Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/3lIHjKuigd-8wnJOYmIpykPGwEE.roa
File: 3lIHjKuigd-8wnJOYmIpykPGwEE.roa (raw, json)
Hash identifier: RbhnGqyFBszn7eUWI0qn8+G1e8ScDlyeFe7EddnRngY=
Subject key identifier: DE:52:07:8C:AB:A2:81:DF:BC:C2:72:4E:62:62:29:CA:43:C6:C0:41
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0195F11B8E6605904ADAB76BA631DB104942
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/3lIHjKuigd-8wnJOYmIpykPGwEE.roa
Signing time: Tue 01 Apr 2025 11:27:49 +0000
ROA not before: Tue 01 Apr 2025 11:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 194.59.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:1b:8e:66:05:90:4a:da:b7:6b:a6:31:db:10:49:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Apr 1 11:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de52078caba281dfbcc2724e626229ca43c6c041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:79:5b:5f:21:64:52:05:b4:58:95:c5:a4:
33:b8:05:a1:5a:e3:45:05:40:e8:46:3d:f5:4d:b6:
02:db:22:d8:56:3d:9a:71:54:59:60:98:70:e6:a4:
3e:2a:21:ea:4a:77:ba:69:1c:f4:42:cd:55:6e:4e:
0c:6f:79:ea:ce:5b:56:1f:db:0d:56:5b:bb:62:bc:
54:ff:85:77:43:0b:23:a8:72:ae:3c:76:35:a7:76:
24:71:03:b4:b3:d8:96:9a:00:b9:0a:39:a1:29:6f:
ef:bd:67:c9:e1:08:9b:ab:8a:3a:d7:53:68:32:f5:
01:57:9a:97:4d:0b:75:e7:a9:b2:d0:b6:4a:33:12:
d9:9b:45:e2:3c:bd:38:ef:25:9f:c9:da:04:7f:5c:
5a:31:42:20:bb:37:21:d1:1d:ca:98:68:f7:55:66:
c3:6a:16:32:1f:61:88:65:09:08:a1:f5:ee:11:a5:
b7:4e:af:9c:3b:85:6a:ef:59:93:7d:f3:1d:65:fa:
55:b5:5c:04:72:16:ae:1a:db:d0:e4:e9:72:5e:d8:
3a:c5:72:0b:43:24:ea:35:9a:5a:9a:12:67:50:47:
a3:58:e9:2f:e1:b2:75:78:d3:bc:ac:50:a6:20:94:
0a:48:71:15:3d:5e:2a:c6:88:d8:a7:da:82:ea:b1:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:52:07:8C:AB:A2:81:DF:BC:C2:72:4E:62:62:29:CA:43:C6:C0:41
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/3lIHjKuigd-8wnJOYmIpykPGwEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1a:f0:74:de:40:c0:8c:36:23:60:95:59:ab:a7:96:da:11:
83:57:d3:9f:ae:ea:43:75:b0:ee:af:cf:18:b3:ef:a5:05:80:
c9:67:8b:57:61:1b:3f:02:91:3d:96:3c:77:e8:93:aa:8d:b8:
05:fe:2a:37:6a:b2:13:24:1a:06:e6:0c:2e:d9:85:b4:d8:c4:
92:5f:80:eb:f4:66:24:73:d0:aa:d8:a2:c7:e0:5a:8f:2b:fc:
15:ff:dc:87:24:95:b8:71:a3:00:50:39:5e:7d:cb:1d:e2:9c:
b0:c6:ab:cf:60:f2:4d:c5:35:54:22:be:78:27:2d:5d:f2:2a:
f5:80:0e:67:57:8c:37:19:c6:22:b0:ec:17:57:b3:87:bc:f3:
36:86:20:54:e3:80:68:7b:19:56:27:c6:ce:b6:da:77:6b:1c:
67:d9:81:9d:ee:17:9a:ec:9d:a7:76:95:0b:48:c5:6c:fb:e3:
34:1c:3f:7d:97:a8:c4:a3:b0:e7:e8:a7:de:71:d4:3a:d9:11:
71:db:e2:46:d9:33:82:d3:0c:e8:94:3d:1f:d7:a6:5a:84:02:
44:1c:e8:58:62:cc:f3:bb:95:56:0d:6c:f0:d3:da:27:d8:90:
24:6b:77:62:b2:89:19:1a:80:dc:dd:1c:ed:0e:b8:66:ba:65:
be:99:0e:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXxG45mBZBK2rdrpjHbEElCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjUwNDAxMTEyNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTUyMDc4Y2FiYTI4MWRmYmNjMjcyNGU2MjYyMjljYTQzYzZjMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7x5W18hZFIFtFiVxaQzuAWhWuNF
BUDoRj31TbYC2yLYVj2acVRZYJhw5qQ+KiHqSne6aRz0Qs1Vbk4Mb3nqzltWH9sN
Vlu7YrxU/4V3QwsjqHKuPHY1p3YkcQO0s9iWmgC5CjmhKW/vvWfJ4Qibq4o611No
MvUBV5qXTQt156my0LZKMxLZm0XiPL047yWfydoEf1xaMUIguzch0R3KmGj3VWbD
ahYyH2GIZQkIofXuEaW3Tq+cO4Vq71mTffMdZfpVtVwEchauGtvQ5OlyXtg6xXIL
QyTqNZpamhJnUEejWOkv4bJ1eNO8rFCmIJQKSHEVPV4qxojYp9qC6rHloQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN5SB4yrooHfvMJyTmJiKcpDxsBBMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvM2xJSGpLdWlnZC04d25KT1ltSXB5a1BHd0VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwju6MA0G
CSqGSIb3DQEBCwUAA4IBAQCQGvB03kDAjDYjYJVZq6eW2hGDV9OfrupDdbDur88Y
s++lBYDJZ4tXYRs/ApE9ljx36JOqjbgF/io3arITJBoG5gwu2YW02MSSX4Dr9GYk
c9Cq2KLH4FqPK/wV/9yHJJW4caMAUDlefcsd4pywxqvPYPJNxTVUIr54Jy1d8ir1
gA5nV4w3GcYisOwXV7OHvPM2hiBU44BoexlWJ8bOttp3axxn2YGd7hea7J2ndpUL
SMVs++M0HD99l6jEo7Dn6KfecdQ62RFx2+JG2TOC0wzolD0f16ZahAJEHOhYYszz
u5VWDWzw09on2JAka3disokZGoDc3RztDrhmumW+mQ5k
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net