Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/CwxwigW-yHA-vYKKZaAl1IxpzAA.roa
File: CwxwigW-yHA-vYKKZaAl1IxpzAA.roa (raw, json)
Hash identifier: rW7hw/nZ3SfsJ2xESW9df5rJCWkAlL57M/KGPQGcJMI=
Subject key identifier: 0B:0C:70:8A:05:BE:C8:70:3E:BD:82:8A:65:A0:25:D4:8C:69:CC:00
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01942747772BEBB54C8B42DD632DE44AB89F
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/CwxwigW-yHA-vYKKZaAl1IxpzAA.roa
Signing time: Thu 02 Jan 2025 13:49:42 +0000
ROA not before: Thu 02 Jan 2025 13:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214697
IP address blocks: 94.228.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:77:2b:eb:b5:4c:8b:42:dd:63:2d:e4:4a:b8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jan 2 13:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b0c708a05bec8703ebd828a65a025d48c69cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:c8:b4:a6:46:0c:9e:91:5a:a5:76:6d:10:
4a:14:0b:9c:72:1b:b3:65:29:e7:bc:59:7d:92:09:
25:80:7d:85:99:13:6c:08:e4:ac:13:b5:ee:13:a1:
53:c8:8f:40:18:5a:63:dd:fa:fd:39:d0:32:04:65:
92:0b:29:b0:75:73:8f:fa:36:be:1a:5d:b2:b0:58:
35:93:4b:c2:3f:bc:7f:13:00:0b:4a:18:65:82:4d:
ce:b4:f2:f4:a8:e5:f3:1b:cd:d0:38:3b:25:0f:41:
84:47:af:57:dc:43:eb:d2:93:a3:da:11:7e:7b:d0:
9a:c4:90:3b:f7:5f:b6:fa:4e:2c:52:0a:bf:bc:c4:
4a:98:36:e5:5e:db:c2:8e:24:51:97:28:21:dc:df:
57:ce:36:2f:4c:45:b1:3a:26:d9:e3:f4:29:a2:d0:
84:3d:db:ff:3c:31:cb:52:be:6c:9f:a0:44:7b:58:
d6:a7:9d:51:ba:22:93:ab:57:65:5c:69:6c:83:82:
23:1a:35:1b:2a:d6:28:73:df:1a:72:01:94:f4:c4:
57:48:06:c8:82:4b:0e:51:33:98:e4:17:f7:f0:72:
19:d2:e6:85:a7:9b:42:59:bd:47:2e:c0:c3:71:29:
d2:f4:56:08:c1:19:e7:0f:98:41:13:6c:04:25:07:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:70:8A:05:BE:C8:70:3E:BD:82:8A:65:A0:25:D4:8C:69:CC:00
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/CwxwigW-yHA-vYKKZaAl1IxpzAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.166.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e4:13:7b:06:d8:48:7f:db:fd:31:77:00:e5:0c:de:d1:b6:
ad:6b:96:9e:c5:d5:4b:93:f1:c1:4a:e0:16:5a:ce:e0:c8:69:
0a:2a:bd:49:6b:90:39:2f:33:4d:74:ef:59:10:56:b0:fa:54:
eb:ca:71:8e:b6:e1:85:04:28:9a:7e:d7:96:bc:9d:6b:02:61:
23:c1:ce:52:19:fb:80:8e:99:f7:61:48:a9:41:a0:5f:e8:9e:
d0:c1:25:1d:f5:fa:b4:22:f9:7a:d6:81:60:8d:f1:7f:c0:e5:
f7:25:1b:8b:f7:34:c8:77:3c:3b:3b:b8:8b:6a:f1:0d:b7:72:
2a:c5:11:d0:b0:bd:bf:df:8b:33:a9:5a:0e:20:2a:04:54:11:
0a:cb:10:1f:d7:54:70:d4:f7:db:e1:6e:d2:ff:c3:a3:d7:1d:
31:86:f6:82:49:72:0f:8d:6d:05:69:07:77:3c:e6:d5:32:12:
cb:51:bc:67:75:b6:b6:f0:4d:2f:0d:66:a8:45:00:e6:26:45:
b9:42:7b:93:9f:90:6e:38:d5:aa:25:27:cc:a1:75:ca:09:ac:
65:43:9f:1c:28:4e:b1:17:e7:99:d1:ba:6f:4c:9f:33:69:8e:
de:11:18:e9:c1:75:1a:30:13:94:1f:85:1d:3e:4c:37:ca:5d:
74:70:73:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR3cr67VMi0LdYy3kSrifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjUwMTAyMTM0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjBjNzA4YTA1YmVjODcwM2ViZDgyOGE2NWEwMjVkNDhjNjljYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd3ItKZGDJ6RWqV2bRBKFAucchuz
ZSnnvFl9kgklgH2FmRNsCOSsE7XuE6FTyI9AGFpj3fr9OdAyBGWSCymwdXOP+ja+
Gl2ysFg1k0vCP7x/EwALShhlgk3OtPL0qOXzG83QODslD0GER69X3EPr0pOj2hF+
e9CaxJA791+2+k4sUgq/vMRKmDblXtvCjiRRlygh3N9XzjYvTEWxOibZ4/QpotCE
Pdv/PDHLUr5sn6BEe1jWp51RuiKTq1dlXGlsg4IjGjUbKtYoc98acgGU9MRXSAbI
gksOUTOY5Bf38HIZ0uaFp5tCWb1HLsDDcSnS9FYIwRnnD5hBE2wEJQeY1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAsMcIoFvshwPr2CimWgJdSMacwAMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvQ3d4d2lnVy15SEEtdllLS1phQWwxSXhwekFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuSmMA0G
CSqGSIb3DQEBCwUAA4IBAQAj5BN7BthIf9v9MXcA5Qze0bata5aexdVLk/HBSuAW
Ws7gyGkKKr1Ja5A5LzNNdO9ZEFaw+lTrynGOtuGFBCiafteWvJ1rAmEjwc5SGfuA
jpn3YUipQaBf6J7QwSUd9fq0Ivl61oFgjfF/wOX3JRuL9zTIdzw7O7iLavENt3Iq
xRHQsL2/34szqVoOICoEVBEKyxAf11Rw1Pfb4W7S/8Oj1x0xhvaCSXIPjW0FaQd3
PObVMhLLUbxndba28E0vDWaoRQDmJkW5QnuTn5BuONWqJSfMoXXKCaxlQ58cKE6x
F+eZ0bpvTJ8zaY7eERjpwXUaMBOUH4UdPkw3yl10cHMs
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net