Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa
File: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (raw, json)
Hash identifier: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=
Subject key identifier: C8:29:E2:A6:85:2C:BB:B3:86:A5:82:CC:C9:49:3B:0B:93:1F:E1:8D
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 01953C8AC6E94E26FDD652D0ABEBAF5308B4
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa
Signing time: Tue 25 Feb 2025 09:58:02 +0000
ROA not before: Tue 25 Feb 2025 09:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8309
IP address blocks: 185.46.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:8a:c6:e9:4e:26:fd:d6:52:d0:ab:eb:af:53:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Feb 25 09:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c829e2a6852cbbb386a582ccc9493b0b931fe18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b3:23:1f:c1:eb:9c:55:74:19:4c:fb:c7:24:
15:cb:e1:fb:0f:e1:7e:db:7e:95:78:7c:fc:2f:ac:
1d:80:7f:7a:fb:ad:33:3c:b0:61:a2:d5:b8:0d:46:
e5:e5:40:c7:37:46:f4:6b:2f:54:8f:e7:9d:5f:ca:
b1:ac:ef:4f:05:85:b4:e6:25:f4:5d:c1:c2:33:d0:
80:44:5c:dd:a8:6e:e6:4f:5c:46:56:3e:7f:fa:21:
5d:57:0e:54:ca:1c:35:1e:3e:9a:3c:f4:8d:9b:c7:
f6:c6:e2:bb:49:4f:c2:21:81:1c:85:35:8e:76:77:
0b:55:be:33:03:e4:91:47:2e:dd:83:f6:eb:94:dc:
96:0f:b3:03:ff:ec:12:83:16:4f:ce:21:f2:c6:db:
bc:bb:da:df:ae:84:a6:5f:6e:fa:24:2e:de:c2:1c:
26:eb:b6:5a:85:36:54:53:69:93:32:ec:27:e4:91:
32:55:f2:53:36:aa:79:b7:ea:ed:2e:64:b8:04:7e:
a4:d9:e7:cc:31:33:d9:32:4c:e2:4d:ca:96:a8:0b:
c2:ef:0d:d9:40:37:e5:c5:08:5f:57:55:57:e9:7b:
7b:be:a4:f4:8b:40:b3:43:04:d6:6e:5a:01:91:0e:
49:a4:aa:d0:40:3f:0f:29:08:7b:17:75:63:59:74:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:29:E2:A6:85:2C:BB:B3:86:A5:82:CC:C9:49:3B:0B:93:1F:E1:8D
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5d:fc:20:69:76:5d:e3:46:d6:df:93:bc:e6:ce:6d:8c:ee:
d5:0f:9e:02:49:b7:3a:4e:db:3b:6d:8f:b2:6b:ac:6e:34:88:
59:47:ea:f5:56:bb:a7:89:57:74:c9:93:43:25:81:7c:b3:f4:
c8:07:fb:10:60:96:dc:f1:51:5f:ae:14:dc:98:ed:e0:7c:ce:
72:32:01:f6:e1:9b:57:5f:ae:41:44:7f:0b:17:df:eb:22:80:
f9:14:76:db:4b:02:4f:4b:50:18:bc:8d:e1:2d:c5:06:14:95:
2d:7d:38:a4:1f:8e:ac:93:c2:71:89:d0:19:fb:c4:bb:3f:82:
ac:56:cd:ec:a6:4b:bb:61:3b:7d:32:25:49:ca:15:fb:a1:23:
d4:6d:6f:a6:ef:43:20:66:4a:df:7e:2e:e8:ed:9a:63:7d:be:
36:e4:44:3a:8e:26:09:32:d1:f7:cc:bd:e2:10:2f:22:01:b0:
ab:42:cf:fd:93:f2:23:55:df:e9:d4:76:48:fa:e8:77:bc:25:
1d:21:47:04:23:52:ec:2b:67:b7:89:26:6b:cd:94:2d:ba:3a:
0c:eb:d0:09:88:87:54:f7:36:ca:38:27:39:21:61:15:9b:bf:
e8:af:0d:13:cb:44:1b:8c:ed:5f:65:98:f5:a0:3a:4c:82:6d:
aa:f2:5a:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU8isbpTib91lLQq+uvUwi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NzY1NTY5MDIxZThkYjQ3OWNiZDY0YTVhMGIyYmFmYmUy
YThlYWMwHhcNMjUwMjI1MDk1ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODI5ZTJhNjg1MmNiYmIzODZhNTgyY2NjOTQ5M2IwYjkzMWZlMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LMjH8HrnFV0GUz7xyQVy+H7D+F+
236VeHz8L6wdgH96+60zPLBhotW4DUbl5UDHN0b0ay9Uj+edX8qxrO9PBYW05iX0
XcHCM9CARFzdqG7mT1xGVj5/+iFdVw5Uyhw1Hj6aPPSNm8f2xuK7SU/CIYEchTWO
dncLVb4zA+SRRy7dg/brlNyWD7MD/+wSgxZPziHyxtu8u9rfroSmX276JC7ewhwm
67ZahTZUU2mTMuwn5JEyVfJTNqp5t+rtLmS4BH6k2efMMTPZMkziTcqWqAvC7w3Z
QDflxQhfV1VX6Xt7vqT0i0CzQwTWbloBkQ5JpKrQQD8PKQh7F3VjWXRgiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMgp4qaFLLuzhqWCzMlJOwuTH+GNMB8GA1UdIwQY
MBaAFMl2VWkCHo20ecvWSloLK6++Ko6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDct
ZjQ4NGRhOGU2N2MzLzEveUNuaXBvVXN1N09HcFlMTXlVazdDNU1mNFkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDctZjQ4NGRhOGU2N2Mz
LzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS6kMA0G
CSqGSIb3DQEBCwUAA4IBAQBrXfwgaXZd40bW35O85s5tjO7VD54CSbc6Tts7bY+y
a6xuNIhZR+r1VruniVd0yZNDJYF8s/TIB/sQYJbc8VFfrhTcmO3gfM5yMgH24ZtX
X65BRH8LF9/rIoD5FHbbSwJPS1AYvI3hLcUGFJUtfTikH46sk8JxidAZ+8S7P4Ks
Vs3spku7YTt9MiVJyhX7oSPUbW+m70MgZkrffi7o7Zpjfb425EQ6jiYJMtH3zL3i
EC8iAbCrQs/9k/IjVd/p1HZI+uh3vCUdIUcEI1LsK2e3iSZrzZQtujoM69AJiIdU
9zbKOCc5IWEVm7/orw0Ty0QbjO1fZZj1oDpMgm2q8lox
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net