Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/7Pk-IrjKbSkMaIFV6WzwQN1I03M.roa
File: 7Pk-IrjKbSkMaIFV6WzwQN1I03M.roa (raw, json)
Hash identifier: Hp4qd3j7wtXHjgK8l1L7RXVKrLRDd0CHGKAoHn9hvnU=
Subject key identifier: EC:F9:3E:22:B8:CA:6D:29:0C:68:81:55:E9:6C:F0:40:DD:48:D3:73
Certificate issuer: /CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Certificate serial: 0195F588101879BC025269271F52996509E9
Authority key identifier: 03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/7Pk-IrjKbSkMaIFV6WzwQN1I03M.roa
Signing time: Wed 02 Apr 2025 08:04:49 +0000
ROA not before: Wed 02 Apr 2025 08:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41653
IP address blocks: 45.141.172.0/22 maxlen: 24
91.199.0.0/24 maxlen: 24
95.128.40.0/21 maxlen: 24
178.212.228.0/24 maxlen: 24
185.66.232.0/22 maxlen: 24
194.105.152.0/23 maxlen: 24
195.14.22.0/24 maxlen: 24
2a02:ec0::/32 maxlen: 40
2a0e:cec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:88:10:18:79:bc:02:52:69:27:1f:52:99:65:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Validity
Not Before: Apr 2 08:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecf93e22b8ca6d290c688155e96cf040dd48d373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:03:bb:2d:69:c4:65:68:a0:93:6a:12:e9:
c2:13:81:05:82:ef:4b:bc:e3:0a:96:17:7c:bc:98:
12:4d:29:91:cf:cf:4e:91:92:09:0b:14:5a:9e:53:
be:5d:21:f5:61:94:61:0c:3d:f7:e0:7e:7a:24:72:
15:b7:28:0a:16:cc:1a:ad:f0:d6:be:2d:d2:31:51:
31:b2:6e:24:06:cf:be:c0:7f:ef:52:66:66:2a:79:
53:36:0e:09:24:f5:2e:e9:a4:bd:29:6c:b8:f9:40:
4f:98:c8:4c:e6:7a:83:28:b6:ff:91:af:7d:2f:36:
c4:6c:da:40:2f:be:d1:1d:3e:bf:a7:07:39:98:9c:
07:66:57:e7:37:67:ad:42:8e:8b:15:45:cd:3a:11:
63:ff:e6:f3:bb:94:3b:70:79:c8:4b:a9:0a:fb:0b:
ce:d5:58:e3:81:9c:2e:f0:e4:5f:8a:e5:e6:ad:f9:
b0:c9:37:f0:37:15:7f:97:b2:71:a0:97:ce:dc:bf:
d7:14:ba:b2:7c:31:d9:84:f5:94:c6:0c:1c:5c:43:
96:35:5d:bb:25:12:17:56:61:f0:de:23:b1:6d:df:
fd:b1:d7:45:8e:8e:e5:64:3d:0c:88:07:fd:2d:40:
47:86:bb:76:4e:9f:2e:88:8a:cf:0f:de:6f:35:42:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F9:3E:22:B8:CA:6D:29:0C:68:81:55:E9:6C:F0:40:DD:48:D3:73
X509v3 Authority Key Identifier:
keyid:03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/7Pk-IrjKbSkMaIFV6WzwQN1I03M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.172.0/22
91.199.0.0/24
95.128.40.0/21
178.212.228.0/24
185.66.232.0/22
194.105.152.0/23
195.14.22.0/24
IPv6:
2a02:ec0::/32
2a0e:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
af:44:af:c5:f0:e7:22:f7:4e:fc:9c:f8:0c:7d:ab:bf:37:ec:
20:1c:95:e2:2a:ca:ae:4b:80:3b:28:58:24:54:df:c0:64:3d:
14:63:3a:d6:b6:66:42:02:e7:d7:72:83:3b:28:46:60:0e:21:
3e:56:01:03:89:d1:71:ce:ab:01:9a:01:28:7d:77:fe:8b:e8:
f9:f8:c0:9b:f7:cd:3c:2c:56:25:5f:d0:ad:4e:ad:c2:83:ef:
bd:82:48:1e:f2:75:e1:a0:ac:4c:19:9b:00:46:1b:cf:72:f8:
c2:1b:a9:88:34:1f:56:ea:19:c1:57:81:60:aa:ef:5e:84:7c:
e4:bc:11:d1:fb:b0:ce:cb:23:af:ec:b9:e6:e1:58:8c:55:90:
5a:92:f6:75:1d:8e:a1:01:0f:eb:09:17:15:f9:39:d8:24:92:
e1:60:8f:54:f1:4c:f5:b0:2d:43:98:5d:1f:40:8a:a1:42:c7:
84:4d:8f:2b:18:d3:55:81:06:e4:aa:b9:0b:ae:19:af:a1:9a:
27:51:0f:d5:b0:01:b7:db:b7:f2:56:3a:b2:c7:9d:28:ea:96:
50:90:c5:bf:ec:ff:c4:48:a9:93:e6:be:30:68:2f:a7:1d:d5:
f3:29:1b:35:c2:a1:3a:0f:c6:7a:14:17:a0:52:24:0e:ad:38:
35:65:ae:51
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZX1iBAYebwCUmknH1KZZQnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMTE4N2JiNjRjODdkZmRkMmZhMDJmMmQ4NWQ0NzllYzI2
ODNlNTcwHhcNMjUwNDAyMDgwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2Y5M2UyMmI4Y2E2ZDI5MGM2ODgxNTVlOTZjZjA0MGRkNDhkMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2MDuy1pxGVooJNqEunCE4EFgu9L
vOMKlhd8vJgSTSmRz89OkZIJCxRanlO+XSH1YZRhDD334H56JHIVtygKFswarfDW
vi3SMVExsm4kBs++wH/vUmZmKnlTNg4JJPUu6aS9KWy4+UBPmMhM5nqDKLb/ka99
LzbEbNpAL77RHT6/pwc5mJwHZlfnN2etQo6LFUXNOhFj/+bzu5Q7cHnIS6kK+wvO
1VjjgZwu8ORfiuXmrfmwyTfwNxV/l7JxoJfO3L/XFLqyfDHZhPWUxgwcXEOWNV27
JRIXVmHw3iOxbd/9sddFjo7lZD0MiAf9LUBHhrt2Tp8uiIrPD95vNUKsdwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFOz5PiK4ym0pDGiBVels8EDdSNNzMB8GA1UdIwQY
MBaAFAMRh7tkyH390voC8thdR57CaD5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXhHSHUyVElmZjNTLWdMeTJGMUhuc0pvUGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jMWVkMmMtYjQxZS00ZWJkLWFhZmIt
ZjIxNGYwY2MyNjJiLzEvN1BrLUlyaktiU2tNYUlGVjZXendRTjFJMDNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9jMWVkMmMtYjQxZS00ZWJkLWFhZmItZjIxNGYwY2MyNjJi
LzEvQXhHSHUyVElmZjNTLWdMeTJGMUhuc0pvUGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQCLY2sAwQA
W8cAAwQDX4AoAwQAstTkAwQCuULoAwQBwmmYAwQAww4WMBQEAgACMA4DBQAqAg7A
AwUDKg7OwDANBgkqhkiG9w0BAQsFAAOCAQEAr0SvxfDnIvdO/Jz4DH2rvzfsIByV
4irKrkuAOyhYJFTfwGQ9FGM61rZmQgLn13KDOyhGYA4hPlYBA4nRcc6rAZoBKH13
/ovo+fjAm/fNPCxWJV/QrU6twoPvvYJIHvJ14aCsTBmbAEYbz3L4whupiDQfVuoZ
wVeBYKrvXoR85LwR0fuwzssjr+y55uFYjFWQWpL2dR2OoQEP6wkXFfk52CSS4WCP
VPFM9bAtQ5hdH0CKoULHhE2PKxjTVYEG5Kq5C64Zr6GaJ1EP1bABt9u38lY6ssed
KOqWUJDFv+z/xEipk+a+MGgvpx3V8ykbNcKhOg/GehQXoFIkDq04NWWuUQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net