Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/7Ij8K8OvSYwUOnc-8VHeiDA9mSE.roa
File: 7Ij8K8OvSYwUOnc-8VHeiDA9mSE.roa (raw, json)
Hash identifier: Ue865zCMYx1MYw21hb8vraaXEGFsPTiWFX4S2dOr6hg=
Subject key identifier: EC:88:FC:2B:C3:AF:49:8C:14:3A:77:3E:F1:51:DE:88:30:3D:99:21
Certificate issuer: /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Certificate serial: 0194236A245D2E1D12AE5CF2964F089CFB67
Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/7Ij8K8OvSYwUOnc-8VHeiDA9mSE.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12853
IP address blocks: 79.98.224.0/21 maxlen: 24
185.251.4.0/22 maxlen: 24
212.68.96.0/19 maxlen: 24
2001:940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:24:5d:2e:1d:12:ae:5c:f2:96:4f:08:9c:fb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec88fc2bc3af498c143a773ef151de88303d9921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:82:69:64:10:a2:fb:3e:58:7e:3f:d1:c6:
fd:0c:e5:0c:b4:53:f3:b8:a2:f3:6f:26:79:48:c9:
45:93:fe:a9:9e:18:9c:43:68:e7:a0:3d:ba:aa:05:
90:28:37:2b:0a:c0:f1:45:89:a6:fb:1b:44:c6:07:
11:23:ba:b0:21:3e:7b:46:12:13:89:33:1b:83:39:
66:0b:b2:5d:7b:a3:f5:71:59:cc:c6:d3:6a:73:61:
6a:3c:9c:7f:93:67:4d:38:25:72:e2:69:2f:6b:eb:
cd:7b:c4:f7:e8:96:7b:6e:84:be:cf:33:64:b8:ad:
18:3f:2c:c0:86:36:83:2c:fe:3e:be:fb:69:16:cc:
e6:52:de:66:a8:48:71:67:1b:15:0d:d2:3a:49:b4:
12:bc:27:68:75:77:e7:7f:bd:16:b1:62:67:63:31:
2e:9b:21:c3:51:25:7d:b4:dd:9c:b0:5c:cc:29:36:
08:3c:88:31:5c:bd:ce:af:3a:16:21:2d:01:ba:9d:
11:7e:d7:87:7b:e1:0d:6c:72:12:9a:84:66:f9:fc:
9d:95:1b:bb:16:7b:60:ef:dc:de:0a:27:0d:3b:0f:
bd:16:30:7d:db:c3:5f:d5:f8:6a:d1:4a:24:c4:b4:
d9:83:9b:70:b6:a4:9a:4c:6a:72:01:e8:82:35:a6:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:FC:2B:C3:AF:49:8C:14:3A:77:3E:F1:51:DE:88:30:3D:99:21
X509v3 Authority Key Identifier:
keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/7Ij8K8OvSYwUOnc-8VHeiDA9mSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.224.0/21
185.251.4.0/22
212.68.96.0/19
IPv6:
2001:940::/32
Signature Algorithm: sha256WithRSAEncryption
6b:be:a1:1e:65:a9:16:90:81:3c:fc:e6:d3:6e:49:6e:f9:f1:
79:a1:f0:69:c6:11:9a:26:df:2a:41:07:57:8e:d7:11:5d:87:
8b:67:c6:2f:00:19:86:0b:d2:59:75:47:d1:0c:ff:99:21:67:
62:d7:c2:f9:88:59:8c:b1:7d:67:be:23:52:ea:16:01:41:4b:
bc:bc:6c:25:f0:7c:b4:db:83:de:94:2b:b0:b6:31:db:6f:cb:
88:3b:41:85:73:a9:33:0e:4e:ea:53:5d:a9:c5:e4:60:61:d9:
a2:49:b0:bf:c8:bd:d0:2b:59:d8:9e:a5:7a:f7:27:fa:c2:f8:
ad:10:91:5d:ad:f8:4a:ed:e8:1e:2c:8e:8e:38:1a:46:f2:cc:
80:45:33:58:96:ce:5a:97:04:4c:49:75:ff:e6:85:e3:b0:87:
0a:bb:c7:4f:ae:53:23:a4:6f:6a:88:e5:b4:6c:79:d1:80:d0:
e4:27:2e:7b:ec:d0:86:1f:00:56:51:f6:a2:7e:bf:1a:43:66:
06:14:59:29:72:c7:aa:41:d5:09:ff:8e:cb:89:85:bb:6a:d0:
7d:b5:ba:b7:07:85:68:61:82:d1:a1:bf:04:89:13:52:2e:66:
77:05:17:25:39:45:c9:bb:f4:16:d8:e5:38:d4:49:ef:ad:45:
19:69:70:ea
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQjaiRdLh0Srlzylk8InPtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODFhZDMyMzNkOWMyYzE4OWQ5NDk5ZGExMTc3YjU3MTAx
YTVlZjQwHhcNMjUwMTAxMTk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzg4ZmMyYmMzYWY0OThjMTQzYTc3M2VmMTUxZGU4ODMwM2Q5OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkaCaWQQovs+WH4/0cb9DOUMtFPz
uKLzbyZ5SMlFk/6pnhicQ2jnoD26qgWQKDcrCsDxRYmm+xtExgcRI7qwIT57RhIT
iTMbgzlmC7Jde6P1cVnMxtNqc2FqPJx/k2dNOCVy4mkva+vNe8T36JZ7boS+zzNk
uK0YPyzAhjaDLP4+vvtpFszmUt5mqEhxZxsVDdI6SbQSvCdodXfnf70WsWJnYzEu
myHDUSV9tN2csFzMKTYIPIgxXL3OrzoWIS0Bup0RfteHe+ENbHISmoRm+fydlRu7
Fntg79zeCicNOw+9FjB928Nf1fhq0UokxLTZg5twtqSaTGpyAeiCNabjcwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOyI/CvDr0mMFDp3PvFR3ogwPZkhMB8GA1UdIwQY
MBaAFPeBrTIz2cLBidlJnaEXe1cQGl70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kZjc1YTctZWQ1Ny00ZWQwLWExMmUt
OTU2NGE0NzIyZTc4LzEvN0lqOEs4T3ZTWXdVT25jLThWSGVpREE5bVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kZjc1YTctZWQ1Ny00ZWQwLWExMmUtOTU2NGE0NzIyZTc4
LzEvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDT2LgAwQC
ufsEAwQF1ERgMA0EAgACMAcDBQAgAQlAMA0GCSqGSIb3DQEBCwUAA4IBAQBrvqEe
ZakWkIE8/ObTbklu+fF5ofBpxhGaJt8qQQdXjtcRXYeLZ8YvABmGC9JZdUfRDP+Z
IWdi18L5iFmMsX1nviNS6hYBQUu8vGwl8Hy024PelCuwtjHbb8uIO0GFc6kzDk7q
U12pxeRgYdmiSbC/yL3QK1nYnqV69yf6wvitEJFdrfhK7egeLI6OOBpG8syARTNY
ls5alwRMSXX/5oXjsIcKu8dPrlMjpG9qiOW0bHnRgNDkJy577NCGHwBWUfaifr8a
Q2YGFFkpcseqQdUJ/47LiYW7atB9tbq3B4VoYYLRob8EiRNSLmZ3BRclOUXJu/QW
2OU41EnvrUUZaXDq
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net