Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/tnoQHxEZmBhPndBuqr7js6dnG0Y.roa
File: tnoQHxEZmBhPndBuqr7js6dnG0Y.roa (raw, json)
Hash identifier: 3ITzRqZF8TeLm0NVc6Ono9EEAePShQfdh+TOZwPVSlw=
Subject key identifier: B6:7A:10:1F:11:19:98:18:4F:9D:D0:6E:AA:BE:E3:B3:A7:67:1B:46
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 01942068518C9D36402F3273C97E6399CB97
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/tnoQHxEZmBhPndBuqr7js6dnG0Y.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49824
IP address blocks: 45.87.89.0/24 maxlen: 24
45.87.90.0/24 maxlen: 24
45.87.91.0/24 maxlen: 24
62.204.51.0/24 maxlen: 24
95.141.245.0/24 maxlen: 24
212.23.203.0/24 maxlen: 24
2a10:2f40::/48 maxlen: 48
2a10:2f40:1::/48 maxlen: 48
2a10:2f40:2::/48 maxlen: 48
2a10:2f40:3::/48 maxlen: 48
2a10:2f40:4::/48 maxlen: 48
2a10:2f40:5::/48 maxlen: 48
2a10:2f40:9::/48 maxlen: 48
2a10:2f40:a::/48 maxlen: 48
2a10:2f40:b::/48 maxlen: 48
2a10:2f40:c::/48 maxlen: 48
2a10:2f40:d::/48 maxlen: 48
2a10:2f40:1a::/48 maxlen: 48
2a14:7280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:51:8c:9d:36:40:2f:32:73:c9:7e:63:99:cb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b67a101f111998184f9dd06eaabee3b3a7671b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:fa:2c:b0:83:a5:e7:37:0d:34:a9:c1:b0:
fd:da:61:44:05:f0:33:ca:c3:68:f2:f8:74:5b:e3:
06:8b:0c:b1:93:cb:41:6a:6e:5f:a7:49:7c:28:0d:
9f:9c:60:fb:bc:de:23:4a:e8:46:ff:6c:8e:c0:da:
7d:14:27:99:e7:5e:72:ac:a3:6f:28:81:7a:b3:e8:
28:d9:ba:b8:5f:45:9e:e3:53:9a:0a:ad:b2:da:8c:
aa:07:5c:68:3d:6a:0c:28:45:3d:ac:92:f7:4b:05:
ca:88:f2:07:ea:5f:13:fc:f3:5a:8b:7d:10:1e:5f:
50:06:d9:01:fd:32:83:3f:d2:1a:bc:85:f5:4b:7e:
99:92:39:3a:fd:38:f6:b3:c3:8c:43:16:53:ae:89:
c8:c3:2d:d8:6a:b6:19:40:e6:9a:2b:b7:65:00:01:
f8:13:e8:cd:74:19:a7:18:ce:fc:33:ba:a9:af:43:
43:44:57:bb:67:90:e8:56:de:5d:fa:cc:9f:b5:54:
0e:15:ed:5d:a7:c1:e2:cf:8b:e0:32:ea:f0:ce:09:
fa:d7:2d:eb:fa:5a:b0:73:c7:a3:c4:44:4e:a1:5e:
66:d5:d7:dd:37:f9:ef:48:7a:b4:43:c9:a3:b3:e2:
d7:79:70:f3:6b:f7:de:bf:22:2c:cc:b3:41:2a:53:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7A:10:1F:11:19:98:18:4F:9D:D0:6E:AA:BE:E3:B3:A7:67:1B:46
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/tnoQHxEZmBhPndBuqr7js6dnG0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.89.0-45.87.91.255
62.204.51.0/24
95.141.245.0/24
212.23.203.0/24
IPv6:
2a10:2f40::-2a10:2f40:5:ffff:ffff:ffff:ffff:ffff
2a10:2f40:9::-2a10:2f40:d:ffff:ffff:ffff:ffff:ffff
2a10:2f40:1a::/48
2a14:7280::/29
Signature Algorithm: sha256WithRSAEncryption
05:d8:08:4f:6f:84:a8:38:17:b8:53:3b:af:da:a6:bc:98:83:
64:37:41:f0:cd:5b:4f:a8:3d:53:a1:d5:0b:56:7f:54:31:9f:
8a:fa:27:65:a3:f3:01:c8:20:df:d2:ab:a2:8f:fd:08:01:b1:
3c:f0:28:19:78:0d:40:94:3e:67:56:8f:17:e8:27:55:50:18:
31:f3:4f:b6:ad:38:b1:eb:0a:c9:07:1f:78:05:e3:97:cb:f4:
5d:83:7f:96:7c:6f:a5:b9:c8:81:1e:da:03:18:b7:db:4d:33:
cb:ee:34:7b:86:00:ba:ba:0a:19:d9:28:45:5a:97:02:b2:ec:
26:c1:3e:95:66:8f:6e:79:5e:b6:d0:69:37:26:df:4b:85:57:
3f:36:c3:bb:bf:c2:e4:5b:df:45:cb:cb:ea:f4:03:d4:e3:51:
19:4c:c4:74:8a:b5:2b:ca:01:ad:03:8f:ff:77:15:5c:2c:49:
e9:e6:3d:e3:3e:88:a0:fc:9a:41:f6:f3:ef:7e:bd:30:81:f9:
af:d5:dd:00:3d:d1:d6:06:01:82:1e:3f:d0:7b:55:45:63:50:
77:2a:88:4b:e9:37:42:1b:f8:fe:7f:79:5d:e0:75:a3:f2:35:
93:9a:56:16:87:ca:07:83:af:7b:9c:20:bd:68:3d:6a:c6:66:
07:76:a0:b2
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZQgaFGMnTZALzJzyX5jmcuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0
YmI3OGQwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjdhMTAxZjExMTk5ODE4NGY5ZGQwNmVhYWJlZTNiM2E3NjcxYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNv6LLCDpec3DTSpwbD92mFEBfAz
ysNo8vh0W+MGiwyxk8tBam5fp0l8KA2fnGD7vN4jSuhG/2yOwNp9FCeZ515yrKNv
KIF6s+go2bq4X0We41OaCq2y2oyqB1xoPWoMKEU9rJL3SwXKiPIH6l8T/PNai30Q
Hl9QBtkB/TKDP9IavIX1S36Zkjk6/Tj2s8OMQxZTronIwy3YarYZQOaaK7dlAAH4
E+jNdBmnGM78M7qpr0NDRFe7Z5DoVt5d+syftVQOFe1dp8Hiz4vgMurwzgn61y3r
+lqwc8ejxEROoV5m1dfdN/nvSHq0Q8mjs+LXeXDza/fevyIszLNBKlMjYQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFLZ6EB8RGZgYT53Qbqq+47OnZxtGMB8GA1UdIwQY
MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt
MzFjN2ZiNDcxNWY2LzEvdG5vUUh4RVptQmhQbmRCdXFyN2pzNmRuRzBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2
LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjAmBAIAATAgMAwDBAAtV1kD
BAItV1gDBAA+zDMDBABfjfUDBADUF8swPAQCAAIwNjAQAwUGKhAvQAMHASoQL0AA
BDASAwcAKhAvQAAJAwcBKhAvQAAMAwcAKhAvQAAaAwUDKhRygDANBgkqhkiG9w0B
AQsFAAOCAQEABdgIT2+EqDgXuFM7r9qmvJiDZDdB8M1bT6g9U6HVC1Z/VDGfivon
ZaPzAcgg39Kroo/9CAGxPPAoGXgNQJQ+Z1aPF+gnVVAYMfNPtq04sesKyQcfeAXj
l8v0XYN/lnxvpbnIgR7aAxi3200zy+40e4YAuroKGdkoRVqXArLsJsE+lWaPbnle
ttBpNybfS4VXPzbDu7/C5FvfRcvL6vQD1ONRGUzEdIq1K8oBrQOP/3cVXCxJ6eY9
4z6IoPyaQfbz7369MIH5r9XdAD3R1gYBgh4/0HtVRWNQdyqIS+k3Qhv4/n95XeB1
o/I1k5pWFofKB4Ove5wgvWg9asZmB3agsg==
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:18:50 2025 by rpki-client on console.sobornost.net