Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/IzP3cDAX9aykSDzKdoH0u3AyA2M.roa
File: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (raw, json)
Hash identifier: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=
Subject key identifier: 23:33:F7:70:30:17:F5:AC:A4:48:3C:CA:76:81:F4:BB:70:32:03:63
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 01941FFA6476C1E047137660349238A26655
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/IzP3cDAX9aykSDzKdoH0u3AyA2M.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16353
IP address blocks: 185.136.72.0/22 maxlen: 22
185.136.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:76:c1:e0:47:13:76:60:34:92:38:a2:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2333f7703017f5aca4483cca7681f4bb70320363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:17:e8:bb:c5:c0:b5:e1:9d:be:53:0f:ae:
96:41:52:cc:29:67:c1:67:51:9d:ac:28:54:fa:20:
a6:fe:70:49:8f:87:39:58:bd:88:84:14:ed:6f:8c:
20:5e:d0:c1:85:8f:7a:50:07:48:a1:77:68:32:f5:
4e:73:8a:fa:23:01:8c:40:1c:8e:c7:d2:ce:c1:49:
05:5a:40:80:09:50:db:ec:55:7f:c2:39:04:42:be:
73:b5:c2:f7:c5:f2:d9:0e:5d:04:6c:7d:aa:c4:1b:
a4:2e:8a:d0:f4:42:98:13:7b:cb:dd:93:b9:71:36:
8e:51:cf:ac:6f:60:2a:ab:d8:4c:3e:fc:91:6a:f9:
c7:7b:38:71:bc:33:91:dd:18:26:84:a0:b9:eb:b6:
e4:d1:7a:40:be:f4:a7:a2:87:a0:f2:77:96:f0:5e:
17:19:33:0b:9b:a4:68:0c:3f:1c:82:f1:eb:68:31:
22:38:8d:ea:ec:db:43:f8:93:f4:08:52:ec:7c:c6:
34:39:4d:1a:9f:21:47:32:fd:0e:7e:f6:2a:18:46:
bf:21:6c:ef:b9:3e:3f:97:f6:ce:54:3b:2d:3c:76:
2f:2c:38:b7:71:91:c4:5f:0d:89:28:e8:76:94:34:
fc:f2:0c:aa:9d:e3:ca:e5:34:6c:6e:a0:57:4c:fd:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:F7:70:30:17:F5:AC:A4:48:3C:CA:76:81:F4:BB:70:32:03:63
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/IzP3cDAX9aykSDzKdoH0u3AyA2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:85:27:1a:15:04:f0:f8:62:5c:98:a1:6a:91:16:0f:2f:d4:
29:ba:23:dd:04:71:9b:a7:6e:33:00:53:3b:15:5d:fa:b2:b7:
b9:35:76:fc:2c:80:49:70:24:bc:85:d2:d1:79:0b:7c:09:6e:
25:b6:ae:fb:78:fa:0d:23:8d:45:90:ac:b5:08:38:71:b3:74:
aa:a4:d7:da:47:da:d7:cb:23:6b:6e:c3:76:65:ad:03:98:d5:
7f:69:8f:e7:50:98:69:ce:9d:ba:76:9a:6b:48:f7:f2:15:d6:
be:8e:1d:47:34:36:38:e9:7d:cd:05:92:25:f4:b0:8b:91:a8:
cb:52:6e:ac:6c:df:5e:65:36:fb:de:b9:c5:6b:70:0e:1a:48:
7c:f2:62:63:33:55:2a:ad:95:1d:a2:e1:d6:07:f2:19:c4:f9:
b5:ce:de:9f:20:a7:dc:47:47:f4:2a:33:b1:ac:a8:91:98:a6:
02:b2:69:7d:7b:97:1b:bc:2c:11:73:b8:74:7d:5c:43:46:0a:
17:3e:d4:b1:3f:c9:8a:de:9e:2f:07:34:31:39:29:e0:fa:55:
ac:1f:cb:76:a1:92:7d:44:58:0a:c9:06:b2:f3:f6:ef:9c:51:
32:15:e1:c2:da:4f:cc:72:a1:48:21:d7:e4:f6:e6:a6:a9:b8:
dc:57:f9:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mR2weBHE3ZgNJI4omZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi
MWIwNjYwHhcNMjUwMTAxMDM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzMzZjc3MDMwMTdmNWFjYTQ0ODNjY2E3NjgxZjRiYjcwMzIwMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry8X6LvFwLXhnb5TD66WQVLMKWfB
Z1GdrChU+iCm/nBJj4c5WL2IhBTtb4wgXtDBhY96UAdIoXdoMvVOc4r6IwGMQByO
x9LOwUkFWkCACVDb7FV/wjkEQr5ztcL3xfLZDl0EbH2qxBukLorQ9EKYE3vL3ZO5
cTaOUc+sb2Aqq9hMPvyRavnHezhxvDOR3RgmhKC567bk0XpAvvSnooeg8neW8F4X
GTMLm6RoDD8cgvHraDEiOI3q7NtD+JP0CFLsfMY0OU0anyFHMv0OfvYqGEa/IWzv
uT4/l/bOVDstPHYvLDi3cZHEXw2JKOh2lDT88gyqnePK5TRsbqBXTP1jFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCMz93AwF/WspEg8ynaB9LtwMgNjMB8GA1UdIwQY
MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt
ZGUzNzY3M2M0MDljLzEvSXpQM2NEQVg5YXlrU0R6S2RvSDB1M0F5QTJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj
LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYhIMA0G
CSqGSIb3DQEBCwUAA4IBAQCwhScaFQTw+GJcmKFqkRYPL9QpuiPdBHGbp24zAFM7
FV36sre5NXb8LIBJcCS8hdLReQt8CW4ltq77ePoNI41FkKy1CDhxs3SqpNfaR9rX
yyNrbsN2Za0DmNV/aY/nUJhpzp26dpprSPfyFda+jh1HNDY46X3NBZIl9LCLkajL
Um6sbN9eZTb73rnFa3AOGkh88mJjM1UqrZUdouHWB/IZxPm1zt6fIKfcR0f0KjOx
rKiRmKYCsml9e5cbvCwRc7h0fVxDRgoXPtSxP8mK3p4vBzQxOSng+lWsH8t2oZJ9
RFgKyQay8/bvnFEyFeHC2k/McqFIIdfk9uamqbjcV/le
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net