Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/cGnnbkiVLX_2V8eckMDBKTSh5es.roa
File: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (raw, json)
Hash identifier: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=
Subject key identifier: 70:69:E7:6E:48:95:2D:7F:F6:57:C7:9C:90:C0:C1:29:34:A1:E5:EB
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 01941FFAA382303B36CE6809586601364DE3
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/cGnnbkiVLX_2V8eckMDBKTSh5es.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24944
IP address blocks: 194.50.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a3:82:30:3b:36:ce:68:09:58:66:01:36:4d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7069e76e48952d7ff657c79c90c0c12934a1e5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:8b:fe:2d:d5:1c:d2:e0:bd:f9:61:c6:ae:
2b:9a:95:5f:53:aa:82:d8:5e:0c:71:d6:d4:3e:0b:
fe:f8:5e:df:2f:44:b2:7c:ef:2c:f2:fe:e8:f8:43:
3d:a3:f6:65:cb:1c:39:d8:77:89:a7:20:37:3e:25:
b5:75:a0:0a:e5:ec:cc:2b:1e:48:35:dd:35:94:f4:
5f:6f:d2:d1:9d:44:d3:dd:e1:c4:f7:eb:a9:55:63:
1f:91:b5:d3:5e:b3:4e:6b:1f:82:d8:ef:d3:92:98:
a3:7e:7a:87:a3:65:6c:35:c8:22:79:8a:36:a0:cc:
6e:e1:35:65:1f:9e:b0:de:de:b3:b9:77:c0:77:f2:
1f:b2:43:d5:f2:a4:71:6f:93:80:81:f0:24:a3:46:
13:bb:bf:4f:2b:6e:51:d9:eb:ee:32:91:e8:83:9b:
c4:e3:c5:5d:02:32:cc:4f:a2:73:ed:6e:a9:14:cc:
d2:54:9d:27:d7:1c:e5:f2:10:3c:e8:28:7f:8d:f0:
32:ec:45:5e:45:9a:f8:95:fc:24:9d:a9:df:5b:21:
a0:b3:48:a8:01:41:da:6c:3a:1a:60:b9:b4:75:2f:
df:52:be:84:df:51:ca:27:73:12:ab:72:f1:78:ba:
b1:cf:e6:b3:1e:f0:00:bc:45:d2:a9:b4:2b:e5:53:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:E7:6E:48:95:2D:7F:F6:57:C7:9C:90:C0:C1:29:34:A1:E5:EB
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/cGnnbkiVLX_2V8eckMDBKTSh5es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1b:ea:15:fb:5d:2e:97:4b:63:19:96:e1:b6:65:f4:32:0d:
65:f4:4d:e1:1a:c1:6a:e1:ba:7d:a3:f5:98:b0:bc:93:92:9b:
89:81:b9:ca:17:10:b2:a3:48:2f:bf:82:e7:46:14:14:ff:c6:
32:db:48:d2:3a:37:e1:fe:21:81:40:ee:2c:e2:bc:6e:26:17:
3f:55:45:e5:2b:fc:88:73:ef:df:e2:13:35:9b:3f:dd:78:5e:
ee:a7:79:27:fc:89:6f:f6:35:b6:1d:92:72:7b:3d:f6:83:b4:
e7:8a:b2:16:38:3f:23:6e:1f:98:a1:94:56:04:da:50:f5:4d:
0b:a4:48:24:46:60:cf:83:c4:de:99:53:75:eb:f1:4a:7c:8f:
41:9d:c0:d3:12:33:2f:08:80:ec:25:ae:ca:2a:95:bb:a1:e6:
0e:fb:c1:69:c4:ef:06:87:c3:43:4c:9d:85:99:bd:6b:d7:2c:
0f:ab:31:54:7e:80:35:c2:1d:7b:ae:73:91:9f:76:f6:24:24:
d4:d8:df:0f:7a:f6:9b:56:bc:b2:3b:6a:b0:4a:9b:be:cd:b7:
ef:01:12:5d:94:6f:2a:dd:7c:1b:eb:fe:49:ed:42:60:5a:a3:
f8:d5:09:a3:bc:36:1b:14:d0:91:25:23:4f:74:3d:cb:98:41:
31:ca:be:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+qOCMDs2zmgJWGYBNk3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTM3NTI1NTc3Y2IyYWYxYjI4NWM5NjQzMWRiZDYwMGY1
N2NiZTgwHhcNMjUwMTAxMDM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDY5ZTc2ZTQ4OTUyZDdmZjY1N2M3OWM5MGMwYzEyOTM0YTFlNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwByL/i3VHNLgvflhxq4rmpVfU6qC
2F4McdbUPgv++F7fL0SyfO8s8v7o+EM9o/Zlyxw52HeJpyA3PiW1daAK5ezMKx5I
Nd01lPRfb9LRnUTT3eHE9+upVWMfkbXTXrNOax+C2O/TkpijfnqHo2VsNcgieYo2
oMxu4TVlH56w3t6zuXfAd/IfskPV8qRxb5OAgfAko0YTu79PK25R2evuMpHog5vE
48VdAjLMT6Jz7W6pFMzSVJ0n1xzl8hA86Ch/jfAy7EVeRZr4lfwknanfWyGgs0io
AUHabDoaYLm0dS/fUr6E31HKJ3MSq3LxeLqxz+azHvAAvEXSqbQr5VNa8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBp525IlS1/9lfHnJDAwSk0oeXrMB8GA1UdIwQY
MBaAFKCTdSVXfLKvGyhclkMdvWAPV8voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAt
NmUwMmFmMGE0OTk0LzEvY0dubmJraVZMWF8yVjhlY2tNREJLVFNoNWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAtNmUwMmFmMGE0OTk0
LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjJUMA0G
CSqGSIb3DQEBCwUAA4IBAQCMG+oV+10ul0tjGZbhtmX0Mg1l9E3hGsFq4bp9o/WY
sLyTkpuJgbnKFxCyo0gvv4LnRhQU/8Yy20jSOjfh/iGBQO4s4rxuJhc/VUXlK/yI
c+/f4hM1mz/deF7up3kn/Ilv9jW2HZJyez32g7TnirIWOD8jbh+YoZRWBNpQ9U0L
pEgkRmDPg8TemVN16/FKfI9BncDTEjMvCIDsJa7KKpW7oeYO+8FpxO8Gh8NDTJ2F
mb1r1ywPqzFUfoA1wh17rnORn3b2JCTU2N8PevabVryyO2qwSpu+zbfvARJdlG8q
3Xwb6/5J7UJgWqP41QmjvDYbFNCRJSNPdD3LmEExyr4n
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net