Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/56-grqWuHjTPmkYLHRFcR5-Ux58.roa
File: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (raw, json)
Hash identifier: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=
Subject key identifier: E7:AF:A0:AE:A5:AE:1E:34:CF:9A:46:0B:1D:11:5C:47:9F:94:C7:9F
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 01956BCEA72AD315D26D9617E86D02CC329F
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/56-grqWuHjTPmkYLHRFcR5-Ux58.roa
Signing time: Thu 06 Mar 2025 14:14:20 +0000
ROA not before: Thu 06 Mar 2025 14:14:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 85.192.48.0/24 maxlen: 24
85.192.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:ce:a7:2a:d3:15:d2:6d:96:17:e8:6d:02:cc:32:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Mar 6 14:14:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7afa0aea5ae1e34cf9a460b1d115c479f94c79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:4d:ff:4f:2e:3d:4b:c3:87:fd:07:67:bc:
b9:d3:de:82:ea:6c:b9:a0:0d:8c:5d:ba:07:62:d6:
2f:c5:c1:37:d7:50:9c:42:66:86:62:a1:6a:9b:5d:
9b:e0:39:15:c3:60:ba:3b:96:18:41:d0:34:48:84:
c5:20:a9:6d:6b:a9:19:bb:42:b0:4f:77:7b:eb:cb:
55:8b:57:5e:b9:a0:98:e4:c6:01:26:02:2c:33:f8:
e5:1c:82:49:f7:fc:04:ec:9c:28:85:01:e3:25:97:
4d:9e:05:8a:68:c5:2b:9d:d2:fa:12:f6:88:1b:2b:
00:4a:8b:fc:67:ea:85:ea:fe:73:9a:e6:44:3f:91:
cd:57:cc:94:a7:3e:3c:45:84:3c:86:ba:f3:4c:25:
59:b5:3e:71:fc:86:27:0b:2d:ff:4f:28:07:a0:8b:
5e:8b:86:2b:b4:71:cf:85:27:ea:ed:90:4a:e0:90:
f6:11:f5:21:0d:39:19:f5:6b:6b:cc:25:28:4b:ea:
3d:40:bd:b8:07:89:42:93:27:8b:08:14:94:1c:c1:
89:37:83:35:38:5d:47:f5:60:10:6a:dd:cb:87:9e:
58:eb:bf:96:20:88:d7:da:40:02:c2:5d:59:c1:54:
4c:35:9e:88:2a:9f:d7:84:a1:34:2a:b3:21:6e:c6:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AF:A0:AE:A5:AE:1E:34:CF:9A:46:0B:1D:11:5C:47:9F:94:C7:9F
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/56-grqWuHjTPmkYLHRFcR5-Ux58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.192.48.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:42:af:df:ea:ac:62:20:01:ea:ca:e1:9c:8b:2b:c9:72:04:
4d:2e:24:d8:96:be:5f:fc:ae:01:47:28:ab:ab:38:60:6e:cb:
d5:f1:90:5c:1c:c3:a2:a3:40:7d:84:ba:4c:bb:f5:c1:40:a2:
6b:5b:6c:b2:93:ad:59:c5:32:dc:1a:45:51:db:10:9a:2b:29:
25:35:88:a1:b4:82:3a:0d:2c:d8:76:fc:2d:8c:61:dd:64:f6:
50:1e:9f:8b:80:a2:58:ba:27:8e:26:8a:5e:48:06:36:c7:08:
2c:16:26:1d:22:5d:5d:b9:ae:05:77:15:1b:47:65:80:0a:97:
60:ce:c5:d6:de:1f:84:e9:7b:80:60:13:4b:84:1c:b7:55:00:
86:e9:6b:1d:f5:81:4d:20:87:77:64:da:7d:6f:19:45:97:07:
43:e8:b4:74:a1:4a:df:38:7a:73:36:e4:2a:bb:e4:e2:88:6a:
0f:8c:f2:c3:6d:b1:ed:9d:46:8e:6b:ca:94:f0:8d:50:4e:c1:
fb:70:9e:a9:81:f8:65:b6:47:ff:21:aa:33:8f:73:4d:eb:c5:
8e:f7:46:da:fe:e0:11:4b:c1:2a:ec:c9:6a:b2:e7:d2:6e:9c:
be:8a:93:92:ce:b6:c0:9f:00:51:ca:b6:85:97:8f:fd:3a:72:
1f:df:c3:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVrzqcq0xXSbZYX6G0CzDKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj
M2M1MmMwHhcNMjUwMzA2MTQxNDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2FmYTBhZWE1YWUxZTM0Y2Y5YTQ2MGIxZDExNWM0NzlmOTRjNzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34xN/08uPUvDh/0HZ7y5096C6my5
oA2MXboHYtYvxcE311CcQmaGYqFqm12b4DkVw2C6O5YYQdA0SITFIKlta6kZu0Kw
T3d768tVi1deuaCY5MYBJgIsM/jlHIJJ9/wE7JwohQHjJZdNngWKaMUrndL6EvaI
GysASov8Z+qF6v5zmuZEP5HNV8yUpz48RYQ8hrrzTCVZtT5x/IYnCy3/TygHoIte
i4YrtHHPhSfq7ZBK4JD2EfUhDTkZ9WtrzCUoS+o9QL24B4lCkyeLCBSUHMGJN4M1
OF1H9WAQat3Lh55Y67+WIIjX2kACwl1ZwVRMNZ6IKp/XhKE0KrMhbsZHrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOevoK6lrh40z5pGCx0RXEeflMefMB8GA1UdIwQY
MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt
Yjc2MmMwMTc1ZjI3LzEvNTYtZ3JxV3VIalRQbWtZTEhSRmNSNS1VeDU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3
LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVcAwMA0G
CSqGSIb3DQEBCwUAA4IBAQAsQq/f6qxiIAHqyuGciyvJcgRNLiTYlr5f/K4BRyir
qzhgbsvV8ZBcHMOio0B9hLpMu/XBQKJrW2yyk61ZxTLcGkVR2xCaKyklNYihtII6
DSzYdvwtjGHdZPZQHp+LgKJYuieOJopeSAY2xwgsFiYdIl1dua4FdxUbR2WACpdg
zsXW3h+E6XuAYBNLhBy3VQCG6Wsd9YFNIId3ZNp9bxlFlwdD6LR0oUrfOHpzNuQq
u+TiiGoPjPLDbbHtnUaOa8qU8I1QTsH7cJ6pgfhltkf/Iaozj3NN68WO90ba/uAR
S8Eq7MlqsufSbpy+ipOSzrbAnwBRyraFl4/9OnIf38OY
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net