Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nMOjxmkHTGxEynib09hvdR1w5d0.roa
File: nMOjxmkHTGxEynib09hvdR1w5d0.roa (raw, json)
Hash identifier: FqHlB60n+QIEzJlbVDKasMd5sus/rjfuZ5uoA4JuU+0=
Subject key identifier: 9C:C3:A3:C6:69:07:4C:6C:44:CA:78:9B:D3:D8:6F:75:1D:70:E5:DD
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0196117BD4327EDE62F0EF9E3A37A23ED14A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nMOjxmkHTGxEynib09hvdR1w5d0.roa
Signing time: Mon 07 Apr 2025 18:20:49 +0000
ROA not before: Mon 07 Apr 2025 18:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213355
IP address blocks: 45.129.196.0/24 maxlen: 24
88.214.48.0/24 maxlen: 24
88.214.49.0/24 maxlen: 24
193.176.20.0/24 maxlen: 24
193.176.21.0/24 maxlen: 24
193.176.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:7b:d4:32:7e:de:62:f0:ef:9e:3a:37:a2:3e:d1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 7 18:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc3a3c669074c6c44ca789bd3d86f751d70e5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:9e:1a:9c:f9:e8:77:e9:af:e5:e0:f6:cf:
c6:0e:0d:10:35:b9:64:a0:f9:1d:b5:f7:f5:dd:5f:
c8:9c:d5:8c:44:41:88:2c:2c:01:6f:64:7d:04:89:
41:a2:ad:99:b4:3c:b4:0e:fc:ec:92:69:ec:5e:b1:
6b:cf:f7:81:ca:da:18:2e:d2:0e:bf:5b:12:c3:13:
e1:62:11:2f:c0:bd:eb:f4:95:c7:80:cf:8e:0b:5f:
82:ad:9b:c6:42:31:7b:06:c7:ab:98:10:b9:07:b0:
cf:77:2a:4e:2b:e2:c6:b4:8c:ea:63:44:52:ca:ec:
4d:56:08:a8:95:5f:8b:d3:f5:c4:bc:3d:85:8d:9c:
23:3e:04:4e:a6:92:04:43:d5:ab:5d:4c:c2:ef:71:
ac:e7:7d:8a:fe:84:4a:31:89:07:34:d7:82:f5:3a:
d8:cc:03:1d:71:0f:5c:d9:cd:bd:f6:70:ea:b6:f9:
1a:97:d3:87:ba:b8:4e:85:05:33:69:f4:a4:69:d2:
9e:88:5d:9a:38:c2:e2:2c:ac:e9:b1:76:b9:50:0c:
bb:b5:54:36:3b:5d:88:2e:27:2d:fe:d2:99:a3:4c:
9e:ea:4d:c2:3f:2f:99:10:23:4e:e2:5a:86:24:d0:
f6:b8:ae:c2:00:e4:f1:ff:aa:58:d7:8a:8d:a8:c1:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:A3:C6:69:07:4C:6C:44:CA:78:9B:D3:D8:6F:75:1D:70:E5:DD
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nMOjxmkHTGxEynib09hvdR1w5d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.196.0/24
88.214.48.0/23
193.176.20.0/23
193.176.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3a:3d:2f:57:16:d0:57:ed:3f:ca:97:e3:8d:49:38:e8:b3:
e5:b2:91:aa:db:fa:f1:e6:a5:41:61:41:e0:92:17:f4:b3:60:
63:1b:3f:36:a7:00:73:93:49:1d:e0:23:95:f2:92:49:cd:fd:
25:e5:a2:a2:45:27:d5:a1:0f:7c:89:45:6f:e6:87:df:e8:21:
08:47:4a:ab:30:71:1e:0f:42:15:b1:f4:e4:f1:0b:c2:8c:2a:
51:d0:9a:0e:58:e6:3e:8a:ec:79:2f:96:23:c1:7a:3c:49:d4:
a3:bc:69:1b:cb:99:d2:f9:52:f0:1f:8b:e0:35:3e:68:f9:36:
6c:ee:ed:45:2d:db:b2:47:1e:aa:57:e6:11:5c:c1:cc:12:04:
0a:78:d4:bc:cf:6b:0d:0d:e0:c5:c7:e8:11:7d:a6:7c:ca:25:
73:ca:72:22:aa:dd:3a:a9:56:82:6c:02:b9:df:37:6a:b7:5a:
74:31:fd:78:cd:5e:07:ec:fd:5d:41:37:3f:e9:d8:c0:f3:56:
ec:a1:49:1b:8d:e3:23:f0:d4:0f:f8:16:aa:4c:dd:24:dd:0c:
c4:bc:5b:53:64:33:e4:f5:63:68:fb:36:51:2d:14:a1:70:bc:
f3:e4:be:db:0b:5b:f0:7f:79:3b:4b:cf:b1:3b:bd:eb:ab:51:
96:78:7a:db
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZYRe9Qyft5i8O+eOjeiPtFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwNDA3MTgyMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2MzYTNjNjY5MDc0YzZjNDRjYTc4OWJkM2Q4NmY3NTFkNzBlNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9qeGpz56Hfpr+Xg9s/GDg0QNblk
oPkdtff13V/InNWMREGILCwBb2R9BIlBoq2ZtDy0DvzskmnsXrFrz/eBytoYLtIO
v1sSwxPhYhEvwL3r9JXHgM+OC1+CrZvGQjF7BsermBC5B7DPdypOK+LGtIzqY0RS
yuxNVgiolV+L0/XEvD2FjZwjPgROppIEQ9WrXUzC73Gs532K/oRKMYkHNNeC9TrY
zAMdcQ9c2c299nDqtvkal9OHurhOhQUzafSkadKeiF2aOMLiLKzpsXa5UAy7tVQ2
O12ILict/tKZo0ye6k3CPy+ZECNO4lqGJND2uK7CAOTx/6pY14qNqME2EQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJzDo8ZpB0xsRMp4m9PYb3UdcOXdMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvbk1Panhta0hUR3hFeW5pYjA5aHZkUjF3NWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYHEAwQB
WNYwAwQBwbAUAwQAwbAXMA0GCSqGSIb3DQEBCwUAA4IBAQCcOj0vVxbQV+0/ypfj
jUk46LPlspGq2/rx5qVBYUHgkhf0s2BjGz82pwBzk0kd4COV8pJJzf0l5aKiRSfV
oQ98iUVv5off6CEIR0qrMHEeD0IVsfTk8QvCjCpR0JoOWOY+iux5L5YjwXo8SdSj
vGkby5nS+VLwH4vgNT5o+TZs7u1FLduyRx6qV+YRXMHMEgQKeNS8z2sNDeDFx+gR
faZ8yiVzynIiqt06qVaCbAK53zdqt1p0Mf14zV4H7P1dQTc/6djA81bsoUkbjeMj
8NQP+BaqTN0k3QzEvFtTZDPk9WNo+zZRLRShcLzz5L7bC1vwf3k7S8+xO73rq1GW
eHrb
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net