Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa
File: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (raw, json)
Hash identifier: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=
Subject key identifier: C1:2B:3F:14:3D:90:55:BF:E7:A1:8F:E9:29:E4:2F:07:93:66:73:89
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 019424453D49735EF06C20B3A00D439B9BD5
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa
Signing time: Wed 01 Jan 2025 23:48:24 +0000
ROA not before: Wed 01 Jan 2025 23:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204030
IP address blocks: 87.101.84.0/22 maxlen: 22
87.101.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3d:49:73:5e:f0:6c:20:b3:a0:0d:43:9b:9b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c12b3f143d9055bfe7a18fe929e42f0793667389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:8d:d7:f5:bb:b7:bd:94:04:b1:28:3a:c3:
fb:68:f0:62:24:32:fe:ee:b4:a8:f5:49:2f:ab:24:
30:fc:f9:a3:49:a1:7d:69:7a:85:46:79:8d:1a:7f:
2d:4f:a2:47:aa:cd:fd:f0:34:e2:2d:76:ce:73:1e:
a3:53:1a:c3:67:fc:5d:0d:97:55:a5:c9:fc:70:d9:
f5:b2:1a:35:52:ea:5c:7a:12:72:65:ac:f9:77:4a:
1d:d9:30:38:30:3e:2f:4d:be:69:53:cc:1b:52:c4:
f9:da:f3:5c:39:7c:a9:69:f1:5b:d6:ee:c8:50:ba:
f8:79:b0:ea:a9:cb:6a:af:6d:49:b4:47:db:86:9b:
45:c6:53:c4:ed:8c:27:48:64:95:76:c6:cb:9f:f8:
3c:62:35:7e:dc:c0:76:f9:c5:dd:36:b9:4a:7e:12:
44:e8:7a:28:2e:05:f9:dc:27:20:b5:6a:c3:da:ef:
d3:ef:9d:32:b7:1a:96:63:01:b3:34:22:9e:cf:f2:
a9:1c:28:54:4c:42:c1:e5:5c:d9:2e:eb:fc:8e:4e:
9c:3c:b9:62:b0:c5:23:30:f4:be:ab:02:66:3f:99:
c9:6f:d4:b8:78:df:92:9e:66:60:5d:c3:96:8e:03:
1d:87:09:5b:55:c1:79:d8:a8:a1:68:66:26:fa:3e:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:3F:14:3D:90:55:BF:E7:A1:8F:E9:29:E4:2F:07:93:66:73:89
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:d6:98:75:dc:87:b6:c1:3c:8e:05:50:76:3d:c0:14:59:50:
15:f8:06:7f:4c:b8:20:ee:ca:3a:20:35:2b:92:f6:16:ac:46:
ba:37:d3:8f:c5:a0:3f:39:f0:ef:f4:51:a6:c5:1a:d8:6f:85:
36:eb:9f:68:21:a7:78:6e:b7:4a:b7:d5:d7:ff:ba:ff:7a:0f:
19:cb:74:b9:1b:dc:5c:18:f9:ea:85:8d:4e:32:f9:0d:15:3f:
6d:f1:f3:f8:54:e5:fa:71:ef:45:c7:ac:53:86:ca:c8:e1:09:
76:e8:dc:4b:de:db:cd:5b:fc:9d:d3:38:67:7e:14:19:2b:45:
49:d4:3b:d9:29:ce:66:89:d5:f9:e1:0e:28:1c:65:20:9c:c4:
6f:d9:d1:fe:89:da:16:ca:54:68:cf:d3:3f:44:7e:8b:6c:b9:
ee:78:d6:04:14:e3:0c:70:35:59:95:08:72:ae:9b:33:21:fb:
c1:5f:de:4d:08:c9:79:f9:29:21:01:ab:4d:18:83:11:08:4d:
f9:04:69:c7:3c:cb:7a:d9:1a:9a:9f:fb:b2:0e:23:8f:d4:7d:
15:60:41:8c:31:40:7a:bb:b1:ff:30:0c:55:3c:ee:e2:e3:be:
d3:a3:ea:fe:c1:28:59:af:e3:86:b5:a4:48:df:4b:10:dc:37:
65:b6:29:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRT1Jc17wbCCzoA1Dm5vVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTdmOTA3MmU4YjMwMDRiYTA4NjgxZmIxZWY4OGMwM2Y2
MjBhODgwHhcNMjUwMTAxMjM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTJiM2YxNDNkOTA1NWJmZTdhMThmZTkyOWU0MmYwNzkzNjY3Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcGN1/W7t72UBLEoOsP7aPBiJDL+
7rSo9UkvqyQw/PmjSaF9aXqFRnmNGn8tT6JHqs398DTiLXbOcx6jUxrDZ/xdDZdV
pcn8cNn1sho1UupcehJyZaz5d0od2TA4MD4vTb5pU8wbUsT52vNcOXypafFb1u7I
ULr4ebDqqctqr21JtEfbhptFxlPE7YwnSGSVdsbLn/g8YjV+3MB2+cXdNrlKfhJE
6HooLgX53CcgtWrD2u/T750ytxqWYwGzNCKez/KpHChUTELB5VzZLuv8jk6cPLli
sMUjMPS+qwJmP5nJb9S4eN+SnmZgXcOWjgMdhwlbVcF52KihaGYm+j4LfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMErPxQ9kFW/56GP6SnkLweTZnOJMB8GA1UdIwQY
MBaAFASn+QcuizAEughoH7HviMA/YgqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYThlNTgtOGFmZC00OTNiLWE5MTYt
ZTA1YWE1MTNlNWRkLzEvd1NzX0ZEMlFWYl9ub1lfcEtlUXZCNU5tYzRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jYThlNTgtOGFmZC00OTNiLWE5MTYtZTA1YWE1MTNlNWRk
LzEvQktmNUJ5NkxNQVM2Q0dnZnNlLUl3RDlpQ29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCV2VUMA0G
CSqGSIb3DQEBCwUAA4IBAQCy1ph13Ie2wTyOBVB2PcAUWVAV+AZ/TLgg7so6IDUr
kvYWrEa6N9OPxaA/OfDv9FGmxRrYb4U2659oIad4brdKt9XX/7r/eg8Zy3S5G9xc
GPnqhY1OMvkNFT9t8fP4VOX6ce9Fx6xThsrI4Ql26NxL3tvNW/yd0zhnfhQZK0VJ
1DvZKc5midX54Q4oHGUgnMRv2dH+idoWylRoz9M/RH6LbLnueNYEFOMMcDVZlQhy
rpszIfvBX95NCMl5+SkhAatNGIMRCE35BGnHPMt62Rqan/uyDiOP1H0VYEGMMUB6
u7H/MAxVPO7i477To+r+wShZr+OGtaRI30sQ3DdltinT
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net