Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/lVzggsEuwHNUmwDhZ4XQcolHpDk.roa
File: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (raw, json)
Hash identifier: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=
Subject key identifier: 95:5C:E0:82:C1:2E:C0:73:54:9B:00:E1:67:85:D0:72:89:47:A4:39
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019424B3216DEFF8A00D092AF59A56F4BA84
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/lVzggsEuwHNUmwDhZ4XQcolHpDk.roa
Signing time: Thu 02 Jan 2025 01:48:26 +0000
ROA not before: Thu 02 Jan 2025 01:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209634
IP address blocks: 147.78.184.0/22 maxlen: 22
185.18.232.0/24 maxlen: 24
185.18.233.0/24 maxlen: 24
185.18.234.0/24 maxlen: 24
2a09:840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:21:6d:ef:f8:a0:0d:09:2a:f5:9a:56:f4:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jan 2 01:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=955ce082c12ec073549b00e16785d0728947a439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:27:31:ed:99:0f:a8:53:ef:20:f5:12:e2:
2f:da:8a:ca:b5:f1:c7:3c:f4:d2:2d:ac:7e:53:54:
50:9a:36:9d:33:02:28:e7:3f:1e:7f:bd:30:68:fc:
d8:e7:11:b4:93:68:6c:03:74:b2:41:81:28:70:82:
c6:3c:e2:27:e5:ee:0b:c9:56:d2:14:85:2a:9b:66:
25:25:a2:34:c4:30:81:e6:1a:bd:e9:a8:ff:58:10:
d2:28:9e:78:34:af:7f:37:fe:1c:29:c6:5b:59:f5:
b5:4b:ba:08:e6:ed:c1:40:34:d1:45:20:3a:f8:84:
03:6d:c8:86:c3:29:8b:b3:9b:85:1b:4f:89:79:4a:
2a:94:cc:e4:02:bf:90:ee:dc:95:8b:a6:50:82:77:
e3:2a:99:67:d7:3a:21:99:79:44:24:ab:d6:a3:a5:
2b:b9:05:4a:1f:ff:19:a4:8e:cc:ec:db:10:ab:17:
8f:5b:53:c8:b8:cf:05:12:0e:5b:eb:e4:23:a2:94:
8f:d2:26:e9:13:34:02:d9:a0:dd:61:2a:22:21:c1:
25:bb:dc:99:b1:6e:72:47:7a:53:7e:96:67:c3:2a:
e0:07:63:ff:7e:20:bd:03:ad:3e:6d:73:4c:d4:2d:
d2:4b:8e:92:2c:bc:7a:4a:65:18:ea:6b:48:a1:40:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5C:E0:82:C1:2E:C0:73:54:9B:00:E1:67:85:D0:72:89:47:A4:39
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/lVzggsEuwHNUmwDhZ4XQcolHpDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.184.0/22
185.18.232.0-185.18.234.255
IPv6:
2a09:840::/32
Signature Algorithm: sha256WithRSAEncryption
26:e3:dc:4b:93:60:ca:16:40:b1:e1:47:cd:ea:50:6d:f7:b6:
c6:0c:dc:b3:fe:09:91:7b:4f:44:c8:7f:bf:a8:c2:98:0f:93:
9c:6d:25:79:9f:4a:c8:54:3e:bf:8f:5b:81:0d:07:97:70:a6:
90:22:2a:f1:92:ed:50:2e:ba:00:21:75:56:0a:2e:1d:e3:c5:
3d:3b:22:8c:10:4b:78:00:1d:ee:25:ea:49:5b:6c:8f:f2:84:
18:18:c7:b0:8c:e0:8c:72:ff:e4:18:29:60:0f:52:db:90:67:
a7:1c:5d:61:d5:8f:a6:2e:19:d8:08:f4:5a:04:d2:a1:87:05:
a2:9f:e5:df:40:c6:14:07:c4:4e:f8:1f:ba:00:7a:f0:4e:21:
22:85:70:19:7b:10:94:8b:8c:a5:b7:cf:a8:24:c8:92:ed:89:
84:e4:7d:2e:7a:c3:df:56:98:a2:0a:a1:bc:21:a6:b3:41:ab:
09:86:b4:6c:3b:9f:f1:da:57:57:fa:8f:7e:dc:74:8c:3e:22:
93:03:ed:8f:30:cd:5e:50:63:db:76:bd:11:11:75:a6:c6:30:
59:36:df:7a:bb:40:09:7a:7f:d7:b8:43:ad:3e:d6:f7:41:96:
de:59:01:e0:c8:2d:16:0d:d0:4b:34:52:c4:a3:cd:66:f6:52:
93:50:c2:e2
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQksyFt7/igDQkq9ZpW9LqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk
MTc0MmQwHhcNMjUwMTAyMDE0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTVjZTA4MmMxMmVjMDczNTQ5YjAwZTE2Nzg1ZDA3Mjg5NDdhNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq8nMe2ZD6hT7yD1EuIv2orKtfHH
PPTSLax+U1RQmjadMwIo5z8ef70waPzY5xG0k2hsA3SyQYEocILGPOIn5e4LyVbS
FIUqm2YlJaI0xDCB5hq96aj/WBDSKJ54NK9/N/4cKcZbWfW1S7oI5u3BQDTRRSA6
+IQDbciGwymLs5uFG0+JeUoqlMzkAr+Q7tyVi6ZQgnfjKpln1zohmXlEJKvWo6Ur
uQVKH/8ZpI7M7NsQqxePW1PIuM8FEg5b6+QjopSP0ibpEzQC2aDdYSoiIcElu9yZ
sW5yR3pTfpZnwyrgB2P/fiC9A60+bXNM1C3SS46SLLx6SmUY6mtIoUAFgQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFJVc4ILBLsBzVJsA4WeF0HKJR6Q5MB8GA1UdIwQY
MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt
Yzc3NzUxNTlmYzgyLzEvbFZ6Z2dzRXV3SE5VbXdEaFo0WFFjb2xIcERrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy
LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCk064MAwD
BAO5EugDBAC5EuowDQQCAAIwBwMFACoJCEAwDQYJKoZIhvcNAQELBQADggEBACbj
3EuTYMoWQLHhR83qUG33tsYM3LP+CZF7T0TIf7+owpgPk5xtJXmfSshUPr+PW4EN
B5dwppAiKvGS7VAuugAhdVYKLh3jxT07IowQS3gAHe4l6klbbI/yhBgYx7CM4Ixy
/+QYKWAPUtuQZ6ccXWHVj6YuGdgI9FoE0qGHBaKf5d9AxhQHxE74H7oAevBOISKF
cBl7EJSLjKW3z6gkyJLtiYTkfS56w99WmKIKobwhprNBqwmGtGw7n/HaV1f6j37c
dIw+IpMD7Y8wzV5QY9t2vRERdabGMFk233q7QAl6f9e4Q60+1vdBlt5ZAeDILRYN
0Es0UsSjzWb2UpNQwuI=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net