Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/nZ86ecfoxVaYdUOOxkglMxbKvX0.roa
File: nZ86ecfoxVaYdUOOxkglMxbKvX0.roa (raw, json)
Hash identifier: fT87ThsPBrWvOzVvu1MJiqKVPeHA17ObJUBDMM+0zB4=
Subject key identifier: 9D:9F:3A:79:C7:E8:C5:56:98:75:43:8E:C6:48:25:33:16:CA:BD:7D
Certificate issuer: /CN=e9938a1e9011f2269e67a63da380019d296d9983
Certificate serial: 019424B28B99D114E5D55DDF499419220839
Authority key identifier: E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/nZ86ecfoxVaYdUOOxkglMxbKvX0.roa
Signing time: Thu 02 Jan 2025 01:47:48 +0000
ROA not before: Thu 02 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29051
IP address blocks: 195.47.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:8b:99:d1:14:e5:d5:5d:df:49:94:19:22:08:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9938a1e9011f2269e67a63da380019d296d9983
Validity
Not Before: Jan 2 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d9f3a79c7e8c5569875438ec648253316cabd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:01:75:3a:52:86:d2:2b:9e:b6:88:6b:ce:
9b:b1:33:2c:44:48:ae:cf:f9:0e:ca:17:00:7b:b5:
44:71:74:bf:0f:da:67:81:c5:d4:27:e6:0a:bc:7c:
6d:43:39:cf:a0:e4:ef:9c:dc:08:ee:72:40:7b:b4:
f8:a2:fe:ef:d4:58:2c:67:33:f0:ff:1d:9a:44:94:
a0:00:22:79:14:35:83:4c:0c:88:0a:a2:94:c8:5f:
6a:78:56:0f:1d:64:da:6f:9a:df:4f:e7:fb:21:9b:
a6:45:58:b1:30:25:2a:9a:e7:40:37:35:f1:1d:cb:
ad:56:ef:77:58:dd:77:46:98:2b:fb:4e:ca:9c:20:
02:3b:d1:ef:51:e6:16:c9:5d:38:70:62:79:3a:29:
61:c3:d9:f1:e5:d7:4b:77:02:db:1f:fb:ca:77:5e:
5e:86:68:18:d1:94:16:72:27:5e:dd:96:78:8f:e0:
b4:4b:d0:60:51:c5:ce:76:64:f2:4e:66:a7:a8:12:
05:81:bd:a4:d0:2c:56:7e:05:c5:5a:fc:9b:43:3f:
4b:1f:cc:36:8d:a5:0e:3d:f9:c5:14:4e:68:96:a6:
4c:8f:bb:31:80:6e:9a:5f:75:84:a5:3b:99:8d:fb:
14:2c:51:e1:3a:d1:01:1b:55:bc:b6:ca:10:91:b0:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9F:3A:79:C7:E8:C5:56:98:75:43:8E:C6:48:25:33:16:CA:BD:7D
X509v3 Authority Key Identifier:
keyid:E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/nZ86ecfoxVaYdUOOxkglMxbKvX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.226.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:79:3a:3e:42:09:f4:4c:4c:07:16:d4:cd:b7:05:2f:30:cc:
64:ca:a0:21:74:29:87:cd:3e:2d:aa:b7:44:1e:45:6d:b1:e5:
4c:3a:18:d6:48:e3:63:80:b6:ab:f3:a8:cd:0d:27:f5:5f:58:
2f:6d:f8:ae:35:8a:dc:9b:4f:59:46:74:c1:4a:70:6f:28:cb:
29:57:35:46:af:98:96:0a:93:c4:48:6f:bd:77:e4:2a:7b:6c:
be:f1:c3:4d:11:87:1c:58:b2:06:ab:52:8e:ce:b1:ad:2d:d3:
57:87:ce:ca:f4:ee:aa:ab:5a:5d:70:90:6a:e9:28:33:f3:ab:
62:a3:07:13:ce:7f:c7:8d:b0:8e:c9:2d:61:3b:5e:6e:ef:4a:
ef:31:97:7f:f5:c4:f9:a5:c9:9c:88:54:4b:8b:0d:31:2a:ac:
22:19:29:ec:be:02:b4:4c:e2:a2:a2:06:ed:ff:0e:25:7c:04:
8f:ee:af:07:b8:fb:27:9f:ca:bb:c4:cc:87:49:ee:2f:15:03:
52:d6:75:d5:cd:c9:fa:8c:2f:36:72:10:64:a6:a3:38:98:35:
22:28:7d:32:35:1b:ec:bb:e7:42:04:eb:92:64:ea:e8:6e:ed:
c4:31:ee:3c:74:d1:c2:f7:79:df:90:02:d8:6c:42:a8:ba:ee:
e2:58:c9:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksouZ0RTl1V3fSZQZIgg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTM4YTFlOTAxMWYyMjY5ZTY3YTYzZGEzODAwMTlkMjk2
ZDk5ODMwHhcNMjUwMTAyMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDlmM2E3OWM3ZThjNTU2OTg3NTQzOGVjNjQ4MjUzMzE2Y2FiZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZcBdTpShtIrnraIa86bsTMsREiu
z/kOyhcAe7VEcXS/D9pngcXUJ+YKvHxtQznPoOTvnNwI7nJAe7T4ov7v1FgsZzPw
/x2aRJSgACJ5FDWDTAyICqKUyF9qeFYPHWTab5rfT+f7IZumRVixMCUqmudANzXx
HcutVu93WN13Rpgr+07KnCACO9HvUeYWyV04cGJ5Oilhw9nx5ddLdwLbH/vKd15e
hmgY0ZQWcide3ZZ4j+C0S9BgUcXOdmTyTmanqBIFgb2k0CxWfgXFWvybQz9LH8w2
jaUOPfnFFE5olqZMj7sxgG6aX3WEpTuZjfsULFHhOtEBG1W8tsoQkbC0vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2fOnnH6MVWmHVDjsZIJTMWyr19MB8GA1UdIwQY
MBaAFOmTih6QEfImnmemPaOAAZ0pbZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpPS0hwQVI4aWFlWjZZOW80QUJuU2x0bVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iNjAwMmMtZWYxZi00OGJiLThmNTAt
NWYxMGI0MmVjOGNiLzEvblo4NmVjZm94VmFZZFVPT3hrZ2xNeGJLdlgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iNjAwMmMtZWYxZi00OGJiLThmNTAtNWYxMGI0MmVjOGNi
LzEvNlpPS0hwQVI4aWFlWjZZOW80QUJuU2x0bVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy/iMA0G
CSqGSIb3DQEBCwUAA4IBAQCweTo+Qgn0TEwHFtTNtwUvMMxkyqAhdCmHzT4tqrdE
HkVtseVMOhjWSONjgLar86jNDSf1X1gvbfiuNYrcm09ZRnTBSnBvKMspVzVGr5iW
CpPESG+9d+Qqe2y+8cNNEYccWLIGq1KOzrGtLdNXh87K9O6qq1pdcJBq6Sgz86ti
owcTzn/HjbCOyS1hO15u70rvMZd/9cT5pcmciFRLiw0xKqwiGSnsvgK0TOKiogbt
/w4lfASP7q8HuPsnn8q7xMyHSe4vFQNS1nXVzcn6jC82chBkpqM4mDUiKH0yNRvs
u+dCBOuSZOrobu3EMe48dNHC93nfkALYbEKouu7iWMm6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net