Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mXq1Nhp3Oz4mxNh9UaPp3rp-UJg.roa
File: mXq1Nhp3Oz4mxNh9UaPp3rp-UJg.roa (raw, json)
Hash identifier: v69pdh8WmfZTSUtV4zxGjg7eTOVTfu8PPfDLpLYrpv4=
Subject key identifier: 99:7A:B5:36:1A:77:3B:3E:26:C4:D8:7D:51:A3:E9:DE:BA:7E:50:98
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0196265EA807DDF6840E6B09966D7C5D8D56
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mXq1Nhp3Oz4mxNh9UaPp3rp-UJg.roa
Signing time: Fri 11 Apr 2025 19:40:59 +0000
ROA not before: Fri 11 Apr 2025 19:40:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203473
IP address blocks: 45.8.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:5e:a8:07:dd:f6:84:0e:6b:09:96:6d:7c:5d:8d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 11 19:40:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=997ab5361a773b3e26c4d87d51a3e9deba7e5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:c4:f5:1d:53:f8:88:28:6b:da:65:70:db:
78:87:82:1a:91:af:2a:5e:dd:f0:4b:0e:e4:0a:3e:
a6:a5:bf:d8:8f:43:68:02:66:78:0b:79:cc:e2:bb:
f2:bf:9e:27:a6:59:00:7b:5b:b4:fe:5d:5c:03:52:
eb:1f:4b:48:f5:49:84:4b:50:8b:46:e9:e2:4a:87:
d6:5b:1d:9e:14:eb:eb:20:12:d4:38:d3:07:c3:c0:
bb:f7:a6:92:2d:88:41:65:5e:a4:1c:22:65:f9:3b:
65:42:17:67:f9:34:0e:e2:ca:f7:19:7f:05:d5:25:
b3:d9:98:e1:99:33:ad:6a:36:af:4e:33:39:4f:53:
b1:2f:70:48:0a:6a:09:21:0a:e2:83:6f:3c:d9:7f:
42:5e:27:85:a2:97:4d:d9:a3:29:43:32:36:cf:4f:
39:c1:71:73:90:5e:bd:33:a9:3d:4f:ed:31:52:19:
c8:8f:c3:3a:fa:dc:e4:68:2e:26:18:af:df:01:90:
e6:70:ba:97:3f:8a:8a:d9:7e:3a:f5:86:d3:af:cc:
91:f6:2c:54:dd:a9:f4:5c:88:9c:f9:fa:fe:ab:4e:
89:15:90:ad:8d:a4:56:49:c9:07:ff:e2:31:c7:9a:
aa:59:fa:fc:c5:fd:48:6d:99:6a:3e:27:46:92:62:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:B5:36:1A:77:3B:3E:26:C4:D8:7D:51:A3:E9:DE:BA:7E:50:98
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mXq1Nhp3Oz4mxNh9UaPp3rp-UJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:85:b3:2c:af:8a:bb:3e:ff:1b:1a:af:cd:2f:75:8c:91:03:
22:0e:4a:14:79:a8:6f:76:40:91:13:9a:84:25:1f:ad:7a:2a:
36:19:a5:69:f1:04:62:18:97:c6:e8:76:27:88:b8:67:c1:92:
85:91:03:59:48:a8:33:f0:e5:01:5c:c2:6a:10:b8:42:a5:b3:
4e:b1:fb:4c:ea:68:f2:c6:9e:92:76:67:1d:17:73:be:19:cf:
75:51:56:72:39:89:bd:d7:7e:b3:f3:dd:07:22:b3:92:83:af:
3f:81:f2:3c:c2:2c:04:d4:1c:f8:ce:43:ca:50:27:3e:72:05:
b3:c0:bb:fa:68:f5:84:c2:a2:ae:45:42:8c:7d:d5:18:b0:b1:
99:e6:3a:4c:bc:09:46:60:a1:24:36:a3:10:aa:1e:32:95:30:
fc:e6:06:b0:41:e1:77:ff:ad:5a:18:b8:cb:dd:86:1a:e2:54:
0a:90:57:7c:fe:f9:73:c7:7c:20:ce:32:03:a4:37:a4:a9:d1:
0f:b0:c3:63:7a:80:c3:a6:da:11:44:73:18:85:06:c6:3e:a9:
92:9e:45:df:96:58:89:d9:66:af:01:da:59:5d:1d:28:0a:85:
46:9f:a1:d8:9c:6a:27:2e:42:5e:c6:10:4c:40:3a:b7:cf:c1:
9c:dd:36:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYmXqgH3faEDmsJlm18XY1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwNDExMTk0MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTdhYjUzNjFhNzczYjNlMjZjNGQ4N2Q1MWEzZTlkZWJhN2U1MDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CTE9R1T+Igoa9plcNt4h4Iaka8q
Xt3wSw7kCj6mpb/Yj0NoAmZ4C3nM4rvyv54nplkAe1u0/l1cA1LrH0tI9UmES1CL
RuniSofWWx2eFOvrIBLUONMHw8C796aSLYhBZV6kHCJl+TtlQhdn+TQO4sr3GX8F
1SWz2ZjhmTOtajavTjM5T1OxL3BICmoJIQrig2882X9CXieFopdN2aMpQzI2z085
wXFzkF69M6k9T+0xUhnIj8M6+tzkaC4mGK/fAZDmcLqXP4qK2X469YbTr8yR9ixU
3an0XIic+fr+q06JFZCtjaRWSckH/+Ixx5qqWfr8xf1IbZlqPidGkmIguQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJl6tTYadzs+JsTYfVGj6d66flCYMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvbVhxMU5ocDNPejRteE5oOVVhUHAzcnAtVUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjnMA0G
CSqGSIb3DQEBCwUAA4IBAQCxhbMsr4q7Pv8bGq/NL3WMkQMiDkoUeahvdkCRE5qE
JR+teio2GaVp8QRiGJfG6HYniLhnwZKFkQNZSKgz8OUBXMJqELhCpbNOsftM6mjy
xp6SdmcdF3O+Gc91UVZyOYm9136z890HIrOSg68/gfI8wiwE1Bz4zkPKUCc+cgWz
wLv6aPWEwqKuRUKMfdUYsLGZ5jpMvAlGYKEkNqMQqh4ylTD85gawQeF3/61aGLjL
3YYa4lQKkFd8/vlzx3wgzjIDpDekqdEPsMNjeoDDptoRRHMYhQbGPqmSnkXflliJ
2WavAdpZXR0oCoVGn6HYnGonLkJexhBMQDq3z8Gc3TZK
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net