Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/iimbxd3Owf07PFHUO1w0M4Z6x_o.roa
File: iimbxd3Owf07PFHUO1w0M4Z6x_o.roa (raw, json)
Hash identifier: Hxk8XtZXbV+ivBT8jo/oHnqhmWV3dji62dsAXbUoLuk=
Subject key identifier: 8A:29:9B:C5:DD:CE:C1:FD:3B:3C:51:D4:3B:5C:34:33:86:7A:C7:FA
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01948F41DFAE5AA7AE25AF19A6C1EC662713
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/iimbxd3Owf07PFHUO1w0M4Z6x_o.roa
Signing time: Wed 22 Jan 2025 18:24:06 +0000
ROA not before: Wed 22 Jan 2025 18:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a06:d640::/32 maxlen: 32
2a06:d646::/32 maxlen: 32
2a09:e302::/32 maxlen: 32
2a09:e306::/32 maxlen: 32
2a09:ef02::/32 maxlen: 32
2a09:ef05::/32 maxlen: 32
2a09:ef07::/32 maxlen: 32
2a0a:b385::/32 maxlen: 32
2a0b:9001::/32 maxlen: 32
2a0b:9005::/32 maxlen: 32
2a0d:3c44::/32 maxlen: 32
2a0d:95c1::/32 maxlen: 32
2a0d:95c5::/32 maxlen: 32
2a0d:afc0::/32 maxlen: 32
2a0d:afc6::/32 maxlen: 32
2a0d:c105::/32 maxlen: 32
2a0f:3105::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:41:df:ae:5a:a7:ae:25:af:19:a6:c1:ec:66:27:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 22 18:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a299bc5ddcec1fd3b3c51d43b5c3433867ac7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:d4:5b:de:fb:49:3a:34:7f:8d:f4:18:28:
08:67:2e:c6:24:49:dd:1f:5f:f9:5f:1f:4b:d5:9a:
15:ce:60:6c:21:1c:62:8e:8d:5a:40:0e:98:22:59:
a3:7e:f9:44:aa:93:39:98:c5:01:ed:6d:ff:19:47:
1a:ac:ff:27:64:cf:dc:d9:62:1d:10:6d:6e:21:f7:
0d:94:37:c6:03:ee:2a:ff:b6:d5:2a:8e:52:65:1c:
62:a0:b6:ef:11:69:c8:8c:39:37:b1:78:c4:2d:71:
45:68:5c:50:7e:e5:9e:5d:c4:b6:8b:43:46:9b:aa:
5c:da:e9:0c:8e:73:f8:9d:2b:33:ef:4f:54:9f:27:
a3:a5:56:1c:01:0c:13:4a:58:85:5b:00:f4:a0:ce:
0e:cf:d4:3e:21:32:82:ef:67:ce:3b:b3:8e:90:87:
03:46:d0:1d:bb:08:c3:68:c8:33:8f:c0:8c:58:6e:
97:45:76:9f:7a:0c:1c:3d:01:13:ab:aa:41:27:54:
1d:70:5c:bb:e5:fa:11:82:1c:f6:2f:57:09:e1:05:
9a:85:0f:f2:ec:76:76:d5:74:ab:1c:5a:5f:5f:30:
7e:09:f3:32:1d:09:91:d8:4d:09:2e:f5:2a:2a:3f:
db:8e:1d:ab:72:c7:b7:b8:75:0a:7e:9d:27:19:48:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:9B:C5:DD:CE:C1:FD:3B:3C:51:D4:3B:5C:34:33:86:7A:C7:FA
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/iimbxd3Owf07PFHUO1w0M4Z6x_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d640::/32
2a06:d646::/32
2a09:e302::/32
2a09:e306::/32
2a09:ef02::/32
2a09:ef05::/32
2a09:ef07::/32
2a0a:b385::/32
2a0b:9001::/32
2a0b:9005::/32
2a0d:3c44::/32
2a0d:95c1::/32
2a0d:95c5::/32
2a0d:afc0::/32
2a0d:afc6::/32
2a0d:c105::/32
2a0f:3105::/32
Signature Algorithm: sha256WithRSAEncryption
18:6e:70:ac:67:37:79:53:26:81:95:ff:6d:68:5b:0c:3f:8e:
56:2a:5c:7d:ce:82:75:d6:8a:3e:fb:bc:36:49:23:b7:45:d4:
30:e5:90:c0:03:70:86:a5:b7:c3:1e:1d:9d:7a:66:10:00:94:
5a:1c:b8:76:2e:2e:f4:22:4f:72:de:16:f4:f6:29:1b:b8:c5:
a0:50:9a:22:83:26:b8:5a:66:e6:7f:44:93:f0:f3:d2:d4:99:
b8:2b:d2:89:42:62:2b:3b:c8:76:9f:cb:9e:33:54:fb:4d:45:
63:4e:53:48:01:f3:5e:b8:3a:5f:85:98:63:b0:12:b6:bc:b1:
02:6e:2b:86:22:c7:2c:03:a8:88:bc:ad:09:17:90:dd:01:de:
6e:98:14:c7:b7:dc:65:51:df:11:55:f0:ef:b2:a5:92:68:d5:
e7:0f:8c:30:1e:c5:c9:c7:3e:ee:19:4e:67:e8:ee:96:e7:f5:
29:04:f7:88:a1:ce:2f:05:80:2c:85:58:bf:73:e7:e3:97:6e:
c1:d5:52:b1:d2:4d:02:21:25:14:be:cd:d4:43:4c:a4:7e:1b:
e1:b5:53:7b:88:6d:c0:0f:0c:24:1f:95:fa:78:20:cd:9f:6e:
3e:86:52:2c:bb:ba:1e:15:34:09:1e:a6:da:62:00:15:2d:b9:
8f:f2:00:d2
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAZSPQd+uWqeuJa8ZpsHsZicTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjUwMTIyMTgyNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTI5OWJjNWRkY2VjMWZkM2IzYzUxZDQzYjVjMzQzMzg2N2FjN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06PUW977STo0f430GCgIZy7GJEnd
H1/5Xx9L1ZoVzmBsIRxijo1aQA6YIlmjfvlEqpM5mMUB7W3/GUcarP8nZM/c2WId
EG1uIfcNlDfGA+4q/7bVKo5SZRxioLbvEWnIjDk3sXjELXFFaFxQfuWeXcS2i0NG
m6pc2ukMjnP4nSsz709UnyejpVYcAQwTSliFWwD0oM4Oz9Q+ITKC72fOO7OOkIcD
RtAduwjDaMgzj8CMWG6XRXafegwcPQETq6pBJ1QdcFy75foRghz2L1cJ4QWahQ/y
7HZ21XSrHFpfXzB+CfMyHQmR2E0JLvUqKj/bjh2rcse3uHUKfp0nGUj/pwIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFIopm8XdzsH9OzxR1DtcNDOGesf6MB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvaWltYnhkM093ZjA3UEZIVU8xdzBNNFo2eF9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MH0EAgACMHcDBQAqBtZA
AwUAKgbWRgMFACoJ4wIDBQAqCeMGAwUAKgnvAgMFACoJ7wUDBQAqCe8HAwUAKgqz
hQMFACoLkAEDBQAqC5AFAwUAKg08RAMFACoNlcEDBQAqDZXFAwUAKg2vwAMFACoN
r8YDBQAqDcEFAwUAKg8xBTANBgkqhkiG9w0BAQsFAAOCAQEAGG5wrGc3eVMmgZX/
bWhbDD+OVipcfc6CddaKPvu8Nkkjt0XUMOWQwANwhqW3wx4dnXpmEACUWhy4di4u
9CJPct4W9PYpG7jFoFCaIoMmuFpm5n9Ek/Dz0tSZuCvSiUJiKzvIdp/LnjNU+01F
Y05TSAHzXrg6X4WYY7AStryxAm4rhiLHLAOoiLytCReQ3QHebpgUx7fcZVHfEVXw
77KlkmjV5w+MMB7Fycc+7hlOZ+juluf1KQT3iKHOLwWALIVYv3Pn45duwdVSsdJN
AiElFL7N1ENMpH4b4bVTe4htwA8MJB+V+nggzZ9uPoZSLLu6HhU0CR6m2mIAFS25
j/IA0g==
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:11 2025 by rpki-client on console.sobornost.net