Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/g2CXKA0Q172jL1FvPLyV_ep5ju0.roa
File: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (raw, json)
Hash identifier: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=
Subject key identifier: 83:60:97:28:0D:10:D7:BD:A3:2F:51:6F:3C:BC:95:FD:EA:79:8E:ED
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 0195D6EA3BA49BB38244665355FE25C8E5CE
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/g2CXKA0Q172jL1FvPLyV_ep5ju0.roa
Signing time: Thu 27 Mar 2025 09:23:49 +0000
ROA not before: Thu 27 Mar 2025 09:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199578
IP address blocks: 131.246.0.0/16 maxlen: 16
192.68.165.0/24 maxlen: 24
192.68.166.0/23 maxlen: 23
192.68.168.0/23 maxlen: 23
2a03:63c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:ea:3b:a4:9b:b3:82:44:66:53:55:fe:25:c8:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Mar 27 09:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=836097280d10d7bda32f516f3cbc95fdea798eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:20:e7:27:8d:1b:20:4e:92:ae:c7:9a:0a:
18:c4:d7:69:34:a8:40:c7:e5:4b:85:22:2d:32:87:
ce:28:c1:3f:4b:91:c2:c6:8f:59:96:47:7e:62:74:
3f:7c:da:c2:29:aa:20:65:7b:62:7f:a5:ce:4d:ea:
cd:80:ba:92:fc:9e:26:2e:8c:96:13:9b:24:10:5e:
9c:ab:6c:62:47:1e:ff:60:42:be:7e:b4:5b:47:2d:
86:5c:53:6a:c5:9e:6f:6e:4f:90:2f:e2:bb:aa:7d:
32:66:86:d1:52:3a:15:be:86:80:eb:29:0a:b1:b9:
0d:c9:18:14:01:8b:d6:68:f2:a2:7e:8c:db:e1:e8:
7b:72:0c:66:48:0e:ba:2f:94:a8:cc:e3:05:d0:40:
b2:4d:38:4e:43:5d:de:8f:46:c4:7c:b0:72:98:10:
04:e7:9a:12:0b:06:bb:38:cc:2a:24:c6:ca:3c:6a:
9c:dc:23:4f:2d:17:f9:23:04:5a:23:88:75:07:88:
bf:20:0f:02:cb:70:ae:3c:14:ca:84:a2:d4:a1:f4:
10:24:ee:69:53:58:ec:0c:b4:4b:5a:bc:d9:f9:6c:
9b:6d:a2:fe:3e:78:7f:bf:7e:ad:6e:be:ff:5d:db:
8c:fe:61:40:81:a6:56:7e:15:bb:d7:d2:8d:b3:ed:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:60:97:28:0D:10:D7:BD:A3:2F:51:6F:3C:BC:95:FD:EA:79:8E:ED
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/g2CXKA0Q172jL1FvPLyV_ep5ju0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.246.0.0/16
192.68.165.0-192.68.169.255
IPv6:
2a03:63c0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:66:16:3c:05:74:43:52:3f:4c:8f:1f:78:00:a6:f0:68:7c:
7e:cf:b7:81:2e:9d:79:ce:fb:9d:6c:4a:44:22:8b:cb:04:57:
d2:09:56:9f:42:a0:4a:3d:e6:83:19:b0:b3:b8:1b:8e:98:20:
47:40:a9:a6:6a:0d:4e:d3:e5:15:84:a4:8e:b5:a3:b6:10:05:
2a:5c:47:e1:a4:89:ad:6a:f9:8a:bf:7c:f0:36:26:74:99:63:
c7:4f:1a:4b:3c:25:ed:2a:f8:fa:eb:55:82:5b:e7:68:d3:e7:
08:c8:0e:d6:b8:b0:99:3e:2f:46:fa:59:83:29:70:bb:ab:73:
e1:a4:0d:84:33:7b:ec:f1:64:f7:5f:71:21:42:ed:48:ac:35:
cb:95:e6:a4:60:de:c8:3d:9f:c5:13:2a:f6:f3:e6:c1:d6:73:
34:78:51:40:26:22:da:95:91:d1:61:f6:11:05:8a:1e:65:66:
9c:c6:31:d4:4d:20:8d:51:34:a4:0f:b9:dc:da:c9:b1:8e:67:
8a:db:10:ca:f8:75:6e:7a:98:b0:24:79:15:6f:9c:e0:d9:bf:
cb:c1:df:ca:69:90:bd:23:95:19:9c:88:11:b9:48:5f:c6:2d:
e8:a3:f4:7c:ca:52:05:6e:b0:ef:66:ab:c3:52:fc:8f:02:b3:
b3:3b:b1:c1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZXW6jukm7OCRGZTVf4lyOXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj
NjE0NTkwHhcNMjUwMzI3MDkyMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzYwOTcyODBkMTBkN2JkYTMyZjUxNmYzY2JjOTVmZGVhNzk4ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshog5yeNGyBOkq7HmgoYxNdpNKhA
x+VLhSItMofOKME/S5HCxo9Zlkd+YnQ/fNrCKaogZXtif6XOTerNgLqS/J4mLoyW
E5skEF6cq2xiRx7/YEK+frRbRy2GXFNqxZ5vbk+QL+K7qn0yZobRUjoVvoaA6ykK
sbkNyRgUAYvWaPKifozb4eh7cgxmSA66L5SozOMF0ECyTThOQ13ej0bEfLBymBAE
55oSCwa7OMwqJMbKPGqc3CNPLRf5IwRaI4h1B4i/IA8Cy3CuPBTKhKLUofQQJO5p
U1jsDLRLWrzZ+WybbaL+Pnh/v36tbr7/XduM/mFAgaZWfhW719KNs+0fJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFINglygNENe9oy9Rbzy8lf3qeY7tMB8GA1UdIwQY
MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt
ODBkNDk0NTkxMWRkLzEvZzJDWEtBMFExNzJqTDFGdlBMeVZfZXA1anUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk
LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAZBAIAATATAwMAg/YwDAME
AMBEpQMEAcBEqDANBAIAAjAHAwUAKgNjwDANBgkqhkiG9w0BAQsFAAOCAQEAuGYW
PAV0Q1I/TI8feACm8Gh8fs+3gS6dec77nWxKRCKLywRX0glWn0KgSj3mgxmws7gb
jpggR0CppmoNTtPlFYSkjrWjthAFKlxH4aSJrWr5ir988DYmdJljx08aSzwl7Sr4
+utVglvnaNPnCMgO1riwmT4vRvpZgylwu6tz4aQNhDN77PFk919xIULtSKw1y5Xm
pGDeyD2fxRMq9vPmwdZzNHhRQCYi2pWR0WH2EQWKHmVmnMYx1E0gjVE0pA+53NrJ
sY5nitsQyvh1bnqYsCR5FW+c4Nm/y8HfymmQvSOVGZyIEblIX8Yt6KP0fMpSBW6w
72arw1L8jwKzszuxwQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net