Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/St1eW7huW5NWmrTlCcZNOVav4YY.roa
File: St1eW7huW5NWmrTlCcZNOVav4YY.roa (raw, json)
Hash identifier: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=
Subject key identifier: 4A:DD:5E:5B:B8:6E:5B:93:56:9A:B4:E5:09:C6:4D:39:56:AF:E1:86
Certificate issuer: /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial: 0194228E05152E6B412CA6061693E2E6A4EC
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/St1eW7huW5NWmrTlCcZNOVav4YY.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59848
IP address blocks: 213.109.145.0/24 maxlen: 24
2a11:6ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:05:15:2e:6b:41:2c:a6:06:16:93:e2:e6:a4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4add5e5bb86e5b93569ab4e509c64d3956afe186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:83:d2:1f:11:02:0b:1d:4d:3b:28:3f:03:
d4:95:b9:08:12:1c:57:80:cd:50:05:be:88:0f:9a:
88:3e:97:5c:a6:e4:c3:35:0c:c0:14:d3:9f:7c:37:
e2:fb:7d:16:f1:d5:e9:e2:ab:53:e7:29:ef:5b:71:
c8:f3:4a:1a:11:16:13:6a:57:86:63:7f:8a:fd:1b:
36:34:3a:af:b1:1b:f5:cd:9b:1e:11:bd:8d:60:88:
15:ec:b9:ce:11:97:8a:d7:1b:fd:66:01:1d:5c:36:
89:eb:0d:ce:14:1d:49:26:4c:a0:4a:c3:cc:c8:1a:
2d:f1:41:63:82:da:69:e1:58:09:5f:f1:51:da:81:
7b:f7:ab:b5:ae:0b:21:e7:d8:6f:4f:49:14:0b:c0:
fd:3e:cd:aa:78:55:bb:03:9a:0c:ec:92:38:b1:32:
34:5f:01:dd:5e:6f:6f:36:cb:b3:04:ad:45:fe:64:
96:a5:b3:93:9d:9a:74:14:05:40:90:62:a0:af:69:
05:58:2a:7b:e0:03:2d:2d:21:d8:d7:ad:56:a9:f3:
29:7a:6f:8c:1f:ad:0e:91:80:45:7d:64:1e:f1:03:
d9:48:e3:67:76:6a:55:c2:8c:61:c9:62:3e:9e:0e:
9a:92:4f:32:31:f5:60:b4:05:b3:e1:ee:f2:f0:39:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:5E:5B:B8:6E:5B:93:56:9A:B4:E5:09:C6:4D:39:56:AF:E1:86
X509v3 Authority Key Identifier:
keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/St1eW7huW5NWmrTlCcZNOVav4YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.145.0/24
IPv6:
2a11:6ac0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:fe:0a:e4:13:4c:a2:10:93:bf:e3:f0:5f:7b:0d:dd:9a:16:
62:97:97:5f:47:16:49:1f:4c:15:70:4f:f4:32:19:9b:c7:a6:
5b:2a:47:7f:ce:4e:51:1e:db:e1:af:4d:89:86:89:27:08:cf:
46:44:02:5f:42:a5:cb:ba:97:82:74:6b:ad:46:23:bf:82:38:
4c:00:5d:fd:0e:11:3c:bd:32:90:a5:df:24:93:f9:f3:a1:8a:
12:2b:8f:3f:af:0a:69:50:6d:d4:05:a6:96:9e:b8:16:74:55:
92:fb:8f:15:35:e7:3f:8f:60:0a:f8:89:50:66:ec:ab:d6:40:
90:ce:a4:0f:27:b8:c1:42:be:00:e9:7c:f5:15:07:ad:1f:b2:
d5:ad:0c:8f:06:6b:20:30:8e:ed:26:2e:47:72:aa:9b:e2:39:
9a:67:e6:fc:d7:40:4f:b6:90:45:bb:64:f4:94:87:62:7a:78:
f4:ba:8c:17:c1:0f:37:0c:07:a7:c0:90:09:72:a6:23:fd:7c:
8b:6e:0c:39:63:ec:be:52:f5:6b:16:6f:f7:5a:c3:c0:7d:7a:
32:02:db:f6:4f:19:65:d9:a7:20:1b:c8:36:98:43:1b:f6:df:
43:cc:ff:47:01:7b:75:42:d6:e4:12:e1:c0:6d:dd:e8:2e:a0:
6d:9f:2f:17
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijgUVLmtBLKYGFpPi5qTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzIwOGEyM2IyZDRkODdiZTkzZjg5ZDUzMmJjNmY0NDkw
ODgxOWIwHhcNMjUwMTAxMTU0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWRkNWU1YmI4NmU1YjkzNTY5YWI0ZTUwOWM2NGQzOTU2YWZlMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSCD0h8RAgsdTTsoPwPUlbkIEhxX
gM1QBb6ID5qIPpdcpuTDNQzAFNOffDfi+30W8dXp4qtT5ynvW3HI80oaERYTaleG
Y3+K/Rs2NDqvsRv1zZseEb2NYIgV7LnOEZeK1xv9ZgEdXDaJ6w3OFB1JJkygSsPM
yBot8UFjgtpp4VgJX/FR2oF796u1rgsh59hvT0kUC8D9Ps2qeFW7A5oM7JI4sTI0
XwHdXm9vNsuzBK1F/mSWpbOTnZp0FAVAkGKgr2kFWCp74AMtLSHY161WqfMpem+M
H60OkYBFfWQe8QPZSONndmpVwoxhyWI+ng6akk8yMfVgtAWz4e7y8Dlq/wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFErdXlu4bluTVpq05QnGTTlWr+GGMB8GA1UdIwQY
MBaAFLHCCKI7LU2HvpP4nVMrxvRJCIGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NJSW9qc3RUWWUta19pZFV5dkc5RWtJZ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hNTY1ZmItNTBiZC00YmI2LTg3NWMt
MGUyYmJkNDMzN2FhLzEvU3QxZVc3aHVXNU5XbXJUbENjWk5PVmF2NFlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hNTY1ZmItNTBiZC00YmI2LTg3NWMtMGUyYmJkNDMzN2Fh
LzEvc2NJSW9qc3RUWWUta19pZFV5dkc5RWtJZ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1W2RMA0E
AgACMAcDBQMqEWrAMA0GCSqGSIb3DQEBCwUAA4IBAQAe/grkE0yiEJO/4/Bfew3d
mhZil5dfRxZJH0wVcE/0Mhmbx6ZbKkd/zk5RHtvhr02JhoknCM9GRAJfQqXLupeC
dGutRiO/gjhMAF39DhE8vTKQpd8kk/nzoYoSK48/rwppUG3UBaaWnrgWdFWS+48V
Nec/j2AK+IlQZuyr1kCQzqQPJ7jBQr4A6Xz1FQetH7LVrQyPBmsgMI7tJi5Hcqqb
4jmaZ+b810BPtpBFu2T0lIdienj0uowXwQ83DAenwJAJcqYj/XyLbgw5Y+y+UvVr
Fm/3WsPAfXoyAtv2Txll2acgG8g2mEMb9t9DzP9HAXt1QtbkEuHAbd3oLqBtny8X
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net