Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa
File: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (raw, json)
Hash identifier: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=
Subject key identifier: DC:93:35:0E:A8:94:CA:37:F1:E4:C7:69:B0:3C:19:2C:74:B4:4A:60
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 01941FFA5A1605C9A5A83F01DE982B1077C0
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35066
IP address blocks: 185.95.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5a:16:05:c9:a5:a8:3f:01:de:98:2b:10:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc93350ea894ca37f1e4c769b03c192c74b44a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:26:34:a5:11:68:03:bd:f5:87:42:a2:fd:
73:2b:10:9a:da:b3:c9:43:f9:50:8a:eb:c4:20:db:
9c:77:7e:ba:8e:01:9c:72:39:b0:62:55:5b:e5:a5:
aa:76:b5:d0:41:86:15:49:3f:c9:48:9c:ff:c6:a8:
a5:41:1b:8c:29:c1:52:20:71:8a:cf:bd:48:74:f4:
5b:ea:b3:2e:d9:24:8c:ad:d9:d0:de:90:cd:76:15:
6d:95:5d:13:e2:49:88:32:8e:12:28:e3:26:3f:bc:
07:c4:0a:9d:2d:58:28:e6:28:6f:a9:72:a7:01:3a:
68:1d:5d:fc:08:e6:7b:33:20:79:06:a2:02:74:a6:
1f:14:80:ba:88:d9:36:78:d0:29:79:5d:fe:6a:2e:
9f:93:0e:5c:99:08:93:07:72:b3:93:82:08:7b:77:
4a:eb:8a:24:c2:8f:c7:05:ab:db:2c:1c:83:28:cc:
d8:04:36:16:eb:b6:61:b6:8a:45:af:f2:74:f8:a3:
bd:8d:55:22:43:ec:5d:e8:a5:5d:80:b4:36:99:cf:
83:3a:55:d4:93:5e:6f:c3:fd:11:1d:c6:8b:a9:52:
e2:00:39:b2:f8:b2:21:43:e1:79:6d:b5:9c:d2:49:
66:61:36:4d:44:59:62:ec:23:88:68:d2:e9:88:03:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:35:0E:A8:94:CA:37:F1:E4:C7:69:B0:3C:19:2C:74:B4:4A:60
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.144.0/22
Signature Algorithm: sha256WithRSAEncryption
03:15:39:c4:43:bd:68:61:9c:97:8b:ad:1d:da:0c:94:ae:32:
fc:21:ac:93:b5:3b:da:c2:69:72:9e:be:a9:08:4c:17:38:a9:
bd:29:f2:9f:ff:fb:67:08:c8:2f:2d:95:a7:d1:af:7c:27:93:
4d:78:ed:85:b3:63:86:36:d7:b4:63:64:23:e7:f0:74:6f:28:
7f:be:b0:87:9e:2a:89:b6:e6:90:b2:09:f5:54:b2:f1:72:36:
e4:de:3f:bf:57:dc:0e:92:fb:06:12:39:c1:d5:1e:76:85:e6:
43:eb:f1:d5:a2:45:9c:8c:59:b5:8b:8e:b1:29:f9:1f:5b:a0:
86:94:be:9f:1c:f5:cd:09:5b:a4:af:aa:97:46:ae:80:bb:66:
4c:6a:6a:26:20:44:46:4e:46:31:78:eb:ff:dd:c5:42:74:3d:
51:b9:b7:52:22:8d:fc:17:56:ef:35:ff:ab:d7:12:ae:57:66:
b9:a8:89:59:34:b0:40:8e:58:04:b0:7e:28:b6:a1:9b:eb:b0:
18:51:5a:6e:aa:7c:2d:37:5a:86:4c:9e:40:42:71:26:fc:c6:
44:13:ad:21:db:2c:fd:c0:06:6e:bd:d9:34:32:1b:4e:61:52:
c0:b8:e5:b7:01:b6:a2:7a:51:b6:3c:0e:98:a5:ff:60:89:df:
12:6c:af:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+loWBcmlqD8B3pgrEHfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGM3YmQwYzQ0ODZiYTA3M2NlMmRlNTNiYTA3NGQ3MGU0
NWI1ZTcwHhcNMjUwMTAxMDM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzkzMzUwZWE4OTRjYTM3ZjFlNGM3NjliMDNjMTkyYzc0YjQ0YTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyAmNKURaAO99YdCov1zKxCa2rPJ
Q/lQiuvEINucd366jgGccjmwYlVb5aWqdrXQQYYVST/JSJz/xqilQRuMKcFSIHGK
z71IdPRb6rMu2SSMrdnQ3pDNdhVtlV0T4kmIMo4SKOMmP7wHxAqdLVgo5ihvqXKn
ATpoHV38COZ7MyB5BqICdKYfFIC6iNk2eNApeV3+ai6fkw5cmQiTB3Kzk4IIe3dK
64okwo/HBavbLByDKMzYBDYW67ZhtopFr/J0+KO9jVUiQ+xd6KVdgLQ2mc+DOlXU
k15vw/0RHcaLqVLiADmy+LIhQ+F5bbWc0klmYTZNRFli7COIaNLpiAN8BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNyTNQ6olMo38eTHabA8GSx0tEpgMB8GA1UdIwQY
MBaAFEuMe9DESGugc84t5TugdNcORbXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgt
MDI0MGU3NDQ3NmE3LzEvM0pNMURxaVV5amZ4NU1kcHNEd1pMSFMwU21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgtMDI0MGU3NDQ3NmE3
LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV+QMA0G
CSqGSIb3DQEBCwUAA4IBAQADFTnEQ71oYZyXi60d2gyUrjL8IayTtTvawmlynr6p
CEwXOKm9KfKf//tnCMgvLZWn0a98J5NNeO2Fs2OGNte0Y2Qj5/B0byh/vrCHniqJ
tuaQsgn1VLLxcjbk3j+/V9wOkvsGEjnB1R52heZD6/HVokWcjFm1i46xKfkfW6CG
lL6fHPXNCVukr6qXRq6Au2ZMamomIERGTkYxeOv/3cVCdD1RubdSIo38F1bvNf+r
1xKuV2a5qIlZNLBAjlgEsH4otqGb67AYUVpuqnwtN1qGTJ5AQnEm/MZEE60h2yz9
wAZuvdk0MhtOYVLAuOW3AbaielG2PA6Ypf9gid8SbK/B
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net