Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa
File: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (raw, json)
Hash identifier: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=
Subject key identifier: 31:3E:73:A4:74:8C:B1:4D:85:F1:BE:02:2C:78:E5:E7:04:BE:F3:B4
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01951D2F715ECCC56E9E1A62678CD6CF79A5
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa
Signing time: Wed 19 Feb 2025 07:50:03 +0000
ROA not before: Wed 19 Feb 2025 07:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204234
IP address blocks: 185.110.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:2f:71:5e:cc:c5:6e:9e:1a:62:67:8c:d6:cf:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Feb 19 07:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=313e73a4748cb14d85f1be022c78e5e704bef3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6f:e1:19:a3:3e:91:ec:f5:5a:36:06:13:2e:
5d:35:6c:b1:5c:e3:53:23:11:64:a3:b5:73:2f:50:
b7:f7:c0:e5:1f:f6:97:b1:e2:97:0b:de:39:da:9c:
94:90:23:bd:2c:7a:bb:45:91:34:b0:cf:1d:39:cd:
2a:4b:f7:85:d3:bd:63:08:09:23:5d:b5:86:b1:81:
56:d9:69:ad:3b:0b:8f:06:b3:3f:01:3f:d6:f5:a7:
12:96:0b:f9:16:18:a3:c8:fd:83:71:94:f6:e8:d2:
e9:57:54:28:e2:ae:59:e6:c6:c5:4f:24:27:cd:fb:
77:5a:2a:df:be:ef:dd:33:39:d6:5f:52:34:a0:35:
f3:f2:3f:d5:bc:65:7a:cf:c9:a9:ac:4e:96:0e:99:
f2:d7:4e:a5:8f:ef:e5:76:4c:ed:1f:c1:51:e9:01:
44:5e:86:f6:e5:a3:70:bb:ca:bc:94:64:07:51:4a:
0b:3f:45:77:ea:f8:94:dc:59:73:fc:0c:5b:90:39:
29:9f:1d:aa:91:e9:2e:0f:43:c1:89:e6:d1:f2:8d:
3c:3f:dc:15:cf:12:65:6b:5f:6c:55:c9:e9:e4:da:
d9:99:8e:98:a3:47:be:20:b3:ec:cd:9a:c7:6b:02:
30:d3:03:c2:09:76:01:eb:da:48:ba:e7:f3:26:ce:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:73:A4:74:8C:B1:4D:85:F1:BE:02:2C:78:E5:E7:04:BE:F3:B4
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.16.0/22
Signature Algorithm: sha256WithRSAEncryption
03:47:aa:a7:e2:52:1d:4b:77:20:01:95:ae:7d:03:ce:62:8b:
86:74:bb:af:19:8c:e6:b5:98:df:39:e8:9d:fb:43:f3:d4:6d:
0d:dd:8a:eb:a6:d6:a3:94:01:3b:9b:29:2b:c2:5c:81:ca:cd:
68:20:8f:44:39:1c:0e:56:25:8b:86:ae:ac:0c:03:20:4f:a4:
9c:a5:f5:bb:24:ea:d2:f7:6c:39:ae:b1:c5:7d:09:d8:ac:44:
ca:41:6c:d4:1c:28:c1:de:ad:5d:c0:a9:55:51:ff:62:2b:06:
38:dd:ac:35:e4:7b:db:24:6d:31:4b:6a:fb:c1:97:ab:f4:6a:
52:0c:64:b6:0f:51:32:c5:b7:4c:6c:01:5c:ac:d8:10:28:e7:
34:3b:7f:0a:61:c9:a7:3d:ff:f8:99:d8:f3:71:48:c2:1a:3b:
84:28:ba:67:e6:e9:07:27:d6:7a:10:cd:57:69:38:d2:6d:c2:
12:f2:02:21:68:3c:03:1f:0c:12:b0:df:37:66:18:4c:fc:7e:
84:e2:f9:08:b5:dd:f6:76:d2:e7:ed:a9:32:2d:86:cd:89:5f:
77:d1:48:36:77:c1:da:9a:b2:a0:3b:b2:da:1c:fe:e1:81:9c:
a5:28:73:1f:4d:f7:eb:38:bf:f6:31:4d:71:25:19:52:0d:b3:
7e:2c:82:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUdL3FezMVunhpiZ4zWz3mlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1
YjRiMTAwHhcNMjUwMjE5MDc1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTNlNzNhNDc0OGNiMTRkODVmMWJlMDIyYzc4ZTVlNzA0YmVmM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+m/hGaM+kez1WjYGEy5dNWyxXONT
IxFko7VzL1C398DlH/aXseKXC9452pyUkCO9LHq7RZE0sM8dOc0qS/eF071jCAkj
XbWGsYFW2WmtOwuPBrM/AT/W9acSlgv5FhijyP2DcZT26NLpV1Qo4q5Z5sbFTyQn
zft3Wirfvu/dMznWX1I0oDXz8j/VvGV6z8mprE6WDpny106lj+/ldkztH8FR6QFE
Xob25aNwu8q8lGQHUUoLP0V36viU3Flz/AxbkDkpnx2qkekuD0PBiebR8o08P9wV
zxJla19sVcnp5NrZmY6Yo0e+ILPszZrHawIw0wPCCXYB69pIuufzJs4fowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDE+c6R0jLFNhfG+Aix45ecEvvO0MB8GA1UdIwQY
MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt
ZDYwYjNiNmNjYTZlLzEvTVQ1enBIU01zVTJGOGI0Q0xIamw1d1MtODdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl
LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW4QMA0G
CSqGSIb3DQEBCwUAA4IBAQADR6qn4lIdS3cgAZWufQPOYouGdLuvGYzmtZjfOeid
+0Pz1G0N3YrrptajlAE7mykrwlyBys1oII9EORwOViWLhq6sDAMgT6ScpfW7JOrS
92w5rrHFfQnYrETKQWzUHCjB3q1dwKlVUf9iKwY43aw15HvbJG0xS2r7wZer9GpS
DGS2D1EyxbdMbAFcrNgQKOc0O38KYcmnPf/4mdjzcUjCGjuEKLpn5ukHJ9Z6EM1X
aTjSbcIS8gIhaDwDHwwSsN83ZhhM/H6E4vkItd32dtLn7akyLYbNiV930Ug2d8Ha
mrKgO7LaHP7hgZylKHMfTffrOL/2MU1xJRlSDbN+LILk
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net