Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/bY2tBQ51YL8a-pcphuYuVQz7bOg.roa
File: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (raw, json)
Hash identifier: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=
Subject key identifier: 6D:8D:AD:05:0E:75:60:BF:1A:FA:97:29:86:E6:2E:55:0C:FB:6C:E8
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 019427B493BBC76A5F3DFC692B682F8DD4F2
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/bY2tBQ51YL8a-pcphuYuVQz7bOg.roa
Signing time: Thu 02 Jan 2025 15:48:53 +0000
ROA not before: Thu 02 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12414
IP address blocks: 81.24.96.0/20 maxlen: 24
83.247.0.0/17 maxlen: 24
87.195.0.0/16 maxlen: 24
185.83.32.0/22 maxlen: 24
212.45.32.0/19 maxlen: 24
212.84.128.0/19 maxlen: 24
213.134.224.0/19 maxlen: 24
213.233.192.0/18 maxlen: 24
2001:9e0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:93:bb:c7:6a:5f:3d:fc:69:2b:68:2f:8d:d4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Jan 2 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d8dad050e7560bf1afa972986e62e550cfb6ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a5:f9:93:e6:51:45:e5:13:c8:4d:3c:af:4f:
98:fa:ee:e8:34:f2:ac:37:68:70:f7:05:ef:1f:f8:
d3:e0:8b:f8:2e:1c:da:89:83:42:49:9f:9a:57:59:
e8:4b:d2:8a:82:33:a0:28:28:47:99:06:63:be:fa:
6d:44:7d:15:e7:9b:98:5f:b2:3f:e3:fe:03:c2:3e:
96:56:4c:04:e9:89:80:2e:c9:00:ca:64:57:86:4b:
a5:14:49:ba:7e:c4:6d:e6:99:56:f4:8d:37:a9:8a:
1f:e6:04:60:2f:b3:f7:c7:1f:e4:69:05:31:23:5c:
11:cb:f2:bb:64:91:7e:f0:60:78:ad:20:6e:50:ae:
91:7c:28:54:37:71:3c:aa:53:81:d0:fe:a3:68:cb:
04:0b:55:41:8a:32:75:9f:59:1b:fa:eb:8c:d7:15:
3f:d9:e3:09:c7:a5:30:ce:a0:7a:f6:ea:6c:7e:c7:
8b:53:bb:26:9a:e6:ff:ee:5a:70:38:34:53:64:89:
ba:dc:44:3e:f4:cc:9c:78:6e:91:4a:d0:61:40:56:
2e:7c:2a:50:35:dd:c3:c9:9b:77:86:5c:c6:ed:8d:
9b:cc:8c:d2:24:bb:a6:ee:0c:15:41:8a:bb:8c:84:
61:4a:15:3c:9f:fc:89:b1:58:ae:3e:dc:fa:4f:cb:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:AD:05:0E:75:60:BF:1A:FA:97:29:86:E6:2E:55:0C:FB:6C:E8
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/bY2tBQ51YL8a-pcphuYuVQz7bOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.96.0/20
83.247.0.0/17
87.195.0.0/16
185.83.32.0/22
212.45.32.0/19
212.84.128.0/19
213.134.224.0/19
213.233.192.0/18
IPv6:
2001:9e0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:89:e4:33:80:3c:19:7f:b9:b5:56:fe:f1:a2:4b:00:8d:78:
f8:4b:54:17:ca:8a:c8:a2:4a:1c:e7:9a:2d:30:18:f7:6c:bc:
48:c7:df:76:7d:9f:5c:a9:60:b1:01:f7:6e:83:df:61:fb:4e:
6a:72:de:d2:54:25:60:4c:44:99:83:4b:5f:18:be:0a:0f:72:
1b:0b:eb:62:f8:57:7c:e3:52:ba:b2:e0:7c:92:a5:1e:9d:2b:
31:5c:ca:38:43:c0:6b:bb:c7:3d:00:4d:97:0d:f2:21:38:16:
6f:a0:e1:cd:84:a7:fa:2a:e0:fb:b5:98:05:7a:f4:05:f7:64:
bf:af:7e:ca:62:2f:e0:b9:ac:3c:d2:5b:3d:1b:2b:8a:af:3c:
bd:da:fd:11:61:2d:bc:71:97:42:8e:62:56:2a:ff:e0:92:c7:
d9:0a:b9:ad:6a:cb:78:65:59:f5:92:1c:b0:6d:71:0b:9d:bc:
91:40:63:9a:d4:b5:b4:13:1c:9e:70:09:9d:87:a1:65:fd:90:
c5:14:02:02:7b:84:9d:dc:45:e7:fa:2e:f2:2c:9b:e2:03:68:
34:06:77:9b:15:77:71:7d:97:48:73:29:72:4a:5d:89:8e:20:
3d:45:60:81:ac:22:fb:b8:83:70:a5:2c:7d:d1:24:c9:7f:ab:
c3:59:b1:d4
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZQntJO7x2pfPfxpK2gvjdTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2
ZjExZmIwHhcNMjUwMTAyMTU0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDhkYWQwNTBlNzU2MGJmMWFmYTk3Mjk4NmU2MmU1NTBjZmI2Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KX5k+ZRReUTyE08r0+Y+u7oNPKs
N2hw9wXvH/jT4Iv4LhzaiYNCSZ+aV1noS9KKgjOgKChHmQZjvvptRH0V55uYX7I/
4/4Dwj6WVkwE6YmALskAymRXhkulFEm6fsRt5plW9I03qYof5gRgL7P3xx/kaQUx
I1wRy/K7ZJF+8GB4rSBuUK6RfChUN3E8qlOB0P6jaMsEC1VBijJ1n1kb+uuM1xU/
2eMJx6UwzqB69upsfseLU7smmub/7lpwODRTZIm63EQ+9MyceG6RStBhQFYufCpQ
Nd3DyZt3hlzG7Y2bzIzSJLum7gwVQYq7jIRhShU8n/yJsViuPtz6T8vZCwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFG2NrQUOdWC/GvqXKYbmLlUM+2zoMB8GA1UdIwQY
MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt
NDNjYzViNDZkNWIyLzEvYlkydEJRNTFZTDhhLXBjcGh1WXVWUXo3Yk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy
LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQEURhgAwQH
U/cAAwMAV8MDBAK5UyADBAXULSADBAXUVIADBAXVhuADBAbV6cAwDQQCAAIwBwMF
AyABCeAwDQYJKoZIhvcNAQELBQADggEBAHuJ5DOAPBl/ubVW/vGiSwCNePhLVBfK
isiiShznmi0wGPdsvEjH33Z9n1ypYLEB926D32H7Tmpy3tJUJWBMRJmDS18YvgoP
chsL62L4V3zjUrqy4HySpR6dKzFcyjhDwGu7xz0ATZcN8iE4Fm+g4c2Ep/oq4Pu1
mAV69AX3ZL+vfspiL+C5rDzSWz0bK4qvPL3a/RFhLbxxl0KOYlYq/+CSx9kKua1q
y3hlWfWSHLBtcQudvJFAY5rUtbQTHJ5wCZ2HoWX9kMUUAgJ7hJ3cRef6LvIsm+ID
aDQGd5sVd3F9l0hzKXJKXYmOID1FYIGsIvu4g3ClLH3RJMl/q8NZsdQ=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:34 2025 by rpki-client on console.sobornost.net