Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/3O6Hfmbr30Ak6WicBkkKlx5hysk.roa
File: 3O6Hfmbr30Ak6WicBkkKlx5hysk.roa (raw, json)
Hash identifier: kcj0ENONASwkAQnmBjvrTNy0GRh8JWD6AlfD+TxgS4I=
Subject key identifier: DC:EE:87:7E:66:EB:DF:40:24:E9:68:9C:06:49:0A:97:1E:61:CA:C9
Certificate issuer: /CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Certificate serial: 0194228E3763AC516BCB3603C8810AA5EB2C
Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/3O6Hfmbr30Ak6WicBkkKlx5hysk.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59750
IP address blocks: 194.1.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:37:63:ac:51:6b:cb:36:03:c8:81:0a:a5:eb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcee877e66ebdf4024e9689c06490a971e61cac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:ef:99:22:b5:b2:28:25:92:56:16:8a:a8:
38:b3:d7:d2:4e:11:bd:d6:4b:28:8f:6d:77:da:29:
b1:32:f1:cf:e6:18:6e:f9:cd:69:60:0e:6f:19:0e:
e7:32:f6:41:ad:76:50:e0:8f:90:54:e7:f9:0d:19:
40:c7:99:89:f0:87:a9:6c:91:28:3c:07:05:50:83:
4a:7d:12:e0:28:e0:4a:a4:4c:58:a8:72:28:b1:3e:
75:00:33:41:0e:30:48:1e:80:a7:e5:94:4e:65:80:
ba:3f:5c:79:68:bd:57:5c:d8:f0:69:08:d6:bf:be:
0f:9d:43:14:92:67:23:82:f4:e9:04:8b:64:0b:c4:
50:e1:91:e6:37:ab:bf:7c:5d:0b:16:ad:4c:9f:2c:
14:78:48:98:72:4b:10:db:c0:a1:3e:6c:6e:fa:35:
95:67:5c:63:fe:53:63:45:49:d3:d1:50:55:28:b6:
52:77:90:ed:1f:cd:75:37:69:5b:f2:64:98:1c:a9:
8d:33:40:10:a8:fe:df:eb:9f:96:bd:d8:41:d4:c7:
9b:f6:2a:eb:8e:81:bf:b1:a8:bf:28:db:4c:22:c3:
a8:9e:8e:20:fa:57:1a:64:35:d9:ae:e4:98:9d:62:
b9:98:38:89:7e:9a:23:44:a6:7c:68:f0:77:6b:5b:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:87:7E:66:EB:DF:40:24:E9:68:9C:06:49:0A:97:1E:61:CA:C9
X509v3 Authority Key Identifier:
keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/3O6Hfmbr30Ak6WicBkkKlx5hysk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.247.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e3:b5:e8:49:64:00:05:56:a8:43:16:c3:78:f2:e1:d1:c7:
9d:21:d0:1e:ad:d8:31:f9:6c:de:a2:88:9e:6e:14:ea:bc:64:
da:59:47:f6:bc:3b:eb:3c:bf:2e:48:32:a9:c7:db:82:00:7a:
15:15:3c:23:b7:d2:10:65:b0:26:1a:e2:7f:e7:e8:81:87:0e:
4f:01:c9:97:e6:09:d9:dd:cb:2d:08:b4:bc:5a:34:25:fd:7d:
87:07:fe:a5:13:fd:ea:be:3e:ae:b9:eb:ab:8c:7a:ed:6d:21:
4b:e6:22:eb:c0:33:cd:31:14:60:a8:d5:81:40:93:10:ce:82:
1c:69:09:87:1c:7f:13:17:ae:f9:ed:2f:3f:b9:1c:65:60:b3:
61:8a:6b:80:6a:cd:43:f2:5d:68:a6:8e:53:51:a9:f1:7c:5b:
75:fd:a6:fa:f4:7e:61:90:69:3c:a3:33:90:6b:af:06:11:39:
ad:6c:17:7c:4e:81:22:ee:5d:b0:43:85:fc:0c:dd:bf:65:de:
d6:9e:36:fb:09:0f:5f:e1:d1:c8:91:bb:1f:85:05:f9:d4:1e:
20:d6:a8:c6:51:90:49:31:c0:72:76:49:51:b0:e9:e4:da:9a:
08:24:3a:06:69:98:42:82:a9:dd:21:a4:12:22:9d:ee:3c:e2:
5b:1a:07:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijjdjrFFryzYDyIEKpessMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NWExODY0MWE5MTZiMzA2MDc0ZDFlMTFmZDBiMTBlOWRm
ZGM0MzAwHhcNMjUwMTAxMTU0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2VlODc3ZTY2ZWJkZjQwMjRlOTY4OWMwNjQ5MGE5NzFlNjFjYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFjvmSK1siglklYWiqg4s9fSThG9
1ksoj2132imxMvHP5hhu+c1pYA5vGQ7nMvZBrXZQ4I+QVOf5DRlAx5mJ8IepbJEo
PAcFUINKfRLgKOBKpExYqHIosT51ADNBDjBIHoCn5ZROZYC6P1x5aL1XXNjwaQjW
v74PnUMUkmcjgvTpBItkC8RQ4ZHmN6u/fF0LFq1MnywUeEiYcksQ28ChPmxu+jWV
Z1xj/lNjRUnT0VBVKLZSd5DtH811N2lb8mSYHKmNM0AQqP7f65+WvdhB1Meb9irr
joG/sai/KNtMIsOono4g+lcaZDXZruSYnWK5mDiJfpojRKZ8aPB3a1vJ0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNzuh35m699AJOlonAZJCpceYcrJMB8GA1UdIwQY
MBaAFHlaGGQakWswYHTR4R/QsQ6d/cQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lNDJiYTQtN2E4NC00MjI2LWFmYTct
MDlmYjhmZTcyZjRhLzEvM082SGZtYnIzMEFrNldpY0Jra0tseDVoeXNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lNDJiYTQtN2E4NC00MjI2LWFmYTctMDlmYjhmZTcyZjRh
LzEvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgH3MA0G
CSqGSIb3DQEBCwUAA4IBAQB147XoSWQABVaoQxbDePLh0cedIdAerdgx+Wzeooie
bhTqvGTaWUf2vDvrPL8uSDKpx9uCAHoVFTwjt9IQZbAmGuJ/5+iBhw5PAcmX5gnZ
3cstCLS8WjQl/X2HB/6lE/3qvj6uueurjHrtbSFL5iLrwDPNMRRgqNWBQJMQzoIc
aQmHHH8TF6757S8/uRxlYLNhimuAas1D8l1opo5TUanxfFt1/ab69H5hkGk8ozOQ
a68GETmtbBd8ToEi7l2wQ4X8DN2/Zd7Wnjb7CQ9f4dHIkbsfhQX51B4g1qjGUZBJ
McBydklRsOnk2poIJDoGaZhCgqndIaQSIp3uPOJbGgeY
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:32 2025 by rpki-client on console.sobornost.net