Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa
File: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (raw, json)
Hash identifier: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=
Subject key identifier: 12:13:10:BF:61:DD:DD:8D:00:07:E1:1A:54:D3:F0:F4:0D:5E:97:66
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 01941FFA8919C242F5A5B3F3864AF0764A4C
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48492
IP address blocks: 176.222.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:89:19:c2:42:f5:a5:b3:f3:86:4a:f0:76:4a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=121310bf61dddd8d0007e11a54d3f0f40d5e9766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:bc:3a:59:b0:79:b1:93:15:7b:08:a9:22:
01:c9:78:45:c5:ad:42:3c:da:9c:67:90:ec:fc:5a:
ed:9b:ec:60:4b:ea:e8:bf:46:d3:49:36:6d:06:ac:
53:3d:05:6b:41:5b:c8:97:26:2e:fe:d5:50:97:c8:
e7:4c:62:de:3c:13:5c:c2:82:1c:6b:53:4a:0b:d7:
78:88:10:a4:af:ea:3f:be:0c:ba:cc:f4:c2:68:29:
46:50:7d:0b:9c:11:23:6d:ae:a7:6b:c3:56:d1:30:
65:e3:8e:f0:7a:16:4d:9c:8b:6b:7e:48:0f:a4:91:
b6:9a:23:92:20:28:7e:20:68:f6:ad:65:b1:7f:e5:
aa:c0:03:45:39:5d:a5:13:91:9c:ea:cb:a6:ae:f1:
53:79:4c:05:d1:78:9d:90:b4:f5:b6:47:0a:c9:7a:
1e:2b:97:b3:81:08:44:b9:ce:72:9d:5a:d8:7f:f2:
e1:bd:85:0b:6f:84:f5:80:78:6b:7f:e1:c7:fc:b7:
4a:f9:da:9a:5e:73:fd:11:ee:49:4b:e3:82:db:5c:
f6:f1:04:d2:1c:41:98:87:09:f2:f9:0a:86:7b:95:
5a:96:6e:a6:03:3d:a4:96:dd:98:e1:b7:40:e2:88:
95:78:c0:ff:e5:2c:52:59:36:be:6b:1e:f3:c9:24:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:10:BF:61:DD:DD:8D:00:07:E1:1A:54:D3:F0:F4:0D:5E:97:66
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.222.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:00:d7:af:69:97:c5:da:00:e6:68:f6:64:4a:c7:ac:14:15:
15:ad:96:25:c3:d8:eb:f0:2e:91:18:83:cd:49:ba:43:ad:fc:
16:19:8f:01:a8:bc:bb:f5:af:4f:fc:6d:b5:72:a8:7c:0a:b0:
2b:01:c9:bb:8f:a8:1d:65:8e:27:21:c4:94:c3:53:5e:af:f9:
7f:fc:23:ca:54:be:3a:74:74:8c:06:f3:bb:16:51:34:17:0b:
3f:2d:14:df:a0:5f:9a:06:cf:94:fc:cf:e9:24:ca:15:84:01:
89:61:ca:6d:2e:24:b5:89:49:16:a0:1e:46:e0:6a:42:86:21:
ac:49:bf:71:7c:94:fe:cd:51:b3:ad:7a:f6:a1:46:a2:fc:68:
81:63:55:48:fd:5d:31:92:21:35:57:f6:0a:a9:1e:ec:59:b0:
b0:e4:f2:ff:67:cf:55:0c:d6:ab:92:99:13:31:d8:42:b5:cc:
7a:1b:b2:40:98:fe:97:54:ba:30:67:96:5e:82:7f:d6:f1:b4:
7a:34:cd:f4:9b:95:82:d0:8a:c1:b9:a0:30:78:42:b5:7b:74:
bd:4b:6d:36:cd:aa:24:1d:8e:9c:16:86:16:62:61:de:d8:f6:
ab:a2:3f:db:ff:bf:13:a5:e0:d4:a6:7f:e9:71:1e:dc:47:eb:
04:e6:e2:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+okZwkL1pbPzhkrwdkpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTRmYzJhZjM4YWY1YjRmNTg2MWUyN2ZkMDA3ZTYyNGI1
ZjliMDIwHhcNMjUwMTAxMDM0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjEzMTBiZjYxZGRkZDhkMDAwN2UxMWE1NGQzZjBmNDBkNWU5NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+K8OlmwebGTFXsIqSIByXhFxa1C
PNqcZ5Ds/Frtm+xgS+rov0bTSTZtBqxTPQVrQVvIlyYu/tVQl8jnTGLePBNcwoIc
a1NKC9d4iBCkr+o/vgy6zPTCaClGUH0LnBEjba6na8NW0TBl447wehZNnItrfkgP
pJG2miOSICh+IGj2rWWxf+WqwANFOV2lE5Gc6sumrvFTeUwF0XidkLT1tkcKyXoe
K5ezgQhEuc5ynVrYf/LhvYULb4T1gHhrf+HH/LdK+dqaXnP9Ee5JS+OC21z28QTS
HEGYhwny+QqGe5Valm6mAz2klt2Y4bdA4oiVeMD/5SxSWTa+ax7zySTuRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBITEL9h3d2NAAfhGlTT8PQNXpdmMB8GA1UdIwQY
MBaAFLCk/CrzivW09YYeJ/0AfmJLX5sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYt
NjhmZTA4NjIyNjE0LzEvRWhNUXYySGQzWTBBQi1FYVZOUHc5QTFlbDJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYtNjhmZTA4NjIyNjE0
LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsN48MA0G
CSqGSIb3DQEBCwUAA4IBAQAvANevaZfF2gDmaPZkSsesFBUVrZYlw9jr8C6RGIPN
SbpDrfwWGY8BqLy79a9P/G21cqh8CrArAcm7j6gdZY4nIcSUw1Ner/l//CPKVL46
dHSMBvO7FlE0Fws/LRTfoF+aBs+U/M/pJMoVhAGJYcptLiS1iUkWoB5G4GpChiGs
Sb9xfJT+zVGzrXr2oUai/GiBY1VI/V0xkiE1V/YKqR7sWbCw5PL/Z89VDNarkpkT
MdhCtcx6G7JAmP6XVLowZ5Zegn/W8bR6NM30m5WC0IrBuaAweEK1e3S9S202zaok
HY6cFoYWYmHe2Paroj/b/78TpeDUpn/pcR7cR+sE5uLp
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net