Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/awiZZNgesWW0Sbd6K5IRMUenzBI.roa
File: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (raw, json)
Hash identifier: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=
Subject key identifier: 6B:08:99:64:D8:1E:B1:65:B4:49:B7:7A:2B:92:11:31:47:A7:CC:12
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 019421B1E289EEBA92F6377F39094C2F208F
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/awiZZNgesWW0Sbd6K5IRMUenzBI.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197207
IP address blocks: 185.131.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e2:89:ee:ba:92:f6:37:7f:39:09:4c:2f:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b089964d81eb165b449b77a2b92113147a7cc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:38:56:6f:5f:fa:53:3f:d1:9a:5d:89:12:
78:12:dc:09:b4:fc:89:77:13:47:da:54:9d:54:58:
01:e1:b8:22:e3:5c:4c:45:98:f1:91:4a:a5:33:d3:
55:ae:ad:af:be:93:ed:85:21:0f:74:7d:d9:2c:d2:
3f:cf:21:8e:e3:d5:21:8d:c3:7b:7d:cf:dc:48:a5:
40:ca:59:7a:ad:41:43:dc:34:7c:3e:54:c8:54:6c:
84:2c:77:78:70:ec:e6:2f:28:21:f9:c8:dd:57:a3:
72:3e:81:65:7e:e4:fd:cc:c6:d8:ef:0a:37:93:e6:
a1:58:27:bd:48:6c:6f:b6:a6:95:ff:f5:0a:cf:2e:
36:e8:3d:86:92:ec:55:01:99:ad:50:f1:98:e0:36:
9a:57:d6:b4:0e:bf:78:72:26:08:f1:df:81:38:5f:
0b:4a:a0:2d:e5:80:92:0a:5a:e9:ec:7f:ce:4b:b3:
fb:c0:a9:bb:35:2d:7f:06:0a:d1:9d:68:ef:11:5c:
d4:7c:0c:b1:30:fd:5c:0b:5e:bf:6d:16:d8:36:49:
1a:75:6a:e5:02:97:57:36:a2:41:73:6c:f8:83:3e:
e7:89:b6:e4:a3:7f:f4:c2:03:d8:31:4f:57:35:6e:
53:6b:c8:e5:6d:61:e3:0f:fe:08:2f:cd:af:c0:65:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:08:99:64:D8:1E:B1:65:B4:49:B7:7A:2B:92:11:31:47:A7:CC:12
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/awiZZNgesWW0Sbd6K5IRMUenzBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.56.0/22
Signature Algorithm: sha256WithRSAEncryption
45:9a:f0:a7:96:6b:39:de:d4:76:45:03:44:81:cc:1b:22:19:
d0:06:cb:74:c5:b6:2d:12:14:30:e0:b1:87:8b:f8:51:50:78:
94:fe:cb:fa:26:9a:72:47:c6:a8:a2:be:a0:a6:79:31:94:c5:
7e:03:a5:60:dd:8e:aa:f4:fd:5d:86:a9:96:fc:fa:d6:91:9f:
a7:fa:a2:a2:fb:f4:03:c3:d1:0e:5c:26:28:8e:76:96:4b:62:
76:a6:ff:25:14:b4:e8:82:86:51:07:95:33:b2:47:b8:40:28:
87:52:72:64:5a:b0:f1:c2:ec:da:98:b2:8e:a1:6d:28:e0:5c:
f1:d4:38:f6:c6:0a:6f:c3:48:c5:76:be:92:be:be:97:c3:fa:
73:ed:3e:10:a3:f1:39:69:77:7f:58:45:06:f7:8c:99:97:b1:
a6:d6:e4:8b:8d:cf:79:09:10:43:91:18:ac:3b:98:89:b4:96:
85:58:d7:1e:60:6d:f5:1c:d4:a1:af:bd:75:6b:8a:e8:e8:b5:
50:65:bd:57:07:96:d3:78:1c:e8:3b:96:1a:ed:94:ba:28:80:
45:cc:04:f0:26:f6:e4:72:bf:57:d9:03:31:7d:da:0c:37:20:
14:ad:59:6c:2d:83:5b:5f:0c:fc:cb:53:cf:16:61:d9:6f:8b:
52:3f:d4:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhseKJ7rqS9jd/OQlMLyCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDQzOTQ0OGI2MjhjZDBiYTQyMzJlYTVkYzM5YTk2OGRh
OTY5NmUwHhcNMjUwMTAxMTE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjA4OTk2NGQ4MWViMTY1YjQ0OWI3N2EyYjkyMTEzMTQ3YTdjYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/A4Vm9f+lM/0ZpdiRJ4EtwJtPyJ
dxNH2lSdVFgB4bgi41xMRZjxkUqlM9NVrq2vvpPthSEPdH3ZLNI/zyGO49UhjcN7
fc/cSKVAyll6rUFD3DR8PlTIVGyELHd4cOzmLygh+cjdV6NyPoFlfuT9zMbY7wo3
k+ahWCe9SGxvtqaV//UKzy426D2GkuxVAZmtUPGY4DaaV9a0Dr94ciYI8d+BOF8L
SqAt5YCSClrp7H/OS7P7wKm7NS1/BgrRnWjvEVzUfAyxMP1cC16/bRbYNkkadWrl
ApdXNqJBc2z4gz7nibbko3/0wgPYMU9XNW5Ta8jlbWHjD/4IL82vwGXlxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsImWTYHrFltEm3eiuSETFHp8wSMB8GA1UdIwQY
MBaAFBoEOUSLYozQukIy6l3DmpaNqWluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dRNVJJdGlqTkM2UWpMcVhjT2FsbzJwYVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNGIyM2ItOWMxMy00ZGQyLWJkYTgt
MmYyMmE3Njk5NmQ5LzEvYXdpWlpOZ2VzV1cwU2JkNks1SVJNVWVuekJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNGIyM2ItOWMxMy00ZGQyLWJkYTgtMmYyMmE3Njk5NmQ5
LzEvR2dRNVJJdGlqTkM2UWpMcVhjT2FsbzJwYVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYM4MA0G
CSqGSIb3DQEBCwUAA4IBAQBFmvCnlms53tR2RQNEgcwbIhnQBst0xbYtEhQw4LGH
i/hRUHiU/sv6JppyR8aoor6gpnkxlMV+A6Vg3Y6q9P1dhqmW/PrWkZ+n+qKi+/QD
w9EOXCYojnaWS2J2pv8lFLTogoZRB5Uzske4QCiHUnJkWrDxwuzamLKOoW0o4Fzx
1Dj2xgpvw0jFdr6Svr6Xw/pz7T4Qo/E5aXd/WEUG94yZl7Gm1uSLjc95CRBDkRis
O5iJtJaFWNceYG31HNShr711a4ro6LVQZb1XB5bTeBzoO5Ya7ZS6KIBFzATwJvbk
cr9X2QMxfdoMNyAUrVlsLYNbXwz8y1PPFmHZb4tSP9Qt
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net