Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/9BvyxK4w-2rI5OIikTHWAG98MzY.roa
File: 9BvyxK4w-2rI5OIikTHWAG98MzY.roa (raw, json)
Hash identifier: l4Kx8IX2/5tA+zptkfMhudCGM8EbDIdsPj36q9UGwwI=
Subject key identifier: F4:1B:F2:C4:AE:30:FB:6A:C8:E4:E2:22:91:31:D6:00:6F:7C:33:36
Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial: 019423D6C3B4420592D5F5D1E615A026D30A
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/9BvyxK4w-2rI5OIikTHWAG98MzY.roa
Signing time: Wed 01 Jan 2025 21:47:44 +0000
ROA not before: Wed 01 Jan 2025 21:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61026
IP address blocks: 82.196.16.0/21 maxlen: 24
91.232.187.0/24 maxlen: 24
185.9.22.0/23 maxlen: 24
185.20.40.0/22 maxlen: 22
185.20.40.0/24 maxlen: 24
185.20.41.0/24 maxlen: 24
185.20.42.0/24 maxlen: 24
185.20.43.0/24 maxlen: 24
2a04:1500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c3:b4:42:05:92:d5:f5:d1:e6:15:a0:26:d3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f41bf2c4ae30fb6ac8e4e2229131d6006f7c3336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:4d:a7:fc:0e:3d:15:e8:8d:89:cf:36:bc:
2d:d6:41:b4:a7:a4:5f:0b:c3:64:65:8d:d7:e3:47:
26:7f:ea:70:89:e0:3b:97:33:d5:fe:77:30:19:2c:
75:7b:48:66:89:b3:5c:97:2c:0d:54:91:7f:77:29:
2b:14:1a:10:29:5c:5a:a8:b6:b8:c8:da:0d:88:51:
61:85:88:df:7e:ce:90:14:77:cd:6e:fb:71:7c:15:
b2:77:dd:91:89:a8:4c:07:89:45:b4:e0:97:2f:20:
e5:04:88:b2:ac:84:55:65:a6:9a:bb:53:3b:db:80:
29:5d:1e:70:20:7e:c6:5d:66:f1:01:b2:0e:1a:bf:
77:37:15:aa:9c:70:3f:dc:ea:db:ef:73:ec:74:ed:
78:dc:b7:54:f1:53:a5:68:07:cc:14:47:56:52:0e:
7e:a3:8b:33:b1:18:99:1f:93:98:44:df:ff:64:e1:
b3:5a:06:7e:fc:8c:f8:f9:f6:67:b4:fb:bc:f8:6f:
39:aa:82:8e:36:cd:7f:ad:3a:0b:0a:88:0f:ba:21:
9c:3d:b0:70:e0:86:85:52:4d:4d:4e:9b:01:76:e6:
57:7a:a4:3a:9f:18:8e:42:69:6c:68:30:40:a2:11:
30:f0:c8:2e:ed:47:f5:15:ad:14:96:72:01:30:c9:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1B:F2:C4:AE:30:FB:6A:C8:E4:E2:22:91:31:D6:00:6F:7C:33:36
X509v3 Authority Key Identifier:
keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/9BvyxK4w-2rI5OIikTHWAG98MzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.16.0/21
91.232.187.0/24
185.9.22.0/23
185.20.40.0/22
IPv6:
2a04:1500::/29
Signature Algorithm: sha256WithRSAEncryption
c4:f4:78:f8:22:a5:b6:3d:d9:b3:d2:eb:95:f9:31:c6:42:97:
7c:87:41:86:3a:90:a1:41:6a:f4:85:38:23:bf:27:8b:0b:8f:
85:dd:42:22:c4:b9:7d:a2:c2:b5:5e:b9:f5:8a:c4:bc:01:50:
64:f3:1a:ed:54:be:7d:f8:d0:50:3f:69:b0:7a:b8:67:e1:6e:
68:44:4a:77:08:d8:8b:68:53:55:06:11:3b:97:06:29:46:91:
5e:ab:79:9e:15:90:a3:2d:a7:5f:b2:95:d2:46:b2:37:8b:78:
f1:0f:fa:91:77:fb:f2:8d:c1:39:e4:e2:40:78:60:92:9c:9f:
61:6a:94:b2:d1:95:2a:61:93:6f:39:f9:25:ff:08:c0:3e:74:
ff:18:0b:6a:f9:67:18:57:62:e4:3e:cf:6a:96:65:d5:33:c6:
09:e7:a0:6a:5b:7c:22:1c:82:a2:4f:ce:44:e0:14:db:ac:3e:
ee:5f:7b:bf:f5:e4:c1:98:c7:b9:00:42:bc:64:f1:29:15:4a:
ac:8e:45:24:e0:de:42:1e:a5:7d:10:db:45:8b:4e:0e:0a:aa:
c2:3b:29:05:5c:ed:48:53:af:b4:8e:cc:e8:8f:ca:50:f1:27:
76:bf:3e:ca:c3:f0:d1:38:0d:fc:5e:f6:00:a8:f6:a0:ff:0a:
1a:fa:75:67
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQj1sO0QgWS1fXR5hWgJtMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi
YjM2ODYwHhcNMjUwMTAxMjE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDFiZjJjNGFlMzBmYjZhYzhlNGUyMjI5MTMxZDYwMDZmN2MzMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GtNp/wOPRXojYnPNrwt1kG0p6Rf
C8NkZY3X40cmf+pwieA7lzPV/ncwGSx1e0hmibNclywNVJF/dykrFBoQKVxaqLa4
yNoNiFFhhYjffs6QFHfNbvtxfBWyd92RiahMB4lFtOCXLyDlBIiyrIRVZaaau1M7
24ApXR5wIH7GXWbxAbIOGr93NxWqnHA/3Orb73PsdO143LdU8VOlaAfMFEdWUg5+
o4szsRiZH5OYRN//ZOGzWgZ+/Iz4+fZntPu8+G85qoKONs1/rToLCogPuiGcPbBw
4IaFUk1NTpsBduZXeqQ6nxiOQmlsaDBAohEw8Mgu7Uf1Fa0UlnIBMMmqPQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPQb8sSuMPtqyOTiIpEx1gBvfDM2MB8GA1UdIwQY
MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt
YzdmZTYyMjI3ZGYzLzEvOUJ2eXhLNHctMnJJNU9JaWtUSFdBRzk4TXpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz
LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDUsQQAwQA
W+i7AwQBuQkWAwQCuRQoMA0EAgACMAcDBQMqBBUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDE9Hj4IqW2Pdmz0uuV+THGQpd8h0GGOpChQWr0hTgjvyeLC4+F3UIixLl9osK1
Xrn1isS8AVBk8xrtVL59+NBQP2mwerhn4W5oREp3CNiLaFNVBhE7lwYpRpFeq3me
FZCjLadfspXSRrI3i3jxD/qRd/vyjcE55OJAeGCSnJ9hapSy0ZUqYZNvOfkl/wjA
PnT/GAtq+WcYV2LkPs9qlmXVM8YJ56BqW3wiHIKiT85E4BTbrD7uX3u/9eTBmMe5
AEK8ZPEpFUqsjkUk4N5CHqV9ENtFi04OCqrCOykFXO1IU6+0jszoj8pQ8Sd2vz7K
w/DROA38XvYAqPag/woa+nVn
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:51:04 2025 by rpki-client on console.sobornost.net