Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/2inYN_MIUD72H0bF-G-uxeD9N2g.roa
File: 2inYN_MIUD72H0bF-G-uxeD9N2g.roa (raw, json)
Hash identifier: w3/xjcroWv/hTB5uAogzmCV91fqWgoiwopuu9uS5xyA=
Subject key identifier: DA:29:D8:37:F3:08:50:3E:F6:1F:46:C5:F8:6F:AE:C5:E0:FD:37:68
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 019421445D415BC2D6AB79D4DB8E1E5046FC
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/2inYN_MIUD72H0bF-G-uxeD9N2g.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212865
IP address blocks: 2.59.120.0/22 maxlen: 24
95.214.148.0/22 maxlen: 24
194.69.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5d:41:5b:c2:d6:ab:79:d4:db:8e:1e:50:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da29d837f308503ef61f46c5f86faec5e0fd3768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:a1:16:a1:82:b4:5d:90:32:d1:eb:cf:07:
d3:d3:b6:ef:fb:3b:d8:34:3f:ba:a9:c3:a4:96:66:
de:7e:55:1f:6b:c5:23:32:e3:ed:8d:2e:12:5b:fd:
7e:42:f8:8f:87:98:0d:95:cf:dc:94:02:29:19:77:
82:12:a5:b4:c8:84:c9:d7:bd:d9:43:63:a4:60:d9:
57:f0:76:47:1c:b3:60:b6:de:fc:be:4c:0c:5f:d3:
15:bc:73:5f:8a:91:b6:36:3f:58:63:6c:9c:5c:81:
b2:99:46:5e:cb:80:2e:e5:2f:bb:b3:aa:ff:b3:99:
9f:68:2d:19:7a:2e:ac:7f:d4:26:ef:bb:f3:0e:20:
4d:84:d0:aa:43:79:2c:dd:04:cc:39:70:b9:d0:83:
38:4f:31:05:50:3a:71:cc:1e:97:81:75:4c:25:e3:
3e:0b:59:e9:a9:b6:b1:50:f5:bb:68:53:3f:54:79:
0d:c6:0e:cb:7b:64:2c:30:03:e9:77:bf:07:6f:c8:
72:59:10:38:6d:fa:67:ec:4c:df:02:fe:9b:ca:8f:
71:9c:1f:93:a1:38:61:48:8c:4d:98:b9:b7:61:de:
d3:34:46:69:af:1d:a0:d6:b3:e4:80:42:58:e2:2d:
5a:58:fe:a4:a1:e2:c9:e0:9b:18:03:d0:a5:09:b3:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:D8:37:F3:08:50:3E:F6:1F:46:C5:F8:6F:AE:C5:E0:FD:37:68
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/2inYN_MIUD72H0bF-G-uxeD9N2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.120.0/22
95.214.148.0/22
194.69.196.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f3:e3:42:ae:6e:c9:0a:a5:3c:c6:b2:31:f8:b4:85:e2:61:
75:b8:91:ef:d4:1b:f6:72:68:f2:54:1d:2b:5e:3f:53:65:f0:
42:78:96:70:69:73:69:a2:8f:62:7f:db:3a:4a:66:6c:a9:06:
1c:23:ce:56:8e:61:43:b6:ac:d3:63:08:32:c2:fe:4b:fd:ef:
c1:e1:79:28:32:4f:98:a3:d5:16:e4:8a:c4:00:3c:ce:dc:ca:
b4:f0:3a:d1:68:63:ba:f1:c4:90:f1:79:a5:1a:31:ab:d1:45:
80:40:6c:6a:c6:e8:08:a3:71:7b:13:8f:36:58:73:e5:98:8b:
16:f7:35:d2:f5:90:82:19:9c:06:d3:2e:a9:57:d6:f5:36:88:
4a:d6:5d:69:36:00:1c:97:6b:5b:31:6a:88:ab:41:c4:33:67:
40:8f:e6:e9:d3:55:37:40:98:2b:7b:49:0c:cb:c9:31:90:25:
eb:ae:c2:65:f0:92:b9:7b:f3:7f:4e:24:1b:9e:e1:0b:f3:c7:
78:86:63:63:7f:20:6a:74:97:b6:6f:91:88:97:53:82:c8:e2:
0e:84:51:8b:05:30:7f:d7:0e:a8:c6:89:cc:3c:9f:e3:c9:8b:
ef:20:46:8f:9a:ee:4d:b6:d1:10:fe:20:82:5e:a4:15:b1:f0:
52:b3:0e:3c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhRF1BW8LWq3nU244eUEb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi
MDI1NDUwHhcNMjUwMTAxMDk0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTI5ZDgzN2YzMDg1MDNlZjYxZjQ2YzVmODZmYWVjNWUwZmQzNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndKhFqGCtF2QMtHrzwfT07bv+zvY
ND+6qcOklmbeflUfa8UjMuPtjS4SW/1+QviPh5gNlc/clAIpGXeCEqW0yITJ173Z
Q2OkYNlX8HZHHLNgtt78vkwMX9MVvHNfipG2Nj9YY2ycXIGymUZey4Au5S+7s6r/
s5mfaC0Zei6sf9Qm77vzDiBNhNCqQ3ks3QTMOXC50IM4TzEFUDpxzB6XgXVMJeM+
C1npqbaxUPW7aFM/VHkNxg7Le2QsMAPpd78Hb8hyWRA4bfpn7EzfAv6byo9xnB+T
oThhSIxNmLm3Yd7TNEZprx2g1rPkgEJY4i1aWP6koeLJ4JsYA9ClCbNVCQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNop2DfzCFA+9h9GxfhvrsXg/TdoMB8GA1UdIwQY
MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt
YjQ3M2NlNzgwN2NhLzEvMmluWU5fTUlVRDcySDBiRi1HLXV4ZUQ5TjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh
LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjt4AwQC
X9aUAwQBwkXEMA0GCSqGSIb3DQEBCwUAA4IBAQCK8+NCrm7JCqU8xrIx+LSF4mF1
uJHv1Bv2cmjyVB0rXj9TZfBCeJZwaXNpoo9if9s6SmZsqQYcI85WjmFDtqzTYwgy
wv5L/e/B4XkoMk+Yo9UW5IrEADzO3Mq08DrRaGO68cSQ8XmlGjGr0UWAQGxqxugI
o3F7E482WHPlmIsW9zXS9ZCCGZwG0y6pV9b1NohK1l1pNgAcl2tbMWqIq0HEM2dA
j+bp01U3QJgre0kMy8kxkCXrrsJl8JK5e/N/TiQbnuEL88d4hmNjfyBqdJe2b5GI
l1OCyOIOhFGLBTB/1w6oxonMPJ/jyYvvIEaPmu5NttEQ/iCCXqQVsfBSsw48
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net