Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/CcO4X5owbp8OTsQUAi4Se0U0bGo.roa
File: CcO4X5owbp8OTsQUAi4Se0U0bGo.roa (raw, json)
Hash identifier: Rjhil4a1bZ7IivISF1+emC+myyX4/SSXPPEDg9r6bJ4=
Subject key identifier: 09:C3:B8:5F:9A:30:6E:9F:0E:4E:C4:14:02:2E:12:7B:45:34:6C:6A
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 019420D5D334CE0C87C925B90F03E3153E3C
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/CcO4X5owbp8OTsQUAi4Se0U0bGo.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3262
IP address blocks: 192.148.167.0/24 maxlen: 24
194.30.0.0/17 maxlen: 17
194.30.28.0/24 maxlen: 24
195.16.128.0/19 maxlen: 19
212.81.128.0/17 maxlen: 17
2a03:c600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d3:34:ce:0c:87:c9:25:b9:0f:03:e3:15:3e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09c3b85f9a306e9f0e4ec414022e127b45346c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:38:3d:9b:78:ee:ee:4f:d1:04:4f:07:57:
c6:46:a2:e8:68:75:dc:9f:fe:96:05:ba:62:38:77:
16:d7:88:24:70:34:40:2d:21:f3:1b:3f:2f:12:38:
1c:63:29:ac:3f:2c:d7:46:e0:48:a3:53:0e:5a:5e:
66:b1:91:5d:7d:63:01:44:88:9e:6b:ad:02:13:c8:
13:d3:a1:77:57:52:0a:81:e3:c2:64:a9:f1:b6:6a:
d5:93:66:c2:f3:28:df:3d:83:77:88:69:3c:c9:1f:
b2:6e:f8:4a:15:12:48:51:a7:5a:e7:c4:de:5c:bf:
52:a0:5b:65:06:0c:f8:28:5b:9b:a3:34:eb:d5:16:
f9:b4:f5:85:3b:4e:e5:17:79:ae:f0:3b:46:a2:1d:
35:9f:f2:e4:b0:8b:33:c3:1a:3d:5c:7c:58:c2:c9:
e9:0e:a8:3d:fc:9b:fe:e7:71:d7:ec:67:d9:ef:b4:
85:7c:7f:a5:03:ba:7e:83:f1:f7:1d:2c:54:32:68:
0b:b4:9d:2b:ed:f6:6d:0a:13:c8:e7:7f:d6:a3:7c:
de:60:91:06:77:d8:67:88:64:d2:93:24:4e:39:37:
2b:53:b8:91:5a:88:45:63:9c:84:e6:cf:46:5e:23:
7e:2b:a7:95:5a:b9:ff:7d:71:fa:76:95:ff:56:80:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:B8:5F:9A:30:6E:9F:0E:4E:C4:14:02:2E:12:7B:45:34:6C:6A
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/CcO4X5owbp8OTsQUAi4Se0U0bGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.148.167.0/24
194.30.0.0/17
195.16.128.0/19
212.81.128.0/17
IPv6:
2a03:c600::/32
Signature Algorithm: sha256WithRSAEncryption
27:87:b6:1d:a4:f9:f0:92:1a:57:36:f4:d1:1e:b9:83:59:d0:
4f:4a:14:37:9e:6c:fa:11:89:4f:33:aa:2d:a9:5f:7d:b0:aa:
95:81:90:92:71:c9:25:c1:d7:97:a2:11:4b:04:b1:8c:63:3c:
16:ef:02:cc:ea:d5:6d:6f:e6:e4:e6:28:47:0a:36:d9:7f:2f:
9f:f9:64:4c:37:87:bc:58:d1:2f:b7:6a:aa:3f:b6:a8:f5:9a:
4d:d9:52:63:00:de:00:37:68:09:c3:ce:6b:e3:46:84:ab:e2:
f2:ba:1b:87:0e:4e:4a:c6:5a:56:21:6f:35:2d:9b:82:f0:62:
f1:75:6f:7f:73:50:eb:3f:f7:f8:4e:67:7c:af:f7:91:37:22:
d1:39:ed:1c:72:eb:75:81:81:9f:e4:28:04:d6:74:bf:3f:72:
c6:38:c4:40:69:3f:10:10:d6:f9:42:18:81:9d:77:a4:e2:60:
ed:28:8e:7c:3d:2b:83:9d:fe:3d:2b:1a:c8:34:2c:a8:f2:70:
9d:57:02:f7:0c:c0:40:8e:99:ca:5c:e2:e5:ae:5d:9b:04:80:
93:2b:eb:3d:94:f7:ba:69:74:d3:a2:f6:e7:cd:d4:69:1d:37:
4a:db:89:4e:ed:ee:17:3d:31:f2:9f:45:82:21:c4:2e:cf:7c:
c8:a6:99:17
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQg1dM0zgyHySW5DwPjFT48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWRiODI1ZjlmZGJjYTBjZDdjNzkwMWRlYjdhMjJhZTE3
OTdjMDYwHhcNMjUwMTAxMDc0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWMzYjg1ZjlhMzA2ZTlmMGU0ZWM0MTQwMjJlMTI3YjQ1MzQ2YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnU4PZt47u5P0QRPB1fGRqLoaHXc
n/6WBbpiOHcW14gkcDRALSHzGz8vEjgcYymsPyzXRuBIo1MOWl5msZFdfWMBRIie
a60CE8gT06F3V1IKgePCZKnxtmrVk2bC8yjfPYN3iGk8yR+ybvhKFRJIUada58Te
XL9SoFtlBgz4KFubozTr1Rb5tPWFO07lF3mu8DtGoh01n/LksIszwxo9XHxYwsnp
Dqg9/Jv+53HX7GfZ77SFfH+lA7p+g/H3HSxUMmgLtJ0r7fZtChPI53/Wo3zeYJEG
d9hniGTSkyROOTcrU7iRWohFY5yE5s9GXiN+K6eVWrn/fXH6dpX/VoBO5wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFAnDuF+aMG6fDk7EFAIuEntFNGxqMB8GA1UdIwQY
MBaAFGmtuCX5/bygzXx5Ad63oirheXwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAt
MzIzNjI2N2M4Nzk5LzEvQ2NPNFg1b3dicDhPVHNRVUFpNFNlMFUwYkdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAtMzIzNjI2N2M4Nzk5
LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwJSnAwQH
wh4AAwQFwxCAAwQH1FGAMA0EAgACMAcDBQAqA8YAMA0GCSqGSIb3DQEBCwUAA4IB
AQAnh7YdpPnwkhpXNvTRHrmDWdBPShQ3nmz6EYlPM6otqV99sKqVgZCSccklwdeX
ohFLBLGMYzwW7wLM6tVtb+bk5ihHCjbZfy+f+WRMN4e8WNEvt2qqP7ao9ZpN2VJj
AN4AN2gJw85r40aEq+LyuhuHDk5KxlpWIW81LZuC8GLxdW9/c1DrP/f4Tmd8r/eR
NyLROe0ccut1gYGf5CgE1nS/P3LGOMRAaT8QENb5QhiBnXek4mDtKI58PSuDnf49
KxrINCyo8nCdVwL3DMBAjpnKXOLlrl2bBICTK+s9lPe6aXTTovbnzdRpHTdK24lO
7e4XPTHyn0WCIcQuz3zIppkX
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net