f:
73:db:0a:35:d8:9f:8e:0d:6e:49:0f:af:31:96:b9:
40:74:dd:fc:41:12:7e:ce:19:92:21:34:d4:6b:e2:
80:36:fa:8d:91:08:f2:88:d5:70:83:71:42:2b:43:
1e:80:72:5f:bf:9d:ec:0d:fc:48:28:ac:5d:f4:12:
47:60:24:71:33:da:ff:28:28:4c:0f:6b:c3:a3:75:
a3:49:4a:e4:01:4c:24:3b:d6:d2:d5:67:bf:eb:9b:
24:a7:58:bf:ee:b4:47:15:49:3c:d2:5a:e7:77:09:
f5:aa:31:ba:e8:76:cc:ed:f3:51:16:61:ec:62:21:
51:c1:b8:5f:84:37:19:f5:89:b0:00:23:be:ab:91:
67:e1:71:97:59:bf:01:41:10:34:54:ef:76:92:c4:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:23:E8:2A:19:6E:B2:B1:AF:32:D0:87:3D:75:00:74:8A:2D:18
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.16.0/23
195.98.192.0/19
213.254.32.0/19
IPv6:
2a02:320::/29
Signature Algorithm: sha256WithRSAEncryption
05:9b:1a:8a:fa:85:6e:36:b5:af:63:55:ee:4a:e5:8a:40:ec:
6f:bb:1e:c8:43:ae:ea:92:40:89:91:af:71:3e:d6:5f:62:50:
21:a7:43:84:c9:c5:19:99:cb:09:e2:cb:19:74:d8:14:30:9c:
82:4e:dd:15:f0:60:94:47:e7:9b:f2:b5:45:30:38:a2:de:b8:
9a:ea:c0:f5:a5:b1:a3:fc:df:59:4c:9c:e8:5a:37:1f:db:c0:
90:34:71:dc:e1:53:c1:53:99:9d:8c:06:06:88:14:75:a9:bf:
a1:76:d8:7f:cf:49:69:37:82:d7:ec:4d:54:55:c7:0b:88:83:
3b:e1:11:0e:79:09:02:06:05:f7:f7:47:5b:63:4b:56:28:0b:
ef:f9:06:d5:a1:23:02:83:4f:54:f3:72:c1:a6:f6:b7:a4:6c:
52:59:ff:30:44:5f:2a:ff:2e:46:3c:68:54:65:3e:60:42:dd:
90:e7:4e:e5:64:87:17:aa:08:63:63:9a:a4:4c:53:0e:3a:08:
fe:71:37:f4:7c:1e:1c:ea:9d:a2:a6:8c:9f:58:a2:42:58:0c:
bf:4d:86:2c:4d:32:f4:2f:92:42:07:9d:39:a8:f2:dd:11:d9:
b5:b7:70:2f:89:54:17:66:4d:c4:9f:d1:09:52:69:b4:ad:24:
13:57:2c:a8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQjakmcL1pJL+NWo06pj1wSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMzAxMTdhZTFjZGMyZGYxYzU4ODE2ZTAwZTU0NTFmODdl
ZmIzNzAwHhcNMjUwMTAxMTk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmYxMjNlODJhMTk2ZWIyYjFhZjMyZDA4NzNkNzUwMDc0OGEyZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR4XW107J+veRMgMXqblRn7WChn/
/Fb36vl0jSDh25aJ5XKLnp+SxtF2JZNZTcUIUghS3baV99vhikSbP1y6ERhBTi5q
wJl3B6e0LOH54g8s2l7d88F0zjB1rEkBexx/kzliigdEaV9z2wo12J+ODW5JD68x
lrlAdN38QRJ+zhmSITTUa+KANvqNkQjyiNVwg3FCK0MegHJfv53sDfxIKKxd9BJH
YCRxM9r/KChMD2vDo3WjSUrkAUwkO9bS1We/65skp1i/7rRHFUk80lrndwn1qjG6
6HbM7fNRFmHsYiFRwbhfhDcZ9YmwACO+q5Fn4XGXWb8BQRA0VO92ksSvSwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFM/xI+gqGW6ysa8y0Ic9dQB0ii0YMB8GA1UdIwQY
MBaAFNEwEXrhzcLfHFiBbgDlRR+H77NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUt
MjUwYTRkNzc3YmE2LzEvel9FajZDb1pickt4cnpMUWh6MTFBSFNLTFJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUtMjUwYTRkNzc3YmE2
LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBwjsQAwQF
w2LAAwQF1f4gMA0EAgACMAcDBQMqAgMgMA0GCSqGSIb3DQEBCwUAA4IBAQAFmxqK
+oVuNrWvY1XuSuWKQOxvux7IQ67qkkCJka9xPtZfYlAhp0OEycUZmcsJ4ssZdNgU
MJyCTt0V8GCUR+eb8rVFMDii3ria6sD1pbGj/N9ZTJzoWjcf28CQNHHc4VPBU5md
jAYGiBR1qb+hdth/z0lpN4LX7E1UVccLiIM74REOeQkCBgX390dbY0tWKAvv+QbV
oSMCg09U83LBpva3pGxSWf8wRF8q/y5GPGhUZT5gQt2Q507lZIcXqghjY5qkTFMO
Ogj+cTf0fB4c6p2ipoyfWKJCWAy/TYYsTTL0L5JCB505qPLdEdm1t3AviVQXZk3E
n9EJUmm0rSQTVyyo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net