Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/nnFLZYtjtx-X0WRobB_f15ily1s.roa
File: nnFLZYtjtx-X0WRobB_f15ily1s.roa (raw, json)
Hash identifier: Tzdy7+8EMdLR1O65cNg5h5JGGJxkW4u3GOZ3xfXLOic=
Subject key identifier: 9E:71:4B:65:8B:63:B7:1F:97:D1:64:68:6C:1F:DF:D7:98:A5:CB:5B
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B228DD9177FB4ACE524C14F07EA527
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/nnFLZYtjtx-X0WRobB_f15ily1s.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9069
IP address blocks: 83.212.64.0/22 maxlen: 22
195.130.96.0/20 maxlen: 20
195.251.64.0/19 maxlen: 19
2001:648:2330::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:28:dd:91:77:fb:4a:ce:52:4c:14:f0:7e:a5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e714b658b63b71f97d164686c1fdfd798a5cb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:13:b9:e6:02:1f:8a:e7:47:9f:7f:26:c2:
b2:9d:59:71:e1:0b:75:2b:98:4b:9d:47:ab:5c:bc:
9a:8f:d1:8f:2d:38:3d:1b:dc:45:e3:eb:c8:6f:f3:
f3:61:f1:af:db:b7:5d:13:b4:41:a4:27:0a:08:26:
78:f4:68:77:dd:bf:2d:6f:d8:d1:fc:fd:d3:20:91:
95:a0:90:46:28:07:c9:7a:c6:1f:e7:8c:f1:32:88:
98:66:2f:e1:05:9f:b9:02:c5:57:86:10:1c:c6:4d:
60:6c:d8:53:61:62:bd:3e:23:8b:eb:50:41:00:84:
50:d1:b7:2f:07:b7:99:46:97:56:d9:fa:0d:2e:7f:
22:09:2d:59:84:e0:d2:fd:67:96:f6:a7:d8:eb:54:
98:ce:49:7d:27:bb:30:9e:f6:31:b6:52:5d:ce:65:
12:43:92:cc:c6:d9:77:c5:2a:d8:d7:22:d1:92:22:
55:95:4d:a8:11:5d:bd:30:78:1f:94:9e:3b:66:ed:
71:b1:53:99:c2:ec:5f:3d:19:a8:40:12:8e:23:a6:
2e:a8:62:d9:c5:c2:84:b0:40:97:82:07:be:71:a6:
f0:f6:ca:0c:95:75:7d:e5:39:96:4b:2b:bb:6f:fa:
4d:f1:f6:37:9d:77:42:cd:15:b5:b0:1d:27:0f:c7:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:71:4B:65:8B:63:B7:1F:97:D1:64:68:6C:1F:DF:D7:98:A5:CB:5B
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/nnFLZYtjtx-X0WRobB_f15ily1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.64.0/22
195.130.96.0/20
195.251.64.0/19
IPv6:
2001:648:2330::/48
Signature Algorithm: sha256WithRSAEncryption
98:7e:30:ef:6f:49:2f:e4:f3:a4:ea:36:9b:0f:b7:6c:37:e6:
23:9c:34:25:83:8f:ff:74:29:04:76:1d:40:a1:30:58:35:44:
ea:16:8f:0a:b1:1c:42:5a:ca:cc:16:f2:40:c5:70:31:44:f2:
c6:f9:ab:80:97:8c:9f:08:a1:cd:28:f1:bd:c2:c3:bf:e0:e1:
42:80:24:bf:24:d3:91:f9:98:15:b0:57:59:d1:75:39:11:96:
da:93:64:fc:73:1a:e3:f9:b0:7a:97:36:53:2f:4a:fb:34:23:
9f:a3:e4:23:39:98:45:23:ed:72:99:f5:6f:16:9f:bf:db:27:
7f:04:6d:c8:77:7f:7c:61:ab:2e:fa:20:00:a8:f4:42:5e:f2:
3c:99:30:3c:2c:de:d8:d5:07:c2:c8:d6:1d:c8:8a:bf:38:48:
ca:d8:33:c3:71:cb:e1:b5:a3:23:97:1f:92:1a:80:ee:8d:43:
28:97:01:aa:45:31:8c:d0:97:66:ce:61:5e:1c:d4:83:b5:df:
56:44:55:53:d1:25:01:7e:8f:a7:cb:3f:2a:ed:b7:1f:a3:5b:
fb:08:33:56:3c:46:1d:e4:4b:a5:51:05:a7:49:3b:7b:a1:b6:
ee:7c:00:3f:88:cc:b8:33:be:9f:c8:99:d9:6e:5e:cc:b1:2c:
64:cc:50:7d
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQhsijdkXf7Ss5STBTwfqUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjUwMTAxMTE0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTcxNGI2NThiNjNiNzFmOTdkMTY0Njg2YzFmZGZkNzk4YTVjYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpITueYCH4rnR59/JsKynVlx4Qt1
K5hLnUerXLyaj9GPLTg9G9xF4+vIb/PzYfGv27ddE7RBpCcKCCZ49Gh33b8tb9jR
/P3TIJGVoJBGKAfJesYf54zxMoiYZi/hBZ+5AsVXhhAcxk1gbNhTYWK9PiOL61BB
AIRQ0bcvB7eZRpdW2foNLn8iCS1ZhODS/WeW9qfY61SYzkl9J7swnvYxtlJdzmUS
Q5LMxtl3xSrY1yLRkiJVlU2oEV29MHgflJ47Zu1xsVOZwuxfPRmoQBKOI6YuqGLZ
xcKEsECXgge+cabw9soMlXV95TmWSyu7b/pN8fY3nXdCzRW1sB0nD8c60wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFJ5xS2WLY7cfl9FkaGwf39eYpctbMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvbm5GTFpZdGp0eC1YMFdSb2JCX2YxNWlseTFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCU9RAAwQE
w4JgAwQFw/tAMA8EAgACMAkDBwAgAQZIIzAwDQYJKoZIhvcNAQELBQADggEBAJh+
MO9vSS/k86TqNpsPt2w35iOcNCWDj/90KQR2HUChMFg1ROoWjwqxHEJayswW8kDF
cDFE8sb5q4CXjJ8Ioc0o8b3Cw7/g4UKAJL8k05H5mBWwV1nRdTkRltqTZPxzGuP5
sHqXNlMvSvs0I5+j5CM5mEUj7XKZ9W8Wn7/bJ38Ebch3f3xhqy76IACo9EJe8jyZ
MDws3tjVB8LI1h3Iir84SMrYM8Nxy+G1oyOXH5IagO6NQyiXAapFMYzQl2bOYV4c
1IO131ZEVVPRJQF+j6fLPyrttx+jW/sIM1Y8Rh3kS6VRBadJO3uhtu58AD+IzLgz
vp/ImdluXsyxLGTMUH0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net