Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa
File: Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa (raw, json)
Hash identifier: PzV+Hvm8wXtJUXwK3RxNsLo6F6xHiBk0IePHLXsbPqk=
Subject key identifier: 33:1B:B7:E6:62:16:EC:2D:14:3F:46:C3:B3:73:D2:6C:E0:7A:83:7B
Certificate issuer: /CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Certificate serial: 019421444B538D1820A38FD67703DC4C4602
Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208240
IP address blocks: 193.176.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4b:53:8d:18:20:a3:8f:d6:77:03:dc:4c:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=331bb7e66216ec2d143f46c3b373d26ce07a837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:f7:2d:c0:d8:10:4f:9d:c2:1c:a5:26:cb:
55:9e:2d:9c:ac:08:66:db:61:f1:f5:3d:71:2c:e8:
4a:cb:84:b8:e3:ad:31:17:2f:19:44:67:90:c8:93:
8b:bc:26:50:d4:88:d6:5c:99:16:4f:fd:f0:7d:43:
9d:a3:9a:fb:7f:f1:dc:0d:7b:d8:31:15:60:b7:16:
05:fd:64:c1:90:c3:30:74:d4:ec:93:bb:e5:f6:66:
56:97:1c:46:a3:64:40:9a:d4:b6:c6:12:4a:03:39:
39:2c:27:c9:fe:ca:bd:5d:ae:9f:66:1e:45:8d:10:
2d:15:27:65:1b:9c:6f:b8:17:28:99:5b:45:74:eb:
c5:35:73:25:dc:db:00:a7:a0:2a:43:f0:12:ba:0a:
bc:c1:3b:72:a4:e0:59:05:d2:1e:9b:8d:68:17:cc:
a2:3e:09:42:16:97:34:26:e4:84:c6:a5:f0:ee:00:
ba:32:67:7f:5e:ea:96:33:5b:68:01:73:9f:7d:e3:
b4:2a:49:67:7e:2f:85:57:14:8f:d4:94:5f:2e:ef:
9c:b1:04:cb:d5:41:08:ef:ff:85:f0:4c:39:79:ac:
a2:da:91:77:8f:32:e7:dc:b0:ae:43:eb:b5:15:f9:
17:b6:c2:35:d4:45:eb:e5:91:e0:dd:7e:e4:59:b9:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:B7:E6:62:16:EC:2D:14:3F:46:C3:B3:73:D2:6C:E0:7A:83:7B
X509v3 Authority Key Identifier:
keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.221.0/24
Signature Algorithm: sha256WithRSAEncryption
55:92:e8:0e:d2:0e:5d:7f:65:b1:fd:ce:c0:47:15:3c:ae:aa:
a0:ed:8f:d3:70:dd:d7:de:69:20:c6:7f:41:5e:dc:4a:e0:68:
1b:d6:67:a6:d9:a9:7b:43:b7:88:07:df:0b:8b:2b:3f:b9:16:
1d:55:20:03:99:f9:e6:53:70:c3:47:ba:39:de:61:ef:09:d1:
b5:ce:32:f0:fa:d3:e6:f7:02:72:0b:5f:2f:44:10:f5:8d:08:
27:58:15:d8:55:35:79:b4:f6:a2:f8:74:54:c9:fd:56:eb:87:
6d:d4:0e:b7:1c:8d:74:cf:8f:38:58:59:b4:cf:3c:9b:c2:f1:
22:35:26:3d:e9:93:19:53:9e:88:26:12:5c:2f:90:b3:2c:35:
1e:08:fa:f3:ee:c9:7b:29:0e:a3:37:7a:0b:8a:fe:ac:02:69:
ee:e0:76:f0:63:ae:3a:68:87:b3:5d:4b:14:cd:cb:9f:03:4d:
21:90:ed:73:cf:e8:71:d3:28:5d:96:b0:be:30:a4:dd:b8:a5:
16:19:71:d3:2f:69:4d:64:b4:66:a4:da:43:e4:22:9b:8e:32:
45:af:3f:81:ac:8c:05:a9:41:18:c9:83:0f:62:86:5c:05:de:
f3:3f:a5:9d:10:2e:90:59:92:74:98:1e:61:c7:48:10:a6:fd:
88:5b:30:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhREtTjRggo4/WdwPcTEYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTM5ZGEzYWFhNTJkMTMwZmYwNzRmYjA0OTIyMTk2NmQy
YjU3YzYwHhcNMjUwMTAxMDk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzFiYjdlNjYyMTZlYzJkMTQzZjQ2YzNiMzczZDI2Y2UwN2E4MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1H3LcDYEE+dwhylJstVni2crAhm
22Hx9T1xLOhKy4S4460xFy8ZRGeQyJOLvCZQ1IjWXJkWT/3wfUOdo5r7f/HcDXvY
MRVgtxYF/WTBkMMwdNTsk7vl9mZWlxxGo2RAmtS2xhJKAzk5LCfJ/sq9Xa6fZh5F
jRAtFSdlG5xvuBcomVtFdOvFNXMl3NsAp6AqQ/ASugq8wTtypOBZBdIem41oF8yi
PglCFpc0JuSExqXw7gC6Mmd/XuqWM1toAXOffeO0Kklnfi+FVxSP1JRfLu+csQTL
1UEI7/+F8Ew5eayi2pF3jzLn3LCuQ+u1FfkXtsI11EXr5ZHg3X7kWbmBLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMbt+ZiFuwtFD9Gw7Nz0mzgeoN7MB8GA1UdIwQY
MBaAFFvjnaOqpS0TD/B0+wSSIZZtK1fGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUt
ZTg3MmMwZDQwOGEzLzEvTXh1MzVtSVc3QzBVUDBiRHMzUFNiT0I2ZzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUtZTg3MmMwZDQwOGEz
LzEvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbDdMA0G
CSqGSIb3DQEBCwUAA4IBAQBVkugO0g5df2Wx/c7ARxU8rqqg7Y/TcN3X3mkgxn9B
XtxK4Ggb1mem2al7Q7eIB98Liys/uRYdVSADmfnmU3DDR7o53mHvCdG1zjLw+tPm
9wJyC18vRBD1jQgnWBXYVTV5tPai+HRUyf1W64dt1A63HI10z484WFm0zzybwvEi
NSY96ZMZU56IJhJcL5CzLDUeCPrz7sl7KQ6jN3oLiv6sAmnu4HbwY646aIezXUsU
zcufA00hkO1zz+hx0yhdlrC+MKTduKUWGXHTL2lNZLRmpNpD5CKbjjJFrz+BrIwF
qUEYyYMPYoZcBd7zP6WdEC6QWZJ0mB5hx0gQpv2IWzB4
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net