Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa
File: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (raw, json)
Hash identifier: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=
Subject key identifier: 44:D3:97:92:F5:C9:FF:27:08:F0:E9:B0:72:E1:D2:99:A2:C0:B4:7E
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 0194282359FD78303D7056B4F2E8B7426C36
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa
Signing time: Thu 02 Jan 2025 17:49:52 +0000
ROA not before: Thu 02 Jan 2025 17:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205561
IP address blocks: 147.12.64.0/24 maxlen: 24
185.160.220.0/22 maxlen: 24
185.160.220.0/24 maxlen: 24
185.160.221.0/24 maxlen: 24
185.160.222.0/24 maxlen: 24
185.160.223.0/24 maxlen: 24
193.53.101.0/24 maxlen: 24
193.53.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:59:fd:78:30:3d:70:56:b4:f2:e8:b7:42:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Jan 2 17:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d39792f5c9ff2708f0e9b072e1d299a2c0b47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:51:9e:11:48:04:4e:bb:6e:58:50:8e:32:
f2:7e:62:f2:0b:0c:4d:5a:b4:15:f8:69:e2:74:b7:
87:fd:f5:50:d2:d2:46:bb:71:40:c7:61:87:81:b7:
02:3a:5c:f1:d4:10:4b:a2:fc:f1:63:fe:13:90:de:
ff:9b:97:62:63:d7:37:57:3b:fd:17:81:27:1d:80:
61:24:8a:18:c5:29:d6:38:cf:96:35:50:79:33:b8:
70:6b:2f:c5:07:44:1e:29:a1:50:c1:c8:fb:45:15:
5d:32:e7:1c:0d:a1:7c:3a:9e:5c:86:1b:d8:fa:c8:
18:1a:22:ab:34:e4:15:e1:aa:cc:91:db:d1:f9:96:
18:10:0c:7c:44:d4:9d:34:f4:e0:f1:31:c1:9e:dc:
42:d3:51:fe:d5:6a:ef:b5:8e:b4:67:37:49:43:39:
c1:eb:f7:b8:b1:8f:e2:c2:23:dd:0b:31:f6:d7:94:
7a:46:bc:c9:3c:09:85:1b:56:10:f9:e7:8f:d2:bd:
59:8d:35:3a:fd:a9:9d:c6:64:4d:84:8e:1e:0c:46:
26:38:1f:0d:94:56:b1:78:ea:8c:54:7f:c3:88:eb:
06:05:41:2f:bb:bd:e0:8e:78:e5:43:c1:b6:87:6a:
92:9f:75:98:6b:70:5b:4a:ac:be:eb:be:fe:e9:cc:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:97:92:F5:C9:FF:27:08:F0:E9:B0:72:E1:D2:99:A2:C0:B4:7E
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.12.64.0/24
185.160.220.0/22
193.53.101.0-193.53.102.255
Signature Algorithm: sha256WithRSAEncryption
3a:84:65:8b:53:58:61:ea:bc:f8:f7:f9:f0:3a:fc:18:cc:e1:
f9:ae:60:05:6b:7b:2d:1d:7c:d7:d4:2b:88:d6:f5:68:51:a7:
02:8a:22:32:bb:c7:dd:62:63:56:cc:6b:fa:58:e8:bf:74:cb:
13:4a:78:85:00:43:1a:c9:59:0f:cf:c1:29:89:ef:25:ac:b8:
7f:73:8e:9d:47:16:a5:c3:0d:cc:1a:dc:ae:01:b9:58:89:a6:
36:73:a0:bb:92:a0:d1:f3:e9:7a:09:c3:bf:69:e4:6c:94:8e:
26:01:ac:5a:39:29:24:ed:78:34:be:86:0e:16:8f:18:06:83:
10:cc:5f:04:83:1c:a2:97:3a:af:df:8a:37:3c:97:f5:f0:57:
65:e3:6f:40:8e:c8:c8:e1:64:c6:05:82:9f:b3:a4:44:19:b0:
60:7c:67:09:fa:cd:4e:92:f1:b1:e9:f4:7c:72:66:a0:c8:05:
8a:99:72:57:91:67:ee:ee:52:33:d3:5a:40:54:81:c2:7c:e2:
29:6a:cb:c9:4e:8d:d0:3f:92:8d:81:55:f1:1d:5f:12:a2:6a:
72:ad:b9:f1:4d:1f:1b:d8:2f:fc:4c:48:60:60:ef:89:7f:d0:
3b:96:d9:30:2e:47:5c:5a:42:7e:cf:ab:4e:36:1e:e0:6b:a8:
f6:24:22:6e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQoI1n9eDA9cFa08ui3Qmw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDJmYTJjNWJhMjg5MjA0NWU3Y2Q1MGE1YWRmZDU0ZDZk
YmI4YzIwHhcNMjUwMTAyMTc0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGQzOTc5MmY1YzlmZjI3MDhmMGU5YjA3MmUxZDI5OWEyYzBiNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv5RnhFIBE67blhQjjLyfmLyCwxN
WrQV+GnidLeH/fVQ0tJGu3FAx2GHgbcCOlzx1BBLovzxY/4TkN7/m5diY9c3Vzv9
F4EnHYBhJIoYxSnWOM+WNVB5M7hway/FB0QeKaFQwcj7RRVdMuccDaF8Op5chhvY
+sgYGiKrNOQV4arMkdvR+ZYYEAx8RNSdNPTg8THBntxC01H+1WrvtY60ZzdJQznB
6/e4sY/iwiPdCzH215R6RrzJPAmFG1YQ+eeP0r1ZjTU6/amdxmRNhI4eDEYmOB8N
lFaxeOqMVH/DiOsGBUEvu73gjnjlQ8G2h2qSn3WYa3BbSqy+677+6czpfwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFETTl5L1yf8nCPDpsHLh0pmiwLR+MB8GA1UdIwQY
MBaAFH0C+ixbookgRefNUKWt/VTW27jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUt
ODEwMzlmM2NmM2ZkLzEvUk5PWGt2WEpfeWNJOE9td2N1SFNtYUxBdEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUtODEwMzlmM2NmM2Zk
LzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAkwxAAwQC
uaDcMAwDBADBNWUDBADBNWYwDQYJKoZIhvcNAQELBQADggEBADqEZYtTWGHqvPj3
+fA6/BjM4fmuYAVrey0dfNfUK4jW9WhRpwKKIjK7x91iY1bMa/pY6L90yxNKeIUA
QxrJWQ/PwSmJ7yWsuH9zjp1HFqXDDcwa3K4BuViJpjZzoLuSoNHz6XoJw79p5GyU
jiYBrFo5KSTteDS+hg4WjxgGgxDMXwSDHKKXOq/fijc8l/XwV2Xjb0COyMjhZMYF
gp+zpEQZsGB8Zwn6zU6S8bHp9HxyZqDIBYqZcleRZ+7uUjPTWkBUgcJ84ilqy8lO
jdA/ko2BVfEdXxKianKtufFNHxvYL/xMSGBg74l/0DuW2TAuR1xaQn7Pq042HuBr
qPYkIm4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net