Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa
File: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (raw, json)
Hash identifier: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=
Subject key identifier: 02:0B:D5:1F:F6:79:66:29:01:14:85:32:10:60:7F:7F:87:ED:2D:F8
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 019423D6BBD84B7A18E945365AE0CF9953EE
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48347
IP address blocks: 195.47.196.0/24 maxlen: 24
195.85.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bb:d8:4b:7a:18:e9:45:36:5a:e0:cf:99:53:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=020bd51ff67966290114853210607f7f87ed2df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:1f:b5:39:b7:52:d7:c2:f1:6f:4d:3d:9e:
a6:6b:06:da:9a:34:d0:da:a7:e0:5e:33:03:e8:80:
62:52:8a:c8:c9:d8:b9:5b:7d:0a:42:66:d6:b1:d0:
86:55:44:46:3b:8f:02:9d:60:e6:45:5f:24:cc:dd:
90:1e:e0:73:13:2c:f8:d0:46:6e:fc:4a:70:a9:3d:
f7:32:8a:1f:f3:bc:e6:18:6b:83:db:de:11:16:ef:
5a:70:b7:79:be:5d:a5:cd:ff:7d:38:c3:de:06:ce:
7c:d2:7c:71:06:86:69:e4:c0:73:4f:46:22:5c:fb:
31:34:8d:a8:98:10:1b:7a:d9:05:04:8c:67:02:c9:
92:c0:c2:db:4c:18:e9:81:90:1b:0d:a2:99:8b:ef:
22:b5:2a:3d:f8:13:ec:68:33:25:3a:35:e2:f1:63:
79:16:8b:f5:13:12:f3:61:dc:51:e2:c4:89:58:81:
7c:12:fc:65:e9:99:d1:27:6a:b0:3e:5f:a7:a3:d5:
cb:52:43:4b:ba:d4:1e:72:b8:b5:a1:3f:f8:c1:48:
a8:a4:9e:e7:d0:0a:d9:72:78:81:90:95:a5:a2:69:
0b:6c:b8:51:80:17:cf:a9:26:d4:60:9d:d7:45:1d:
23:b8:22:45:2d:6f:92:d3:85:56:2b:7a:bb:a0:25:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0B:D5:1F:F6:79:66:29:01:14:85:32:10:60:7F:7F:87:ED:2D:F8
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.196.0/24
195.85.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:69:e5:31:a9:98:df:d9:2e:f4:cb:dd:48:6a:ab:c5:b4:44:
f1:44:e2:38:64:f0:c1:f9:94:2f:64:17:e4:21:02:3d:74:b8:
08:cd:d5:b6:1c:6b:07:13:aa:ba:c5:08:41:32:63:e1:a0:aa:
af:cf:f3:55:a4:ce:86:18:cd:ba:85:98:c9:6d:75:56:de:5e:
e4:c6:c8:16:c4:e5:a8:9b:d9:ae:e4:d9:41:b8:bd:9f:d1:5e:
5d:8b:5b:79:c8:46:f5:61:32:c2:c8:47:96:5d:c8:cd:c9:cc:
c4:23:49:ee:14:c7:20:d8:72:82:f5:36:fc:68:ab:26:d4:22:
a5:ef:31:75:16:13:1e:e8:bf:3a:59:9c:9c:6a:a5:87:3e:ec:
be:58:4b:55:b7:1b:82:ab:7d:d2:25:68:9f:99:86:70:1f:d4:
8d:d2:c5:53:0d:aa:ec:56:c3:3d:76:5c:91:93:9e:be:5c:39:
4b:26:da:c7:34:d5:fc:e6:a6:37:71:15:24:5d:41:2e:8e:46:
a1:fb:7c:da:ed:6b:2f:8c:5c:c4:bc:d5:28:7f:ba:ed:4e:d6:
69:2e:3c:28:92:13:7a:44:8a:af:54:82:77:71:59:a9:39:29:
ff:c3:b0:f1:88:de:c9:1e:5b:81:81:74:9f:c1:f2:c0:9b:fa:
bf:0d:f7:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1rvYS3oY6UU2WuDPmVPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Q5N2YxNTA4ZTdhNDQ3ODk5ZjU5YTU1ZmI4YWE2MjQx
ZWY1MTAwHhcNMjUwMTAxMjE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjBiZDUxZmY2Nzk2NjI5MDExNDg1MzIxMDYwN2Y3Zjg3ZWQyZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZsftTm3UtfC8W9NPZ6mawbamjTQ
2qfgXjMD6IBiUorIydi5W30KQmbWsdCGVURGO48CnWDmRV8kzN2QHuBzEyz40EZu
/EpwqT33Moof87zmGGuD294RFu9acLd5vl2lzf99OMPeBs580nxxBoZp5MBzT0Yi
XPsxNI2omBAbetkFBIxnAsmSwMLbTBjpgZAbDaKZi+8itSo9+BPsaDMlOjXi8WN5
Fov1ExLzYdxR4sSJWIF8Evxl6ZnRJ2qwPl+no9XLUkNLutQecri1oT/4wUiopJ7n
0ArZcniBkJWlomkLbLhRgBfPqSbUYJ3XRR0juCJFLW+S04VWK3q7oCX8AQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAIL1R/2eWYpARSFMhBgf3+H7S34MB8GA1UdIwQY
MBaAFCN9l/FQjnpEeJn1mlX7iqYkHvUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYt
NDRhNDFhOTMxMTNlLzEvQWd2VkhfWjVaaWtCRklVeUVHQl9mNGZ0TGZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYtNDRhNDFhOTMxMTNl
LzEvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwy/EAwQA
w1XnMA0GCSqGSIb3DQEBCwUAA4IBAQBsaeUxqZjf2S70y91IaqvFtETxROI4ZPDB
+ZQvZBfkIQI9dLgIzdW2HGsHE6q6xQhBMmPhoKqvz/NVpM6GGM26hZjJbXVW3l7k
xsgWxOWom9mu5NlBuL2f0V5di1t5yEb1YTLCyEeWXcjNyczEI0nuFMcg2HKC9Tb8
aKsm1CKl7zF1FhMe6L86WZycaqWHPuy+WEtVtxuCq33SJWifmYZwH9SN0sVTDars
VsM9dlyRk56+XDlLJtrHNNX85qY3cRUkXUEujkah+3za7WsvjFzEvNUof7rtTtZp
LjwokhN6RIqvVIJ3cVmpOSn/w7DxiN7JHluBgXSfwfLAm/q/DfcG
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net