Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa
File: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (raw, json)
Hash identifier: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=
Subject key identifier: AD:86:38:2E:81:CB:2A:FC:2D:51:E5:0D:4A:9A:7D:E5:07:1F:72:AF
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019427B632C5E68541738766039E359241E3
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa
Signing time: Thu 02 Jan 2025 15:50:39 +0000
ROA not before: Thu 02 Jan 2025 15:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210129
IP address blocks: 45.137.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:32:c5:e6:85:41:73:87:66:03:9e:35:92:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad86382e81cb2afc2d51e50d4a9a7de5071f72af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:1e:33:38:66:4a:42:fd:f7:a8:58:25:0a:
6d:0a:4a:9d:d7:10:58:70:07:e3:3b:ac:81:06:e3:
04:05:77:94:57:c0:11:68:38:ad:e9:ce:b2:f1:9e:
d3:e1:29:75:7a:9d:1a:47:20:c2:db:62:85:90:d1:
b7:90:43:ed:68:12:fc:56:cd:39:88:7e:03:2a:82:
8f:34:7d:27:3a:2e:96:f9:35:f6:3c:fd:58:33:c3:
18:72:55:ea:d0:0b:c1:bf:bd:fb:00:04:e7:94:5b:
11:95:83:28:a5:a6:67:ab:36:70:a3:8e:bf:6d:7d:
1d:c7:f1:6b:6e:a0:5f:60:e0:73:ce:60:b6:20:8f:
c6:69:6c:33:c3:08:de:f8:92:b7:59:d5:c5:57:88:
48:fc:a7:14:1e:b0:16:4d:74:a8:b5:b1:2d:60:4e:
b7:d5:75:7e:82:6e:ec:28:0d:11:7a:30:78:0d:8d:
29:f3:f7:59:f7:7b:b2:78:44:41:d3:59:f4:57:fe:
8d:67:a1:78:dc:e8:97:ae:5b:13:fb:b8:0c:16:bb:
fe:2c:b5:74:2e:7c:ea:00:1a:4c:ec:c2:b8:c1:a8:
d9:f3:54:84:2e:17:d2:f3:66:e1:bb:92:2b:7a:f3:
b4:d9:de:57:e9:e0:ea:c9:ce:c0:0f:35:96:0c:6e:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:86:38:2E:81:CB:2A:FC:2D:51:E5:0D:4A:9A:7D:E5:07:1F:72:AF
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.232.0/22
Signature Algorithm: sha256WithRSAEncryption
02:31:47:aa:a1:3b:0e:92:ed:2c:12:3e:df:8f:fa:88:16:43:
e7:43:32:43:6d:4c:7a:75:00:e1:f3:c4:6c:18:87:4a:4b:e3:
2d:e4:83:24:c1:c3:ab:5f:ef:fc:2f:47:f5:a3:0f:31:f5:a5:
17:ea:72:b3:22:2c:8a:e8:fe:ff:b0:49:93:86:93:0f:04:23:
71:85:53:cc:0e:19:9a:05:ac:43:14:6b:ae:b3:73:a6:37:ef:
24:0c:52:84:17:ae:29:ba:55:32:47:28:9d:14:7e:4c:c0:bb:
5e:98:a7:e6:54:c9:07:49:de:10:62:20:35:8d:3f:d0:0e:81:
de:b1:93:c0:79:30:f9:8e:dc:21:01:8e:1d:84:76:b1:bb:fd:
57:8e:aa:2c:f9:fa:43:6f:26:21:e0:44:5d:f6:43:85:3a:98:
db:6c:29:00:ee:30:f1:b4:a1:85:3c:a7:71:72:32:27:6a:ae:
db:bc:09:f4:15:4f:35:b5:f3:ee:f9:a1:f0:2c:33:84:f7:7e:
0c:ad:cc:54:c3:7d:0f:35:ea:85:b4:c4:53:bd:da:6a:17:13:
c8:55:41:c6:33:e8:85:38:f5:7f:6f:8b:13:68:2a:b3:dd:b8:
56:79:71:c5:67:02:a8:02:5f:57:fc:db:67:5c:5a:b2:6e:4b:
cf:85:9a:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntjLF5oVBc4dmA541kkHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGFjMGIxMDY2ZDBkZWZjYjE2OTU2NDNkY2JhYTA3Mzk5
NzVjYTgwHhcNMjUwMTAyMTU1MDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDg2MzgyZTgxY2IyYWZjMmQ1MWU1MGQ0YTlhN2RlNTA3MWY3MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqgeMzhmSkL996hYJQptCkqd1xBY
cAfjO6yBBuMEBXeUV8ARaDit6c6y8Z7T4Sl1ep0aRyDC22KFkNG3kEPtaBL8Vs05
iH4DKoKPNH0nOi6W+TX2PP1YM8MYclXq0AvBv737AATnlFsRlYMopaZnqzZwo46/
bX0dx/FrbqBfYOBzzmC2II/GaWwzwwje+JK3WdXFV4hI/KcUHrAWTXSotbEtYE63
1XV+gm7sKA0RejB4DY0p8/dZ93uyeERB01n0V/6NZ6F43OiXrlsT+7gMFrv+LLV0
LnzqABpM7MK4wajZ81SELhfS82bhu5IrevO02d5X6eDqyc7ADzWWDG7BVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2GOC6Byyr8LVHlDUqafeUHH3KvMB8GA1UdIwQY
MBaAFNmKwLEGbQ3vyxaVZD3Lqgc5l1yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgt
ZTM1ZDJkNWYwMGY4LzEvcllZNExvSExLdnd0VWVVTlNwcDk1UWNmY3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgtZTM1ZDJkNWYwMGY4
LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYnoMA0G
CSqGSIb3DQEBCwUAA4IBAQACMUeqoTsOku0sEj7fj/qIFkPnQzJDbUx6dQDh88Rs
GIdKS+Mt5IMkwcOrX+/8L0f1ow8x9aUX6nKzIiyK6P7/sEmThpMPBCNxhVPMDhma
BaxDFGuus3OmN+8kDFKEF64pulUyRyidFH5MwLtemKfmVMkHSd4QYiA1jT/QDoHe
sZPAeTD5jtwhAY4dhHaxu/1Xjqos+fpDbyYh4ERd9kOFOpjbbCkA7jDxtKGFPKdx
cjInaq7bvAn0FU81tfPu+aHwLDOE934MrcxUw30PNeqFtMRTvdpqFxPIVUHGM+iF
OPV/b4sTaCqz3bhWeXHFZwKoAl9X/NtnXFqybkvPhZpY
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net