Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zO_nbCq66vYGyArBinJ2Xku3eDs.roa
File: zO_nbCq66vYGyArBinJ2Xku3eDs.roa (raw, json)
Hash identifier: k+pJtnSaW+hYupHIulRYKp9vogRdtOARkNJLBYqtcgs=
Subject key identifier: CC:EF:E7:6C:2A:BA:EA:F6:06:C8:0A:C1:8A:72:76:5E:4B:B7:78:3B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019614A8D25B17F01FFEEBBC71CE5905DE29
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zO_nbCq66vYGyArBinJ2Xku3eDs.roa
Signing time: Tue 08 Apr 2025 09:08:50 +0000
ROA not before: Tue 08 Apr 2025 09:08:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33842
IP address blocks: 93.88.203.0/24 maxlen: 24
109.61.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:a8:d2:5b:17:f0:1f:fe:eb:bc:71:ce:59:05:de:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 8 09:08:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccefe76c2abaeaf606c80ac18a72765e4bb7783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:77:d8:dc:ce:1e:3b:d0:f4:fc:ed:2a:03:
d2:2e:fb:23:e5:88:63:89:8c:a0:12:03:a4:94:94:
a7:ab:94:b3:c4:90:a1:6b:ea:c6:44:0f:c6:7d:7f:
fe:a3:f7:0f:d8:28:35:90:2a:7e:b5:68:d8:ca:4e:
05:fa:c2:2c:5c:61:14:df:4d:28:29:be:08:d8:23:
24:c0:87:13:e7:9c:97:3f:47:f6:ae:d3:8a:bc:a4:
47:af:dc:97:3d:fe:b5:8a:a6:71:3b:0c:71:67:8f:
0c:05:2d:85:03:90:58:d2:1f:e0:74:2c:86:69:12:
6c:3d:26:32:4a:ca:17:c4:84:49:69:d4:e9:7b:0a:
19:01:e1:5d:ac:1a:05:25:04:b5:e5:65:f9:57:6c:
b0:21:3d:4a:27:50:17:43:42:1c:da:4c:af:e0:15:
d7:63:b3:32:94:2f:9d:61:f7:20:2f:9b:19:0e:86:
c0:0b:55:e6:72:0d:8e:86:59:15:f5:d8:d0:a1:4b:
86:52:ad:82:da:9f:19:4a:4b:9b:e0:62:bd:a3:f4:
91:ed:3c:54:9e:a1:68:c0:a5:ff:d1:36:f0:2f:6f:
bd:b5:2b:28:69:f7:8f:82:f1:d2:20:8b:9f:a2:29:
ab:37:83:d5:e5:e1:af:77:bd:52:98:2d:62:aa:0c:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:E7:6C:2A:BA:EA:F6:06:C8:0A:C1:8A:72:76:5E:4B:B7:78:3B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zO_nbCq66vYGyArBinJ2Xku3eDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.203.0/24
109.61.108.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5e:d0:43:97:e5:8c:ac:5b:d3:59:c1:ac:36:36:98:33:c7:
37:6d:c8:c3:39:51:c8:3b:fc:aa:50:bf:3f:d1:ab:cb:fb:c3:
8b:8f:13:0c:17:a5:ae:4e:97:e1:49:cd:0b:03:aa:32:d1:66:
0c:52:1c:32:3d:e3:3d:76:9e:a9:88:3e:6e:47:20:c0:b2:9b:
43:2c:e8:98:c6:14:8a:40:80:cc:2b:94:a7:cf:2a:2d:6c:5b:
43:5d:49:0b:75:a8:08:6b:7d:ca:00:2b:f8:10:3e:55:5a:7b:
a9:7a:84:b7:1c:12:3a:f1:4d:ad:47:70:c0:02:e8:73:39:1b:
8f:a6:6c:ee:a6:46:6a:45:81:4a:10:31:95:3c:ef:e8:01:ee:
4a:9d:16:65:11:be:a3:4e:2a:27:ce:41:06:95:93:bc:f7:c3:
66:06:8d:d8:23:7d:93:b4:f4:60:16:cb:5b:11:00:d9:f2:d1:
ee:db:ec:95:64:e6:e3:ac:d4:e4:8f:7e:31:c1:48:f9:5d:3f:
db:9b:28:cf:c0:ab:5c:41:66:bd:33:cf:f4:73:3f:8b:f3:1e:
af:fb:bf:d6:93:92:51:26:84:4d:53:7f:c0:64:f6:48:6a:84:
0c:7c:de:e7:1f:bc:5a:83:67:b3:d2:5e:62:fb:ba:48:a7:12:
d4:22:f1:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYUqNJbF/Af/uu8cc5ZBd4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwNDA4MDkwODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2VmZTc2YzJhYmFlYWY2MDZjODBhYzE4YTcyNzY1ZTRiYjc3ODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri132NzOHjvQ9PztKgPSLvsj5Yhj
iYygEgOklJSnq5SzxJCha+rGRA/GfX/+o/cP2Cg1kCp+tWjYyk4F+sIsXGEU300o
Kb4I2CMkwIcT55yXP0f2rtOKvKRHr9yXPf61iqZxOwxxZ48MBS2FA5BY0h/gdCyG
aRJsPSYySsoXxIRJadTpewoZAeFdrBoFJQS15WX5V2ywIT1KJ1AXQ0Ic2kyv4BXX
Y7MylC+dYfcgL5sZDobAC1Xmcg2OhlkV9djQoUuGUq2C2p8ZSkub4GK9o/SR7TxU
nqFowKX/0TbwL2+9tSsoafePgvHSIIufoimrN4PV5eGvd71SmC1iqgzoHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMzv52wquur2BsgKwYpydl5Lt3g7MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvek9fbmJDcTY2dllHeUFyQmluSjJYa3UzZURzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVjLAwQA
bT1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnXtBDl+WMrFvTWcGsNjaYM8c3bcjDOVHI
O/yqUL8/0avL+8OLjxMMF6WuTpfhSc0LA6oy0WYMUhwyPeM9dp6piD5uRyDAsptD
LOiYxhSKQIDMK5SnzyotbFtDXUkLdagIa33KACv4ED5VWnupeoS3HBI68U2tR3DA
AuhzORuPpmzupkZqRYFKEDGVPO/oAe5KnRZlEb6jTionzkEGlZO898NmBo3YI32T
tPRgFstbEQDZ8tHu2+yVZObjrNTkj34xwUj5XT/bmyjPwKtcQWa9M8/0cz+L8x6v
+7/Wk5JRJoRNU3/AZPZIaoQMfN7nH7xag2ez0l5i+7pIpxLUIvHY
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:10 2025 by rpki-client on console.sobornost.net