Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/64MeW97pL92-_QUPEgapyM7HNao.roa
File: 64MeW97pL92-_QUPEgapyM7HNao.roa (raw, json)
Hash identifier: gMWV3xN0pHUk4BWbscqYu+HnLvJWI7ZvfzjkigsBbmk=
Subject key identifier: EB:83:1E:5B:DE:E9:2F:DD:BE:FD:05:0F:12:06:A9:C8:CE:C7:35:AA
Certificate issuer: /CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Certificate serial: 0194258F6033733B195F6D9D3D96E45E7963
Authority key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/64MeW97pL92-_QUPEgapyM7HNao.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213048
IP address blocks: 83.136.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:60:33:73:3b:19:5f:6d:9d:3d:96:e4:5e:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb831e5bdee92fddbefd050f1206a9c8cec735aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:85:34:5a:d4:0a:5e:7b:2f:34:3f:6e:d4:ac:
a6:54:b2:10:b7:56:ab:5f:fe:1d:f1:e0:a1:60:ea:
65:69:2a:f5:db:11:9d:a3:e0:1b:a0:4b:25:13:1b:
48:e6:cf:d1:9d:6e:31:ae:a6:83:0f:52:2b:5c:33:
7b:e9:66:15:5d:3e:81:bc:42:55:64:17:b8:82:77:
1f:5b:d7:08:b6:d4:f7:7a:c6:71:f5:90:41:11:f7:
dc:17:20:33:9b:52:06:92:e8:a2:b4:96:b9:72:83:
c6:5e:f1:4c:e6:34:bc:e4:df:bb:b1:cf:de:fd:95:
4c:96:96:b6:c2:1f:0a:c0:71:67:a8:c8:7b:c1:b0:
55:07:44:a1:46:73:16:f8:31:75:cc:6c:e6:bf:a5:
9d:70:72:70:a2:62:a8:29:86:c6:e5:69:df:d0:19:
af:dd:81:88:99:15:ad:f3:0f:97:88:a8:db:fe:f4:
be:4a:77:0c:da:0d:ee:9f:5e:35:cd:08:98:a2:d9:
06:1a:42:74:42:59:18:18:9b:62:40:c4:e3:7d:5e:
7d:b1:77:d5:be:b9:25:4f:97:21:1c:d8:3f:6d:7f:
42:8b:40:d2:4a:f8:ea:c9:94:e4:b2:76:8d:a6:3d:
08:00:4a:67:46:5b:7e:87:55:19:41:bf:bb:01:f9:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:1E:5B:DE:E9:2F:DD:BE:FD:05:0F:12:06:A9:C8:CE:C7:35:AA
X509v3 Authority Key Identifier:
keyid:60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/64MeW97pL92-_QUPEgapyM7HNao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.220.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c8:10:e5:e2:9d:60:6d:34:79:04:eb:78:b1:56:9a:60:db:
85:4f:dd:56:0f:f2:86:25:2a:82:5c:c8:d9:9c:52:be:7d:3a:
df:34:1f:37:47:97:ea:05:e1:79:c5:6a:f9:b3:6a:6d:e3:29:
95:cd:f9:c7:08:77:09:53:8b:5d:c6:01:4c:a0:71:bc:1a:6f:
d1:72:1f:5f:6f:59:2b:ac:54:7d:7a:b6:d7:cc:4c:7b:17:db:
a6:42:66:e2:56:dc:30:cd:f7:43:70:4f:c8:b8:eb:23:60:76:
cf:1b:ca:ae:42:2b:34:da:f3:5e:e2:14:61:ea:90:89:8c:86:
9e:5a:a6:b1:38:66:89:a7:77:86:6d:f7:f1:7f:27:98:ec:ab:
ec:6d:14:95:36:da:cb:e0:82:28:b3:eb:d1:28:cd:71:22:4b:
7a:6b:ed:68:a0:03:d0:88:e6:76:84:6f:f7:e3:a1:86:80:dd:
ca:a5:96:cf:e5:ae:1f:d1:63:09:fd:7b:00:a2:e4:f1:8d:2d:
38:a7:36:fe:20:69:3f:04:43:52:8b:c4:30:25:2d:a5:36:5f:
37:eb:9c:35:35:6f:92:fa:15:6a:65:4b:ed:b1:f7:8e:a0:29:
66:4e:1c:55:14:1d:e9:41:38:9b:36:1a:f2:5b:4b:02:55:e1:
cd:af:81:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj2AzczsZX22dPZbkXnljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjcyNTM3ZWRmMWRjMGI3ZjY5NDQ1MzQ1MGJjYTRhZWVm
ODNmNjQwHhcNMjUwMTAyMDU0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjgzMWU1YmRlZTkyZmRkYmVmZDA1MGYxMjA2YTljOGNlYzczNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74U0WtQKXnsvND9u1KymVLIQt1ar
X/4d8eChYOplaSr12xGdo+AboEslExtI5s/RnW4xrqaDD1IrXDN76WYVXT6BvEJV
ZBe4gncfW9cIttT3esZx9ZBBEffcFyAzm1IGkuiitJa5coPGXvFM5jS85N+7sc/e
/ZVMlpa2wh8KwHFnqMh7wbBVB0ShRnMW+DF1zGzmv6WdcHJwomKoKYbG5Wnf0Bmv
3YGImRWt8w+XiKjb/vS+SncM2g3un141zQiYotkGGkJ0QlkYGJtiQMTjfV59sXfV
vrklT5chHNg/bX9Ci0DSSvjqyZTksnaNpj0IAEpnRlt+h1UZQb+7AflLCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOuDHlve6S/dvv0FDxIGqcjOxzWqMB8GA1UdIwQY
MBaAFGD3JTft8dwLf2lEU0ULykru+D9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBjbE4tM3gzQXRfYVVSVFJRdktTdTc0UDJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iMTAxNWQtNDEyMi00MTc0LTgyYTUt
NGJiZjY0NWIxMGQzLzEvNjRNZVc5N3BMOTItX1FVUEVnYXB5TTdITmFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iMTAxNWQtNDEyMi00MTc0LTgyYTUtNGJiZjY0NWIxMGQz
LzEvWVBjbE4tM3gzQXRfYVVSVFJRdktTdTc0UDJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4jcMA0G
CSqGSIb3DQEBCwUAA4IBAQAhyBDl4p1gbTR5BOt4sVaaYNuFT91WD/KGJSqCXMjZ
nFK+fTrfNB83R5fqBeF5xWr5s2pt4ymVzfnHCHcJU4tdxgFMoHG8Gm/Rch9fb1kr
rFR9erbXzEx7F9umQmbiVtwwzfdDcE/IuOsjYHbPG8quQis02vNe4hRh6pCJjIae
WqaxOGaJp3eGbffxfyeY7KvsbRSVNtrL4IIos+vRKM1xIkt6a+1ooAPQiOZ2hG/3
46GGgN3KpZbP5a4f0WMJ/XsAouTxjS04pzb+IGk/BENSi8QwJS2lNl8365w1NW+S
+hVqZUvtsfeOoClmThxVFB3pQTibNhryW0sCVeHNr4Gp
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net