Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa
File: 8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa (raw, json)
Hash identifier: 27BFHjr8J4UtWYs76eZEJg2mPxJknmE0rT/irucN/h0=
Subject key identifier: F3:18:5C:02:1C:7E:F2:A9:D5:67:E9:0E:1C:9D:EA:38:C9:03:3F:3E
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 019421B21B25BF505670627CCA693CD9AEB6
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51055
IP address blocks: 46.17.160.0/21 maxlen: 21
185.62.156.0/22 maxlen: 22
193.34.186.0/23 maxlen: 23
194.33.13.0/24 maxlen: 24
2a00:5f00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1b:25:bf:50:56:70:62:7c:ca:69:3c:d9:ae:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3185c021c7ef2a9d567e90e1c9dea38c9033f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:4f:a5:17:1b:6b:42:07:f5:02:c0:d3:20:
59:75:b6:f0:e4:ed:fd:98:a6:30:9e:02:19:21:6f:
39:46:d0:28:ba:72:60:c8:ac:e3:82:9b:9a:ea:56:
d8:5b:8b:9e:bc:57:45:01:a8:90:a4:2f:8b:13:70:
28:49:ac:f1:e5:7d:01:a8:f5:94:27:a7:bd:86:5a:
99:51:8e:92:dc:b5:d9:08:b2:e4:a7:73:1b:34:86:
fd:1f:12:d0:76:e0:63:cf:26:e7:24:e9:3c:c2:15:
1c:87:83:c5:bc:b7:24:b6:6a:34:99:e9:7a:f6:df:
5f:c8:ad:22:df:b1:5e:fb:77:c3:d0:d7:47:e3:de:
e9:71:93:af:01:02:da:1d:df:15:5d:20:06:e0:7d:
1f:e0:4d:48:b0:4c:cf:31:f9:d7:ff:4b:38:cf:4e:
d8:d5:44:2b:9f:a7:86:9f:a4:ee:d2:f8:bf:53:f2:
7f:d2:a3:c3:b0:a7:9e:88:90:69:ab:5b:ef:1c:8a:
33:4b:f9:3a:44:aa:36:56:b2:8e:29:d7:cd:32:67:
40:7c:37:ed:57:2d:02:eb:18:40:3c:00:89:29:c9:
f5:a0:37:e0:c4:84:7b:2a:33:42:5d:64:aa:95:e2:
d7:d3:3f:83:df:8d:b2:57:ba:2e:3f:6d:2e:7b:d7:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:5C:02:1C:7E:F2:A9:D5:67:E9:0E:1C:9D:EA:38:C9:03:3F:3E
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.160.0/21
185.62.156.0/22
193.34.186.0/23
194.33.13.0/24
IPv6:
2a00:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
0c:01:d7:f5:37:cb:d3:ff:21:e1:0f:90:21:56:a1:33:58:40:
20:c8:42:5e:cd:2d:90:2b:00:87:4f:48:8e:b7:ed:3a:f5:a7:
4b:fb:32:a4:d6:e4:b2:b1:fc:52:c1:94:7e:6c:18:30:bb:08:
4f:d6:be:79:7e:5f:3c:68:39:6a:d6:80:fd:97:08:f3:ae:a3:
e6:fb:4c:25:c8:70:fa:2d:41:cb:5c:88:30:d5:bc:24:01:13:
76:a6:8e:54:31:77:7a:ec:99:93:9c:b9:15:b4:97:fc:31:d0:
e5:e6:44:c7:2d:95:e2:0e:10:fa:20:c9:77:4a:2e:a3:23:df:
40:08:fb:30:78:99:ec:c5:ef:f7:33:9c:25:47:fd:c8:ef:8c:
8e:ae:63:33:b6:45:12:4c:71:88:84:a3:9d:b7:b6:ba:b9:ae:
01:57:19:c6:a7:8f:2a:d1:f3:19:01:da:e9:3f:de:1d:5e:3a:
d9:3a:fa:33:0d:e0:eb:71:69:24:f8:03:90:51:76:c0:11:4b:
50:2e:42:6a:d8:53:04:c3:d5:ed:33:19:35:fb:93:91:10:3e:
26:a5:6f:14:c9:e8:bd:39:a2:34:2d:78:15:e8:fb:43:3d:5a:
14:2d:30:5e:d2:92:8a:74:45:90:fc:9f:6b:c4:dd:e1:9b:25:
f0:95:08:9f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQhshslv1BWcGJ8ymk82a62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Mjc1MzI3YTVlODVmM2M4YzE0Yzk4NDAzNmY0OTNmZWI1
OWIwMTYwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzE4NWMwMjFjN2VmMmE5ZDU2N2U5MGUxYzlkZWEzOGM5MDMzZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FxPpRcba0IH9QLA0yBZdbbw5O39
mKYwngIZIW85RtAounJgyKzjgpua6lbYW4uevFdFAaiQpC+LE3AoSazx5X0BqPWU
J6e9hlqZUY6S3LXZCLLkp3MbNIb9HxLQduBjzybnJOk8whUch4PFvLcktmo0mel6
9t9fyK0i37Fe+3fD0NdH497pcZOvAQLaHd8VXSAG4H0f4E1IsEzPMfnX/0s4z07Y
1UQrn6eGn6Tu0vi/U/J/0qPDsKeeiJBpq1vvHIozS/k6RKo2VrKOKdfNMmdAfDft
Vy0C6xhAPACJKcn1oDfgxIR7KjNCXWSqleLX0z+D342yV7ouP20ue9cAkwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPMYXAIcfvKp1WfpDhyd6jjJAz8+MB8GA1UdIwQY
MBaAFCknUyel6F88jBTJhANvST/rWbAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMWRlNDQtODZhOS00ZDI5LWI4ZTUt
MTY2ZmRkMGIxODIyLzEvOHhoY0FoeC04cW5WWi1rT0hKM3FPTWtEUHo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hMWRlNDQtODZhOS00ZDI5LWI4ZTUtMTY2ZmRkMGIxODIy
LzEvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhGgAwQC
uT6cAwQBwSK6AwQAwiENMA0EAgACMAcDBQAqAF8AMA0GCSqGSIb3DQEBCwUAA4IB
AQAMAdf1N8vT/yHhD5AhVqEzWEAgyEJezS2QKwCHT0iOt+069adL+zKk1uSysfxS
wZR+bBgwuwhP1r55fl88aDlq1oD9lwjzrqPm+0wlyHD6LUHLXIgw1bwkARN2po5U
MXd67JmTnLkVtJf8MdDl5kTHLZXiDhD6IMl3Si6jI99ACPsweJnsxe/3M5wlR/3I
74yOrmMztkUSTHGIhKOdt7a6ua4BVxnGp48q0fMZAdrpP94dXjrZOvozDeDrcWkk
+AOQUXbAEUtQLkJq2FMEw9XtMxk1+5ORED4mpW8Uyei9OaI0LXgV6PtDPVoULTBe
0pKKdEWQ/J9rxN3hmyXwlQif
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net