Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/1jamJZhJQCxnBF2gQL6E1EEMOTA.roa
File: 1jamJZhJQCxnBF2gQL6E1EEMOTA.roa (raw, json)
Hash identifier: kBKBG2m2NE0a6jTDEjeZmk4l4aHSEPbRY7SVjCst1XE=
Subject key identifier: D6:36:A6:25:98:49:40:2C:67:04:5D:A0:40:BE:84:D4:41:0C:39:30
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 0195A9798B6EECF92823E7E3865B630057BF
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/1jamJZhJQCxnBF2gQL6E1EEMOTA.roa
Signing time: Tue 18 Mar 2025 13:37:49 +0000
ROA not before: Tue 18 Mar 2025 13:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212263
IP address blocks: 83.167.176.0/21 maxlen: 21
83.167.184.0/22 maxlen: 22
185.222.21.0/24 maxlen: 24
2a10:f300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:79:8b:6e:ec:f9:28:23:e7:e3:86:5b:63:00:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Mar 18 13:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d636a6259849402c67045da040be84d4410c3930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:b8:70:5b:79:90:10:e3:7d:bd:b7:a3:77:
e2:c2:68:5d:60:79:a0:ae:c1:d5:e2:3e:72:f0:63:
1d:80:90:1a:79:43:30:4a:08:f7:1d:d1:a5:75:0e:
ff:63:21:1a:e0:2f:47:f2:6a:c0:52:6f:75:18:0e:
3d:3f:63:0e:b2:18:14:80:fd:5d:87:bc:64:35:c3:
1f:0f:0b:b4:2d:61:5a:c8:cb:32:8a:c3:d3:36:07:
7b:c9:e2:0c:d0:43:5c:d7:76:a9:f6:f0:a5:28:bd:
e7:56:31:07:8a:94:f4:83:67:a4:0c:d7:5b:70:c3:
d8:a5:09:71:88:84:5a:28:73:39:de:44:fa:bc:ba:
16:93:39:a1:e9:70:4e:75:3b:d8:52:05:4e:82:f2:
f9:ce:3b:f2:09:ad:bb:b9:e1:c6:91:d5:dc:79:3b:
7b:76:03:61:3d:7a:09:cb:eb:d0:8f:6c:ef:39:74:
11:02:45:aa:ae:c3:a6:58:10:ad:19:3d:55:5f:b7:
c6:c5:5b:cc:d3:61:00:3f:53:36:97:e9:bf:86:47:
89:45:46:c0:39:06:25:86:ae:c0:66:fa:c3:4c:e9:
c9:90:fc:f3:27:88:de:8f:b4:81:70:19:a1:2d:e2:
40:ac:7e:f0:43:ad:8b:3d:4d:d1:ab:0c:ef:2b:e5:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:36:A6:25:98:49:40:2C:67:04:5D:A0:40:BE:84:D4:41:0C:39:30
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/1jamJZhJQCxnBF2gQL6E1EEMOTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.167.176.0-83.167.187.255
185.222.21.0/24
IPv6:
2a10:f300::/29
Signature Algorithm: sha256WithRSAEncryption
2c:b3:9d:cb:16:18:b6:6a:6e:1b:ac:3a:62:90:6d:d0:4c:a9:
77:a5:94:34:05:d5:33:87:ac:64:fb:de:5d:10:6c:41:ff:83:
c5:74:87:9b:78:3e:c1:9d:88:5b:a0:c0:e7:9d:73:ef:9c:b7:
74:db:ed:16:7b:e4:21:7f:5c:ae:cc:3a:63:d7:6e:16:b8:e5:
d3:63:7d:6c:14:15:31:9c:e0:f7:e7:8c:be:38:c4:8e:1e:51:
03:9f:30:8f:f8:15:e3:df:58:09:30:e1:ca:51:a0:1a:48:5f:
b0:ad:97:99:3f:90:02:eb:0d:f5:0e:40:28:b8:7d:78:65:82:
05:1f:98:e1:20:9b:56:40:45:11:a7:59:2c:e0:75:bb:cf:df:
e3:0a:f2:1c:38:60:a3:d8:aa:de:bc:42:53:88:6b:a0:b0:95:
c4:20:b9:07:1d:a5:0c:49:c1:48:d3:be:21:fa:ee:f9:9a:7e:
2d:e8:38:5c:4b:f9:91:62:85:5f:eb:f5:16:04:99:1e:e1:1d:
fa:89:a2:24:75:cc:a8:df:9e:8c:e6:b2:8b:20:ed:65:d4:71:
85:66:48:cb:27:45:0c:41:75:b1:98:f4:37:a4:ce:e3:b5:96:
44:42:e5:0c:81:8e:69:bd:6a:38:69:b3:f2:34:d5:92:f4:f9:
07:c2:1d:ef
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZWpeYtu7PkoI+fjhltjAFe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2
YWRjOWYwHhcNMjUwMzE4MTMzNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjM2YTYyNTk4NDk0MDJjNjcwNDVkYTA0MGJlODRkNDQxMGMzOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1G4cFt5kBDjfb23o3fiwmhdYHmg
rsHV4j5y8GMdgJAaeUMwSgj3HdGldQ7/YyEa4C9H8mrAUm91GA49P2MOshgUgP1d
h7xkNcMfDwu0LWFayMsyisPTNgd7yeIM0ENc13ap9vClKL3nVjEHipT0g2ekDNdb
cMPYpQlxiIRaKHM53kT6vLoWkzmh6XBOdTvYUgVOgvL5zjvyCa27ueHGkdXceTt7
dgNhPXoJy+vQj2zvOXQRAkWqrsOmWBCtGT1VX7fGxVvM02EAP1M2l+m/hkeJRUbA
OQYlhq7AZvrDTOnJkPzzJ4jej7SBcBmhLeJArH7wQ62LPU3RqwzvK+X+gwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFNY2piWYSUAsZwRdoEC+hNRBDDkwMB8GA1UdIwQY
MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt
MzIwOGRlMzljMDlkLzEvMWphbUpaaEpRQ3huQkYyZ1FMNkUxRUVNT1RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk
LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBARTp7AD
BAJTp7gDBAC53hUwDQQCAAIwBwMFAyoQ8wAwDQYJKoZIhvcNAQELBQADggEBACyz
ncsWGLZqbhusOmKQbdBMqXellDQF1TOHrGT73l0QbEH/g8V0h5t4PsGdiFugwOed
c++ct3Tb7RZ75CF/XK7MOmPXbha45dNjfWwUFTGc4PfnjL44xI4eUQOfMI/4FePf
WAkw4cpRoBpIX7Ctl5k/kALrDfUOQCi4fXhlggUfmOEgm1ZARRGnWSzgdbvP3+MK
8hw4YKPYqt68QlOIa6CwlcQguQcdpQxJwUjTviH67vmafi3oOFxL+ZFihV/r9RYE
mR7hHfqJoiR1zKjfnozmsosg7WXUcYVmSMsnRQxBdbGY9DekzuO1lkRC5QyBjmm9
ajhps/I01ZL0+QfCHe8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net