Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa
File: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (raw, json)
Hash identifier: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=
Subject key identifier: D5:1C:3F:EA:85:E4:1F:F2:BD:68:A6:5C:81:6B:9E:2D:8C:36:B3:E1
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 01942520B490D8795CA2794589CAF112897F
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa
Signing time: Thu 02 Jan 2025 03:48:07 +0000
ROA not before: Thu 02 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49136
IP address blocks: 81.162.32.0/20 maxlen: 20
94.231.128.0/20 maxlen: 20
94.231.133.0/24 maxlen: 24
94.231.135.0/24 maxlen: 24
94.231.136.0/24 maxlen: 24
94.231.139.0/24 maxlen: 24
109.229.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:b4:90:d8:79:5c:a2:79:45:89:ca:f1:12:89:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Jan 2 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d51c3fea85e41ff2bd68a65c816b9e2d8c36b3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:97:4c:ab:dc:28:16:fd:15:22:b2:4a:c6:55:
ee:ec:88:73:e7:a0:90:aa:45:31:bf:25:27:e3:00:
0a:e7:2d:c5:64:3a:c3:45:c7:5f:c0:55:28:7e:de:
63:32:1a:75:e3:5e:65:4c:96:be:0a:ba:5b:05:16:
c7:c5:a7:d3:66:cb:a1:93:9b:e6:aa:9e:bf:10:41:
55:fc:64:d4:50:fb:50:1e:ec:19:01:d9:0f:6d:ae:
e5:1a:ae:d3:0f:3b:09:a7:5d:56:06:df:67:72:e3:
69:73:a7:4e:43:e4:0d:20:e0:df:c8:bd:43:43:bc:
84:f0:a1:bb:c1:cd:30:28:3e:8d:8f:2d:82:9c:38:
b3:e0:92:5d:1d:19:8a:22:1e:15:83:66:26:ab:e5:
f3:a4:b8:bd:0c:05:d5:b3:51:ec:f6:1b:13:ea:e1:
ae:9f:a0:e9:8c:b5:61:53:9f:e5:e1:ce:dd:52:e7:
24:77:3f:34:1f:f9:1f:64:b0:09:2f:a2:78:30:e5:
99:88:89:a5:82:68:76:c2:e5:ed:16:7a:e3:f1:56:
83:98:db:af:ab:72:5f:7c:7b:42:4f:0f:2f:87:84:
f9:5e:16:b2:11:c8:6f:90:96:3f:06:3f:78:5e:77:
17:4a:b1:30:84:e1:7c:31:75:b0:ed:c1:92:ac:14:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:3F:EA:85:E4:1F:F2:BD:68:A6:5C:81:6B:9E:2D:8C:36:B3:E1
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.32.0/20
94.231.128.0/20
109.229.96.0/19
Signature Algorithm: sha256WithRSAEncryption
60:eb:a4:82:9d:18:55:dd:e3:5a:57:5b:64:b8:2e:61:c4:88:
96:68:0b:62:b2:fc:fb:d6:ba:17:b4:ff:e0:01:2f:c1:6c:3c:
c8:2d:8d:b1:60:57:25:c3:75:6f:84:9a:b6:01:66:72:24:bc:
8e:7b:40:01:c0:72:55:9e:11:78:02:90:63:19:96:03:ce:94:
05:8f:ba:8b:49:21:a1:2d:22:43:c1:d6:bd:7a:35:6c:b7:7d:
85:71:36:7f:0d:6e:1b:91:f7:d7:07:e1:76:61:d9:82:2b:6b:
b8:a6:9d:ed:b1:8a:18:0b:de:23:33:6c:c2:68:7a:7c:79:6b:
5c:7d:ee:73:ed:ac:9c:65:50:34:78:81:4b:81:dd:19:10:58:
94:fd:03:b7:cb:2b:e9:12:bb:e5:7e:49:f1:3c:a3:d1:09:74:
f8:f3:10:2f:9f:fe:db:88:91:3e:7b:94:00:22:fe:a3:87:75:
06:e0:3b:3d:93:e9:56:e5:84:ab:55:65:f3:99:db:d4:8d:46:
79:e0:2e:a8:13:be:3b:b3:29:d6:30:a1:47:0e:bc:49:6a:52:
89:16:e0:3c:5d:e2:60:2d:09:f8:fc:93:04:37:42:ef:fa:6d:
ff:92:eb:25:40:66:72:a8:b1:e8:b1:e0:67:fc:65:b5:1c:89:
7a:bc:00:b9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlILSQ2HlconlFicrxEol/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWM5NjUyNTU3OTg3YTJhMDU4MGNjNWM2NWUzNjQ2YjAx
ZGEzYmIwHhcNMjUwMTAyMDM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTFjM2ZlYTg1ZTQxZmYyYmQ2OGE2NWM4MTZiOWUyZDhjMzZiM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75dMq9woFv0VIrJKxlXu7Ihz56CQ
qkUxvyUn4wAK5y3FZDrDRcdfwFUoft5jMhp1415lTJa+CrpbBRbHxafTZsuhk5vm
qp6/EEFV/GTUUPtQHuwZAdkPba7lGq7TDzsJp11WBt9ncuNpc6dOQ+QNIODfyL1D
Q7yE8KG7wc0wKD6Njy2CnDiz4JJdHRmKIh4Vg2Ymq+XzpLi9DAXVs1Hs9hsT6uGu
n6DpjLVhU5/l4c7dUuckdz80H/kfZLAJL6J4MOWZiImlgmh2wuXtFnrj8VaDmNuv
q3JffHtCTw8vh4T5XhayEchvkJY/Bj94XncXSrEwhOF8MXWw7cGSrBSV8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNUcP+qF5B/yvWimXIFrni2MNrPhMB8GA1UdIwQY
MBaAFLgcllJVeYeioFgMxcZeNkawHaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUt
ZmEwZDJlNDdlNmYxLzEvMVJ3XzZvWGtIX0s5YUtaY2dXdWVMWXcycy1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUtZmEwZDJlNDdlNmYx
LzEvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUaIgAwQE
XueAAwQFbeVgMA0GCSqGSIb3DQEBCwUAA4IBAQBg66SCnRhV3eNaV1tkuC5hxIiW
aAtisvz71roXtP/gAS/BbDzILY2xYFclw3VvhJq2AWZyJLyOe0ABwHJVnhF4ApBj
GZYDzpQFj7qLSSGhLSJDwda9ejVst32FcTZ/DW4bkffXB+F2YdmCK2u4pp3tsYoY
C94jM2zCaHp8eWtcfe5z7aycZVA0eIFLgd0ZEFiU/QO3yyvpErvlfknxPKPRCXT4
8xAvn/7biJE+e5QAIv6jh3UG4Ds9k+lW5YSrVWXzmdvUjUZ54C6oE747synWMKFH
DrxJalKJFuA8XeJgLQn4/JMEN0Lv+m3/kuslQGZyqLHoseBn/GW1HIl6vAC5
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net