Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/DqE8gRgoYoMtwrum6k0T5AcgbA0.roa
File: DqE8gRgoYoMtwrum6k0T5AcgbA0.roa (raw, json)
Hash identifier: 7aUKY9kAGmruCwUgSEXbHojzDkwM52NN/3MTuZeZTP0=
Subject key identifier: 0E:A1:3C:81:18:28:62:83:2D:C2:BB:A6:EA:4D:13:E4:07:20:6C:0D
Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial: 019424B3E51850CA3BF1637F44BEB63AD196
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/DqE8gRgoYoMtwrum6k0T5AcgbA0.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51896
IP address blocks: 31.209.136.0/21 maxlen: 21
46.22.96.0/20 maxlen: 20
46.22.96.0/24 maxlen: 24
89.17.128.0/19 maxlen: 19
185.191.232.0/22 maxlen: 22
2a00:5000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e5:18:50:ca:3b:f1:63:7f:44:be:b6:3a:d1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ea13c81182862832dc2bba6ea4d13e407206c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:1c:51:bc:99:90:56:a3:3e:35:d6:3e:14:
6b:76:db:ea:a0:c0:cb:fc:38:98:c2:cf:11:62:1f:
2e:6f:99:be:b6:01:cc:1e:e0:9b:99:e6:e1:26:2c:
e7:83:f0:f8:cd:8e:e7:0f:b0:8b:ca:a0:42:30:32:
35:ff:cc:71:fc:56:3c:d5:95:e7:bb:81:09:8b:38:
9e:e7:72:a7:6c:74:3e:db:8f:3a:5c:c0:a7:85:f8:
1b:30:70:c9:20:10:39:15:a7:34:f8:80:67:87:64:
e3:6d:83:c6:cf:e3:99:d7:c0:ac:36:f8:e3:ca:e9:
83:94:62:cb:d0:16:c5:4f:2d:c6:cc:b4:18:e7:eb:
ba:25:d5:9d:7c:56:4e:2f:12:70:ad:3e:8d:80:dc:
f2:f0:7a:e9:44:17:79:f3:56:81:2f:d7:cf:79:0c:
af:27:e6:5c:bc:89:ca:39:db:25:43:35:50:4d:fc:
60:f9:08:18:4e:25:fc:0f:93:d6:03:cb:c9:d4:82:
ab:53:53:5c:9c:11:47:44:f1:93:c3:ad:a4:07:bb:
a8:c6:4e:42:58:97:4f:3c:02:54:1a:13:6c:3e:72:
55:db:e3:30:bb:ed:71:fb:97:11:6b:3a:42:70:da:
52:57:d1:97:27:fa:9f:bc:9e:cd:2f:91:e0:bd:15:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:3C:81:18:28:62:83:2D:C2:BB:A6:EA:4D:13:E4:07:20:6C:0D
X509v3 Authority Key Identifier:
keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/DqE8gRgoYoMtwrum6k0T5AcgbA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.136.0/21
46.22.96.0/20
89.17.128.0/19
185.191.232.0/22
IPv6:
2a00:5000::/29
Signature Algorithm: sha256WithRSAEncryption
2c:e0:83:79:2f:b0:6c:23:72:f7:32:bb:e4:b6:15:77:5e:48:
70:2e:10:01:92:e8:37:f0:56:50:4d:a1:43:b1:48:e7:7f:e1:
31:21:30:25:f9:45:4c:f7:b6:e4:4e:4b:58:7b:14:81:46:e4:
08:3a:e9:f8:df:c5:07:f7:63:ec:d2:be:da:e3:84:b8:b2:cf:
26:88:64:3f:de:7c:53:39:fd:1d:84:84:13:13:e8:22:05:d1:
09:27:c4:ed:a5:74:f3:4b:00:ec:c3:6e:de:f8:f4:05:7b:a9:
b8:ea:5b:d1:2f:62:48:ac:d4:9a:c5:49:53:84:21:20:db:28:
89:74:73:90:a9:a4:b9:55:c0:ea:64:f3:10:f0:89:ad:2e:5a:
1e:e6:eb:f8:0f:62:05:1e:13:6b:08:ed:c7:21:67:c8:a5:9d:
9c:3e:03:86:3d:69:14:33:bc:03:cc:10:6a:2d:d6:08:a3:b0:
99:2a:89:50:1d:ab:86:67:d2:15:97:53:46:22:46:48:75:f3:
47:62:f9:c3:93:d6:ce:fa:19:9d:f7:e5:55:43:61:f5:e8:f2:
30:03:70:4d:60:45:10:e9:8d:d0:41:b6:77:a6:fb:34:fa:89:
9d:24:e5:39:12:dd:8e:f2:17:3d:95:e7:70:83:47:34:16:90:
20:30:aa:e3
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQks+UYUMo78WN/RL62OtGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2NkMDlhNTRiZmE2MzE0MTk5N2NkNjUzYjc3YmM5OTM5
MmVmNjIwHhcNMjUwMTAyMDE0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWExM2M4MTE4Mjg2MjgzMmRjMmJiYTZlYTRkMTNlNDA3MjA2YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuwcUbyZkFajPjXWPhRrdtvqoMDL
/DiYws8RYh8ub5m+tgHMHuCbmebhJizng/D4zY7nD7CLyqBCMDI1/8xx/FY81ZXn
u4EJizie53KnbHQ+2486XMCnhfgbMHDJIBA5Fac0+IBnh2TjbYPGz+OZ18CsNvjj
yumDlGLL0BbFTy3GzLQY5+u6JdWdfFZOLxJwrT6NgNzy8HrpRBd581aBL9fPeQyv
J+ZcvInKOdslQzVQTfxg+QgYTiX8D5PWA8vJ1IKrU1NcnBFHRPGTw62kB7uoxk5C
WJdPPAJUGhNsPnJV2+Mwu+1x+5cRazpCcNpSV9GXJ/qfvJ7NL5HgvRU72wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFA6hPIEYKGKDLcK7pupNE+QHIGwNMB8GA1UdIwQY
MBaAFNDM0JpUv6YxQZl81lO3e8mTku9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWIt
M2I5OTA4NzhhNTJiLzEvRHFFOGdSZ29Zb010d3J1bTZrMFQ1QWNnYkEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xMzZiM2YtNDU5ZS00YTk2LWE0YWItM2I5OTA4NzhhNTJi
LzEvME16UW1sU19wakZCbVh6V1U3ZDd5Wk9TNzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDH9GIAwQE
LhZgAwQFWRGAAwQCub/oMA0EAgACMAcDBQMqAFAAMA0GCSqGSIb3DQEBCwUAA4IB
AQAs4IN5L7BsI3L3MrvkthV3XkhwLhABkug38FZQTaFDsUjnf+ExITAl+UVM97bk
TktYexSBRuQIOun438UH92Ps0r7a44S4ss8miGQ/3nxTOf0dhIQTE+giBdEJJ8Tt
pXTzSwDsw27e+PQFe6m46lvRL2JIrNSaxUlThCEg2yiJdHOQqaS5VcDqZPMQ8Imt
Lloe5uv4D2IFHhNrCO3HIWfIpZ2cPgOGPWkUM7wDzBBqLdYIo7CZKolQHauGZ9IV
l1NGIkZIdfNHYvnDk9bO+hmd9+VVQ2H16PIwA3BNYEUQ6Y3QQbZ3pvs0+omdJOU5
Et2O8hc9ledwg0c0FpAgMKrj
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:35 2025 by rpki-client on console.sobornost.net