Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/sVRFzJ-74EInpFqflolw4Oizpls.roa
File: sVRFzJ-74EInpFqflolw4Oizpls.roa (raw, json)
Hash identifier: wVxvSPdjLlqoqwhRO+K840eqgfkxjph1e0CLoMUW5OQ=
Subject key identifier: B1:54:45:CC:9F:BB:E0:42:27:A4:5A:9F:96:89:70:E0:E8:B3:A6:5B
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0195EC831A1A3EE9121B15864478C6FF2BFF
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/sVRFzJ-74EInpFqflolw4Oizpls.roa
Signing time: Mon 31 Mar 2025 14:02:49 +0000
ROA not before: Mon 31 Mar 2025 14:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 195.216.176.0/23 maxlen: 23
213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
213.182.215.0/24 maxlen: 24
213.182.218.0/24 maxlen: 24
213.182.220.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:83:1a:1a:3e:e9:12:1b:15:86:44:78:c6:ff:2b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Mar 31 14:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b15445cc9fbbe04227a45a9f968970e0e8b3a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:96:73:35:6f:f6:0d:39:1b:f9:0f:3c:93:4e:
75:a1:82:0b:a9:54:07:1c:16:c1:9c:66:88:8f:e1:
f9:6a:1f:0c:19:9f:69:e2:d4:55:78:0c:62:34:fc:
6a:b1:b6:b5:db:4b:82:6a:a2:76:7d:93:3b:cf:c5:
34:4a:10:de:bc:48:80:f1:7d:f2:3c:05:03:1d:33:
75:b4:b1:ed:db:09:c0:f2:21:03:cd:50:1e:d9:be:
ce:4d:8b:ea:3a:b7:0d:23:c9:55:c5:2c:c2:86:2e:
0b:81:53:e0:f3:01:d6:dd:95:cf:8c:f8:cc:85:e5:
2b:9a:91:d2:46:85:ba:42:c5:8b:b2:73:16:4c:af:
2b:d9:fd:26:91:5c:1c:95:eb:b2:1b:47:9a:af:2f:
32:2d:bc:83:a3:54:f9:a8:6b:4e:ce:cc:41:d2:74:
e0:e7:ab:83:96:22:3f:53:f4:9d:4b:ee:b1:19:80:
a8:68:09:10:c1:10:d1:98:0f:b3:62:88:3e:a7:03:
e0:11:99:9f:07:6e:2d:d9:8d:7a:4a:47:94:69:ff:
09:3c:43:63:da:c9:1c:cb:e9:d8:8d:a1:fe:fb:51:
e6:83:28:da:a0:8f:4b:2a:5f:aa:20:c3:7a:7c:ba:
08:bd:be:87:1c:55:52:87:0c:34:cd:ee:dd:c3:fe:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:54:45:CC:9F:BB:E0:42:27:A4:5A:9F:96:89:70:E0:E8:B3:A6:5B
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/sVRFzJ-74EInpFqflolw4Oizpls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.176.0/23
213.182.196.0/23
213.182.206.0/24
213.182.215.0/24
213.182.218.0/24
213.182.220.0/22
Signature Algorithm: sha256WithRSAEncryption
58:c6:e1:93:b6:8d:bc:df:dc:ce:4b:c0:d1:3d:ab:51:e4:e6:
c7:80:11:c2:84:20:41:1a:09:db:47:d6:0c:34:08:e8:93:64:
d1:8f:8a:51:1f:5c:20:c2:d8:90:d3:6e:90:90:c3:f6:82:5b:
e8:c9:8d:26:9a:84:d7:e3:08:87:45:19:5b:4a:83:dc:ca:34:
5e:a2:1b:4c:58:30:bf:11:a3:7a:0d:75:59:8e:47:3f:a7:48:
5d:25:45:d4:a0:78:09:ca:33:f4:66:e2:c0:f7:55:8b:cf:dc:
b6:0c:e0:d7:71:98:80:a3:d9:28:ef:9f:0d:0a:f1:15:29:a7:
de:20:db:29:b1:40:ff:0c:9e:7e:39:8b:3e:df:27:ba:16:db:
3e:77:8a:c6:58:e3:4c:03:64:44:67:63:01:f8:de:3c:bc:36:
30:fc:fa:29:0c:1d:62:db:b4:ab:55:d5:71:d7:33:65:af:be:
5a:c0:8c:aa:7e:d8:8e:b1:f7:3b:0f:e8:0a:1f:26:70:17:94:
b6:eb:58:c6:e0:a5:27:d2:94:70:fc:8c:be:cd:5e:6e:d0:11:
90:6a:c8:40:0a:59:b4:cb:87:b8:d2:74:72:6c:7f:0c:ce:c9:
17:a9:0b:6b:e3:69:05:c8:13:03:ff:cd:02:e3:5c:dd:b8:19:
9b:36:fc:e6
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZXsgxoaPukSGxWGRHjG/yv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwMzMxMTQwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTU0NDVjYzlmYmJlMDQyMjdhNDVhOWY5Njg5NzBlMGU4YjNhNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JZzNW/2DTkb+Q88k051oYILqVQH
HBbBnGaIj+H5ah8MGZ9p4tRVeAxiNPxqsba120uCaqJ2fZM7z8U0ShDevEiA8X3y
PAUDHTN1tLHt2wnA8iEDzVAe2b7OTYvqOrcNI8lVxSzChi4LgVPg8wHW3ZXPjPjM
heUrmpHSRoW6QsWLsnMWTK8r2f0mkVwcleuyG0eary8yLbyDo1T5qGtOzsxB0nTg
56uDliI/U/SdS+6xGYCoaAkQwRDRmA+zYog+pwPgEZmfB24t2Y16SkeUaf8JPENj
2skcy+nYjaH++1HmgyjaoI9LKl+qIMN6fLoIvb6HHFVShww0ze7dw/5/jwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLFURcyfu+BCJ6Ran5aJcODos6ZbMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvc1ZSRnpKLTc0RUlucEZxZmxvbHc0T2l6cGxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBw9iwAwQB
1bbEAwQA1bbOAwQA1bbXAwQA1bbaAwQC1bbcMA0GCSqGSIb3DQEBCwUAA4IBAQBY
xuGTto2839zOS8DRPatR5ObHgBHChCBBGgnbR9YMNAjok2TRj4pRH1wgwtiQ026Q
kMP2glvoyY0mmoTX4wiHRRlbSoPcyjReohtMWDC/EaN6DXVZjkc/p0hdJUXUoHgJ
yjP0ZuLA91WLz9y2DODXcZiAo9ko758NCvEVKafeINspsUD/DJ5+OYs+3ye6Fts+
d4rGWONMA2REZ2MB+N48vDYw/PopDB1i27SrVdVx1zNlr75awIyqftiOsfc7D+gK
HyZwF5S261jG4KUn0pRw/Iy+zV5u0BGQashAClm0y4e40nRybH8MzskXqQtr42kF
yBMD/80C41zduBmbNvzm
-----END CERTIFICATE-----
Generated at Tue Apr 1 17:28:29 2025 by rpki-client on console.sobornost.net