Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SNxgVW5EG7LPTifCS_ME7sa4N5c.roa
File: SNxgVW5EG7LPTifCS_ME7sa4N5c.roa (raw, json)
Hash identifier: 67XQFk01U0bPOYMZhDPmON1XAJYuci36KMSJxyOvZZc=
Subject key identifier: 48:DC:60:55:6E:44:1B:B2:CF:4E:27:C2:4B:F3:04:EE:C6:B8:37:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019543119F83A6A040E34F6B0F66C3A27ED3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SNxgVW5EG7LPTifCS_ME7sa4N5c.roa
Signing time: Wed 26 Feb 2025 16:23:03 +0000
ROA not before: Wed 26 Feb 2025 16:23:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215144
IP address blocks: 93.88.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:11:9f:83:a6:a0:40:e3:4f:6b:0f:66:c3:a2:7e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 26 16:23:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48dc60556e441bb2cf4e27c24bf304eec6b83797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:78:95:09:59:34:15:b5:b6:3d:4f:8b:9d:
a5:06:29:5b:86:ea:77:1e:13:63:40:ff:f9:b3:73:
1e:53:57:21:34:bb:0a:dd:c4:76:00:7b:c8:51:6b:
15:32:0f:e2:dc:f3:2c:dc:d1:dd:b1:f7:26:37:36:
ff:03:3f:33:e8:69:5f:82:8c:2c:e2:33:22:0f:d3:
38:9b:d0:a3:18:b3:71:10:d8:ab:de:e2:8c:ba:18:
27:42:0a:ba:6a:a6:b8:0e:20:ce:79:da:87:ff:26:
f5:37:44:5f:eb:45:73:21:86:c1:b2:31:33:03:3b:
32:fc:7f:85:81:25:65:99:5d:e6:10:2b:8f:f3:20:
11:ef:ce:50:ed:7a:2f:d9:c4:f4:cb:4b:04:0b:ff:
a5:b1:3c:ad:48:b5:71:42:11:56:7e:0e:56:09:24:
42:3a:69:4d:63:52:81:ad:5b:28:da:0d:29:40:1c:
35:0b:26:69:cd:b1:ec:1c:a3:3e:91:2f:fc:3b:a3:
50:4d:ac:d4:0c:ba:40:52:88:b4:e9:e7:66:b8:36:
43:18:4c:7e:ce:21:b3:8a:51:05:12:44:8e:71:01:
dd:f2:d7:5f:e2:87:5b:fc:50:cb:ea:9d:00:89:a3:
96:87:e4:3b:05:a4:f6:ac:a9:c8:c6:70:56:ce:5a:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DC:60:55:6E:44:1B:B2:CF:4E:27:C2:4B:F3:04:EE:C6:B8:37:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SNxgVW5EG7LPTifCS_ME7sa4N5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cf:ba:8c:93:9d:72:1d:ff:8e:98:ce:ea:88:a2:0b:7b:09:
d6:c1:ba:8a:6d:97:c1:dd:0f:37:34:9b:86:ca:0b:49:5e:67:
75:84:e6:da:9c:74:12:bc:a0:e4:4a:ed:b2:bd:dd:5b:23:91:
71:79:d2:35:d0:fc:63:aa:37:3e:45:86:2c:bb:69:cc:97:2d:
c8:cb:e3:bc:5f:e5:b5:13:04:19:a1:f1:b0:df:b2:f2:46:c7:
da:30:90:ef:28:ec:ff:3e:cb:73:78:18:a3:a5:de:d8:ea:e5:
6d:fe:df:41:2a:a4:49:42:ae:8e:4f:aa:b4:ba:b2:af:a6:8f:
15:b2:26:39:68:42:e6:af:b2:a2:aa:9d:26:3b:11:c2:a5:c0:
e9:db:11:12:d9:22:2f:f9:03:44:4b:ff:73:74:1a:e8:5e:4a:
9c:bf:bc:57:d9:5f:fc:8c:38:f3:f8:ea:18:f5:9f:b9:58:be:
93:c7:c1:63:fd:69:8e:72:a8:b3:60:ff:1d:15:be:66:77:7a:
c0:a8:6d:42:c3:fe:3d:25:69:62:db:4d:30:dc:95:7c:b8:66:
c0:eb:a2:ba:0e:77:29:73:3c:eb:02:88:04:6a:07:69:5f:da:
9f:b3:7f:6c:c0:79:5a:44:47:c9:32:6c:8c:69:41:2e:c3:17:
d1:31:37:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVDEZ+DpqBA409rD2bDon7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMjI2MTYyMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGRjNjA1NTZlNDQxYmIyY2Y0ZTI3YzI0YmYzMDRlZWM2YjgzNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArot4lQlZNBW1tj1Pi52lBilbhup3
HhNjQP/5s3MeU1chNLsK3cR2AHvIUWsVMg/i3PMs3NHdsfcmNzb/Az8z6Glfgows
4jMiD9M4m9CjGLNxENir3uKMuhgnQgq6aqa4DiDOedqH/yb1N0Rf60VzIYbBsjEz
Azsy/H+FgSVlmV3mECuP8yAR785Q7Xov2cT0y0sEC/+lsTytSLVxQhFWfg5WCSRC
OmlNY1KBrVso2g0pQBw1CyZpzbHsHKM+kS/8O6NQTazUDLpAUoi06edmuDZDGEx+
ziGzilEFEkSOcQHd8tdf4odb/FDL6p0AiaOWh+Q7BaT2rKnIxnBWzlomGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjcYFVuRBuyz04nwkvzBO7GuDeXMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvU054Z1ZXNUVHN0xQVGlmQ1NfTUU3c2E0TjVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVjNMA0G
CSqGSIb3DQEBCwUAA4IBAQBtz7qMk51yHf+OmM7qiKILewnWwbqKbZfB3Q83NJuG
ygtJXmd1hObanHQSvKDkSu2yvd1bI5FxedI10Pxjqjc+RYYsu2nMly3Iy+O8X+W1
EwQZofGw37LyRsfaMJDvKOz/PstzeBijpd7Y6uVt/t9BKqRJQq6OT6q0urKvpo8V
siY5aELmr7Kiqp0mOxHCpcDp2xES2SIv+QNES/9zdBroXkqcv7xX2V/8jDjz+OoY
9Z+5WL6Tx8Fj/WmOcqizYP8dFb5md3rAqG1Cw/49JWli200w3JV8uGbA66K6Dncp
czzrAogEagdpX9qfs39swHlaREfJMmyMaUEuwxfRMTdF
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:12:59 2025 by rpki-client on console.sobornost.net