Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/AtEE45wMuuWclU17cb1kVGtiK-k.roa
File: AtEE45wMuuWclU17cb1kVGtiK-k.roa (raw, json)
Hash identifier: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=
Subject key identifier: 02:D1:04:E3:9C:0C:BA:E5:9C:95:4D:7B:71:BD:64:54:6B:62:2B:E9
Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial: 019420D5CE3F2E911820E1164D1E49629CD4
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/AtEE45wMuuWclU17cb1kVGtiK-k.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59471
IP address blocks: 185.99.192.0/22 maxlen: 22
194.153.107.0/24 maxlen: 24
195.74.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ce:3f:2e:91:18:20:e1:16:4d:1e:49:62:9c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02d104e39c0cbae59c954d7b71bd64546b622be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:f2:c9:cf:f7:90:c3:53:05:7e:4a:fa:16:
41:7b:ff:16:f7:78:eb:06:cb:b9:32:42:3b:a2:4b:
9b:50:96:24:3a:5b:b5:81:ec:ea:4d:8d:44:93:d7:
48:8d:ec:ce:c9:a0:e9:16:87:94:11:f1:7a:f7:44:
c1:f6:51:38:fe:f3:a5:d5:5b:ca:01:a1:b8:c1:b3:
50:e0:ad:25:c9:d3:e9:b0:2f:d6:47:21:a9:41:95:
19:4a:03:35:7a:be:33:88:e6:82:e6:4f:dd:9e:1c:
46:4a:ba:e2:7d:5c:2b:39:cd:ea:f1:f3:e6:11:ee:
0e:09:74:ef:49:d2:7b:3d:d9:66:1b:7b:d1:ab:d9:
ea:91:98:20:be:48:41:57:9e:ae:02:f9:18:62:71:
1d:9b:9c:65:7b:a4:75:4d:73:48:9b:f7:76:e9:7a:
5a:02:3f:62:8c:61:f8:f5:e4:56:9d:ce:e2:5c:7d:
54:b4:24:58:37:14:df:6e:85:e5:18:36:fd:c6:43:
e4:f6:44:db:d8:77:bf:81:43:0a:3e:af:83:b9:64:
5e:ff:6e:ba:35:86:7d:08:bb:5e:78:66:c3:46:f3:
4e:53:9c:6e:c5:20:99:a9:2a:0b:a7:2b:a4:17:4b:
6f:02:b3:c7:54:30:80:dc:dc:d7:47:e8:c7:1b:e8:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:04:E3:9C:0C:BA:E5:9C:95:4D:7B:71:BD:64:54:6B:62:2B:E9
X509v3 Authority Key Identifier:
keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/AtEE45wMuuWclU17cb1kVGtiK-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.192.0/22
194.153.107.0/24
195.74.64.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fc:7e:1f:7b:19:07:2b:8e:7d:fd:df:07:29:11:1e:f9:26:
f3:a1:e4:78:ca:6e:24:8f:dc:94:16:9d:eb:a0:f9:c9:1f:48:
d8:cc:56:30:eb:e1:45:69:2b:f8:02:7f:01:14:5a:52:b5:d3:
94:7e:39:f2:cf:75:62:0b:ed:02:c8:3c:7c:af:3b:b3:a7:42:
6a:48:40:a9:84:1d:bc:a0:36:d1:ae:59:66:32:6c:36:7b:ae:
ca:4f:62:5f:ae:4a:25:cb:ad:76:0a:bb:65:f8:09:6e:9e:08:
43:91:7b:cd:ed:ff:81:fa:d8:cc:ef:35:17:f4:58:2d:9c:4c:
b2:4b:98:86:f4:a0:b9:5b:9a:05:1e:41:10:44:c4:62:a2:33:
14:d6:83:77:56:f3:66:ec:06:e8:7b:2f:14:e3:f8:55:15:b2:
1c:40:29:9a:dc:72:0f:28:4f:40:bc:ff:cd:c6:20:ef:14:8d:
b6:d8:b6:d1:83:6d:ac:00:de:45:3b:a8:42:11:0e:dd:ea:f3:
0b:55:5a:e1:a3:10:9d:cc:73:93:69:64:57:23:98:8a:2f:60:
60:be:54:70:85:73:db:ae:80:76:25:f6:fa:34:c4:90:90:33:
95:1c:da:1a:39:d1:93:dd:f1:f6:5b:ee:9d:53:42:4e:b5:fb:
e8:46:68:f4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQg1c4/LpEYIOEWTR5JYpzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3
MTA4NWYwHhcNMjUwMTAxMDc0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmQxMDRlMzljMGNiYWU1OWM5NTRkN2I3MWJkNjQ1NDZiNjIyYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwzyyc/3kMNTBX5K+hZBe/8W93jr
Bsu5MkI7okubUJYkOlu1gezqTY1Ek9dIjezOyaDpFoeUEfF690TB9lE4/vOl1VvK
AaG4wbNQ4K0lydPpsC/WRyGpQZUZSgM1er4ziOaC5k/dnhxGSrrifVwrOc3q8fPm
Ee4OCXTvSdJ7PdlmG3vRq9nqkZggvkhBV56uAvkYYnEdm5xle6R1TXNIm/d26Xpa
Aj9ijGH49eRWnc7iXH1UtCRYNxTfboXlGDb9xkPk9kTb2He/gUMKPq+DuWRe/266
NYZ9CLteeGbDRvNOU5xuxSCZqSoLpyukF0tvArPHVDCA3NzXR+jHG+i8xwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFALRBOOcDLrlnJVNe3G9ZFRrYivpMB8GA1UdIwQY
MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt
OTI3MTliMDBiYmQ0LzEvQXRFRTQ1d011dVdjbFUxN2NiMWtWR3RpSy1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0
LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuWPAAwQA
wplrAwQAw0pAMA0GCSqGSIb3DQEBCwUAA4IBAQCF/H4fexkHK459/d8HKREe+Sbz
oeR4ym4kj9yUFp3roPnJH0jYzFYw6+FFaSv4An8BFFpStdOUfjnyz3ViC+0CyDx8
rzuzp0JqSECphB28oDbRrllmMmw2e67KT2Jfrkoly612Crtl+AlunghDkXvN7f+B
+tjM7zUX9FgtnEyyS5iG9KC5W5oFHkEQRMRiojMU1oN3VvNm7Aboey8U4/hVFbIc
QCma3HIPKE9AvP/NxiDvFI222LbRg22sAN5FO6hCEQ7d6vMLVVrhoxCdzHOTaWRX
I5iKL2BgvlRwhXPbroB2Jfb6NMSQkDOVHNoaOdGT3fH2W+6dU0JOtfvoRmj0
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net