Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/t7cAYXe7Bt2y7DFzKkm7oYQiX2U.roa
File: t7cAYXe7Bt2y7DFzKkm7oYQiX2U.roa (raw, json)
Hash identifier: yJvTgGiFfp2p87ibf91E3pddy2HhyszI/PFWAWPyFfY=
Subject key identifier: B7:B7:00:61:77:BB:06:DD:B2:EC:31:73:2A:49:BB:A1:84:22:5F:65
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0195B222F39B2145DC75856921474DE0D23F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/t7cAYXe7Bt2y7DFzKkm7oYQiX2U.roa
Signing time: Thu 20 Mar 2025 05:59:49 +0000
ROA not before: Thu 20 Mar 2025 05:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400696
IP address blocks: 155.2.193.0/24 maxlen: 24
155.2.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:22:f3:9b:21:45:dc:75:85:69:21:47:4d:e0:d2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 20 05:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b7006177bb06ddb2ec31732a49bba184225f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:6b:c4:0d:eb:e5:f0:7a:9c:b3:d4:47:90:
94:20:c5:c6:8e:f6:7c:73:f2:12:a3:30:e5:37:dd:
14:66:bb:b3:58:7f:e9:41:95:bc:81:3e:c9:2a:1d:
b5:c2:d8:7d:ed:d5:7d:c1:a3:b5:a0:2c:21:87:bf:
e5:68:36:d5:5a:e2:d4:77:35:b1:f5:a8:e0:7a:1a:
25:3b:b6:74:aa:67:3d:3b:bd:dd:4a:13:6e:f8:28:
0c:30:29:27:4b:dc:86:80:98:da:84:df:60:a8:f4:
07:b4:ca:fa:83:9c:7f:a5:f6:cf:b2:ee:fb:02:fc:
fb:02:1d:59:b4:e1:f9:1b:93:83:05:76:a8:68:44:
c8:f3:a5:1a:1b:61:db:94:1c:3d:de:ed:bb:12:12:
b1:d4:07:54:33:12:9c:2f:39:37:b6:c9:01:8d:35:
e7:93:ca:49:b9:5f:61:16:57:5e:95:d3:ab:f8:83:
b5:61:4c:b7:df:ed:1a:08:b9:1c:ae:48:3f:6c:0c:
23:14:58:61:b8:bf:39:5a:09:03:d4:a7:60:f2:0a:
7b:f6:4b:36:76:ca:e6:56:16:96:cb:ea:d7:4d:33:
e3:3a:64:16:18:3c:4c:40:ed:c0:6d:9c:03:ab:07:
a4:80:77:9d:16:46:69:ce:aa:35:23:d2:9c:28:22:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:00:61:77:BB:06:DD:B2:EC:31:73:2A:49:BB:A1:84:22:5F:65
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/t7cAYXe7Bt2y7DFzKkm7oYQiX2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.2.193.0/24
155.2.220.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e3:64:58:3d:da:72:73:0f:90:18:09:a3:70:79:54:90:82:
07:69:a4:a0:4b:fe:1c:22:bd:68:0b:f0:ce:60:7a:59:ac:63:
a2:55:06:d5:63:42:a2:51:c0:10:42:cf:21:45:ff:37:a2:7a:
93:46:2e:19:13:4d:56:de:85:f6:9d:96:b8:63:ad:54:c0:e1:
b1:ac:f0:e4:2c:af:f2:8e:52:64:ce:25:38:ea:c7:21:ea:38:
8e:9d:7e:91:1b:9f:46:93:55:96:da:1a:86:7b:0a:fb:23:59:
29:67:8f:6d:9d:a9:23:ef:6b:58:89:e7:b8:47:b3:37:d7:80:
e7:54:d6:90:39:d1:5b:6f:ce:4e:73:9e:c1:ed:1b:ce:d7:49:
93:c8:7b:49:86:12:28:6e:dd:b1:6b:52:3e:5a:c5:ec:43:b9:
5b:ab:0a:2e:37:66:b7:b4:fc:9a:43:5c:07:61:63:04:38:e3:
58:27:6c:bf:75:89:d2:0b:a8:5b:2a:99:12:7c:ce:43:7a:7e:
9d:5f:da:ee:24:44:8f:22:e4:4f:8f:8e:b6:cb:fb:62:29:42:
61:0a:15:7d:7b:7b:09:ca:e3:0d:1e:39:7a:80:98:62:fe:f5:
eb:34:c0:e2:e6:1e:22:7b:5f:76:c6:22:5d:87:7d:0e:c9:10:
83:b6:4c:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWyIvObIUXcdYVpIUdN4NI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwMzIwMDU1OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2I3MDA2MTc3YmIwNmRkYjJlYzMxNzMyYTQ5YmJhMTg0MjI1ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2lrxA3r5fB6nLPUR5CUIMXGjvZ8
c/ISozDlN90UZruzWH/pQZW8gT7JKh21wth97dV9waO1oCwhh7/laDbVWuLUdzWx
9ajgeholO7Z0qmc9O73dShNu+CgMMCknS9yGgJjahN9gqPQHtMr6g5x/pfbPsu77
Avz7Ah1ZtOH5G5ODBXaoaETI86UaG2HblBw93u27EhKx1AdUMxKcLzk3tskBjTXn
k8pJuV9hFldeldOr+IO1YUy33+0aCLkcrkg/bAwjFFhhuL85WgkD1Kdg8gp79ks2
dsrmVhaWy+rXTTPjOmQWGDxMQO3AbZwDqwekgHedFkZpzqo1I9KcKCK8DwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLe3AGF3uwbdsuwxcypJu6GEIl9lMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvdDdjQVlYZTdCdDJ5N0RGektrbTdvWVFpWDJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmwLBAwQA
mwLcMA0GCSqGSIb3DQEBCwUAA4IBAQAB42RYPdpycw+QGAmjcHlUkIIHaaSgS/4c
Ir1oC/DOYHpZrGOiVQbVY0KiUcAQQs8hRf83onqTRi4ZE01W3oX2nZa4Y61UwOGx
rPDkLK/yjlJkziU46sch6jiOnX6RG59Gk1WW2hqGewr7I1kpZ49tnakj72tYiee4
R7M314DnVNaQOdFbb85Oc57B7RvO10mTyHtJhhIobt2xa1I+WsXsQ7lbqwouN2a3
tPyaQ1wHYWMEOONYJ2y/dYnSC6hbKpkSfM5Den6dX9ruJESPIuRPj462y/tiKUJh
ChV9e3sJyuMNHjl6gJhi/vXrNMDi5h4ie192xiJdh30OyRCDtkz9
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:28 2025 by rpki-client on console.sobornost.net