Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/tkTC2VvHSyv0pveynJI-6L4hd0I.roa
File: tkTC2VvHSyv0pveynJI-6L4hd0I.roa (raw, json)
Hash identifier: 5vfe3u4feYrCZTyQJo1lzJFnHS+4DwphvDI7Mkx8veI=
Subject key identifier: B6:44:C2:D9:5B:C7:4B:2B:F4:A6:F7:B2:9C:92:3E:E8:BE:21:77:42
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0194D14856A71E32314F748AE030EE73DDCD
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/tkTC2VvHSyv0pveynJI-6L4hd0I.roa
Signing time: Tue 04 Feb 2025 14:06:06 +0000
ROA not before: Tue 04 Feb 2025 14:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201746
IP address blocks: 45.131.28.0/24 maxlen: 24
94.158.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:48:56:a7:1e:32:31:4f:74:8a:e0:30:ee:73:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Feb 4 14:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b644c2d95bc74b2bf4a6f7b29c923ee8be217742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:a4:44:ab:c6:58:c0:5d:c7:c8:3c:e5:d7:
cd:da:3a:f4:a8:8e:81:9d:53:03:f3:d7:0e:49:e4:
81:2f:38:55:35:9f:c4:16:97:58:19:65:b4:ad:34:
34:d8:14:4e:7f:41:4d:e1:09:be:5e:c5:d9:ce:ba:
00:9e:61:64:31:7c:6d:d8:f4:b4:90:44:8c:4f:ab:
c9:7b:8b:62:09:47:99:21:17:1a:32:04:ae:b6:6c:
e5:7e:67:2d:7b:87:cf:14:7a:26:41:01:cd:9b:78:
77:d2:5d:ae:fb:57:cd:8f:cf:b9:a4:8c:2b:68:53:
99:be:17:eb:d2:fd:03:eb:30:a0:48:9e:78:1c:dd:
9b:d0:2b:88:0b:0b:e7:e8:60:96:ec:57:76:ac:b3:
a5:16:03:1f:fa:f7:da:52:89:64:8b:3e:1d:26:13:
6b:50:2e:b5:d9:f5:8f:7c:9c:7a:dd:23:9b:74:65:
fa:98:86:2a:af:fe:c5:f9:38:6d:35:e3:99:b8:d5:
84:40:d6:0b:3e:a3:87:df:18:f3:71:79:5c:d5:8c:
1f:bc:76:c5:16:3c:81:8a:c7:bc:91:38:f0:92:19:
f0:ff:6a:5e:b9:df:d3:c8:80:1a:a3:c9:1b:53:76:
e8:4d:ae:1a:73:5a:34:f7:39:48:21:e3:c1:40:aa:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:44:C2:D9:5B:C7:4B:2B:F4:A6:F7:B2:9C:92:3E:E8:BE:21:77:42
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/tkTC2VvHSyv0pveynJI-6L4hd0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/24
94.158.254.0/24
Signature Algorithm: sha256WithRSAEncryption
26:16:f4:50:04:35:cc:6f:76:3f:4f:a1:21:32:0d:15:c5:5a:
22:4c:b6:71:a5:f2:a9:9d:62:1e:5c:ac:42:c0:66:f8:a4:3b:
8e:fe:a1:b5:86:23:40:4e:98:00:fd:c8:20:cf:5f:b8:cb:05:
2b:67:bb:1f:3c:eb:f7:2c:03:c0:a7:c2:d0:f9:15:3a:f0:2c:
3b:27:ef:2c:42:f4:70:df:5a:c9:89:e2:41:7d:a8:09:09:a0:
6a:ff:f6:28:4d:08:b2:86:29:f4:78:34:fe:25:90:55:f3:a6:
8b:fe:7a:ef:af:94:04:04:2d:5f:e5:9c:db:e2:4e:8d:42:dd:
f9:9c:99:a7:fc:93:0c:83:12:d6:40:ff:7d:d5:d8:aa:95:68:
ee:27:4f:bf:c5:cc:ea:77:16:9e:1f:aa:d9:3a:00:47:c8:e4:
01:c6:a4:e5:54:1b:29:51:fc:be:16:7f:2d:01:aa:3f:ba:58:
94:05:b6:d0:91:24:15:52:48:10:0a:a0:7c:f5:2c:1f:ff:e2:
d5:12:2b:54:f7:b4:bb:f8:7c:44:f3:c0:b3:e1:ce:cf:6d:d1:
e0:1c:1a:ad:9d:8d:d1:7a:21:30:fb:10:39:cc:b1:7e:26:0b:
66:a3:f5:cd:45:61:9c:92:be:4c:ed:b4:27:b6:6d:30:b2:fd:
0c:2e:d0:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTRSFanHjIxT3SK4DDuc93NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw
ODA2OGMwHhcNMjUwMjA0MTQwNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjQ0YzJkOTViYzc0YjJiZjRhNmY3YjI5YzkyM2VlOGJlMjE3NzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc+kRKvGWMBdx8g85dfN2jr0qI6B
nVMD89cOSeSBLzhVNZ/EFpdYGWW0rTQ02BROf0FN4Qm+XsXZzroAnmFkMXxt2PS0
kESMT6vJe4tiCUeZIRcaMgSutmzlfmcte4fPFHomQQHNm3h30l2u+1fNj8+5pIwr
aFOZvhfr0v0D6zCgSJ54HN2b0CuICwvn6GCW7Fd2rLOlFgMf+vfaUolkiz4dJhNr
UC612fWPfJx63SObdGX6mIYqr/7F+ThtNeOZuNWEQNYLPqOH3xjzcXlc1YwfvHbF
FjyBise8kTjwkhnw/2peud/TyIAao8kbU3boTa4ac1o09zlIIePBQKrsEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLZEwtlbx0sr9Kb3spySPui+IXdCMB8GA1UdIwQY
MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt
NjQ4MGMzZDFmNGU0LzEvdGtUQzJWdkhTeXYwcHZleW5KSS02TDRoZDBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0
LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYMcAwQA
Xp7+MA0GCSqGSIb3DQEBCwUAA4IBAQAmFvRQBDXMb3Y/T6EhMg0VxVoiTLZxpfKp
nWIeXKxCwGb4pDuO/qG1hiNATpgA/cggz1+4ywUrZ7sfPOv3LAPAp8LQ+RU68Cw7
J+8sQvRw31rJieJBfagJCaBq//YoTQiyhin0eDT+JZBV86aL/nrvr5QEBC1f5Zzb
4k6NQt35nJmn/JMMgxLWQP991diqlWjuJ0+/xczqdxaeH6rZOgBHyOQBxqTlVBsp
Ufy+Fn8tAao/uliUBbbQkSQVUkgQCqB89Swf/+LVEitU97S7+HxE88Cz4c7PbdHg
HBqtnY3ReiEw+xA5zLF+Jgtmo/XNRWGckr5M7bQntm0wsv0MLtDZ
-----END CERTIFICATE-----
Generated at Wed Apr 2 00:19:48 2025 by rpki-client on console.sobornost.net