Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/5DPWCgybWZa7aXBOD7aRwRIeIns.roa
File: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (raw, json)
Hash identifier: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=
Subject key identifier: E4:33:D6:0A:0C:9B:59:96:BB:69:70:4E:0F:B6:91:C1:12:1E:22:7B
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 0194228DB2016DECCBE87CB89CC20DA97292
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/5DPWCgybWZa7aXBOD7aRwRIeIns.roa
Signing time: Wed 01 Jan 2025 15:48:19 +0000
ROA not before: Wed 01 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199132
IP address blocks: 195.234.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b2:01:6d:ec:cb:e8:7c:b8:9c:c2:0d:a9:72:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Jan 1 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e433d60a0c9b5996bb69704e0fb691c1121e227b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:86:6e:77:e2:74:11:2b:37:ae:47:71:ba:
c1:7a:59:b7:d6:20:4a:3f:64:a2:01:75:5c:21:a7:
66:df:92:9c:cc:73:5d:0a:26:50:ac:ff:20:c4:c9:
8a:58:de:07:bb:27:c1:77:0e:37:a4:a4:c8:3b:9a:
31:94:8d:0a:86:45:33:a9:cf:49:7f:2a:fe:59:3f:
64:d2:56:72:84:4f:66:00:c7:d0:e2:74:a9:69:8b:
b5:87:31:e5:7a:d1:ce:9e:b2:46:4e:2d:62:82:04:
8e:48:d0:a6:0f:1e:35:23:04:35:8b:df:8b:4b:13:
67:a7:dd:0b:3e:8c:e1:b3:67:e1:85:d5:42:c2:45:
f2:88:73:9d:03:f5:3d:ae:86:9a:dc:bf:5d:e4:8f:
8c:27:0c:08:bd:b8:02:7b:39:0b:bb:ee:85:f1:5b:
08:58:5e:aa:cc:95:ab:25:41:a8:f4:c6:99:77:bc:
3e:ab:8a:28:73:57:5c:31:d6:c1:f3:57:d9:bd:d1:
f9:8e:22:d5:3a:32:09:c4:3b:51:ab:ba:97:80:13:
68:37:27:f5:d0:c0:b4:e3:8c:89:10:81:ab:1e:2f:
b7:75:c7:98:e4:92:f5:3f:77:62:09:57:97:f0:1f:
73:e2:79:8e:1a:ba:15:5c:48:b1:6d:ac:9b:bc:52:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:D6:0A:0C:9B:59:96:BB:69:70:4E:0F:B6:91:C1:12:1E:22:7B
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/5DPWCgybWZa7aXBOD7aRwRIeIns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ec:70:6f:99:b4:2f:81:51:8d:36:e1:a9:40:e6:d9:ce:f0:
a3:ef:f9:ec:70:30:a9:a5:c6:ed:3b:51:c9:85:1a:58:7c:d6:
7b:ff:fd:be:53:42:78:84:32:ea:90:19:3a:0e:59:e1:bb:6a:
e2:9a:7d:2c:95:c1:e5:8f:37:f7:3b:ae:94:69:d3:bd:6c:91:
71:a3:54:f8:0f:48:07:04:a1:96:fc:f3:88:18:c3:ea:75:af:
cb:de:40:22:af:78:72:ff:73:75:89:5c:d6:a6:09:07:9e:df:
b9:93:b6:18:3f:d6:20:25:e8:c8:f4:6e:4f:f0:cc:e2:a8:06:
8d:5a:89:54:a4:e1:ad:49:a8:97:af:d3:ec:14:30:81:7a:93:
cc:3b:43:f5:ca:d2:73:9d:b9:5d:12:8a:f6:fd:0e:a6:7e:6d:
8f:dc:34:3b:94:ea:80:33:a4:56:99:d1:c3:68:78:85:68:4d:
5c:74:f2:8d:8b:ef:f0:c9:80:fd:e8:81:2e:fb:5c:72:e2:fa:
47:e6:1f:cd:a9:03:5e:f2:4e:4f:c6:12:29:83:07:10:f1:2d:
91:1e:fc:f7:a7:ad:5c:12:b0:82:ee:e0:77:23:70:0e:e6:c8:
cc:37:ab:82:05:f2:8c:7f:8e:df:67:0a:56:d8:4a:02:8d:d1:
d3:e2:91:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijbIBbezL6Hy4nMINqXKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjkzZGJjMDFiY2VjM2E0Yjk4OGU4ZjhkNTMzMGE1YTJm
YzRhNjgwHhcNMjUwMTAxMTU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDMzZDYwYTBjOWI1OTk2YmI2OTcwNGUwZmI2OTFjMTEyMWUyMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ+GbnfidBErN65HcbrBelm31iBK
P2SiAXVcIadm35KczHNdCiZQrP8gxMmKWN4HuyfBdw43pKTIO5oxlI0KhkUzqc9J
fyr+WT9k0lZyhE9mAMfQ4nSpaYu1hzHletHOnrJGTi1iggSOSNCmDx41IwQ1i9+L
SxNnp90LPozhs2fhhdVCwkXyiHOdA/U9roaa3L9d5I+MJwwIvbgCezkLu+6F8VsI
WF6qzJWrJUGo9MaZd7w+q4ooc1dcMdbB81fZvdH5jiLVOjIJxDtRq7qXgBNoNyf1
0MC044yJEIGrHi+3dceY5JL1P3diCVeX8B9z4nmOGroVXEixbaybvFKw+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQz1goMm1mWu2lwTg+2kcESHiJ7MB8GA1UdIwQY
MBaAFG65PbwBvOw6S5iOj41TMKWi/EpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDct
ZDVhMGIwOThkZjM0LzEvNURQV0NneWJXWmE3YVhCT0Q3YVJ3UkllSW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDctZDVhMGIwOThkZjM0
LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qKMA0G
CSqGSIb3DQEBCwUAA4IBAQB87HBvmbQvgVGNNuGpQObZzvCj7/nscDCppcbtO1HJ
hRpYfNZ7//2+U0J4hDLqkBk6Dlnhu2rimn0slcHljzf3O66UadO9bJFxo1T4D0gH
BKGW/POIGMPqda/L3kAir3hy/3N1iVzWpgkHnt+5k7YYP9YgJejI9G5P8MziqAaN
WolUpOGtSaiXr9PsFDCBepPMO0P1ytJznbldEor2/Q6mfm2P3DQ7lOqAM6RWmdHD
aHiFaE1cdPKNi+/wyYD96IEu+1xy4vpH5h/NqQNe8k5PxhIpgwcQ8S2RHvz3p61c
ErCC7uB3I3AO5sjMN6uCBfKMf47fZwpW2EoCjdHT4pHl
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net