Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/lBowDCcGSdkP56eGU0lPL4u_SEM.roa
File: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (raw, json)
Hash identifier: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=
Subject key identifier: 94:1A:30:0C:27:06:49:D9:0F:E7:A7:86:53:49:4F:2F:8B:BF:48:43
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 019427B5787A9C4ED9EEF37917282B7E61AA
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/lBowDCcGSdkP56eGU0lPL4u_SEM.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210116
IP address blocks: 217.147.2.0/24 maxlen: 24
217.147.2.0/25 maxlen: 25
217.147.2.128/25 maxlen: 25
217.147.3.0/24 maxlen: 24
2a0e:dcc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:78:7a:9c:4e:d9:ee:f3:79:17:28:2b:7e:61:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=941a300c270649d90fe7a78653494f2f8bbf4843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:7f:69:a8:85:1e:0f:94:43:ce:64:b5:af:
b4:ec:8e:9d:6d:be:83:0e:37:27:41:1e:84:d1:82:
d2:99:51:a5:75:ef:cf:6b:9f:fe:81:fb:ac:da:5e:
6c:34:25:34:0b:bf:dc:f9:c3:7d:49:ee:85:df:8c:
73:87:ee:d8:67:bb:d8:36:5a:33:c2:ba:1b:3c:a2:
c3:02:1a:cf:0a:08:c9:bd:99:d6:e2:41:68:d9:e1:
98:d6:83:0f:0d:56:39:44:60:90:a3:39:39:c3:0b:
8d:3e:ec:8d:2f:4c:db:e1:e2:1b:d1:25:f3:5d:04:
cf:80:3c:ee:bf:93:a8:67:89:b9:cf:b7:a1:00:f6:
63:43:ea:f8:13:90:bd:a3:ef:b2:c2:57:16:7d:bf:
27:43:e1:13:14:e8:6d:78:da:eb:f2:78:12:8e:5a:
d5:82:54:ad:9c:35:63:2c:f7:a1:62:6a:8b:1a:41:
28:2f:06:fd:de:a7:fb:e0:01:0c:eb:84:8b:cd:49:
81:92:2a:48:61:1e:85:cf:c6:50:67:be:b8:c1:99:
91:b5:f6:65:a1:26:f1:65:f0:bd:f9:5d:97:1e:d9:
0d:23:33:4f:d5:3a:bc:76:68:23:5c:83:da:f7:34:
6b:e9:97:7f:32:2f:a8:bf:c1:fa:9e:fe:cb:b0:71:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:30:0C:27:06:49:D9:0F:E7:A7:86:53:49:4F:2F:8B:BF:48:43
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/lBowDCcGSdkP56eGU0lPL4u_SEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.2.0/23
IPv6:
2a0e:dcc0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:36:c9:55:9f:46:79:ae:85:0d:1d:ca:ac:c1:98:60:31:f5:
05:13:33:36:cb:23:e7:c6:41:e5:1b:0f:fc:74:1e:cf:2b:c0:
85:8d:a0:72:58:7b:4e:79:be:db:0e:9b:f2:ff:39:68:85:85:
38:62:50:f6:e9:56:09:63:06:50:79:0f:33:98:6f:cd:72:d7:
06:58:4d:3c:1b:b1:34:21:52:04:c4:32:18:a9:a5:e3:7a:20:
10:54:50:8a:7a:29:28:3a:ab:5b:56:4b:f6:08:da:8e:0b:9b:
66:55:64:75:b7:0e:3c:fb:56:9a:55:39:48:ce:ad:dc:a6:2d:
5d:f8:e0:c1:2f:3f:e9:28:4e:d7:c0:8b:13:a2:0b:5d:35:06:
d5:cc:06:a8:4f:32:80:f8:1e:28:28:1a:36:12:c8:51:72:6c:
53:e2:4c:8d:6f:95:92:f2:f7:9f:5d:4b:d1:4c:58:4a:a2:26:
42:e5:ff:6f:6a:f9:6a:5d:5b:51:cc:e4:63:cf:c5:be:b7:05:
0d:ec:ec:fa:c7:32:c8:c2:a5:44:6e:8c:ad:87:12:9b:0c:84:
d3:b9:b2:50:10:f3:cd:12:49:e3:c0:5f:68:b4:b2:01:3d:27:
6b:01:ab:24:5b:d6:e1:68:52:cc:e2:80:95:b6:3b:2d:12:bb:
95:fd:20:5e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntXh6nE7Z7vN5FygrfmGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj
OTZmMjAwHhcNMjUwMTAyMTU0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDFhMzAwYzI3MDY0OWQ5MGZlN2E3ODY1MzQ5NGYyZjhiYmY0ODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRd/aaiFHg+UQ85kta+07I6dbb6D
DjcnQR6E0YLSmVGlde/Pa5/+gfus2l5sNCU0C7/c+cN9Se6F34xzh+7YZ7vYNloz
wrobPKLDAhrPCgjJvZnW4kFo2eGY1oMPDVY5RGCQozk5wwuNPuyNL0zb4eIb0SXz
XQTPgDzuv5OoZ4m5z7ehAPZjQ+r4E5C9o++ywlcWfb8nQ+ETFOhteNrr8ngSjlrV
glStnDVjLPehYmqLGkEoLwb93qf74AEM64SLzUmBkipIYR6Fz8ZQZ764wZmRtfZl
oSbxZfC9+V2XHtkNIzNP1Tq8dmgjXIPa9zRr6Zd/Mi+ov8H6nv7LsHGnzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJQaMAwnBknZD+enhlNJTy+Lv0hDMB8GA1UdIwQY
MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt
ZWIxZTkxNjQ0ZjJkLzEvbEJvd0RDY0dTZGtQNTZlR1UwbFBMNHVfU0VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk
LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQB2ZMCMA0E
AgACMAcDBQMqDtzAMA0GCSqGSIb3DQEBCwUAA4IBAQBONslVn0Z5roUNHcqswZhg
MfUFEzM2yyPnxkHlGw/8dB7PK8CFjaByWHtOeb7bDpvy/zlohYU4YlD26VYJYwZQ
eQ8zmG/NctcGWE08G7E0IVIExDIYqaXjeiAQVFCKeikoOqtbVkv2CNqOC5tmVWR1
tw48+1aaVTlIzq3cpi1d+ODBLz/pKE7XwIsTogtdNQbVzAaoTzKA+B4oKBo2EshR
cmxT4kyNb5WS8vefXUvRTFhKoiZC5f9vavlqXVtRzORjz8W+twUN7Oz6xzLIwqVE
boythxKbDITTubJQEPPNEknjwF9otLIBPSdrAaskW9bhaFLM4oCVtjstEruV/SBe
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net