Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PzxtjQLRbDzKTF6eTRyA_Jbk0Is.roa
File: PzxtjQLRbDzKTF6eTRyA_Jbk0Is.roa (raw, json)
Hash identifier: USJyoDG3FS52nD4hTy7G3N9TOPKMKG7O2Pux05kXy+E=
Subject key identifier: 3F:3C:6D:8D:02:D1:6C:3C:CA:4C:5E:9E:4D:1C:80:FC:96:E4:D0:8B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019620A91079F3D6CF771928F8C138EA55F4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PzxtjQLRbDzKTF6eTRyA_Jbk0Is.roa
Signing time: Thu 10 Apr 2025 17:04:32 +0000
ROA not before: Thu 10 Apr 2025 17:04:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:a9:10:79:f3:d6:cf:77:19:28:f8:c1:38:ea:55:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 10 17:04:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f3c6d8d02d16c3cca4c5e9e4d1c80fc96e4d08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:a1:4e:92:c5:46:63:d9:d1:d2:33:d9:bd:
34:44:5b:f2:d2:f2:e6:4b:e4:c2:0d:8f:6b:31:af:
ca:03:e8:3b:35:7b:a6:d2:74:a1:00:ca:b8:b0:8a:
24:fc:cb:28:e5:94:93:a2:dc:cf:a6:a3:31:11:88:
c0:fa:33:4f:00:44:ee:8b:25:c7:1f:32:52:bf:61:
37:17:c6:bc:f8:1d:89:50:b1:98:1e:51:02:49:3e:
66:a6:82:eb:05:1c:0d:80:c4:b0:5e:52:1f:c6:9d:
72:8c:19:48:fa:88:e2:be:84:02:ee:23:9a:c0:ee:
f2:43:2b:eb:0f:8b:00:6d:ec:a1:9a:3c:7c:66:a1:
46:8e:72:d6:dd:17:c4:85:07:80:f4:ac:59:16:2d:
df:43:2b:c2:21:ea:9b:81:64:4c:01:3c:67:f7:40:
c3:44:53:52:29:ef:2b:1d:cb:1e:03:fa:6f:83:b8:
0f:82:ba:69:a6:0e:4d:45:ac:61:08:53:e6:60:a3:
fd:44:f2:00:83:1a:26:41:0e:8b:21:11:3e:7e:27:
dc:a7:86:61:89:42:8b:9f:75:db:c8:d1:de:72:48:
01:02:44:b3:b7:0b:d5:5a:37:e8:71:0d:96:1d:b3:
06:8b:82:24:f2:83:32:0b:9f:ad:4a:20:11:3f:bb:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:6D:8D:02:D1:6C:3C:CA:4C:5E:9E:4D:1C:80:FC:96:E4:D0:8B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PzxtjQLRbDzKTF6eTRyA_Jbk0Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.131.215.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.146.131.0/24
45.152.208.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.126.64.0/24
185.126.66.0/24
193.8.215.0/24
193.23.245.0/24
193.27.19.0/24
194.33.29.0/24
195.158.192.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
50:56:98:1f:bf:76:b5:15:62:4e:47:b2:e8:c8:29:3a:f2:d4:
6d:7e:35:04:0a:a9:07:d2:34:e6:d8:23:23:7f:d8:16:91:0a:
3f:98:a9:a0:60:11:b3:4a:68:55:65:b2:22:e2:6c:c7:b2:5d:
58:6b:ef:71:e6:1b:f9:6e:54:90:74:a6:55:e1:ea:98:26:10:
23:36:db:3a:eb:6d:ce:6f:d5:5d:26:b9:fb:8f:51:56:59:39:
61:01:b3:75:26:67:a4:16:ec:bf:07:fe:44:f6:d8:5b:e4:a7:
20:73:e9:8a:17:53:11:e6:bd:eb:b5:b8:ae:3d:32:94:ee:0d:
a8:55:43:c6:be:63:bc:87:2f:3d:a5:1e:4c:6a:c7:1a:d2:e3:
4c:07:95:68:a7:4f:6f:3e:08:b3:7c:e1:30:de:bb:ef:29:d7:
c9:73:1c:8c:56:03:f4:24:31:a8:d4:80:73:89:27:df:1a:40:
fc:78:22:b2:98:6b:c4:d6:9f:d4:48:c4:93:3e:92:7e:49:fe:
b3:60:88:62:1f:88:5c:ed:74:13:7d:e3:ab:70:56:ab:4a:14:
f7:fa:81:53:3c:a6:1e:60:eb:35:76:d2:e4:89:4d:f0:87:9b:
4b:05:51:36:ad:c9:49:c7:4f:c4:73:01:67:8f:40:ce:db:56:
ab:a1:03:8f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZYgqRB589bPdxko+ME46lX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNDEwMTcwNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjNjNmQ4ZDAyZDE2YzNjY2E0YzVlOWU0ZDFjODBmYzk2ZTRkMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FmhTpLFRmPZ0dIz2b00RFvy0vLm
S+TCDY9rMa/KA+g7NXum0nShAMq4sIok/Mso5ZSTotzPpqMxEYjA+jNPAETuiyXH
HzJSv2E3F8a8+B2JULGYHlECST5mpoLrBRwNgMSwXlIfxp1yjBlI+ojivoQC7iOa
wO7yQyvrD4sAbeyhmjx8ZqFGjnLW3RfEhQeA9KxZFi3fQyvCIeqbgWRMATxn90DD
RFNSKe8rHcseA/pvg7gPgrpppg5NRaxhCFPmYKP9RPIAgxomQQ6LIRE+fifcp4Zh
iUKLn3XbyNHeckgBAkSztwvVWjfocQ2WHbMGi4Ik8oMyC5+tSiARP7sWcQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFD88bY0C0Ww8ykxenk0cgPyW5NCLMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUHp4dGpRTFJiRHpLVEY2ZVRSeUFfSmJrMElzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTCBhAQCAAEwfgMEAC0J
dQMEAC1fYAMEAC12+AMEAC2CPAMEAC2D1wMEAC2JUQMEAC2MDQMEAC2NsQMEAC2S
gwMEAC2Y0AMEAFXRgAMEAGdyKwMEAHEemgMEALl6qwMEALl+QAMEALl+QgMEAMEI
1wMEAMEX9QMEAMEbEwMEAMIhHQMEAMOewDAYBAIAAjASAwcAKgx4hgEFAwcAKg/n
xhAAMA0GCSqGSIb3DQEBCwUAA4IBAQBQVpgfv3a1FWJOR7LoyCk68tRtfjUECqkH
0jTm2CMjf9gWkQo/mKmgYBGzSmhVZbIi4mzHsl1Ya+9x5hv5blSQdKZV4eqYJhAj
Nts6623Ob9VdJrn7j1FWWTlhAbN1JmekFuy/B/5E9thb5Kcgc+mKF1MR5r3rtbiu
PTKU7g2oVUPGvmO8hy89pR5Masca0uNMB5Vop09vPgizfOEw3rvvKdfJcxyMVgP0
JDGo1IBziSffGkD8eCKymGvE1p/USMSTPpJ+Sf6zYIhiH4hc7XQTfeOrcFarShT3
+oFTPKYeYOs1dtLkiU3wh5tLBVE2rclJx0/EcwFnj0DO21aroQOP
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net