Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/bOLohqMKHagd_oJ4fhpVo7NmmeM.roa
File: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (raw, json)
Hash identifier: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=
Subject key identifier: 6C:E2:E8:86:A3:0A:1D:A8:1D:FE:82:78:7E:1A:55:A3:B3:66:99:E3
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 0195FC47A9F62202D809A7EF6E04195522E0
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/bOLohqMKHagd_oJ4fhpVo7NmmeM.roa
Signing time: Thu 03 Apr 2025 15:31:49 +0000
ROA not before: Thu 03 Apr 2025 15:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210298
IP address blocks: 88.214.12.0/22 maxlen: 22
95.156.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:47:a9:f6:22:02:d8:09:a7:ef:6e:04:19:55:22:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Apr 3 15:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce2e886a30a1da81dfe82787e1a55a3b36699e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:bd:0f:08:46:7a:4c:57:6a:77:f4:44:ef:
c7:81:4f:25:e1:57:99:a8:6e:ab:52:c8:70:55:e9:
fc:b9:bd:a9:7d:0b:ec:cd:06:4b:34:21:05:12:ad:
7c:cd:95:c8:c3:15:8e:ac:77:7a:9f:38:37:4a:8e:
01:42:9e:11:aa:54:d0:e9:41:13:3b:4b:ab:26:df:
1a:e3:43:33:6b:93:91:5f:7d:3e:0a:1e:9a:b6:84:
f7:8f:dc:7b:8e:48:b2:48:a6:04:7f:c0:fd:a1:2a:
64:b3:0a:6e:d9:0e:d6:e3:92:b3:d0:c4:ab:d8:6e:
22:91:28:92:2b:ba:76:97:5b:d0:e0:65:16:83:26:
9c:fb:45:23:69:9b:e1:58:e0:fe:11:3b:5f:8a:38:
05:42:7d:98:7f:e9:94:d7:ff:4d:7e:72:63:5a:0e:
9e:17:fe:54:b8:ea:fb:d1:48:58:75:e7:10:b0:3e:
b2:32:13:9d:2f:3d:43:6d:13:ef:cd:09:13:b6:6e:
43:29:7b:a1:8d:63:7c:73:32:d0:a8:c3:20:0d:51:
ea:8e:94:5b:7f:9a:3c:b8:ed:b2:53:fb:d6:2c:8f:
0e:36:1f:fd:75:da:c2:26:6c:cf:fa:6f:e4:2b:ea:
4c:cf:1f:14:9a:a5:a3:fb:4d:6b:8c:29:5d:7d:72:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:E8:86:A3:0A:1D:A8:1D:FE:82:78:7E:1A:55:A3:B3:66:99:E3
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/bOLohqMKHagd_oJ4fhpVo7NmmeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.12.0/22
95.156.200.0/23
Signature Algorithm: sha256WithRSAEncryption
12:42:f7:5a:d0:a1:51:cf:e9:8e:f4:a1:d5:b0:8d:3a:e0:ed:
fd:9e:be:9e:5d:98:2b:6c:57:cd:e6:b5:48:fb:b7:4d:07:30:
78:f2:93:b4:98:d6:61:5f:38:e3:60:0c:e6:22:07:cd:8d:13:
63:f7:d5:d0:e3:f3:3f:8c:1b:2a:48:5a:21:de:bf:23:39:d3:
cd:6d:dc:f2:e6:d5:f1:c3:0a:02:0e:fa:03:5f:ac:61:09:47:
ad:79:a2:73:85:4d:f5:2a:f0:46:ab:2e:cc:dd:46:1d:43:ac:
49:68:3c:a5:76:ae:4a:56:66:dc:14:1f:7b:dc:93:43:66:fa:
43:98:16:6c:e8:de:f4:b4:07:e0:e9:03:02:dc:37:fb:ed:7a:
f3:94:4a:67:2a:51:41:d6:ee:df:9f:92:fd:a6:2c:3e:29:77:
b2:c2:b6:7f:b6:db:00:da:4b:9b:77:91:00:f4:8f:ec:ef:c9:
ae:98:37:75:07:de:75:74:9b:07:01:1d:b0:90:a9:93:29:34:
90:42:71:59:be:96:d2:73:7d:8e:35:79:f2:1a:8a:09:a0:aa:
8b:be:30:32:36:a4:c1:c2:0f:ca:fe:0e:44:aa:62:41:74:f5:
76:9d:7c:48:25:f9:a8:16:4a:6c:76:f7:cb:6f:01:5a:8a:88:
aa:90:73:dd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZX8R6n2IgLYCafvbgQZVSLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTgzYjZmNTZjZjA5MjcyOGRlNTkzYWQ5NTJhZWExOWNl
MzE4ODYwHhcNMjUwNDAzMTUzMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2UyZTg4NmEzMGExZGE4MWRmZTgyNzg3ZTFhNTVhM2IzNjY5OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4a9DwhGekxXanf0RO/HgU8l4VeZ
qG6rUshwVen8ub2pfQvszQZLNCEFEq18zZXIwxWOrHd6nzg3So4BQp4RqlTQ6UET
O0urJt8a40Mza5ORX30+Ch6atoT3j9x7jkiySKYEf8D9oSpkswpu2Q7W45Kz0MSr
2G4ikSiSK7p2l1vQ4GUWgyac+0UjaZvhWOD+ETtfijgFQn2Yf+mU1/9NfnJjWg6e
F/5UuOr70UhYdecQsD6yMhOdLz1DbRPvzQkTtm5DKXuhjWN8czLQqMMgDVHqjpRb
f5o8uO2yU/vWLI8ONh/9ddrCJmzP+m/kK+pMzx8UmqWj+01rjCldfXKu0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGzi6IajCh2oHf6CeH4aVaOzZpnjMB8GA1UdIwQY
MBaAFE1YO29WzwknKN5ZOtlSrqGc4xiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQt
MGI0ZjcxN2FhMzYzLzEvYk9Mb2hxTUtIYWdkX29KNGZocFZvN05tbWVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQtMGI0ZjcxN2FhMzYz
LzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWNYMAwQB
X5zIMA0GCSqGSIb3DQEBCwUAA4IBAQASQvda0KFRz+mO9KHVsI064O39nr6eXZgr
bFfN5rVI+7dNBzB48pO0mNZhXzjjYAzmIgfNjRNj99XQ4/M/jBsqSFoh3r8jOdPN
bdzy5tXxwwoCDvoDX6xhCUeteaJzhU31KvBGqy7M3UYdQ6xJaDyldq5KVmbcFB97
3JNDZvpDmBZs6N70tAfg6QMC3Df77XrzlEpnKlFB1u7fn5L9piw+KXeywrZ/ttsA
2kubd5EA9I/s78mumDd1B951dJsHAR2wkKmTKTSQQnFZvpbSc32ONXnyGooJoKqL
vjAyNqTBwg/K/g5EqmJBdPV2nXxIJfmoFkpsdvfLbwFaioiqkHPd
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net