Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/Notf8xfdCB98W17uF8DyEZXaKD4.roa
File: Notf8xfdCB98W17uF8DyEZXaKD4.roa (raw, json)
Hash identifier: Php02ygExlsiQ8rFpeIHuq+3hV7Ago1mfAxcB+vPXnY=
Subject key identifier: 36:8B:5F:F3:17:DD:08:1F:7C:5B:5E:EE:17:C0:F2:11:95:DA:28:3E
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 0195AE9D280D31B21EAC513315795B290068
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/Notf8xfdCB98W17uF8DyEZXaKD4.roa
Signing time: Wed 19 Mar 2025 13:34:49 +0000
ROA not before: Wed 19 Mar 2025 13:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57074
IP address blocks: 45.94.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:9d:28:0d:31:b2:1e:ac:51:33:15:79:5b:29:00:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Mar 19 13:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=368b5ff317dd081f7c5b5eee17c0f21195da283e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:4f:6d:67:6d:78:a8:d3:7d:48:72:f3:4b:
33:55:ff:39:4c:08:f4:21:4d:d8:e2:3f:e4:da:9a:
51:25:f1:ff:12:b5:32:f2:ee:86:fb:10:4a:d9:3e:
c0:5e:39:ba:a7:0a:0f:13:cd:b2:e9:8b:47:7a:05:
53:34:07:8f:ba:10:54:ed:d2:32:f9:72:a0:95:6b:
df:c4:84:35:3b:4a:9c:9b:9a:e3:00:b6:d2:13:2a:
3f:22:df:0c:61:f5:4d:44:c3:96:c4:c3:e1:20:6b:
28:1c:da:22:05:d9:e3:ca:b1:39:25:a6:b7:0e:2a:
59:8f:d8:8c:03:5d:f0:8b:83:98:ec:b0:d0:e9:e6:
94:f9:f7:09:36:c0:a2:ad:b3:10:b4:8f:62:3e:c4:
4a:6e:c4:ef:00:0d:d3:57:dc:98:cf:a8:37:2b:a2:
d2:0e:7c:cd:e3:1f:26:d6:73:0d:f2:d3:bf:1a:bb:
2e:bc:5a:81:5a:96:17:fc:53:e0:0b:f9:4c:62:75:
a4:42:26:8b:cf:54:4d:4c:f6:e8:06:36:16:55:aa:
28:ac:a8:5a:fa:96:72:6d:2b:35:f3:89:3d:b3:40:
6f:76:6e:32:46:37:77:21:17:6a:84:7f:1b:4e:34:
ca:01:69:58:bc:8c:4e:17:96:01:e7:f6:91:be:ce:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:5F:F3:17:DD:08:1F:7C:5B:5E:EE:17:C0:F2:11:95:DA:28:3E
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/Notf8xfdCB98W17uF8DyEZXaKD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:92:8f:5d:62:62:0d:50:94:10:c0:e8:f3:29:a3:63:a5:a5:
0e:e9:11:d7:b6:38:fa:f9:6e:13:b8:41:a1:41:46:74:f8:3c:
44:e1:d6:10:1d:22:9e:0e:99:09:fd:25:1e:dd:6b:a8:58:0c:
7a:2e:87:2c:3d:e4:b6:b1:93:7a:43:0c:38:95:b0:74:f4:95:
b1:64:64:7f:88:ad:c4:37:b1:6f:08:f9:8e:a1:c5:7c:4e:0f:
5a:94:87:93:55:a5:90:c6:2d:cb:3f:11:30:a4:29:23:ab:18:
73:05:41:57:d6:6d:7c:60:df:2b:96:59:17:7b:48:62:72:8e:
30:52:f7:23:66:73:dd:46:eb:98:4e:97:ea:00:bb:8a:71:78:
15:88:69:87:58:c9:c6:0c:45:7f:d1:2d:25:a0:46:61:d0:14:
e3:43:00:09:0d:09:dc:0e:fa:c9:fa:07:1c:86:e9:bf:2b:3b:
63:8c:ed:0b:5d:3d:a7:55:80:31:16:ee:81:5d:4c:d5:c6:34:
1f:90:a0:88:16:ef:a6:4f:44:3d:c7:c7:cf:7f:4f:60:e6:fb:
fb:8a:12:33:d6:7c:81:b0:52:cf:a9:a2:7c:f7:1c:ec:dd:b3:
5b:3b:7e:2c:3a:9b:10:99:3d:ea:3a:09:e1:f3:83:cd:f8:08:
80:6c:6e:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWunSgNMbIerFEzFXlbKQBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjkzNmIzNWY5MmNkZWM1ZTkwZGYzM2JkYzUwODY2MWMy
N2I0NTUwHhcNMjUwMzE5MTMzNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjhiNWZmMzE3ZGQwODFmN2M1YjVlZWUxN2MwZjIxMTk1ZGEyODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRlPbWdteKjTfUhy80szVf85TAj0
IU3Y4j/k2ppRJfH/ErUy8u6G+xBK2T7AXjm6pwoPE82y6YtHegVTNAePuhBU7dIy
+XKglWvfxIQ1O0qcm5rjALbSEyo/It8MYfVNRMOWxMPhIGsoHNoiBdnjyrE5Jaa3
DipZj9iMA13wi4OY7LDQ6eaU+fcJNsCirbMQtI9iPsRKbsTvAA3TV9yYz6g3K6LS
DnzN4x8m1nMN8tO/GrsuvFqBWpYX/FPgC/lMYnWkQiaLz1RNTPboBjYWVaoorKha
+pZybSs184k9s0Bvdm4yRjd3IRdqhH8bTjTKAWlYvIxOF5YB5/aRvs740wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDaLX/MX3QgffFte7hfA8hGV2ig+MB8GA1UdIwQY
MBaAFMq5NrNfks3sXpDfM73FCGYcJ7RVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAt
NTU5MjM2MGUzZThlLzEvTm90Zjh4ZmRDQjk4VzE3dUY4RHlFWlhhS0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAtNTU5MjM2MGUzZThl
LzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV5mMA0G
CSqGSIb3DQEBCwUAA4IBAQA/ko9dYmINUJQQwOjzKaNjpaUO6RHXtjj6+W4TuEGh
QUZ0+DxE4dYQHSKeDpkJ/SUe3WuoWAx6LocsPeS2sZN6Qww4lbB09JWxZGR/iK3E
N7FvCPmOocV8Tg9alIeTVaWQxi3LPxEwpCkjqxhzBUFX1m18YN8rllkXe0hico4w
UvcjZnPdRuuYTpfqALuKcXgViGmHWMnGDEV/0S0loEZh0BTjQwAJDQncDvrJ+gcc
hum/KztjjO0LXT2nVYAxFu6BXUzVxjQfkKCIFu+mT0Q9x8fPf09g5vv7ihIz1nyB
sFLPqaJ89xzs3bNbO34sOpsQmT3qOgnh84PN+AiAbG4s
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net