Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/hZxGZ5YrFD-BRifeGJgPjvYacq8.roa
File: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (raw, json)
Hash identifier: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=
Subject key identifier: 85:9C:46:67:96:2B:14:3F:81:46:27:DE:18:98:0F:8E:F6:1A:72:AF
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019420D61C67924F6BEF17BBBE2FD1FA7E8B
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/hZxGZ5YrFD-BRifeGJgPjvYacq8.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44980
IP address blocks: 195.242.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1c:67:92:4f:6b:ef:17:bb:be:2f:d1:fa:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859c4667962b143f814627de18980f8ef61a72af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f8:77:45:4e:f3:b2:91:4c:d2:61:c6:96:c9:
d6:73:be:5f:73:8b:c1:90:04:92:f4:7d:1e:0d:de:
7f:13:84:66:3d:80:b7:c8:70:9a:6f:6e:0d:58:07:
ab:ac:0f:95:96:fa:38:8b:33:72:f2:bd:29:c3:67:
5f:e9:ce:22:96:73:0d:6c:5e:4b:0f:d8:43:a5:f2:
2b:61:d3:cc:ee:d2:d5:96:e3:55:4f:d5:d1:15:ea:
0a:1d:bf:d5:ab:b1:c6:88:ae:9a:06:bc:01:b0:d4:
a5:47:8b:f3:58:1e:50:65:92:bf:df:cb:3f:b4:a8:
71:69:91:f6:96:e1:00:d7:44:07:70:a5:37:23:30:
75:02:88:27:4e:34:be:a9:5f:4b:18:ea:6b:7b:fa:
2c:f6:dd:5e:33:33:66:72:48:7c:d1:f4:f6:b7:d1:
ce:8b:35:b7:1e:7b:e2:fd:62:74:a3:e1:4d:78:ba:
82:ef:7a:c2:59:73:b3:40:db:e7:0f:47:ca:0c:ee:
a1:8a:39:40:9a:a9:57:96:74:fd:12:fe:f9:7c:58:
d4:8f:71:5d:7b:4e:83:6f:6f:85:30:01:f2:af:10:
1f:8e:7b:08:91:07:73:96:14:19:ea:2d:d3:67:cc:
29:3b:80:b6:24:7e:da:b2:df:a8:a2:da:4f:a7:0c:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:46:67:96:2B:14:3F:81:46:27:DE:18:98:0F:8E:F6:1A:72:AF
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/hZxGZ5YrFD-BRifeGJgPjvYacq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.156.0/23
Signature Algorithm: sha256WithRSAEncryption
92:28:90:34:f5:62:e8:d5:c0:ec:0f:be:e7:08:c1:6c:31:7d:
8b:67:40:9e:36:14:8c:ed:4b:31:b0:75:c2:8c:7b:47:eb:83:
06:57:98:ea:27:6a:06:1b:85:64:a9:68:ea:f3:70:b6:4f:ef:
aa:de:ff:73:fb:b1:fb:52:46:ce:b8:60:63:d0:fc:ec:23:29:
dd:9f:bc:ae:eb:09:42:41:7a:15:f6:bb:ae:5f:fe:55:f3:cf:
0d:f5:8e:35:d7:22:6f:3d:bf:fe:ec:fd:ef:29:5f:3c:27:6e:
ab:6a:9b:e5:21:a7:1d:5d:54:26:56:57:53:bb:c0:8d:48:1c:
d4:91:1b:73:36:c8:77:39:d8:cf:c0:17:0d:4c:ef:22:8c:dc:
f5:5d:cb:53:60:2c:5c:a3:2b:89:af:ad:d2:55:8d:85:b9:2d:
75:1e:df:f9:7f:a1:3d:04:bb:1a:d1:36:30:3f:72:76:b0:8c:
d7:aa:0a:cf:0e:06:78:5a:b7:a6:0c:95:57:56:35:94:6c:c6:
1c:7e:52:d5:50:6a:87:50:83:64:9a:ba:65:48:c0:08:09:c8:
6d:65:cd:75:5c:44:3b:a0:85:74:22:1f:81:3a:ee:cd:cb:a7:
c3:e5:ac:1e:e1:1f:a5:3e:e6:ea:0d:2b:f0:bd:5c:51:a7:cd:
17:2a:27:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1hxnkk9r7xe7vi/R+n6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh
MGRmODQwHhcNMjUwMTAxMDc0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTljNDY2Nzk2MmIxNDNmODE0NjI3ZGUxODk4MGY4ZWY2MWE3MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifh3RU7zspFM0mHGlsnWc75fc4vB
kASS9H0eDd5/E4RmPYC3yHCab24NWAerrA+Vlvo4izNy8r0pw2df6c4ilnMNbF5L
D9hDpfIrYdPM7tLVluNVT9XRFeoKHb/Vq7HGiK6aBrwBsNSlR4vzWB5QZZK/38s/
tKhxaZH2luEA10QHcKU3IzB1AognTjS+qV9LGOpre/os9t1eMzNmckh80fT2t9HO
izW3Hnvi/WJ0o+FNeLqC73rCWXOzQNvnD0fKDO6hijlAmqlXlnT9Ev75fFjUj3Fd
e06Db2+FMAHyrxAfjnsIkQdzlhQZ6i3TZ8wpO4C2JH7ast+ootpPpwyQMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIWcRmeWKxQ/gUYn3hiYD472GnKvMB8GA1UdIwQY
MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct
NzczY2ZjNDMzM2UxLzEvaFp4R1o1WXJGRC1CUmlmZUdKZ1BqdllhY3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux
LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/KcMA0G
CSqGSIb3DQEBCwUAA4IBAQCSKJA09WLo1cDsD77nCMFsMX2LZ0CeNhSM7UsxsHXC
jHtH64MGV5jqJ2oGG4VkqWjq83C2T++q3v9z+7H7UkbOuGBj0PzsIyndn7yu6wlC
QXoV9ruuX/5V888N9Y411yJvPb/+7P3vKV88J26rapvlIacdXVQmVldTu8CNSBzU
kRtzNsh3OdjPwBcNTO8ijNz1XctTYCxcoyuJr63SVY2FuS11Ht/5f6E9BLsa0TYw
P3J2sIzXqgrPDgZ4WremDJVXVjWUbMYcflLVUGqHUINkmrplSMAICchtZc11XEQ7
oIV0Ih+BOu7Ny6fD5awe4R+lPubqDSvwvVxRp80XKie1
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net