Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/J70m5SfxW3sdmib1kWAXQGKfdOM.roa
File: J70m5SfxW3sdmib1kWAXQGKfdOM.roa (raw, json)
Hash identifier: 8Qog18shfCUsPP/BYCaBYaVY5SSTRMf2jp9RR4QSNUU=
Subject key identifier: 27:BD:26:E5:27:F1:5B:7B:1D:9A:26:F5:91:60:17:40:62:9F:74:E3
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266BA01D754729452DC4A106CF48CCED
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/J70m5SfxW3sdmib1kWAXQGKfdOM.roa
Signing time: Thu 02 Jan 2025 09:49:34 +0000
ROA not before: Thu 02 Jan 2025 09:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207944
IP address blocks: 178.156.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a0:1d:75:47:29:45:2d:c4:a1:06:cf:48:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27bd26e527f15b7b1d9a26f591601740629f74e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:4d:a7:d0:f4:87:76:00:84:60:b8:a2:13:
94:5f:ae:73:cf:ce:93:ae:30:83:80:ab:5f:05:17:
bd:8d:d3:56:b3:6b:fe:13:8e:70:f7:df:aa:54:8b:
c0:cf:c4:c6:36:64:a7:d7:80:16:fd:c6:bb:74:26:
7c:23:72:d7:ef:c9:2f:3e:0f:fc:86:2d:97:0c:2b:
a8:83:c3:1b:b7:6d:28:76:bb:01:d9:42:e2:f6:4a:
0d:45:a0:26:ae:60:8e:df:ac:5e:44:56:1e:40:59:
50:4c:50:a7:7b:e4:c0:93:d8:85:fd:33:8d:b8:03:
48:25:60:48:45:40:de:29:61:4b:49:7a:79:40:82:
fa:99:05:34:d5:c0:1a:bb:ac:17:95:39:5a:40:f6:
65:90:7d:88:99:f7:af:23:08:ae:82:4d:e0:d8:7d:
bf:66:99:2f:bb:9d:96:03:6f:7e:c0:c4:15:f6:dc:
24:09:3d:d1:f4:b3:f4:e5:9d:80:76:0d:0b:e4:55:
86:80:f7:db:df:cc:3a:02:a3:a8:6c:8c:f8:0e:7e:
58:8e:9e:7e:a8:73:7e:b9:a1:a6:a6:e2:18:6b:82:
f0:c7:3d:d3:f0:4b:b8:ce:cd:0b:9a:a4:58:88:c9:
68:c7:ca:3c:43:06:24:28:d3:63:6d:b4:47:91:86:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BD:26:E5:27:F1:5B:7B:1D:9A:26:F5:91:60:17:40:62:9F:74:E3
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/J70m5SfxW3sdmib1kWAXQGKfdOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.156.22.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:fb:91:ec:97:3e:ad:0e:13:20:18:28:85:b0:e6:aa:45:15:
6b:b9:ee:bf:d4:05:b3:ac:66:18:86:e0:96:3c:97:96:bc:ef:
ab:c6:b3:b6:2d:4e:29:be:ca:f4:ff:26:d0:ea:bf:7d:60:23:
ff:0b:28:b0:03:a5:ce:29:c5:a4:19:9c:1a:49:d6:6d:24:fe:
bc:9e:e4:ca:46:bc:dd:6d:69:9f:e3:72:99:b0:13:1a:a2:cf:
c6:25:b7:a8:93:7e:68:14:91:e9:19:e5:2e:a5:8f:eb:1d:38:
3a:4c:c1:98:bf:2e:a5:8a:35:a7:ff:ff:e8:1f:90:e3:5d:e9:
4b:d6:99:e2:df:58:79:9e:84:43:36:04:e9:b0:31:9f:be:6d:
fc:bf:54:46:35:46:ff:7d:71:c0:ed:7f:b5:5b:40:a0:46:a6:
b6:be:0a:03:c3:cc:56:63:f6:64:0f:b4:39:5e:8c:d9:b3:9f:
8c:f2:3b:74:43:0e:1a:71:6b:d0:b6:f5:2e:02:3c:d8:70:25:
61:30:94:6d:d4:9f:75:83:d8:a3:d8:44:df:d7:8d:14:a9:a4:
8b:9d:80:61:48:9f:80:6b:ad:91:12:3b:39:77:f0:61:99:61:
ad:2f:50:c6:5b:00:94:9c:6b:4f:c5:ad:a6:fb:60:07:a7:0a:
bc:3e:1b:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma6AddUcpRS3EoQbPSMztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2JkMjZlNTI3ZjE1YjdiMWQ5YTI2ZjU5MTYwMTc0MDYyOWY3NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwilNp9D0h3YAhGC4ohOUX65zz86T
rjCDgKtfBRe9jdNWs2v+E45w99+qVIvAz8TGNmSn14AW/ca7dCZ8I3LX78kvPg/8
hi2XDCuog8Mbt20odrsB2ULi9koNRaAmrmCO36xeRFYeQFlQTFCne+TAk9iF/TON
uANIJWBIRUDeKWFLSXp5QIL6mQU01cAau6wXlTlaQPZlkH2ImfevIwiugk3g2H2/
Zpkvu52WA29+wMQV9twkCT3R9LP05Z2Adg0L5FWGgPfb38w6AqOobIz4Dn5Yjp5+
qHN+uaGmpuIYa4Lwxz3T8Eu4zs0LmqRYiMlox8o8QwYkKNNjbbRHkYaDSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCe9JuUn8Vt7HZom9ZFgF0Bin3TjMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvSjcwbTVTZnhXM3NkbWliMWtXQVhRR0tmZE9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAspwWMA0G
CSqGSIb3DQEBCwUAA4IBAQDD+5Hslz6tDhMgGCiFsOaqRRVrue6/1AWzrGYYhuCW
PJeWvO+rxrO2LU4pvsr0/ybQ6r99YCP/CyiwA6XOKcWkGZwaSdZtJP68nuTKRrzd
bWmf43KZsBMaos/GJbeok35oFJHpGeUupY/rHTg6TMGYvy6lijWn///oH5DjXelL
1pni31h5noRDNgTpsDGfvm38v1RGNUb/fXHA7X+1W0CgRqa2vgoDw8xWY/ZkD7Q5
XozZs5+M8jt0Qw4acWvQtvUuAjzYcCVhMJRt1J91g9ij2ETf140UqaSLnYBhSJ+A
a62REjs5d/BhmWGtL1DGWwCUnGtPxa2m+2AHpwq8Phug
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net