Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/cHmzC5rP8FKDRkf607gnTwTvai4.roa
File: cHmzC5rP8FKDRkf607gnTwTvai4.roa (raw, json)
Hash identifier: bUuWEaYRtlG9aynz8XnAtZjAlJEDXY0U7CgyfMlbP0E=
Subject key identifier: 70:79:B3:0B:9A:CF:F0:52:83:46:47:FA:D3:B8:27:4F:04:EF:6A:2E
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 01941F8C75773008A8AC99921A7381431AA7
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/cHmzC5rP8FKDRkf607gnTwTvai4.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17012
IP address blocks: 91.243.72.0/23 maxlen: 24
185.177.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:75:77:30:08:a8:ac:99:92:1a:73:81:43:1a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7079b30b9acff052834647fad3b8274f04ef6a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:66:aa:f9:05:78:ab:2a:c6:de:6b:71:4f:
68:6c:e2:5e:46:ce:cf:32:1f:6e:1f:89:97:16:05:
82:c0:73:bb:f9:5a:24:76:67:e2:7a:8a:32:ca:42:
c9:f0:5e:f9:b0:12:6c:58:88:51:5f:07:2a:1f:e7:
1c:c6:3e:6a:92:dd:93:bf:0c:9d:9c:5c:ba:cc:6c:
87:37:5c:91:d1:45:a9:ad:ea:82:2e:bd:d6:2e:2d:
79:44:bc:58:f1:06:cb:27:0f:d9:83:59:d7:2d:5b:
4c:48:be:83:d9:42:8c:18:91:ad:d1:13:18:f2:56:
0d:72:3c:f2:77:2c:54:02:51:d8:91:56:8a:f0:2f:
bb:0f:df:24:84:ce:f9:21:ae:26:3f:9d:88:ab:43:
f6:cb:4e:21:5f:b9:09:39:4a:40:a4:3f:e2:fb:81:
1c:8e:00:2f:e3:71:72:e6:07:e0:02:12:f3:2b:ed:
e2:6c:71:a3:c4:27:66:6d:f9:b9:ae:02:02:85:2a:
db:38:7e:41:2f:3d:14:cd:d3:9d:35:d3:46:d1:e7:
25:36:fd:d3:6e:25:df:91:20:17:18:e4:5f:1a:24:
cf:9c:75:37:eb:68:d9:c6:90:2e:17:d4:99:4e:7a:
03:63:2f:f7:40:ee:83:49:04:44:8c:79:62:df:27:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:79:B3:0B:9A:CF:F0:52:83:46:47:FA:D3:B8:27:4F:04:EF:6A:2E
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/cHmzC5rP8FKDRkf607gnTwTvai4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.72.0/23
185.177.52.0/22
Signature Algorithm: sha256WithRSAEncryption
28:33:e5:9c:86:44:1a:a2:61:cb:c2:9b:cc:d8:66:68:f9:1d:
95:dd:80:13:62:42:18:2a:ae:c2:b3:aa:3d:c1:b1:cd:8c:5d:
3d:41:40:85:b5:91:f4:87:85:50:03:cd:d8:56:03:c3:56:27:
38:04:7a:9b:43:06:25:8b:78:38:12:7a:00:4a:f1:49:39:81:
9c:5e:20:73:f3:13:56:cc:2e:3a:32:f2:d4:aa:35:05:70:dc:
c5:2d:ef:e4:0d:44:07:68:4b:d7:40:0a:1b:25:0e:dc:9d:72:
be:8a:28:b1:61:c0:cf:42:10:60:be:df:9a:4b:1f:2e:87:2e:
3e:7a:b1:2c:51:6a:66:74:52:35:6a:bf:0f:8d:2f:b0:a5:6f:
2d:c3:4d:e5:0c:cb:44:4b:58:b0:9a:8a:05:25:21:41:39:da:
85:f6:2c:a9:1f:f9:a3:31:e6:5b:79:19:70:36:3a:83:ee:cc:
61:ea:4c:f7:b4:e0:93:62:ee:9f:a0:d7:a3:ba:57:39:f9:fb:
1e:27:f9:34:fe:a9:49:bb:1e:01:21:e1:5b:b9:68:e3:1a:33:
f2:08:27:67:81:c8:b5:dc:d6:aa:75:bd:a5:60:84:aa:e6:c7:
f8:c2:0b:df:84:79:b5:e1:2b:a1:a9:94:d1:35:41:3a:a3:ab:
5e:66:8b:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjHV3MAiorJmSGnOBQxqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhNDBiZWY5MzA0MzhkNTNjZDA3ZjA3ZmY5MTUzZTJm
YjliZTgwHhcNMjUwMTAxMDE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDc5YjMwYjlhY2ZmMDUyODM0NjQ3ZmFkM2I4Mjc0ZjA0ZWY2YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIJmqvkFeKsqxt5rcU9obOJeRs7P
Mh9uH4mXFgWCwHO7+VokdmfieooyykLJ8F75sBJsWIhRXwcqH+ccxj5qkt2Tvwyd
nFy6zGyHN1yR0UWpreqCLr3WLi15RLxY8QbLJw/Zg1nXLVtMSL6D2UKMGJGt0RMY
8lYNcjzydyxUAlHYkVaK8C+7D98khM75Ia4mP52Iq0P2y04hX7kJOUpApD/i+4Ec
jgAv43Fy5gfgAhLzK+3ibHGjxCdmbfm5rgIChSrbOH5BLz0UzdOdNdNG0eclNv3T
biXfkSAXGORfGiTPnHU362jZxpAuF9SZTnoDYy/3QO6DSQREjHli3ydXBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHB5swuaz/BSg0ZH+tO4J08E72ouMB8GA1UdIwQY
MBaAFAI5pAvvkwQ41TzQfwf/kVPi+5voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYt
NmQzODEyYWE1ZWI1LzEvY0htekM1clA4RktEUmtmNjA3Z25Ud1R2YWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYtNmQzODEyYWE1ZWI1
LzEvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW/NIAwQC
ubE0MA0GCSqGSIb3DQEBCwUAA4IBAQAoM+WchkQaomHLwpvM2GZo+R2V3YATYkIY
Kq7Cs6o9wbHNjF09QUCFtZH0h4VQA83YVgPDVic4BHqbQwYli3g4EnoASvFJOYGc
XiBz8xNWzC46MvLUqjUFcNzFLe/kDUQHaEvXQAobJQ7cnXK+iiixYcDPQhBgvt+a
Sx8uhy4+erEsUWpmdFI1ar8PjS+wpW8tw03lDMtES1iwmooFJSFBOdqF9iypH/mj
MeZbeRlwNjqD7sxh6kz3tOCTYu6foNejulc5+fseJ/k0/qlJux4BIeFbuWjjGjPy
CCdngci13Naqdb2lYISq5sf4wgvfhHm14SuhqZTRNUE6o6teZotD
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net