Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa
File: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (raw, json)
Hash identifier: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=
Subject key identifier: 70:CC:0B:65:87:D3:B1:77:63:22:A6:FD:8F:1E:14:01:3F:E7:EC:0F
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0194282315E40DCC39618BF057FD321FCF38
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa
Signing time: Thu 02 Jan 2025 17:49:35 +0000
ROA not before: Thu 02 Jan 2025 17:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8427
IP address blocks: 31.47.112.0/20 maxlen: 32
46.167.64.0/18 maxlen: 32
79.134.0.0/19 maxlen: 32
109.201.192.0/19 maxlen: 32
178.18.96.0/20 maxlen: 32
212.21.0.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:15:e4:0d:cc:39:61:8b:f0:57:fd:32:1f:cf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 17:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70cc0b6587d3b1776322a6fd8f1e14013fe7ec0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:0b:30:fc:b0:7c:5d:e5:25:93:6e:43:0a:
bd:9e:88:47:27:cc:22:dc:ad:90:68:9a:32:28:c8:
c0:d7:c7:b5:74:8b:c9:f6:d1:c0:b3:18:54:bd:af:
cb:63:86:2c:42:64:18:32:82:21:77:58:3c:e7:a2:
21:67:44:41:8b:96:89:61:67:65:3e:0c:d2:b6:68:
73:6b:2a:4d:df:0e:ba:1e:29:5d:2d:74:fa:fb:69:
c3:2f:16:03:7e:77:d8:d0:6d:eb:9e:92:0e:1c:d4:
3c:84:38:52:48:b4:29:27:ee:cb:7c:f4:21:07:27:
56:38:94:66:e9:a7:9f:3f:c8:dc:db:e6:c1:39:f4:
2f:24:9e:2d:5c:90:de:bc:d5:97:77:a9:5b:8c:65:
b4:16:2f:80:b8:f6:c9:81:7f:90:ab:17:61:94:65:
77:14:01:5d:3d:6f:6d:01:f0:cd:9c:fc:a1:69:93:
36:bd:1f:3e:6e:29:56:17:6b:ef:3e:54:42:80:8f:
5a:06:b8:97:7c:5e:36:50:22:71:29:7f:fb:21:a0:
43:02:02:d5:cc:bc:b4:82:bb:8a:47:b8:ec:11:b1:
88:ea:e3:a6:a9:ab:59:04:5e:e9:2d:00:54:76:55:
24:a7:26:09:06:94:e3:a9:c7:cd:15:de:e1:42:2e:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:0B:65:87:D3:B1:77:63:22:A6:FD:8F:1E:14:01:3F:E7:EC:0F
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.112.0/20
46.167.64.0/18
79.134.0.0/19
109.201.192.0/19
178.18.96.0/20
212.21.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:92:99:82:dc:9e:e1:49:ba:31:66:f7:ba:60:f9:5b:57:bc:
2c:10:b9:1a:47:9b:bb:b6:67:fa:dc:2d:19:eb:f7:51:30:67:
59:ad:15:d3:11:9f:e4:67:4e:49:36:55:11:9b:02:36:d4:12:
7a:fe:fe:27:99:ba:ac:a9:77:d2:3a:d0:82:2e:77:0d:5c:cf:
70:51:75:d9:5b:62:8a:b0:e1:9b:e5:6d:90:42:90:ed:93:e3:
e8:4c:26:ed:4b:f1:2e:27:1b:5f:fe:2c:17:5a:ca:3e:9e:de:
d9:b2:9c:a3:8c:9e:da:25:0a:13:29:49:fb:63:dd:4e:56:12:
56:26:b5:68:92:f0:a1:5d:ec:42:1f:0a:d1:1c:1b:e6:01:90:
33:49:75:e6:61:18:8e:89:12:e9:39:12:fc:dc:6b:09:cf:65:
f0:75:98:ed:dd:36:b7:cd:cb:46:44:82:a7:25:9a:5b:63:bf:
eb:e9:e7:ea:45:19:38:04:ed:82:4b:1f:aa:d2:b2:da:58:f0:
de:46:8c:6c:f9:7a:c1:f1:2c:3b:9d:60:aa:34:86:9e:f6:b5:
fb:d2:ef:d5:5a:08:23:78:98:91:26:7c:d5:d5:df:6e:40:e2:
5f:aa:35:16:ed:ea:c4:10:12:69:78:b0:19:29:52:4f:02:90:
ac:f5:69:9f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQoIxXkDcw5YYvwV/0yH884MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjUwMTAyMTc0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGNjMGI2NTg3ZDNiMTc3NjMyMmE2ZmQ4ZjFlMTQwMTNmZTdlYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEELMPywfF3lJZNuQwq9nohHJ8wi
3K2QaJoyKMjA18e1dIvJ9tHAsxhUva/LY4YsQmQYMoIhd1g856IhZ0RBi5aJYWdl
PgzStmhzaypN3w66HildLXT6+2nDLxYDfnfY0G3rnpIOHNQ8hDhSSLQpJ+7LfPQh
BydWOJRm6aefP8jc2+bBOfQvJJ4tXJDevNWXd6lbjGW0Fi+AuPbJgX+QqxdhlGV3
FAFdPW9tAfDNnPyhaZM2vR8+bilWF2vvPlRCgI9aBriXfF42UCJxKX/7IaBDAgLV
zLy0gruKR7jsEbGI6uOmqatZBF7pLQBUdlUkpyYJBpTjqcfNFd7hQi7dpQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHDMC2WH07F3YyKm/Y8eFAE/5+wPMB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvY013TFpZZlRzWGRqSXFiOWp4NFVBVF9uN0E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEHy9wAwQG
LqdAAwQFT4YAAwQFbcnAAwQEshJgAwQF1BUAMA0GCSqGSIb3DQEBCwUAA4IBAQAf
kpmC3J7hSboxZve6YPlbV7wsELkaR5u7tmf63C0Z6/dRMGdZrRXTEZ/kZ05JNlUR
mwI21BJ6/v4nmbqsqXfSOtCCLncNXM9wUXXZW2KKsOGb5W2QQpDtk+PoTCbtS/Eu
Jxtf/iwXWso+nt7ZspyjjJ7aJQoTKUn7Y91OVhJWJrVokvChXexCHwrRHBvmAZAz
SXXmYRiOiRLpORL83GsJz2XwdZjt3Ta3zctGRIKnJZpbY7/r6efqRRk4BO2CSx+q
0rLaWPDeRoxs+XrB8Sw7nWCqNIae9rX70u/VWggjeJiRJnzV1d9uQOJfqjUW7erE
EBJpeLAZKVJPApCs9Wmf
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net