Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/iSXPGWrVDYVIEVR8cfFQwv7cBmw.roa
File: iSXPGWrVDYVIEVR8cfFQwv7cBmw.roa (raw, json)
Hash identifier: X1bVncWHKP3XqHjUIeZ8VnviT3EO8UdWO3uc8hgbwFQ=
Subject key identifier: 89:25:CF:19:6A:D5:0D:85:48:11:54:7C:71:F1:50:C2:FE:DC:06:6C
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 0195D77824F9E8C62AF2BE746FD44F9AC12B
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/iSXPGWrVDYVIEVR8cfFQwv7cBmw.roa
Signing time: Thu 27 Mar 2025 11:58:49 +0000
ROA not before: Thu 27 Mar 2025 11:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33921
IP address blocks: 5.42.207.0/24 maxlen: 24
45.92.79.0/24 maxlen: 24
84.246.112.0/24 maxlen: 24
84.246.113.0/24 maxlen: 24
84.246.114.0/24 maxlen: 24
84.246.115.0/24 maxlen: 24
194.213.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:78:24:f9:e8:c6:2a:f2:be:74:6f:d4:4f:9a:c1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Mar 27 11:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8925cf196ad50d854811547c71f150c2fedc066c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:0d:0d:9f:77:e0:d5:38:35:aa:a2:66:10:
52:4b:8b:0f:f7:5c:c3:89:fb:76:e4:b3:88:63:cd:
2e:5d:88:e1:46:97:db:20:73:e5:9b:ad:f7:2d:a4:
fd:b1:e0:ce:1c:fb:e8:6b:0d:2a:3c:e9:62:dd:95:
9e:91:d7:34:87:07:28:06:37:e5:88:40:ea:4c:dc:
ef:86:6b:c9:ed:d9:56:7a:ad:39:c0:b6:66:f4:00:
ee:79:85:ad:7d:57:40:9b:56:e0:a8:f1:36:b4:91:
8a:56:eb:b7:ec:88:ec:de:5a:6b:9c:42:9f:c2:89:
13:89:88:cc:8d:db:f0:bd:c6:8a:7c:4a:1e:4d:da:
53:69:67:f9:76:7d:28:ec:ee:6c:ff:5e:74:7d:7c:
71:c5:13:00:9f:16:2b:4d:43:23:aa:42:db:93:bb:
a1:3c:c6:e4:b1:8f:0b:f7:ec:c0:8e:d0:2d:60:40:
1e:7b:37:c8:85:03:a2:7b:ee:b9:00:ae:72:6a:ce:
44:0a:e1:1c:97:51:83:ac:30:43:f9:bc:1d:e7:4c:
9e:ae:dc:b4:01:f4:f9:dd:63:14:87:64:3d:55:d4:
2c:db:7e:53:0b:f6:33:8b:f0:84:01:d9:52:87:53:
47:4b:e0:3e:c5:63:6c:2a:28:0a:ac:8e:50:b6:d5:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:CF:19:6A:D5:0D:85:48:11:54:7C:71:F1:50:C2:FE:DC:06:6C
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/iSXPGWrVDYVIEVR8cfFQwv7cBmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.207.0/24
45.92.79.0/24
84.246.112.0/22
194.213.108.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c2:dd:91:e3:c5:77:34:b9:01:90:b9:96:27:fc:e6:b4:51:
e0:0f:79:d4:4a:78:8e:c7:b8:59:91:4e:ea:9d:f8:62:c6:88:
e7:cd:64:84:fb:98:d4:c3:9b:95:ec:6c:5d:9e:ef:ba:b7:a5:
90:d0:13:92:16:04:22:60:be:8d:eb:b7:b5:ca:27:be:aa:10:
51:b4:fc:6e:17:cc:31:54:21:6c:18:d9:ad:0a:a1:09:b7:7b:
d4:38:b3:a5:bb:63:61:3a:37:45:a8:56:5e:24:00:b8:08:07:
19:39:6c:4f:21:a7:81:fb:d2:30:75:e2:a0:fa:19:81:41:34:
cb:22:72:73:9a:eb:10:4c:ee:c3:41:c7:34:7b:db:ca:80:a5:
d4:ee:89:88:89:68:fc:e5:e7:ac:88:14:82:16:aa:c5:58:75:
47:11:5f:f4:8d:fd:a1:0d:45:37:26:49:2a:c7:ca:9f:a4:80:
fb:33:bc:3d:0f:2b:a6:07:4a:38:62:aa:95:ee:d9:52:43:89:
ed:56:c3:bf:c3:14:be:24:d0:e7:2a:9d:8c:76:d8:8d:23:3a:
8c:eb:6f:1b:b0:01:0f:ab:3e:62:99:b4:9f:0f:71:47:d3:b4:
89:86:3c:01:78:2f:8a:8f:96:df:26:c7:43:9b:c7:e9:42:ee:
20:d0:21:fb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZXXeCT56MYq8r50b9RPmsErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl
ZTgyOGUwHhcNMjUwMzI3MTE1ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTI1Y2YxOTZhZDUwZDg1NDgxMTU0N2M3MWYxNTBjMmZlZGMwNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZANDZ934NU4NaqiZhBSS4sP91zD
ift25LOIY80uXYjhRpfbIHPlm633LaT9seDOHPvoaw0qPOli3ZWekdc0hwcoBjfl
iEDqTNzvhmvJ7dlWeq05wLZm9ADueYWtfVdAm1bgqPE2tJGKVuu37Ijs3lprnEKf
wokTiYjMjdvwvcaKfEoeTdpTaWf5dn0o7O5s/150fXxxxRMAnxYrTUMjqkLbk7uh
PMbksY8L9+zAjtAtYEAeezfIhQOie+65AK5yas5ECuEcl1GDrDBD+bwd50yerty0
AfT53WMUh2Q9VdQs235TC/Yzi/CEAdlSh1NHS+A+xWNsKigKrI5QttUzGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIklzxlq1Q2FSBFUfHHxUML+3AZsMB8GA1UdIwQY
MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt
OTI2YzRhMzI2ZTA4LzEvaVNYUEdXclZEWVZJRVZSOGNmRlF3djdjQm13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4
LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABSrPAwQA
LVxPAwQCVPZwAwQAwtVsMA0GCSqGSIb3DQEBCwUAA4IBAQCDwt2R48V3NLkBkLmW
J/zmtFHgD3nUSniOx7hZkU7qnfhixojnzWSE+5jUw5uV7Gxdnu+6t6WQ0BOSFgQi
YL6N67e1yie+qhBRtPxuF8wxVCFsGNmtCqEJt3vUOLOlu2NhOjdFqFZeJAC4CAcZ
OWxPIaeB+9IwdeKg+hmBQTTLInJzmusQTO7DQcc0e9vKgKXU7omIiWj85eesiBSC
FqrFWHVHEV/0jf2hDUU3Jkkqx8qfpID7M7w9DyumB0o4YqqV7tlSQ4ntVsO/wxS+
JNDnKp2MdtiNIzqM628bsAEPqz5imbSfD3FH07SJhjwBeC+Kj5bfJsdDm8fpQu4g
0CH7
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net