Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/9ykTfaxNeEIbk7wOARPuxoyYN9I.roa
File: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (raw, json)
Hash identifier: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=
Subject key identifier: F7:29:13:7D:AC:4D:78:42:1B:93:BC:0E:01:13:EE:C6:8C:98:37:D2
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 019422FC244931BC0CC446385A46E989F00F
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/9ykTfaxNeEIbk7wOARPuxoyYN9I.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30933
IP address blocks: 85.118.232.0/21 maxlen: 21
193.151.124.0/22 maxlen: 22
193.151.124.0/24 maxlen: 24
193.151.125.0/24 maxlen: 24
193.151.126.0/24 maxlen: 24
193.151.127.0/24 maxlen: 24
194.110.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:24:49:31:bc:0c:c4:46:38:5a:46:e9:89:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f729137dac4d78421b93bc0e0113eec68c9837d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:9c:e0:99:f7:9c:f4:ab:a1:c8:77:fa:57:
3c:60:72:33:17:a6:2c:4c:5a:6b:13:06:d9:9d:c5:
20:72:78:9d:67:14:6f:23:0e:26:54:a1:2f:ac:bc:
75:7a:b2:f3:4e:ad:2a:c4:d0:6b:e0:4b:bc:93:e6:
fb:69:9d:80:96:0e:ea:a5:9b:ee:b9:b8:81:92:f1:
76:b1:ab:8c:bc:4d:e4:53:3d:5a:9a:46:36:d0:0b:
21:ea:3c:b3:04:ab:c6:e4:b9:1d:a6:01:f0:1e:21:
b2:df:0a:ef:39:f5:dd:6e:ee:71:3d:80:82:8c:8e:
f0:ef:06:b5:7a:b4:33:8b:10:93:8d:ed:4c:27:27:
52:bf:1e:d5:04:0c:04:d8:67:ee:fe:d1:6d:8d:08:
b4:e2:bc:06:88:cd:e3:d8:18:ff:19:05:c4:e9:c7:
65:00:7d:ad:b2:0b:f9:7f:28:c9:a4:06:01:4d:13:
0d:f0:0d:61:28:d2:ad:a4:97:d8:dd:6e:fe:ac:2f:
19:f9:c9:f2:bf:9e:12:f3:11:d6:22:4f:e7:85:49:
de:36:b4:10:85:e5:69:b5:77:b0:c9:7b:f6:64:6d:
bd:03:5e:97:b0:3f:8b:f1:23:49:1d:9d:70:9c:f3:
9d:f9:2a:80:34:9d:94:6a:89:e6:5d:1a:1e:e6:e3:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:29:13:7D:AC:4D:78:42:1B:93:BC:0E:01:13:EE:C6:8C:98:37:D2
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/9ykTfaxNeEIbk7wOARPuxoyYN9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.232.0/21
193.151.124.0/22
194.110.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:76:0a:c0:6b:d1:75:27:33:39:f3:f4:e4:66:44:52:36:a2:
9d:54:ae:6a:57:4f:26:05:48:28:cc:b9:f4:92:a6:c0:ae:b0:
ca:d1:90:10:c1:f1:90:47:63:c1:44:78:94:22:11:ce:7c:f3:
61:c3:23:9e:88:ee:a6:e5:54:74:d5:27:e8:b0:8d:e0:82:f0:
90:1f:fc:ae:ee:e8:c5:ff:24:58:ed:3b:be:ae:0b:54:d7:7e:
80:1f:e0:ed:29:79:a2:07:f6:56:d6:9a:1a:c5:e0:66:2a:3c:
2d:03:23:a4:f0:ab:19:b2:f2:b7:ab:41:ef:48:e6:e4:4d:fd:
53:a0:f3:38:bc:db:a0:cd:8b:b6:39:30:80:d7:ab:33:94:a6:
76:50:d7:ae:af:ea:a7:6c:45:db:47:09:a6:fc:68:4d:22:54:
ec:5a:f0:4c:76:b0:81:4a:6d:3c:2b:0d:67:d6:53:d1:41:ab:
45:82:bd:06:4c:3e:02:e3:77:da:22:70:53:23:d8:c4:77:f2:
d4:c2:85:86:3f:fb:15:39:eb:57:6c:c7:04:78:0a:2d:9c:b5:
68:66:33:57:80:83:40:e8:47:df:19:f8:57:51:93:3e:d4:03:
7b:80:3f:13:12:e8:5d:49:86:57:44:68:00:81:fb:66:22:0d:
b1:1e:31:6e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi/CRJMbwMxEY4WkbpifAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzIxZWViZjRmOTViZTlmODFmMGYyMzNmODlmMzYwMmQy
ZjAwNzQwHhcNMjUwMTAxMTc0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzI5MTM3ZGFjNGQ3ODQyMWI5M2JjMGUwMTEzZWVjNjhjOTgzN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQuc4Jn3nPSroch3+lc8YHIzF6Ys
TFprEwbZncUgcnidZxRvIw4mVKEvrLx1erLzTq0qxNBr4Eu8k+b7aZ2Alg7qpZvu
ubiBkvF2sauMvE3kUz1amkY20Ash6jyzBKvG5LkdpgHwHiGy3wrvOfXdbu5xPYCC
jI7w7wa1erQzixCTje1MJydSvx7VBAwE2Gfu/tFtjQi04rwGiM3j2Bj/GQXE6cdl
AH2tsgv5fyjJpAYBTRMN8A1hKNKtpJfY3W7+rC8Z+cnyv54S8xHWIk/nhUneNrQQ
heVptXewyXv2ZG29A16XsD+L8SNJHZ1wnPOd+SqANJ2UaonmXRoe5uMJfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPcpE32sTXhCG5O8DgET7saMmDfSMB8GA1UdIwQY
MBaAFLYyHuv0+Vvp+B8PIz+J82AtLwB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81YzkyZDEtNDFlNS00NDNlLWEyNTAt
MDFiYWY3OGVjNzNmLzEvOXlrVGZheE5lRUliazd3T0FSUHV4b3lZTjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81YzkyZDEtNDFlNS00NDNlLWEyNTAtMDFiYWY3OGVjNzNm
LzEvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDVXboAwQC
wZd8AwQAwm76MA0GCSqGSIb3DQEBCwUAA4IBAQDDdgrAa9F1JzM58/TkZkRSNqKd
VK5qV08mBUgozLn0kqbArrDK0ZAQwfGQR2PBRHiUIhHOfPNhwyOeiO6m5VR01Sfo
sI3ggvCQH/yu7ujF/yRY7Tu+rgtU136AH+DtKXmiB/ZW1poaxeBmKjwtAyOk8KsZ
svK3q0HvSObkTf1ToPM4vNugzYu2OTCA16szlKZ2UNeur+qnbEXbRwmm/GhNIlTs
WvBMdrCBSm08Kw1n1lPRQatFgr0GTD4C43faInBTI9jEd/LUwoWGP/sVOetXbMcE
eAotnLVoZjNXgINA6EffGfhXUZM+1AN7gD8TEuhdSYZXRGgAgftmIg2xHjFu
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net