Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/r4CnQQx_zbdBDGpIsGGdqEuowRg.roa
File: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (raw, json)
Hash identifier: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=
Subject key identifier: AF:80:A7:41:0C:7F:CD:B7:41:0C:6A:48:B0:61:9D:A8:4B:A8:C1:18
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0194258E43F02C33FE9ABD59EFB899C13212
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/r4CnQQx_zbdBDGpIsGGdqEuowRg.roa
Signing time: Thu 02 Jan 2025 05:47:47 +0000
ROA not before: Thu 02 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28781
IP address blocks: 213.161.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:43:f0:2c:33:fe:9a:bd:59:ef:b8:99:c1:32:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 2 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af80a7410c7fcdb7410c6a48b0619da84ba8c118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:9e:83:b8:02:c9:45:6a:82:8b:f9:f9:3a:
5a:77:d5:6c:0a:47:81:c0:ce:a4:9e:d3:18:ca:47:
5a:95:1b:26:9c:b8:14:c7:73:01:b5:74:06:4f:2e:
bd:4b:78:a0:02:b2:92:97:fd:2f:b6:71:0e:79:3c:
54:48:51:0b:dc:c8:aa:8a:17:64:50:a3:65:9c:96:
5e:d9:00:08:dc:0f:98:b7:1f:38:3e:21:90:5d:33:
71:41:9a:ec:20:fe:63:db:e4:06:a5:d1:48:2a:b6:
9c:75:cb:dc:62:04:56:5c:2f:81:0d:e2:72:f6:10:
75:94:15:d8:07:ac:71:05:ba:f2:ef:e5:a6:00:24:
fc:45:36:02:53:2c:65:ea:6b:78:5f:8f:03:49:91:
94:55:e6:d4:4c:82:e7:3b:e4:c4:64:71:7c:80:f9:
da:71:5d:f3:5d:75:6a:60:5c:a4:27:7c:0e:8e:22:
42:1a:3d:7f:45:7a:11:b0:fd:96:fa:2b:e6:60:c4:
4d:a2:83:40:5b:24:a6:13:46:96:f4:4d:cf:00:a4:
db:25:15:fc:96:72:71:e9:7b:c2:ce:5b:11:f2:23:
f5:38:11:d0:53:c8:8c:3f:6c:9c:d6:91:1e:27:fe:
3c:ac:89:47:dc:16:62:41:23:65:08:61:08:40:a3:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:A7:41:0C:7F:CD:B7:41:0C:6A:48:B0:61:9D:A8:4B:A8:C1:18
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/r4CnQQx_zbdBDGpIsGGdqEuowRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.131.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ff:63:db:8c:44:4f:50:ca:2f:29:09:3d:a4:9b:60:ef:52:
9f:7b:51:d7:7b:ee:80:18:1b:84:d6:79:f1:a5:76:d7:72:b5:
d7:60:13:92:14:5a:ce:a7:46:b5:2c:d2:77:6a:f7:04:b6:d5:
30:f2:5d:29:59:cd:e9:26:d1:10:48:ed:2e:d5:dc:a3:7d:e0:
5d:6f:74:59:64:36:b0:76:32:9f:ac:f3:6a:12:a5:dc:4f:55:
05:a8:0b:a8:ca:a8:69:4c:e8:75:ed:be:04:e7:9e:9d:0d:79:
59:31:06:b9:ed:87:7f:1a:d1:3e:09:1c:8d:41:5a:67:da:86:
9e:56:13:9c:2c:4d:c2:e8:81:1e:86:7d:fb:07:e5:95:fc:f9:
88:8c:5f:56:8d:57:ff:9f:f3:ac:22:3b:71:89:09:bf:2a:3a:
3b:df:07:78:c6:8e:e3:7c:4f:a7:58:b5:89:c6:43:22:6b:ed:
5f:71:a0:ee:dc:d9:68:a5:7b:7a:14:3d:db:4c:6c:61:97:a8:
16:f7:42:51:98:ee:c5:08:e1:5b:7a:be:ca:cb:43:8d:f8:59:
e8:dc:01:46:24:0a:4f:32:fd:e2:a6:be:77:2d:cd:d6:17:c6:
7e:33:89:1f:ae:26:74:56:9f:27:76:2a:99:79:c4:52:1d:4a:
5d:43:1b:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljkPwLDP+mr1Z77iZwTISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx
ZjlkZDMwHhcNMjUwMTAyMDU0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjgwYTc0MTBjN2ZjZGI3NDEwYzZhNDhiMDYxOWRhODRiYThjMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Seg7gCyUVqgov5+Tpad9VsCkeB
wM6kntMYykdalRsmnLgUx3MBtXQGTy69S3igArKSl/0vtnEOeTxUSFEL3Miqihdk
UKNlnJZe2QAI3A+Ytx84PiGQXTNxQZrsIP5j2+QGpdFIKracdcvcYgRWXC+BDeJy
9hB1lBXYB6xxBbry7+WmACT8RTYCUyxl6mt4X48DSZGUVebUTILnO+TEZHF8gPna
cV3zXXVqYFykJ3wOjiJCGj1/RXoRsP2W+ivmYMRNooNAWySmE0aW9E3PAKTbJRX8
lnJx6XvCzlsR8iP1OBHQU8iMP2yc1pEeJ/48rIlH3BZiQSNlCGEIQKNTTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK+Ap0EMf823QQxqSLBhnahLqMEYMB8GA1UdIwQY
MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt
MzJhYTY3MzFjMjkxLzEvcjRDblFReF96YmRCREdwSXNHR2RxRXVvd1JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx
LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aGDMA0G
CSqGSIb3DQEBCwUAA4IBAQAy/2PbjERPUMovKQk9pJtg71Kfe1HXe+6AGBuE1nnx
pXbXcrXXYBOSFFrOp0a1LNJ3avcEttUw8l0pWc3pJtEQSO0u1dyjfeBdb3RZZDaw
djKfrPNqEqXcT1UFqAuoyqhpTOh17b4E556dDXlZMQa57Yd/GtE+CRyNQVpn2oae
VhOcLE3C6IEehn37B+WV/PmIjF9WjVf/n/OsIjtxiQm/Kjo73wd4xo7jfE+nWLWJ
xkMia+1fcaDu3NlopXt6FD3bTGxhl6gW90JRmO7FCOFber7Ky0ON+Fno3AFGJApP
Mv3ipr53Lc3WF8Z+M4kfriZ0Vp8ndiqZecRSHUpdQxvR
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net