Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa
File: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (raw, json)
Hash identifier: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=
Subject key identifier: 2A:CD:CC:A0:CF:89:47:97:12:C1:46:C4:EC:B3:E5:CF:C1:55:D4:4A
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 01941F8C42DD4F479C9D30C1FDC9972D361E
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21409
IP address blocks: 78.24.128.0/21 maxlen: 32
80.93.80.0/20 maxlen: 32
94.125.160.0/21 maxlen: 32
109.238.0.0/20 maxlen: 32
109.238.15.0/24 maxlen: 32
178.170.0.0/17 maxlen: 32
185.10.99.0/24 maxlen: 24
185.246.84.0/22 maxlen: 22
213.246.32.0/19 maxlen: 32
213.246.33.0/24 maxlen: 32
213.246.35.0/24 maxlen: 32
213.246.36.0/22 maxlen: 32
213.246.42.0/24 maxlen: 32
213.246.49.0/24 maxlen: 32
213.246.51.0/24 maxlen: 32
213.246.52.0/23 maxlen: 32
213.246.55.0/24 maxlen: 32
213.246.56.0/22 maxlen: 32
213.246.60.0/24 maxlen: 32
213.246.61.0/24 maxlen: 32
213.246.62.0/23 maxlen: 32
2a00:c70::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:42:dd:4f:47:9c:9d:30:c1:fd:c9:97:2d:36:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2acdcca0cf89479712c146c4ecb3e5cfc155d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:d1:74:75:31:15:47:f2:11:fa:fb:71:ae:
ee:50:6f:a4:da:1b:fc:8b:a5:74:37:38:22:74:cf:
a7:cf:67:c1:ac:3a:1e:8b:bb:bf:8e:8a:2f:65:45:
bc:4a:2b:85:6f:80:69:c4:dd:65:99:7a:26:5f:ad:
48:cc:5a:a8:83:94:6f:7c:de:59:9f:7c:7f:4e:95:
a1:8c:d2:ba:57:8f:c6:9f:57:84:2b:26:ad:e0:47:
b7:6e:b4:bc:4c:e8:be:58:c7:ed:70:f1:dc:f0:29:
f3:8a:10:e1:1f:87:e0:65:74:fc:ef:f1:1a:52:60:
7e:2b:c6:ef:28:b0:03:7c:cd:91:91:db:c7:2d:3f:
11:af:f5:19:c1:20:a0:d6:8b:df:52:45:e1:41:2c:
90:ce:3f:6a:e6:d5:88:a1:dd:ad:7f:45:cc:41:00:
4e:62:a2:f4:7c:c7:ae:10:b0:67:d1:a4:c8:78:50:
d0:4d:bf:72:37:a4:1b:48:93:5a:64:d2:1f:23:6b:
57:82:6a:e3:30:cf:e8:6b:79:ae:74:57:94:b6:44:
e1:d7:0e:c0:58:bc:37:92:81:91:ad:70:9e:27:11:
a6:b3:bb:90:f3:ba:ec:23:27:08:69:d8:06:00:31:
4e:4e:11:0e:3e:f6:84:fa:cc:94:18:10:fd:df:19:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CD:CC:A0:CF:89:47:97:12:C1:46:C4:EC:B3:E5:CF:C1:55:D4:4A
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.128.0/21
80.93.80.0/20
94.125.160.0/21
109.238.0.0/20
178.170.0.0/17
185.10.99.0/24
185.246.84.0/22
213.246.32.0/19
IPv6:
2a00:c70::/32
Signature Algorithm: sha256WithRSAEncryption
64:ad:1c:da:0e:c5:a6:97:cd:7d:57:f2:fb:18:e5:44:8b:6f:
80:a6:68:2d:91:8f:80:f6:74:1e:87:f2:1d:13:b4:f0:ba:88:
d6:22:81:f0:ab:c1:cf:ff:85:dc:86:c4:29:10:ed:f3:4e:f0:
40:dc:8b:ef:b2:1d:e1:ad:74:90:46:82:b0:f2:c6:75:34:2a:
7d:a6:11:1a:66:0f:d9:44:1a:80:84:c6:2d:03:99:cd:10:7b:
75:55:b0:98:8f:9f:d8:4d:1a:37:3b:1f:65:fc:ec:26:53:35:
87:fe:0a:40:d6:cd:6a:83:dc:c9:88:16:2f:17:16:fa:7f:1f:
9b:1f:f5:85:a1:45:91:22:16:1f:01:23:ab:50:f6:4f:75:e9:
b0:b0:15:5c:88:2c:83:8e:9c:5f:ce:cf:49:be:f7:ac:56:a8:
00:b9:60:08:f5:d0:43:7c:13:1c:49:81:2b:35:79:ad:f4:a9:
eb:2f:2d:22:34:3a:42:61:b3:fb:b2:8a:bc:f1:ba:06:33:9e:
36:cd:ec:85:a0:7f:de:2d:9a:3f:ac:e9:b6:1c:e9:8b:71:ca:
fb:d1:79:d0:ef:9b:3d:6c:6b:56:d1:9c:ab:55:6d:a7:68:16:
47:0f:61:45:b3:e4:14:00:56:72:3c:38:ff:ba:b4:62:28:cf:
49:c8:b4:f5
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZQfjELdT0ecnTDB/cmXLTYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ODg3Y2ViMWNiZDEwMjllZjhhNzZkZjc3ZjExNTJiYjQ3
M2I2NDMwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWNkY2NhMGNmODk0Nzk3MTJjMTQ2YzRlY2IzZTVjZmMxNTVkNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIPRdHUxFUfyEfr7ca7uUG+k2hv8
i6V0NzgidM+nz2fBrDoei7u/joovZUW8SiuFb4BpxN1lmXomX61IzFqog5RvfN5Z
n3x/TpWhjNK6V4/Gn1eEKyat4Ee3brS8TOi+WMftcPHc8CnzihDhH4fgZXT87/Ea
UmB+K8bvKLADfM2RkdvHLT8Rr/UZwSCg1ovfUkXhQSyQzj9q5tWIod2tf0XMQQBO
YqL0fMeuELBn0aTIeFDQTb9yN6QbSJNaZNIfI2tXgmrjMM/oa3mudFeUtkTh1w7A
WLw3koGRrXCeJxGms7uQ87rsIycIadgGADFOThEOPvaE+syUGBD93xmN0QIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFCrNzKDPiUeXEsFGxOyz5c/BVdRKMB8GA1UdIwQY
MBaAFAeIfOscvRAp74p233fxFSu0c7ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUt
MzRmN2Q1MTMxMzY3LzEvS3MzTW9NLUpSNWNTd1ViRTdMUGx6OEZWMUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUtMzRmN2Q1MTMxMzY3
LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDThiAAwQE
UF1QAwQDXn2gAwQEbe4AAwQHsqoAAwQAuQpjAwQCufZUAwQF1fYgMA0EAgACMAcD
BQAqAAxwMA0GCSqGSIb3DQEBCwUAA4IBAQBkrRzaDsWml819V/L7GOVEi2+Apmgt
kY+A9nQeh/IdE7TwuojWIoHwq8HP/4XchsQpEO3zTvBA3Ivvsh3hrXSQRoKw8sZ1
NCp9phEaZg/ZRBqAhMYtA5nNEHt1VbCYj5/YTRo3Ox9l/OwmUzWH/gpA1s1qg9zJ
iBYvFxb6fx+bH/WFoUWRIhYfASOrUPZPdemwsBVciCyDjpxfzs9JvvesVqgAuWAI
9dBDfBMcSYErNXmt9KnrLy0iNDpCYbP7soq88boGM542zeyFoH/eLZo/rOm2HOmL
ccr70XnQ75s9bGtW0ZyrVW2naBZHD2FFs+QUAFZyPDj/urRiKM9JyLT1
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:59 2025 by rpki-client on console.sobornost.net