Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa
File: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (raw, json)
Hash identifier: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=
Subject key identifier: 75:95:E9:57:2A:D0:F1:56:CA:BC:0A:79:08:EA:F4:0A:E9:B0:D4:4C
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 01942067D35F90F9BDAC0D4A0AA24F3255C9
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209928
IP address blocks: 94.231.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d3:5f:90:f9:bd:ac:0d:4a:0a:a2:4f:32:55:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7595e9572ad0f156cabc0a7908eaf40ae9b0d44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:2f:25:c5:d6:93:9b:b4:1c:83:93:e0:48:
90:e7:0f:97:15:3a:b9:de:09:b2:0f:26:98:b8:42:
cf:d7:3b:38:89:48:bb:0d:37:75:b6:81:75:6d:fa:
89:e3:83:7f:10:ec:38:ae:d7:18:73:28:f1:22:b2:
fb:a0:c5:d2:c9:3c:30:7b:0d:8d:06:e0:14:d0:26:
10:5b:81:7e:4f:8f:0a:e3:b7:f7:29:36:49:69:75:
c4:fb:e5:f7:66:20:ee:52:8b:f7:1b:ec:48:e2:be:
e6:23:b7:d3:42:66:23:07:09:cc:34:e8:ca:a0:0d:
55:d3:c6:ba:7c:a0:3f:74:41:40:00:35:07:ec:55:
88:7e:08:a3:28:51:39:71:a6:86:54:51:50:5f:29:
89:93:24:0c:0f:70:46:52:ab:5e:17:d1:c4:88:d6:
f4:95:de:d5:90:96:04:de:33:44:d3:59:0d:64:06:
76:aa:d4:83:e3:ca:51:bc:13:35:24:9b:be:c8:30:
0a:64:c6:48:1d:e7:e7:79:7a:45:28:47:f3:12:13:
22:73:26:50:68:84:de:24:20:63:ba:6c:3d:71:3f:
91:fe:46:a2:56:30:9d:46:ba:00:d2:5b:71:5d:cd:
ef:eb:48:19:85:5e:45:4e:be:ee:7b:e0:37:71:3e:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:E9:57:2A:D0:F1:56:CA:BC:0A:79:08:EA:F4:0A:E9:B0:D4:4C
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.40.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:85:b8:e0:16:41:aa:1d:c6:03:31:c0:9c:a0:dc:f4:b2:bb:
18:59:62:3b:3a:eb:a6:4d:d9:01:e7:17:63:90:84:06:21:a0:
cc:c8:85:19:44:58:a2:0a:0c:01:2a:2e:95:e2:83:6a:72:ef:
23:d9:96:3a:99:cb:5c:3e:05:da:83:34:f7:3b:97:0c:0a:2c:
a3:f5:25:d5:51:ea:01:9e:ef:0c:9d:c6:f9:0f:27:b7:06:98:
47:f7:e2:e9:ac:d8:f8:0e:cf:5e:21:15:76:fc:44:5c:30:21:
1b:a6:34:e2:a9:ba:9c:e6:c6:f6:2b:f5:c0:24:ea:d3:18:31:
b4:ed:58:a2:3a:85:95:0e:82:7d:66:83:fd:91:06:30:73:18:
ac:da:c0:31:2c:f9:b1:57:bc:9b:88:ed:e2:28:f0:62:ad:39:
c1:12:e8:7a:c1:f6:5e:86:9d:50:83:d5:d4:9c:9e:72:3c:f0:
3e:bc:6b:69:40:38:db:38:84:00:c4:90:08:22:8d:0b:ef:6f:
ea:66:40:fc:ea:fc:6e:eb:06:da:37:07:db:60:cc:fb:ce:dc:
93:12:ab:38:8c:7e:01:88:37:c8:c7:2f:26:3a:64:18:ea:ca:
38:28:83:e8:14:46:ff:0d:9d:66:b7:c6:b9:66:94:dc:78:35:
ad:5a:03:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9NfkPm9rA1KCqJPMlXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOTU0MzMwMzQ5ZjU3NTAyYTc2YWU2ZTk5OTg3ZWZjM2Uz
YjgxMDkwHhcNMjUwMTAxMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTk1ZTk1NzJhZDBmMTU2Y2FiYzBhNzkwOGVhZjQwYWU5YjBkNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsEvJcXWk5u0HIOT4EiQ5w+XFTq5
3gmyDyaYuELP1zs4iUi7DTd1toF1bfqJ44N/EOw4rtcYcyjxIrL7oMXSyTwwew2N
BuAU0CYQW4F+T48K47f3KTZJaXXE++X3ZiDuUov3G+xI4r7mI7fTQmYjBwnMNOjK
oA1V08a6fKA/dEFAADUH7FWIfgijKFE5caaGVFFQXymJkyQMD3BGUqteF9HEiNb0
ld7VkJYE3jNE01kNZAZ2qtSD48pRvBM1JJu+yDAKZMZIHefneXpFKEfzEhMicyZQ
aITeJCBjumw9cT+R/kaiVjCdRroA0ltxXc3v60gZhV5FTr7ue+A3cT7ZqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHWV6Vcq0PFWyrwKeQjq9ArpsNRMMB8GA1UdIwQY
MBaAFDOVQzA0n1dQKnaubpmYfvw+O4EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZjE5ZTktMWIyYi00ODEyLWFiNWEt
ZmRmODRmODNhMjc0LzEvZFpYcFZ5clE4VmJLdkFwNUNPcjBDdW13MUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wZjE5ZTktMWIyYi00ODEyLWFiNWEtZmRmODRmODNhMjc0
LzEvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXucoMA0G
CSqGSIb3DQEBCwUAA4IBAQBMhbjgFkGqHcYDMcCcoNz0srsYWWI7OuumTdkB5xdj
kIQGIaDMyIUZRFiiCgwBKi6V4oNqcu8j2ZY6mctcPgXagzT3O5cMCiyj9SXVUeoB
nu8Mncb5Dye3BphH9+LprNj4Ds9eIRV2/ERcMCEbpjTiqbqc5sb2K/XAJOrTGDG0
7ViiOoWVDoJ9ZoP9kQYwcxis2sAxLPmxV7ybiO3iKPBirTnBEuh6wfZehp1Qg9XU
nJ5yPPA+vGtpQDjbOIQAxJAIIo0L72/qZkD86vxu6wbaNwfbYMz7ztyTEqs4jH4B
iDfIxy8mOmQY6so4KIPoFEb/DZ1mt8a5ZpTceDWtWgPz
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net