Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/zy5WJgdKGUnXTOnuh1U59K7_6Ag.roa
File: zy5WJgdKGUnXTOnuh1U59K7_6Ag.roa (raw, json)
Hash identifier: M8nI7yJHs6mCq2HtD8BhE8mXk6HAwCrsH6pt0+lEi+8=
Subject key identifier: CF:2E:56:26:07:4A:19:49:D7:4C:E9:EE:87:55:39:F4:AE:FF:E8:08
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 019623E1083B16CB733D4C560DCC269DE0A8
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/zy5WJgdKGUnXTOnuh1U59K7_6Ag.roa
Signing time: Fri 11 Apr 2025 08:04:32 +0000
ROA not before: Fri 11 Apr 2025 08:04:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51514
IP address blocks: 46.31.48.0/21 maxlen: 24
185.53.16.0/22 maxlen: 24
185.79.82.0/23 maxlen: 24
2a02:23e8::/32 maxlen: 48
2a02:23ea::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:e1:08:3b:16:cb:73:3d:4c:56:0d:cc:26:9d:e0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Apr 11 08:04:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf2e5626074a1949d74ce9ee875539f4aeffe808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:3d:78:90:fa:34:fc:20:77:ea:a5:9d:c0:
1b:b3:64:8a:1a:87:cc:be:97:23:4b:34:5c:37:60:
48:8b:77:34:47:17:b9:29:9f:18:2a:f7:b6:f4:49:
8d:b6:1f:db:97:dd:44:46:ad:a8:99:0a:cd:13:54:
dd:9a:2c:18:53:d0:aa:67:8f:ee:92:30:69:3a:8b:
aa:4e:08:d9:83:4e:02:d4:22:77:70:69:c8:5f:1d:
f0:40:d1:e9:c6:f9:df:9c:c4:75:03:7c:16:ee:4a:
c7:3c:85:db:b7:61:8d:47:19:9d:ea:88:a7:e6:ba:
53:6b:6a:db:b0:4c:87:a5:fe:35:49:1a:cb:99:a8:
72:cc:0d:0d:e1:31:c8:2a:54:7a:52:1a:19:d7:47:
68:ba:45:81:d0:4b:85:40:64:08:30:e7:41:37:da:
0e:9b:7e:5a:f6:8f:67:aa:ff:af:18:ed:2d:ec:34:
1b:08:19:b6:ce:39:9d:87:69:45:60:b5:79:4e:5e:
4b:fd:88:53:e2:95:b5:97:28:4a:bf:dd:ec:04:14:
46:bf:70:17:81:99:44:12:6a:ed:ad:b6:7b:35:43:
0c:38:57:df:cd:a5:c0:ed:d7:3b:8a:44:fe:53:97:
49:e3:e3:17:28:ef:08:1a:d7:ba:f3:8c:a2:cd:4f:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:56:26:07:4A:19:49:D7:4C:E9:EE:87:55:39:F4:AE:FF:E8:08
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/zy5WJgdKGUnXTOnuh1U59K7_6Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.48.0/21
185.53.16.0/22
185.79.82.0/23
IPv6:
2a02:23e8::/32
2a02:23ea::/32
Signature Algorithm: sha256WithRSAEncryption
85:4a:08:87:0f:c5:9b:41:69:bb:48:39:96:06:d0:1d:fe:39:
a9:69:fd:60:1b:df:c0:54:f2:e7:e8:24:da:98:fd:1a:52:54:
a3:92:bd:c6:c4:ee:4c:1f:b8:9d:62:a6:8c:3a:80:48:da:df:
9b:86:a8:cf:ae:79:83:a9:cc:75:bc:25:2a:e5:67:cd:ca:78:
a2:55:57:96:0c:56:3b:57:7a:9f:fd:63:4f:c0:88:6d:4c:21:
45:08:b1:b5:e9:3a:2d:3d:63:d9:39:19:ef:01:1b:af:39:7e:
36:2f:20:90:84:8d:ea:21:95:6a:58:0d:cc:60:25:65:99:5d:
64:ca:fd:8d:8c:3f:f0:43:15:ba:ea:0c:aa:a3:a4:c8:86:38:
9f:09:c1:88:3e:89:c7:36:04:f2:06:1b:94:51:bb:8a:1b:09:
56:e9:6b:aa:9d:97:39:e4:d7:83:bf:8b:31:07:0f:72:e6:82:
2a:ce:99:34:88:f9:d4:d3:0e:59:c4:4b:e3:d1:4e:73:0f:aa:
d7:07:12:43:0a:ca:86:d2:7c:da:5c:a7:69:49:91:a8:31:38:
20:59:25:da:c4:5d:12:07:e6:b0:f9:a1:d3:5c:95:b5:66:20:
3f:81:18:c6:3f:6f:f6:79:22:b4:7f:89:9d:db:e4:f0:17:4d:
e7:92:0e:7b
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZYj4Qg7FstzPUxWDcwmneCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjQ3YTMxMTcyZmI1NDljNjk2MTMyODgwYzY4MjRmYjA3
NzdiNTUwHhcNMjUwNDExMDgwNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjJlNTYyNjA3NGExOTQ5ZDc0Y2U5ZWU4NzU1MzlmNGFlZmZlODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUo9eJD6NPwgd+qlncAbs2SKGofM
vpcjSzRcN2BIi3c0Rxe5KZ8YKve29EmNth/bl91ERq2omQrNE1TdmiwYU9CqZ4/u
kjBpOouqTgjZg04C1CJ3cGnIXx3wQNHpxvnfnMR1A3wW7krHPIXbt2GNRxmd6oin
5rpTa2rbsEyHpf41SRrLmahyzA0N4THIKlR6UhoZ10doukWB0EuFQGQIMOdBN9oO
m35a9o9nqv+vGO0t7DQbCBm2zjmdh2lFYLV5Tl5L/YhT4pW1lyhKv93sBBRGv3AX
gZlEEmrtrbZ7NUMMOFffzaXA7dc7ikT+U5dJ4+MXKO8IGte684yizU+BpwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFM8uViYHShlJ10zp7odVOfSu/+gIMB8GA1UdIwQY
MBaAFEj0ejEXL7VJxpYTKIDGgk+wd3tVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BSNk1SY3Z0VW5HbGhNb2dNYUNUN0IzZTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wOTA2MzgtOGE5OS00MDYzLTkzYTAt
NmU5OTM4OTcyNzA4LzEvenk1V0pnZEtHVW5YVE9udWgxVTU5SzdfNkFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wOTA2MzgtOGE5OS00MDYzLTkzYTAtNmU5OTM4OTcyNzA4
LzEvU1BSNk1SY3Z0VW5HbGhNb2dNYUNUN0IzZTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQDLh8wAwQC
uTUQAwQBuU9SMBQEAgACMA4DBQAqAiPoAwUAKgIj6jANBgkqhkiG9w0BAQsFAAOC
AQEAhUoIhw/Fm0Fpu0g5lgbQHf45qWn9YBvfwFTy5+gk2pj9GlJUo5K9xsTuTB+4
nWKmjDqASNrfm4aoz655g6nMdbwlKuVnzcp4olVXlgxWO1d6n/1jT8CIbUwhRQix
tek6LT1j2TkZ7wEbrzl+Ni8gkISN6iGValgNzGAlZZldZMr9jYw/8EMVuuoMqqOk
yIY4nwnBiD6JxzYE8gYblFG7ihsJVulrqp2XOeTXg7+LMQcPcuaCKs6ZNIj51NMO
WcRL49FOcw+q1wcSQwrKhtJ82lynaUmRqDE4IFkl2sRdEgfmsPmh01yVtWYgP4EY
xj9v9nkitH+Jndvk8BdN55IOew==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net