Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/Csk6MxobRULFjoV8vwBDWTrNIjY.roa
File: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (raw, json)
Hash identifier: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=
Subject key identifier: 0A:C9:3A:33:1A:1B:45:42:C5:8E:85:7C:BF:00:43:59:3A:CD:22:36
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 019420D609A892C6C0274E9B52A90FA77730
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/Csk6MxobRULFjoV8vwBDWTrNIjY.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59455
IP address blocks: 46.17.208.0/21 maxlen: 22
185.23.52.0/22 maxlen: 24
185.33.192.0/22 maxlen: 22
185.148.88.0/22 maxlen: 22
2a04:2340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:09:a8:92:c6:c0:27:4e:9b:52:a9:0f:a7:77:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac93a331a1b4542c58e857cbf0043593acd2236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:3d:f8:d9:d4:7a:76:95:f2:52:9c:e0:b8:
67:22:6f:d1:a9:2f:a7:f6:7d:8c:c9:d8:79:71:21:
20:c4:c5:15:e9:e2:1e:86:d8:ae:b7:76:9b:e5:ec:
9c:e7:89:fe:8d:bc:f6:0c:77:9a:35:ce:df:00:e1:
d7:83:01:28:0d:0a:bc:eb:43:b5:bb:06:58:ec:ba:
a0:48:c1:b0:98:66:38:a2:f3:f3:bc:d1:aa:25:38:
27:d2:ec:c5:51:3f:c8:13:e5:61:de:d0:ee:3f:a5:
f6:3b:c7:56:44:a8:91:dd:c1:86:b1:76:4b:e2:47:
40:58:8e:6b:bc:09:9c:95:6d:bb:7a:c3:9c:ba:fa:
b1:8d:dd:5c:0c:5d:fd:b6:4d:ac:86:a2:71:ca:e7:
94:3d:f5:7b:3d:32:16:64:3d:ce:a4:80:bf:b6:db:
11:8f:5d:56:f3:e7:02:7c:29:fb:76:05:76:33:5b:
99:cf:4a:a2:6b:06:4b:55:e0:07:00:28:2c:76:7f:
7e:ba:fb:f8:0f:dd:06:d6:32:8b:39:5c:b6:32:b0:
89:e0:7a:2e:29:d0:dc:0e:a2:2e:2e:ff:05:b7:9f:
6a:7f:39:97:32:5e:80:a7:64:30:1d:dc:20:81:b9:
8a:8b:be:fb:6b:ec:6e:ec:96:2e:95:85:dd:b6:29:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:3A:33:1A:1B:45:42:C5:8E:85:7C:BF:00:43:59:3A:CD:22:36
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/Csk6MxobRULFjoV8vwBDWTrNIjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.208.0/21
185.23.52.0/22
185.33.192.0/22
185.148.88.0/22
IPv6:
2a04:2340::/29
Signature Algorithm: sha256WithRSAEncryption
91:69:9f:2b:38:64:2f:55:56:48:5f:92:b4:17:d6:42:f1:92:
90:e9:69:bb:0e:49:68:ae:71:63:3c:a9:f7:9a:0c:f2:02:2a:
3c:65:69:91:3d:2d:15:d0:53:74:dd:41:ef:2b:c4:bc:ad:29:
2d:95:04:a7:c9:06:9c:04:38:4c:59:da:bf:9d:35:11:99:1c:
c5:fa:0f:e3:5b:a0:c1:d3:7e:1a:bd:22:b2:e6:23:79:2c:b1:
be:0f:39:0f:50:32:09:de:3d:fd:b3:41:73:7f:30:02:6a:af:
81:90:30:77:af:a4:bc:61:3c:c6:52:12:fd:4a:e4:10:24:2d:
a4:1c:a1:6a:ea:69:5e:d7:3d:b0:b6:10:b8:ae:9c:06:44:7e:
01:7e:3f:b4:f2:fd:87:fc:b0:88:39:f8:58:6a:f9:2c:bd:cd:
ea:15:ea:05:ef:e6:c5:6f:15:bf:e0:fd:82:25:10:04:4f:38:
99:1a:c8:98:43:46:f0:42:cb:a2:9b:ff:17:c4:ae:72:21:7a:
44:bb:1a:dc:95:94:8f:2d:d0:f3:2e:5e:c9:38:7b:1d:b4:51:
3d:b3:ff:9b:d8:5c:7e:fb:2f:c2:ee:a5:4f:de:07:9c:2f:a5:
e0:e4:72:cf:cf:e8:98:9a:79:98:c7:9b:b5:36:5d:e5:93:45:
1c:3d:8d:a1
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQg1gmoksbAJ06bUqkPp3cwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz
YmM1ZDkwHhcNMjUwMTAxMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWM5M2EzMzFhMWI0NTQyYzU4ZTg1N2NiZjAwNDM1OTNhY2QyMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8A9+NnUenaV8lKc4LhnIm/RqS+n
9n2Mydh5cSEgxMUV6eIehtiut3ab5eyc54n+jbz2DHeaNc7fAOHXgwEoDQq860O1
uwZY7LqgSMGwmGY4ovPzvNGqJTgn0uzFUT/IE+Vh3tDuP6X2O8dWRKiR3cGGsXZL
4kdAWI5rvAmclW27esOcuvqxjd1cDF39tk2shqJxyueUPfV7PTIWZD3OpIC/ttsR
j11W8+cCfCn7dgV2M1uZz0qiawZLVeAHACgsdn9+uvv4D90G1jKLOVy2MrCJ4Hou
KdDcDqIuLv8Ft59qfzmXMl6Ap2QwHdwggbmKi777a+xu7JYulYXdtikrgwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFArJOjMaG0VCxY6FfL8AQ1k6zSI2MB8GA1UdIwQY
MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt
YmQyZTc3Y2Q0NzkzLzEvQ3NrNk14b2JSVUxGam9WOHZ3QkRXVHJOSWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz
LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhHQAwQC
uRc0AwQCuSHAAwQCuZRYMA0EAgACMAcDBQMqBCNAMA0GCSqGSIb3DQEBCwUAA4IB
AQCRaZ8rOGQvVVZIX5K0F9ZC8ZKQ6Wm7DklornFjPKn3mgzyAio8ZWmRPS0V0FN0
3UHvK8S8rSktlQSnyQacBDhMWdq/nTURmRzF+g/jW6DB034avSKy5iN5LLG+DzkP
UDIJ3j39s0FzfzACaq+BkDB3r6S8YTzGUhL9SuQQJC2kHKFq6mle1z2wthC4rpwG
RH4Bfj+08v2H/LCIOfhYavksvc3qFeoF7+bFbxW/4P2CJRAETziZGsiYQ0bwQsui
m/8XxK5yIXpEuxrclZSPLdDzLl7JOHsdtFE9s/+b2Fx++y/C7qVP3gecL6Xg5HLP
z+iYmnmYx5u1Nl3lk0UcPY2h
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:10 2025 by rpki-client on console.sobornost.net