Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/aBb_QnqfCmFuIbPpQn9d7-oaQds.roa
File: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (raw, json)
Hash identifier: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=
Subject key identifier: 68:16:FF:42:7A:9F:0A:61:6E:21:B3:E9:42:7F:5D:EF:EA:1A:41:DB
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01942067D7B28A1219B99A75C9E91AF27BF3
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/aBb_QnqfCmFuIbPpQn9d7-oaQds.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33844
IP address blocks: 84.252.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d7:b2:8a:12:19:b9:9a:75:c9:e9:1a:f2:7b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6816ff427a9f0a616e21b3e9427f5defea1a41db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:6e:b7:20:c1:90:b2:16:a6:ba:e2:59:f3:
0d:b1:cf:c0:33:cc:7f:3e:d0:08:fa:39:7a:e1:f5:
b9:25:a8:a9:92:d1:40:91:31:c8:69:7b:68:a9:8f:
7a:4c:c3:3e:fc:94:3f:66:3c:3b:23:a2:9d:62:7e:
8c:d1:3b:0a:e3:f6:ce:ba:76:4a:27:16:5d:0c:b0:
01:9a:50:b5:83:95:7a:d8:46:1c:6a:6f:51:e0:cd:
fc:31:1e:5e:9a:8f:43:48:48:b4:4b:fd:76:72:41:
80:a2:ff:6c:32:b7:c8:58:ad:bb:91:cf:d4:e7:2b:
1a:d9:e9:7d:4e:02:32:2d:a7:a4:a6:86:33:1b:06:
00:c1:cb:de:ee:92:79:f0:7e:af:aa:4b:91:59:9f:
90:52:02:d3:8a:0d:ad:60:df:c1:2f:07:76:68:1c:
a4:a1:59:e5:be:28:0a:a9:44:9a:c2:e3:c3:d8:9d:
eb:b4:73:16:77:ff:00:93:c6:53:29:1f:63:6c:8d:
86:e7:3b:ec:12:4f:32:1c:a7:5f:1b:eb:7c:ad:71:
7d:f0:d6:e3:87:70:4b:cb:da:fc:40:00:11:74:9b:
64:c5:86:b7:e9:16:0f:26:da:b1:4f:45:0f:f3:3c:
ab:db:16:0a:49:e6:ad:1e:8b:a9:fd:e5:76:db:59:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:FF:42:7A:9F:0A:61:6E:21:B3:E9:42:7F:5D:EF:EA:1A:41:DB
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/aBb_QnqfCmFuIbPpQn9d7-oaQds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.148.0/24
Signature Algorithm: sha256WithRSAEncryption
23:50:4c:32:18:95:e0:80:ac:96:12:63:d1:df:45:f9:d8:a4:
a1:c7:73:77:e9:60:a3:47:9b:89:a4:3e:3c:a3:e2:33:f0:3e:
1e:41:7c:35:66:47:db:6b:a9:ae:72:21:13:21:32:92:0a:c3:
8b:3e:69:f0:e8:04:5f:1b:40:0e:a5:4f:d8:7a:ce:a0:9c:f8:
75:ea:a3:36:26:5b:40:10:21:73:90:ee:c2:fa:01:35:ad:e1:
b8:24:16:2d:45:8b:83:b5:94:61:5c:7e:96:0c:93:43:d7:5b:
dc:f9:a4:1e:f5:ed:c2:3c:b7:b3:3f:93:e4:13:7d:c8:5c:85:
09:07:93:48:7f:0a:09:8c:c0:9c:80:74:69:f4:f6:47:03:7e:
12:f1:21:3b:0b:8d:a1:9b:ee:47:b6:2d:9b:37:c6:2e:c5:9b:
7e:ab:f5:c5:2d:3e:a0:3f:70:bd:d7:1f:6b:5c:67:44:44:fe:
ff:ed:5b:89:a7:14:88:6f:71:27:5a:10:f1:23:60:a0:a7:ae:
b8:9c:2e:03:a0:02:c7:19:71:7a:ea:3d:8a:85:0c:c1:fd:4c:
31:f5:43:ac:ad:fc:51:be:9e:e1:8f:fc:0b:a0:b1:88:86:91:
cb:bb:53:76:2f:01:88:44:99:ed:56:8b:ed:6b:ad:b8:ae:7b:
d4:99:ca:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9eyihIZuZp1yeka8nvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk
NThjNDYwHhcNMjUwMTAxMDU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODE2ZmY0MjdhOWYwYTYxNmUyMWIzZTk0MjdmNWRlZmVhMWE0MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrNutyDBkLIWprriWfMNsc/AM8x/
PtAI+jl64fW5JaipktFAkTHIaXtoqY96TMM+/JQ/Zjw7I6KdYn6M0TsK4/bOunZK
JxZdDLABmlC1g5V62EYcam9R4M38MR5emo9DSEi0S/12ckGAov9sMrfIWK27kc/U
5ysa2el9TgIyLaekpoYzGwYAwcve7pJ58H6vqkuRWZ+QUgLTig2tYN/BLwd2aByk
oVnlvigKqUSawuPD2J3rtHMWd/8Ak8ZTKR9jbI2G5zvsEk8yHKdfG+t8rXF98Nbj
h3BLy9r8QAARdJtkxYa36RYPJtqxT0UP8zyr2xYKSeatHoup/eV221mWEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGgW/0J6nwphbiGz6UJ/Xe/qGkHbMB8GA1UdIwQY
MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt
N2QxNmI5MGRiZTcyLzEvYUJiX1FucWZDbUZ1SWJQcFFuOWQ3LW9hUWRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy
LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPyUMA0G
CSqGSIb3DQEBCwUAA4IBAQAjUEwyGJXggKyWEmPR30X52KShx3N36WCjR5uJpD48
o+Iz8D4eQXw1Zkfba6muciETITKSCsOLPmnw6ARfG0AOpU/Yes6gnPh16qM2JltA
ECFzkO7C+gE1reG4JBYtRYuDtZRhXH6WDJND11vc+aQe9e3CPLezP5PkE33IXIUJ
B5NIfwoJjMCcgHRp9PZHA34S8SE7C42hm+5Hti2bN8YuxZt+q/XFLT6gP3C91x9r
XGdERP7/7VuJpxSIb3EnWhDxI2Cgp664nC4DoALHGXF66j2KhQzB/Uwx9UOsrfxR
vp7hj/wLoLGIhpHLu1N2LwGIRJntVovta624rnvUmcpA
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net