Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa
File: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (raw, json)
Hash identifier: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=
Subject key identifier: 02:36:F3:DC:E1:A4:C1:93:04:16:AD:23:99:C9:57:47:91:AB:F0:DE
Certificate issuer: /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial: 019420D5F80F2BACD2E01E46319F3BEF0E98
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa
Signing time: Wed 01 Jan 2025 07:48:01 +0000
ROA not before: Wed 01 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34285
IP address blocks: 185.197.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f8:0f:2b:ac:d2:e0:1e:46:31:9f:3b:ef:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0236f3dce1a4c1930416ad2399c9574791abf0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:e8:35:ee:56:29:01:a1:e7:20:32:b1:e5:
66:b2:87:ed:7c:39:25:1b:b7:6d:9d:a0:e1:9d:78:
1a:0e:51:9c:c3:51:ab:53:cd:4e:6b:36:bc:1c:b2:
8a:28:c2:89:d2:d5:9c:93:8e:96:3d:f1:27:a8:7e:
95:5d:7a:6f:fc:8b:37:32:68:66:82:80:01:1d:48:
52:53:9b:c9:a2:3c:93:09:9b:0a:d3:26:67:b6:c8:
2f:42:ee:09:dd:ce:5e:2b:c1:d1:88:9b:2a:44:3e:
44:4b:9f:91:d3:f6:36:f8:65:45:dd:a4:46:76:8f:
e6:c9:0b:93:0e:e6:a2:81:ef:ff:d0:48:da:78:36:
9b:9a:ed:e1:2e:a4:25:c9:10:09:31:94:d4:9d:2d:
5f:2c:df:36:a1:b1:4f:d7:b9:05:25:6b:70:65:bd:
e7:54:3d:2a:77:08:f5:df:66:2a:fb:57:9f:9a:5f:
fc:a3:a6:99:f9:92:db:5d:9b:6c:e2:40:a7:b1:fb:
75:ba:57:e5:56:bc:8c:61:e0:84:98:98:ff:dc:53:
a8:1e:e7:c9:ec:da:9e:33:13:6e:49:1b:8c:06:d5:
6c:ac:5c:0b:41:1a:d6:a0:87:c2:20:ad:e3:34:7a:
30:ff:f4:30:19:22:08:9e:66:71:38:44:17:63:24:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:F3:DC:E1:A4:C1:93:04:16:AD:23:99:C9:57:47:91:AB:F0:DE
X509v3 Authority Key Identifier:
keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.88.0/22
Signature Algorithm: sha256WithRSAEncryption
53:6e:5d:9e:6c:e9:3b:96:9f:83:82:3b:ee:b5:87:18:72:3c:
dc:ab:7d:20:97:eb:37:94:b9:79:5e:7a:c9:30:42:ed:be:d4:
8a:67:4e:47:97:af:10:d9:36:42:15:3b:30:84:40:50:76:dd:
0d:51:1b:30:ba:90:31:24:47:0d:02:b8:28:f6:3a:2b:ee:6a:
7a:4e:3b:9d:21:11:04:05:f0:d3:71:a2:09:31:96:f1:cf:10:
a9:69:40:17:9f:58:45:18:d3:4c:3c:ca:62:21:91:88:72:4d:
33:58:f3:03:0d:d1:18:ca:d8:20:47:9e:d6:12:ab:00:ba:d1:
8a:d5:e3:6b:5d:88:2b:0f:33:43:80:ff:ad:5d:7f:e2:90:30:
b6:20:41:ea:be:12:52:05:a0:fc:c9:17:20:01:2d:ac:ea:7f:
1e:be:b7:93:f2:5d:a6:1f:46:ed:0f:53:18:4e:5c:38:79:3f:
d1:c9:bb:5a:ce:03:7b:c0:cc:fa:65:f2:b2:57:50:83:33:3e:
c9:21:9d:a4:e6:85:bb:4d:02:7c:64:de:3f:2d:3c:ed:f7:53:
26:5e:f2:0b:45:4b:45:5b:70:d1:c5:b7:1b:af:83:ae:65:3e:
28:37:a8:35:22:7e:dc:c6:d0:c1:f2:9a:2c:6f:2d:a3:9a:41:
94:8b:8f:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1fgPK6zS4B5GMZ877w6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDA4Yjg2MTU3YzZiMjhlNmFjOTgyZTBjM2ZlYjFhM2Vj
MzI4MTAwHhcNMjUwMTAxMDc0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjM2ZjNkY2UxYTRjMTkzMDQxNmFkMjM5OWM5NTc0NzkxYWJmMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVzoNe5WKQGh5yAyseVmsoftfDkl
G7dtnaDhnXgaDlGcw1GrU81Oaza8HLKKKMKJ0tWck46WPfEnqH6VXXpv/Is3Mmhm
goABHUhSU5vJojyTCZsK0yZntsgvQu4J3c5eK8HRiJsqRD5ES5+R0/Y2+GVF3aRG
do/myQuTDuaige//0EjaeDabmu3hLqQlyRAJMZTUnS1fLN82obFP17kFJWtwZb3n
VD0qdwj132Yq+1efml/8o6aZ+ZLbXZts4kCnsft1ulflVryMYeCEmJj/3FOoHufJ
7NqeMxNuSRuMBtVsrFwLQRrWoIfCIK3jNHow//QwGSIInmZxOEQXYySYWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAI289zhpMGTBBatI5nJV0eRq/DeMB8GA1UdIwQY
MBaAFIjQi4YVfGso5qyYLgw/6xo+wygQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAt
MzhkMGNmOGZiOGI4LzEvQWpiejNPR2t3Wk1FRnEwam1jbFhSNUdyOE40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAtMzhkMGNmOGZiOGI4
LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucVYMA0G
CSqGSIb3DQEBCwUAA4IBAQBTbl2ebOk7lp+DgjvutYcYcjzcq30gl+s3lLl5XnrJ
MELtvtSKZ05Hl68Q2TZCFTswhEBQdt0NURswupAxJEcNArgo9jor7mp6TjudIREE
BfDTcaIJMZbxzxCpaUAXn1hFGNNMPMpiIZGIck0zWPMDDdEYytggR57WEqsAutGK
1eNrXYgrDzNDgP+tXX/ikDC2IEHqvhJSBaD8yRcgAS2s6n8evreT8l2mH0btD1MY
Tlw4eT/RybtazgN7wMz6ZfKyV1CDMz7JIZ2k5oW7TQJ8ZN4/LTzt91MmXvILRUtF
W3DRxbcbr4OuZT4oN6g1In7cxtDB8posby2jmkGUi4/k
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net