Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/RpnGjFmcT56C89eB4k7yZQkJFTU.roa
File: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (raw, json)
Hash identifier: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=
Subject key identifier: 46:99:C6:8C:59:9C:4F:9E:82:F3:D7:81:E2:4E:F2:65:09:09:15:35
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019426D97BE14B1156FB4C03205136F10881
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/RpnGjFmcT56C89eB4k7yZQkJFTU.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25101
IP address blocks: 193.111.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7b:e1:4b:11:56:fb:4c:03:20:51:36:f1:08:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4699c68c599c4f9e82f3d781e24ef26509091535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:f8:7f:06:f0:bc:b9:98:5a:52:59:3d:e7:
ec:4c:a7:ba:39:38:4e:ac:2f:c3:b9:f4:07:10:f7:
c3:88:b0:9d:9f:2c:30:25:12:57:89:ed:a7:f3:ef:
54:17:eb:7b:55:c3:af:ab:0b:40:93:0f:5f:43:fe:
fe:c9:de:43:f3:10:82:60:ac:67:41:43:1a:14:3a:
15:f0:1d:dd:7f:71:e5:76:7d:db:f9:c5:eb:8f:b7:
e5:5c:39:b5:89:e5:ea:4a:f0:8f:12:9d:39:f7:45:
a1:11:93:28:9f:ea:66:54:53:04:91:1c:36:c7:7f:
75:3e:49:25:bc:a5:49:33:f8:20:44:47:35:fe:f0:
0d:d4:09:01:2a:90:29:0e:4c:03:57:0e:cf:f5:08:
68:2c:55:e4:09:62:f8:a1:90:e4:d8:9b:db:d7:1d:
fd:df:4c:6e:93:8b:0c:68:58:37:42:49:e9:5a:8d:
cc:1e:e3:ce:7b:b3:00:53:08:46:a3:14:a3:42:53:
64:c2:67:b2:2f:75:1e:a4:d7:57:76:55:87:53:1b:
22:e7:92:ab:6b:10:40:e6:80:1f:b5:50:9e:e9:e4:
be:f8:46:2b:23:bf:cb:13:45:09:e0:f6:9e:be:53:
8c:76:b4:45:a1:44:59:83:5a:e5:45:69:fd:d7:9d:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:99:C6:8C:59:9C:4F:9E:82:F3:D7:81:E2:4E:F2:65:09:09:15:35
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/RpnGjFmcT56C89eB4k7yZQkJFTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.237.0/24
Signature Algorithm: sha256WithRSAEncryption
71:83:aa:85:2e:5c:8a:37:c6:42:e1:2f:2f:fa:45:d0:43:9c:
a5:04:ba:7d:f9:05:17:c9:d8:d1:7f:18:7f:48:1f:07:84:22:
52:ff:37:5d:ca:81:a5:af:41:c0:2c:81:02:fb:d5:73:d9:57:
73:6d:9c:bf:24:c3:a3:e3:b0:ac:02:e2:88:04:11:39:6b:6f:
9d:c9:cb:2a:83:cb:f8:68:a3:2d:a9:2c:61:cc:db:98:c5:8b:
6a:a7:00:24:58:78:81:b9:2e:72:27:ee:c2:e4:2b:0d:9d:1d:
2c:7e:d3:ca:15:99:73:2a:95:da:12:92:0b:62:92:79:fb:f7:
89:45:10:c5:85:52:e4:a7:00:9a:5b:4e:34:cd:33:69:d0:04:
44:4a:cc:22:24:12:2b:a7:fc:96:ce:11:24:e8:c3:97:2a:11:
bd:b8:31:ab:84:a4:6e:74:0d:c2:5c:fe:3e:15:4e:63:bc:96:
26:eb:cf:18:38:f1:16:c4:0c:e6:77:b4:c8:e7:04:cc:cb:5a:
4a:60:32:b0:8b:04:2d:95:0d:e1:91:25:6e:f0:cd:36:d0:9b:
77:8b:82:62:a7:71:33:86:3d:d2:ba:93:69:8d:72:f7:3b:b8:
72:9c:46:e4:b2:8a:dd:9c:10:58:89:e6:a1:e5:67:88:00:7c:
dc:c9:2b:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2XvhSxFW+0wDIFE28QiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4
NzI4NWQwHhcNMjUwMTAyMTE0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njk5YzY4YzU5OWM0ZjllODJmM2Q3ODFlMjRlZjI2NTA5MDkxNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa/4fwbwvLmYWlJZPefsTKe6OThO
rC/DufQHEPfDiLCdnywwJRJXie2n8+9UF+t7VcOvqwtAkw9fQ/7+yd5D8xCCYKxn
QUMaFDoV8B3df3Hldn3b+cXrj7flXDm1ieXqSvCPEp0590WhEZMon+pmVFMEkRw2
x391PkklvKVJM/ggREc1/vAN1AkBKpApDkwDVw7P9QhoLFXkCWL4oZDk2Jvb1x39
30xuk4sMaFg3QknpWo3MHuPOe7MAUwhGoxSjQlNkwmeyL3UepNdXdlWHUxsi55Kr
axBA5oAftVCe6eS++EYrI7/LE0UJ4PaevlOMdrRFoURZg1rlRWn9151sjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEaZxoxZnE+egvPXgeJO8mUJCRU1MB8GA1UdIwQY
MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt
NjEzMDE3ODg2ZThiLzEvUnBuR2pGbWNUNTZDODllQjRrN3laUWtKRlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi
LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW/tMA0G
CSqGSIb3DQEBCwUAA4IBAQBxg6qFLlyKN8ZC4S8v+kXQQ5ylBLp9+QUXydjRfxh/
SB8HhCJS/zddyoGlr0HALIEC+9Vz2VdzbZy/JMOj47CsAuKIBBE5a2+dycsqg8v4
aKMtqSxhzNuYxYtqpwAkWHiBuS5yJ+7C5CsNnR0sftPKFZlzKpXaEpILYpJ5+/eJ
RRDFhVLkpwCaW040zTNp0ARESswiJBIrp/yWzhEk6MOXKhG9uDGrhKRudA3CXP4+
FU5jvJYm688YOPEWxAzmd7TI5wTMy1pKYDKwiwQtlQ3hkSVu8M020Jt3i4Jip3Ez
hj3SupNpjXL3O7hynEbksordnBBYieah5WeIAHzcySsI
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net