Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/703xyqVyusyMnwZMJe3nVMGXbZM.roa
File: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (raw, json)
Hash identifier: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=
Subject key identifier: EF:4D:F1:CA:A5:72:BA:CC:8C:9F:06:4C:25:ED:E7:54:C1:97:6D:93
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 01942521660AB83F0BA7DF6020813AB6560F
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/703xyqVyusyMnwZMJe3nVMGXbZM.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198421
IP address blocks: 109.206.96.0/19 maxlen: 24
109.207.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:66:0a:b8:3f:0b:a7:df:60:20:81:3a:b6:56:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef4df1caa572bacc8c9f064c25ede754c1976d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:35:36:ed:aa:a3:6b:93:d0:f6:ca:b3:07:b2:
9b:42:96:9c:83:84:20:2a:ab:01:71:b7:6a:6b:43:
1d:7d:12:62:28:f5:9f:ea:fd:69:5f:0d:30:f1:ef:
0a:c2:37:bc:f8:1d:a1:50:fd:88:11:73:9a:7c:2a:
31:12:92:9e:e7:88:8f:4f:ff:4b:a2:c5:cc:20:69:
95:59:e4:14:d2:bd:44:47:18:eb:40:04:6a:01:bc:
f8:36:7a:c0:b1:02:4f:34:60:47:09:19:3a:ee:df:
c1:84:22:e0:c1:4c:03:a8:86:fa:90:41:c3:8c:06:
c8:d6:25:67:6e:c2:7d:99:44:1a:e1:65:cc:ba:b5:
3a:f1:56:9e:47:f8:d7:f3:17:d7:3c:f5:31:6a:73:
1a:55:5a:06:2b:3d:37:d6:b5:e8:6f:98:d2:24:47:
4e:9c:13:df:1f:77:85:ab:bd:89:16:53:be:8b:2f:
67:55:cc:25:d4:dd:fb:22:9a:19:e6:08:00:6a:4c:
13:67:9b:0b:aa:f3:29:f4:68:7f:82:5f:0a:33:7c:
c0:54:1d:3f:b7:e3:01:8f:87:20:b7:93:0f:87:86:
49:2c:9d:57:9c:b0:61:cf:8f:ca:27:41:cd:5b:01:
be:68:d7:33:55:2f:f1:08:aa:cc:05:58:cc:d0:2f:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4D:F1:CA:A5:72:BA:CC:8C:9F:06:4C:25:ED:E7:54:C1:97:6D:93
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/703xyqVyusyMnwZMJe3nVMGXbZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.96.0/19
109.207.32.0/20
Signature Algorithm: sha256WithRSAEncryption
71:ac:68:05:1c:b3:18:1f:98:0f:e8:7f:36:24:00:a3:b6:31:
06:17:80:8a:a3:96:2c:f2:09:a4:0e:bb:34:c5:80:07:94:c7:
1c:61:7a:58:95:08:e4:dc:15:10:3b:32:05:c3:54:84:ac:dd:
8b:78:9e:b8:b9:f7:b5:ad:52:62:24:42:e7:ab:e6:46:13:af:
75:e9:03:33:e8:01:a8:78:f4:4f:f3:5b:c7:0d:e5:12:1d:ca:
1d:8a:61:94:7c:de:73:07:51:52:46:a3:b8:a0:c5:14:9b:7d:
45:5b:83:19:2a:bc:0e:fa:57:a2:d5:66:92:c6:ff:17:88:1f:
e6:c7:b4:79:0b:44:e2:d2:5d:c4:00:59:5e:62:ee:1f:17:c1:
86:e9:31:4c:20:f7:93:3a:53:9d:9b:fb:28:ca:78:2c:d3:02:
1a:f5:dc:42:64:c4:88:52:b4:4b:31:76:18:6b:24:35:71:32:
e6:f7:f4:c8:4e:70:a0:a8:a9:0c:07:1a:e8:87:ea:5b:1f:40:
3c:04:7f:69:39:71:3f:f6:ae:4d:60:34:45:a6:f9:b3:e2:33:
d4:45:ef:8c:c8:9a:0e:36:aa:e7:69:9a:b8:e6:89:b3:52:6e:
df:63:d4:4f:e8:f8:bd:15:27:8c:dd:c6:b5:76:ed:12:42:a2:
9d:a4:95:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIWYKuD8Lp99gIIE6tlYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGRlNzJlNTAwNmFmNmRiNTUxMTVlMWI3MDkzMjAyM2Nl
ZWNiYTQwHhcNMjUwMTAyMDM0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjRkZjFjYWE1NzJiYWNjOGM5ZjA2NGMyNWVkZTc1NGMxOTc2ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jU27aqja5PQ9sqzB7KbQpacg4Qg
KqsBcbdqa0MdfRJiKPWf6v1pXw0w8e8Kwje8+B2hUP2IEXOafCoxEpKe54iPT/9L
osXMIGmVWeQU0r1ERxjrQARqAbz4NnrAsQJPNGBHCRk67t/BhCLgwUwDqIb6kEHD
jAbI1iVnbsJ9mUQa4WXMurU68VaeR/jX8xfXPPUxanMaVVoGKz031rXob5jSJEdO
nBPfH3eFq72JFlO+iy9nVcwl1N37IpoZ5ggAakwTZ5sLqvMp9Gh/gl8KM3zAVB0/
t+MBj4cgt5MPh4ZJLJ1XnLBhz4/KJ0HNWwG+aNczVS/xCKrMBVjM0C+LbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO9N8cqlcrrMjJ8GTCXt51TBl22TMB8GA1UdIwQY
MBaAFE+N5y5QBq9ttVEV4bcJMgI87sukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQt
NWI1MDc4NjI1ZGVhLzEvNzAzeHlxVnl1c3lNbndaTUplM25WTUdYYlpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQtNWI1MDc4NjI1ZGVh
LzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFbc5gAwQE
bc8gMA0GCSqGSIb3DQEBCwUAA4IBAQBxrGgFHLMYH5gP6H82JACjtjEGF4CKo5Ys
8gmkDrs0xYAHlMccYXpYlQjk3BUQOzIFw1SErN2LeJ64ufe1rVJiJELnq+ZGE691
6QMz6AGoePRP81vHDeUSHcodimGUfN5zB1FSRqO4oMUUm31FW4MZKrwO+lei1WaS
xv8XiB/mx7R5C0Ti0l3EAFleYu4fF8GG6TFMIPeTOlOdm/soyngs0wIa9dxCZMSI
UrRLMXYYayQ1cTLm9/TITnCgqKkMBxroh+pbH0A8BH9pOXE/9q5NYDRFpvmz4jPU
Re+MyJoONqrnaZq45omzUm7fY9RP6Pi9FSeM3ca1du0SQqKdpJXn
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:32 2025 by rpki-client on console.sobornost.net