Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9sVKMgFNatqTmSNiEO4ORQQLRt8.roa
File: 9sVKMgFNatqTmSNiEO4ORQQLRt8.roa (raw, json)
Hash identifier: lshn/9YxVbRH0YDgX5hhu796Vkjs6hPEJYrUBAKZCWE=
Subject key identifier: F6:C5:4A:32:01:4D:6A:DA:93:99:23:62:10:EE:0E:45:04:0B:46:DF
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B8DB9886C4544A871240177025C11
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9sVKMgFNatqTmSNiEO4ORQQLRt8.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48427
IP address blocks: 5.154.56.0/22 maxlen: 22
5.154.56.0/24 maxlen: 24
5.154.57.0/24 maxlen: 24
84.232.55.0/24 maxlen: 24
93.114.252.0/23 maxlen: 23
93.114.252.0/24 maxlen: 24
93.114.253.0/24 maxlen: 24
109.167.58.0/23 maxlen: 23
109.167.58.0/24 maxlen: 24
109.167.59.0/24 maxlen: 24
109.167.64.0/23 maxlen: 23
109.167.64.0/24 maxlen: 24
109.167.65.0/24 maxlen: 24
109.167.92.0/23 maxlen: 23
109.167.92.0/24 maxlen: 24
109.167.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8d:b9:88:6c:45:44:a8:71:24:01:77:02:5c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6c54a32014d6ada9399236210ee0e45040b46df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:80:1e:f0:7e:af:13:f0:e4:16:4f:65:15:
c9:01:e4:e6:dc:c7:3c:3d:fb:b7:8d:94:54:a0:eb:
20:c9:f4:b7:b6:66:1c:36:51:53:22:31:5f:41:50:
19:f9:7b:44:1c:0f:f9:22:c5:60:6c:79:ad:4e:97:
5c:47:ea:d1:ea:59:13:69:97:e5:2e:a3:75:40:03:
d2:71:b2:af:0e:81:f0:93:3d:25:a2:44:f0:c7:77:
99:1b:d6:83:b4:34:dc:2f:5b:5f:a9:fb:d7:17:15:
9a:53:ac:82:09:d9:08:7e:14:41:03:63:b7:3d:45:
8d:68:52:98:73:b5:e4:58:03:c8:40:8b:6c:91:ce:
93:6a:51:ab:b9:96:9d:b8:c7:ab:96:56:72:a0:08:
8f:01:b9:e8:29:31:18:b5:a8:5b:24:50:76:4c:44:
b2:78:14:09:7c:72:44:8b:34:d7:7c:f7:40:0d:1d:
13:79:c9:b8:86:11:77:2d:fd:d2:17:01:a5:c2:8f:
f7:24:eb:3d:3c:59:7e:20:49:7a:db:47:c1:26:d4:
c9:76:92:e9:9b:5a:16:eb:44:0d:3f:0c:66:47:b0:
9a:e7:61:9f:c3:1a:2a:7a:05:37:17:8b:2e:5a:c3:
c8:74:a4:28:16:23:2e:43:7b:f1:8e:70:82:49:42:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C5:4A:32:01:4D:6A:DA:93:99:23:62:10:EE:0E:45:04:0B:46:DF
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9sVKMgFNatqTmSNiEO4ORQQLRt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.56.0/22
84.232.55.0/24
93.114.252.0/23
109.167.58.0/23
109.167.64.0/23
109.167.92.0/23
Signature Algorithm: sha256WithRSAEncryption
37:4e:cd:c0:0d:1e:32:79:40:5a:7f:53:39:b2:0b:61:51:92:
22:0d:8e:cd:80:05:88:6d:79:c8:56:32:84:3b:10:1f:97:84:
e1:c0:d7:9a:db:66:d4:f1:c4:64:80:a6:59:cd:6b:fc:24:87:
ae:8a:83:53:69:54:28:92:cc:91:65:ce:e7:d4:bf:93:6d:41:
f7:b1:45:6a:5e:52:91:eb:f5:6f:0c:64:3f:62:c9:c4:aa:ee:
2e:20:56:06:c8:7c:e3:bf:80:71:93:7d:7e:a2:cd:42:16:4e:
60:dd:76:da:01:23:6a:b7:09:7f:14:ec:bc:cb:1f:cc:38:d3:
e4:28:88:22:e5:30:15:e9:c7:b4:42:8f:50:9b:40:5f:0a:44:
62:ad:18:4c:ec:69:20:a5:a0:62:9f:ca:5f:9f:45:c2:e0:08:
a2:36:2a:cf:51:4b:bf:94:3d:83:17:5e:84:dc:f9:ec:65:1c:
03:ea:ca:27:e5:ae:99:9c:fa:50:61:32:73:ff:ea:8e:05:63:
b1:eb:6c:94:c2:c1:17:d9:0a:f2:4c:42:33:5b:3c:54:4f:e8:
7e:0e:39:c9:4d:38:81:ff:d2:6e:fc:54:07:f8:63:41:ed:9f:
52:3a:52:89:a7:00:8a:f2:a1:b6:a8:bd:8e:5e:62:fd:eb:06:
eb:bb:0f:eb
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQma425iGxFRKhxJAF3AlwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmM1NGEzMjAxNGQ2YWRhOTM5OTIzNjIxMGVlMGU0NTA0MGI0NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dqAHvB+rxPw5BZPZRXJAeTm3Mc8
Pfu3jZRUoOsgyfS3tmYcNlFTIjFfQVAZ+XtEHA/5IsVgbHmtTpdcR+rR6lkTaZfl
LqN1QAPScbKvDoHwkz0lokTwx3eZG9aDtDTcL1tfqfvXFxWaU6yCCdkIfhRBA2O3
PUWNaFKYc7XkWAPIQItskc6TalGruZaduMerllZyoAiPAbnoKTEYtahbJFB2TESy
eBQJfHJEizTXfPdADR0Tecm4hhF3Lf3SFwGlwo/3JOs9PFl+IEl620fBJtTJdpLp
m1oW60QNPwxmR7Ca52GfwxoqegU3F4suWsPIdKQoFiMuQ3vxjnCCSUI0GwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFPbFSjIBTWrak5kjYhDuDkUEC0bfMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvOXNWS01nRk5hdHFUbVNOaUVPNE9SUVFMUnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCBZo4AwQA
VOg3AwQBXXL8AwQBbac6AwQBbadAAwQBbadcMA0GCSqGSIb3DQEBCwUAA4IBAQA3
Ts3ADR4yeUBaf1M5sgthUZIiDY7NgAWIbXnIVjKEOxAfl4ThwNea22bU8cRkgKZZ
zWv8JIeuioNTaVQoksyRZc7n1L+TbUH3sUVqXlKR6/VvDGQ/YsnEqu4uIFYGyHzj
v4Bxk31+os1CFk5g3XbaASNqtwl/FOy8yx/MONPkKIgi5TAV6ce0Qo9Qm0BfCkRi
rRhM7GkgpaBin8pfn0XC4AiiNirPUUu/lD2DF16E3PnsZRwD6son5a6ZnPpQYTJz
/+qOBWOx62yUwsEX2QryTEIzWzxUT+h+DjnJTTiB/9Ju/FQH+GNB7Z9SOlKJpwCK
8qG2qL2OXmL96wbruw/r
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net