Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/_k-LVkRidjyVBxM5JDfBSAF4xXQ.roa
File: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (raw, json)
Hash identifier: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=
Subject key identifier: FE:4F:8B:56:44:62:76:3C:95:07:13:39:24:37:C1:48:01:78:C5:74
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 019427B699E5B2F5E5A8D862F5EB93AA7327
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/_k-LVkRidjyVBxM5JDfBSAF4xXQ.roa
Signing time: Thu 02 Jan 2025 15:51:05 +0000
ROA not before: Thu 02 Jan 2025 15:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43910
IP address blocks: 193.186.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:99:e5:b2:f5:e5:a8:d8:62:f5:eb:93:aa:73:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Jan 2 15:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe4f8b564462763c950713392437c1480178c574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:f7:ad:93:a9:2c:fc:d4:0d:54:1b:78:89:
7e:7a:76:ba:27:93:0c:83:4b:b6:b8:49:97:5b:cb:
15:68:32:c2:cc:f5:17:6b:1b:d6:07:ea:5a:12:a0:
86:df:77:16:9f:49:cb:21:44:ec:1e:94:18:9a:60:
07:71:21:e8:ac:f5:e4:53:72:8b:be:e3:56:22:e2:
29:90:ad:97:c8:77:a6:d1:12:44:ba:91:a5:d2:f5:
c2:7b:ea:eb:8f:5a:7a:25:5f:30:99:2b:c7:d9:8b:
e5:79:63:06:00:bd:63:87:a9:e5:e6:d4:44:26:ad:
dd:e8:de:ad:23:84:33:62:e3:ad:18:42:b9:8c:61:
55:3c:38:25:fa:09:1c:ae:45:8a:72:53:fb:f2:74:
12:96:b7:9f:eb:cb:42:31:6b:23:1b:b8:ac:ee:00:
ac:2a:aa:dd:f5:8d:62:0c:45:9d:dc:f3:ef:63:02:
41:8d:6c:21:e1:bc:87:d8:5b:26:5a:a7:48:04:d3:
11:91:f6:2c:b1:0b:e2:66:3a:ff:16:68:db:6d:a2:
77:39:49:e0:31:b4:7b:e8:fa:fd:80:29:b8:64:41:
c2:14:3a:52:de:e8:8b:80:7e:9d:2e:ee:87:1c:e3:
73:ad:9c:20:5e:e9:ac:7c:00:8b:67:68:36:b8:ec:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:8B:56:44:62:76:3C:95:07:13:39:24:37:C1:48:01:78:C5:74
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/_k-LVkRidjyVBxM5JDfBSAF4xXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:63:77:d1:d8:56:81:dd:17:f9:39:fe:0e:c6:4c:b3:f1:e7:
73:28:2b:84:d1:6f:5a:bb:f7:37:28:85:db:80:2a:12:bb:05:
72:d9:1b:f2:13:09:2a:d1:bd:1c:dd:4c:4d:ce:1e:52:98:8e:
76:d5:e4:e8:9d:a7:1b:fe:60:0a:3e:21:10:ee:70:56:fa:2e:
3e:15:20:57:7a:f2:47:43:7c:4e:8b:38:f7:02:a0:2e:ad:da:
5b:68:6e:48:8e:31:98:e9:7e:47:7f:c3:87:ec:be:42:9c:9c:
4c:22:d0:bd:e6:8a:1d:f0:66:ba:fe:2e:4e:a3:34:3e:95:dc:
48:d3:10:ad:cf:e3:79:59:88:ff:62:3a:83:a0:e8:bd:1b:62:
df:fa:6c:33:4a:04:94:ec:6e:09:ca:b0:c3:91:4d:2a:f2:09:
80:5d:ee:07:02:de:85:b8:da:f2:e4:d6:a9:51:de:f1:aa:41:
b6:4b:9b:26:b4:d8:12:b2:b1:25:2b:2d:dc:9e:9c:89:a8:7e:
9d:b4:88:d9:8d:94:6f:e5:44:97:3e:ad:2f:d5:21:78:32:88:
f4:6f:a4:62:9b:d8:8d:18:c5:eb:e9:da:58:54:40:c6:76:62:
1a:e4:dd:b4:9f:14:a7:16:6a:f7:b2:d4:d9:bf:14:53:c3:d5:
96:3c:8f:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntpnlsvXlqNhi9euTqnMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjEyMWNmMDYzMjgxOWVlY2VhYmViOGE5NTU2OWM2NzUy
OTg4MjEwHhcNMjUwMTAyMTU1MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTRmOGI1NjQ0NjI3NjNjOTUwNzEzMzkyNDM3YzE0ODAxNzhjNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNn3rZOpLPzUDVQbeIl+ena6J5MM
g0u2uEmXW8sVaDLCzPUXaxvWB+paEqCG33cWn0nLIUTsHpQYmmAHcSHorPXkU3KL
vuNWIuIpkK2XyHem0RJEupGl0vXCe+rrj1p6JV8wmSvH2YvleWMGAL1jh6nl5tRE
Jq3d6N6tI4QzYuOtGEK5jGFVPDgl+gkcrkWKclP78nQSlref68tCMWsjG7is7gCs
Kqrd9Y1iDEWd3PPvYwJBjWwh4byH2FsmWqdIBNMRkfYssQviZjr/FmjbbaJ3OUng
MbR76Pr9gCm4ZEHCFDpS3uiLgH6dLu6HHONzrZwgXumsfACLZ2g2uOxctwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP5Pi1ZEYnY8lQcTOSQ3wUgBeMV0MB8GA1UdIwQY
MBaAFD6xIc8GMoGe7Oq+uKlVacZ1KYghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQt
NmU3MzlmMDJkNTEyLzEvX2stTFZrUmlkanlWQnhNNUpEZkJTQUY0eFhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQtNmU3MzlmMDJkNTEy
LzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwboHMA0G
CSqGSIb3DQEBCwUAA4IBAQBLY3fR2FaB3Rf5Of4Oxkyz8edzKCuE0W9au/c3KIXb
gCoSuwVy2RvyEwkq0b0c3UxNzh5SmI521eTonacb/mAKPiEQ7nBW+i4+FSBXevJH
Q3xOizj3AqAurdpbaG5IjjGY6X5Hf8OH7L5CnJxMItC95ood8Ga6/i5OozQ+ldxI
0xCtz+N5WYj/YjqDoOi9G2Lf+mwzSgSU7G4JyrDDkU0q8gmAXe4HAt6FuNry5Nap
Ud7xqkG2S5smtNgSsrElKy3cnpyJqH6dtIjZjZRv5USXPq0v1SF4Moj0b6Rim9iN
GMXr6dpYVEDGdmIa5N20nxSnFmr3stTZvxRTw9WWPI90
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net