Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/36JMsnCTZ3dwGq1Ka9Cuddl862c.roa
File: 36JMsnCTZ3dwGq1Ka9Cuddl862c.roa (raw, json)
Hash identifier: rxGSLpm5OrdXLa8c65qMAKh6CEoXBb/8Ki3iPQlCtp4=
Subject key identifier: DF:A2:4C:B2:70:93:67:77:70:1A:AD:4A:6B:D0:AE:75:D9:7C:EB:67
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 0194266BFBA96829490D8AABE3479409F4A5
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/36JMsnCTZ3dwGq1Ka9Cuddl862c.roa
Signing time: Thu 02 Jan 2025 09:49:58 +0000
ROA not before: Thu 02 Jan 2025 09:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28788
IP address blocks: 62.133.192.0/18 maxlen: 18
91.206.246.0/23 maxlen: 23
194.88.236.0/23 maxlen: 23
2a03:71e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fb:a9:68:29:49:0d:8a:ab:e3:47:94:09:f4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa24cb270936777701aad4a6bd0ae75d97ceb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:df:d3:8a:8d:62:97:86:af:be:ec:33:a2:
18:de:cf:2e:74:74:db:d6:90:8a:bc:0a:3c:eb:ba:
6c:3e:69:9c:e7:f1:72:8e:6d:61:07:b3:26:62:60:
00:2f:92:f6:20:19:58:52:a2:de:f9:e4:32:bb:99:
fc:f6:fd:06:73:93:75:ae:17:c1:93:50:59:a4:e2:
1d:bd:d1:bc:b9:6b:a5:ff:4c:50:b7:fb:a5:f0:70:
14:89:f0:fe:92:a6:0b:6d:f9:4c:6c:85:10:e2:98:
3c:2b:8b:65:85:b1:3f:92:cc:c2:43:c8:9e:90:27:
f4:5e:85:ea:6a:9b:87:91:0e:a0:8a:1c:ec:a0:b9:
fc:6d:07:dc:74:45:b9:2e:5a:ec:31:f3:85:10:5e:
8d:48:7a:d1:1c:8e:97:15:d2:4e:3c:2b:cf:43:37:
5f:e8:4e:ad:f6:94:0c:39:7d:eb:ef:79:1d:a6:f6:
10:c3:40:fb:ae:28:42:26:38:4b:c3:63:9c:f2:45:
59:ef:40:85:8a:6a:f8:c8:f8:1b:92:c1:06:9e:f2:
99:93:1b:bc:c7:8f:9d:93:42:6e:c8:16:1a:91:47:
90:d5:b6:bd:0f:3f:ba:2e:eb:fa:bd:d3:a8:3f:9b:
ec:1f:de:a7:7a:ef:ed:14:22:2a:ac:e8:13:46:e8:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:4C:B2:70:93:67:77:70:1A:AD:4A:6B:D0:AE:75:D9:7C:EB:67
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/36JMsnCTZ3dwGq1Ka9Cuddl862c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.192.0/18
91.206.246.0/23
194.88.236.0/23
IPv6:
2a03:71e0::/32
Signature Algorithm: sha256WithRSAEncryption
58:5f:0e:41:82:28:04:bf:4d:70:e6:a6:12:68:8b:26:92:77:
82:6f:96:7c:45:10:ef:d7:e5:4a:90:c4:46:e4:32:a2:08:16:
5c:06:41:e6:4e:e4:05:73:ee:b1:a5:3c:8c:41:54:99:3a:ad:
55:d8:f6:bb:4b:e1:95:01:18:6a:2e:c8:87:2e:07:d9:1b:0c:
ad:17:9a:f7:98:9e:66:da:bd:aa:4d:42:76:b8:df:80:fd:e7:
60:f5:78:5e:46:5c:df:24:6b:48:c1:58:93:0c:cc:ec:c1:83:
bb:92:6e:56:c4:1b:ba:c0:2d:be:c7:62:02:c7:60:ac:74:1a:
dc:75:ca:cd:1b:69:60:b5:d6:00:10:c4:4b:a3:22:73:bb:b2:
66:7b:7b:8e:9e:a2:92:96:bd:20:a0:e6:8b:f9:b2:e6:42:15:
b9:7e:8d:dd:a3:60:61:e3:27:40:2a:18:09:9d:d9:f8:8f:95:
91:8c:d0:e9:e4:8e:94:c7:c4:c3:5f:38:61:af:9e:d8:15:22:
09:55:b3:a4:39:bf:3e:32:da:9e:cb:07:1f:42:60:f1:e4:ef:
ba:d5:6b:79:31:51:87:96:20:c6:10:da:66:6e:bf:4d:07:46:
9a:55:c8:a4:51:b4:d3:1d:a3:c5:9e:c5:6e:f4:51:65:68:5c:
da:11:41:fa
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQma/upaClJDYqr40eUCfSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjUwMTAyMDk0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmEyNGNiMjcwOTM2Nzc3NzAxYWFkNGE2YmQwYWU3NWQ5N2NlYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/Lf04qNYpeGr77sM6IY3s8udHTb
1pCKvAo867psPmmc5/Fyjm1hB7MmYmAAL5L2IBlYUqLe+eQyu5n89v0Gc5N1rhfB
k1BZpOIdvdG8uWul/0xQt/ul8HAUifD+kqYLbflMbIUQ4pg8K4tlhbE/kszCQ8ie
kCf0XoXqapuHkQ6gihzsoLn8bQfcdEW5LlrsMfOFEF6NSHrRHI6XFdJOPCvPQzdf
6E6t9pQMOX3r73kdpvYQw0D7rihCJjhLw2Oc8kVZ70CFimr4yPgbksEGnvKZkxu8
x4+dk0JuyBYakUeQ1ba9Dz+6Luv6vdOoP5vsH96neu/tFCIqrOgTRuhPOwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFN+iTLJwk2d3cBqtSmvQrnXZfOtnMB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvMzZKTXNuQ1RaM2R3R3ExS2E5Q3VkZGw4NjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGPoXAAwQB
W872AwQBwljsMA0EAgACMAcDBQAqA3HgMA0GCSqGSIb3DQEBCwUAA4IBAQBYXw5B
gigEv01w5qYSaIsmkneCb5Z8RRDv1+VKkMRG5DKiCBZcBkHmTuQFc+6xpTyMQVSZ
Oq1V2Pa7S+GVARhqLsiHLgfZGwytF5r3mJ5m2r2qTUJ2uN+A/edg9XheRlzfJGtI
wViTDMzswYO7km5WxBu6wC2+x2ICx2CsdBrcdcrNG2lgtdYAEMRLoyJzu7Jme3uO
nqKSlr0goOaL+bLmQhW5fo3do2Bh4ydAKhgJndn4j5WRjNDp5I6Ux8TDXzhhr57Y
FSIJVbOkOb8+MtqeywcfQmDx5O+61Wt5MVGHliDGENpmbr9NB0aaVcikUbTTHaPF
nsVu9FFlaFzaEUH6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net