Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa
File: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (raw, json)
Hash identifier: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=
Subject key identifier: 0F:4C:89:72:ED:09:BC:F2:76:21:9E:AA:BE:B3:7F:EB:C4:4B:F3:50
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0195F63C6D1A5A573FB9EAD0637EF48C7166
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa
Signing time: Wed 02 Apr 2025 11:21:49 +0000
ROA not before: Wed 02 Apr 2025 11:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
193.106.68.0/22 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:3c:6d:1a:5a:57:3f:b9:ea:d0:63:7e:f4:8c:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Apr 2 11:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f4c8972ed09bcf276219eaabeb37febc44bf350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:88:34:ff:df:ea:3c:5d:95:17:99:50:d7:
30:99:a2:c1:8f:11:cb:dc:63:cf:ad:bd:49:3a:72:
74:40:bc:16:ec:9b:16:67:df:03:01:03:0f:ff:e2:
6d:4d:20:4b:4f:8f:b1:4e:dc:dc:68:63:1e:15:35:
3c:ef:b8:20:c2:5e:5f:ee:f3:27:90:6d:84:1a:56:
6f:06:96:e0:b3:5b:e4:80:98:e7:07:ed:d7:e9:5d:
d6:cd:33:8b:1e:15:7f:ae:2c:a4:9e:54:a7:b3:32:
02:38:e2:22:d3:bc:b4:22:39:01:a6:c4:2c:7a:c4:
16:35:19:74:51:eb:84:f2:9b:20:c5:5a:d5:99:43:
d6:31:34:69:94:e6:a7:0e:e9:5c:29:dd:be:e6:10:
18:fb:14:ee:6f:61:51:ca:d4:ef:1c:20:c3:9e:34:
6f:04:3c:a2:4d:df:b7:3c:14:8f:d2:6f:1f:3b:57:
7a:70:dc:6f:24:02:df:28:c0:6e:07:65:48:26:a5:
1e:36:98:db:54:4b:33:1a:35:3d:d6:14:f7:77:7a:
ff:49:f6:43:55:4e:62:18:b0:b4:22:57:58:53:29:
bb:0a:91:fa:21:93:e6:3d:74:15:ba:f5:7d:52:fd:
cb:94:4f:80:39:86:d5:44:3a:23:4c:78:ac:c4:1f:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:89:72:ED:09:BC:F2:76:21:9E:AA:BE:B3:7F:EB:C4:4B:F3:50
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
193.106.68.0/22
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
41:af:97:4e:86:15:5f:41:d3:7a:aa:4b:bc:18:c8:46:dc:fa:
a7:66:98:2d:ad:9b:c9:2f:be:dd:a9:60:58:34:16:91:fe:1e:
48:20:43:ea:e9:71:c6:df:7b:0e:da:3b:b2:52:6a:d4:d5:57:
28:d6:e9:8b:b4:03:10:1d:42:6e:1a:b4:97:56:37:89:ee:6f:
7c:c0:73:af:69:c9:15:8c:bc:f7:9d:70:24:70:a9:cb:a1:9c:
29:10:2d:d1:90:ee:18:dd:52:b9:4b:76:22:f4:22:13:60:5e:
80:90:02:31:10:0b:ff:0a:ba:a1:1e:0d:7d:ae:a8:56:5a:e6:
e9:9c:e3:4b:cf:d9:13:80:a7:cb:4c:15:7e:de:e4:2a:5c:91:
d0:03:23:43:be:93:d3:5a:87:2f:5b:6d:32:08:96:af:11:1a:
0c:56:02:01:98:58:f7:a0:6f:41:f9:aa:d1:d4:ba:87:e2:0d:
5b:e6:f0:0b:bf:9c:95:6c:9f:fb:5b:39:51:5d:cd:3d:83:87:
9f:7c:5b:73:e8:c8:ee:2e:26:d6:d1:1c:d6:64:7d:c9:88:3f:
91:83:2e:53:29:fe:d2:92:50:13:ce:1c:be:3b:bf:3b:0b:a8:
27:dc:b8:ca:3b:7b:18:1a:ea:00:f0:86:87:05:d3:cf:74:63:
33:7f:d3:2a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZX2PG0aWlc/uerQY370jHFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjUwNDAyMTEyMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjRjODk3MmVkMDliY2YyNzYyMTllYWFiZWIzN2ZlYmM0NGJmMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubKINP/f6jxdlReZUNcwmaLBjxHL
3GPPrb1JOnJ0QLwW7JsWZ98DAQMP/+JtTSBLT4+xTtzcaGMeFTU877ggwl5f7vMn
kG2EGlZvBpbgs1vkgJjnB+3X6V3WzTOLHhV/riyknlSnszICOOIi07y0IjkBpsQs
esQWNRl0UeuE8psgxVrVmUPWMTRplOanDulcKd2+5hAY+xTub2FRytTvHCDDnjRv
BDyiTd+3PBSP0m8fO1d6cNxvJALfKMBuB2VIJqUeNpjbVEszGjU91hT3d3r/SfZD
VU5iGLC0IldYUym7CpH6IZPmPXQVuvV9Uv3LlE+AOYbVRDojTHisxB+jlwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA9MiXLtCbzydiGeqr6zf+vES/NQMB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvRDB5SmN1MEp2UEoySVo2cXZyTl82OFJMODFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+lYAwQC
wWpEMA0EAgACMAcDBQAqAEbgMA0GCSqGSIb3DQEBCwUAA4IBAQBBr5dOhhVfQdN6
qku8GMhG3PqnZpgtrZvJL77dqWBYNBaR/h5IIEPq6XHG33sO2juyUmrU1Vco1umL
tAMQHUJuGrSXVjeJ7m98wHOvackVjLz3nXAkcKnLoZwpEC3RkO4Y3VK5S3Yi9CIT
YF6AkAIxEAv/CrqhHg19rqhWWubpnONLz9kTgKfLTBV+3uQqXJHQAyNDvpPTWocv
W20yCJavERoMVgIBmFj3oG9B+arR1LqH4g1b5vALv5yVbJ/7WzlRXc09g4effFtz
6MjuLibW0RzWZH3JiD+Rgy5TKf7SklATzhy+O787C6gn3LjKO3sYGuoA8IaHBdPP
dGMzf9Mq
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net