Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0kDZEzjqQCt0ZFnWYLrvqiZR5eg.roa
File: 0kDZEzjqQCt0ZFnWYLrvqiZR5eg.roa (raw, json)
Hash identifier: 9UtYa2I4YFMP0zXUKL4fEXlEXLbbSYIUmAEFMSOmfs8=
Subject key identifier: D2:40:D9:13:38:EA:40:2B:74:64:59:D6:60:BA:EF:AA:26:51:E5:E8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01960C0EF8B70733B3155D995A17CEC281FC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0kDZEzjqQCt0ZFnWYLrvqiZR5eg.roa
Signing time: Sun 06 Apr 2025 17:03:49 +0000
ROA not before: Sun 06 Apr 2025 17:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25693
IP address blocks: 193.58.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:0e:f8:b7:07:33:b3:15:5d:99:5a:17:ce:c2:81:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 6 17:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d240d91338ea402b746459d660baefaa2651e5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:58:15:30:bf:96:96:ba:80:b4:89:ee:ef:
75:6e:56:48:8f:22:44:e2:f7:22:e9:5f:c6:eb:95:
8e:55:2b:ed:1d:1b:6e:5e:ce:a7:2c:e2:f6:ab:5a:
66:fe:18:34:7f:ed:5b:57:25:12:02:49:06:d5:bd:
b6:1d:f2:e7:c9:49:d6:62:f9:f5:c5:c2:1d:56:65:
95:db:95:c3:44:74:da:3a:b9:60:c1:73:0f:25:18:
e7:45:5d:40:78:69:92:07:0d:08:ed:b5:4c:ef:45:
aa:a8:31:e6:1d:ea:60:56:0e:36:e3:8c:33:40:51:
b1:87:09:07:ab:0f:10:90:10:2a:eb:62:00:57:ef:
01:2f:04:f4:18:74:b2:a1:0f:73:90:2a:6b:47:15:
41:2d:9e:a2:d6:05:09:8e:8d:bd:9a:c3:55:6c:57:
76:99:34:e7:97:bb:64:34:23:aa:99:f9:8e:a9:38:
ca:df:c1:d3:8d:51:8d:68:12:60:6f:d8:05:be:b3:
8c:2f:72:47:1d:3b:7b:fc:84:f1:d3:22:f8:64:a6:
1f:c8:95:b0:f9:da:10:be:dd:1d:2e:81:88:c5:7d:
56:3e:bf:04:06:c2:b6:bf:36:b8:75:e7:51:80:5b:
00:e8:48:3d:e9:b5:ef:20:c6:09:ab:61:51:c6:f5:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:40:D9:13:38:EA:40:2B:74:64:59:D6:60:BA:EF:AA:26:51:E5:E8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0kDZEzjqQCt0ZFnWYLrvqiZR5eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:70:b3:d0:70:ea:57:2f:aa:a3:df:bd:04:00:98:9f:05:b8:
f2:56:3c:ee:8d:57:77:b6:bf:75:c0:07:06:f9:3a:02:35:e8:
fe:72:f0:98:a0:c5:3f:81:16:3e:00:6a:82:7b:d4:40:0e:29:
ef:1e:0d:22:20:11:86:8f:0d:cb:02:80:70:c9:ed:4f:6d:53:
72:4d:06:9a:05:43:71:79:11:81:90:d2:d6:ac:91:7c:16:0c:
d8:f8:b1:8a:fa:15:48:0d:3f:87:59:bf:25:e0:05:14:3e:74:
b1:b6:06:82:dd:d2:76:7a:76:4b:1e:87:f1:a8:a8:e5:0b:64:
29:d8:bd:07:e9:04:25:82:da:36:63:ef:32:eb:b7:67:f3:81:
72:9a:b8:26:02:05:2a:21:95:80:a0:10:cb:fd:50:36:7e:46:
81:14:a2:72:62:28:ee:c2:de:0b:88:e2:b7:2c:20:f3:69:6e:
a9:7b:d5:b1:48:27:9d:a6:65:f2:e9:7c:30:01:0b:62:00:0f:
f5:e2:91:d4:07:f5:27:ac:0a:92:f2:4a:ee:d0:f5:d3:67:87:
14:ba:7a:0d:f9:f6:e7:fb:24:c9:5e:bc:da:56:d3:a6:08:cc:
f5:76:01:e0:11:07:5e:3d:37:d6:19:9f:96:a4:0b:ae:51:cf:
9b:9c:6b:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYMDvi3BzOzFV2ZWhfOwoH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwNDA2MTcwMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjQwZDkxMzM4ZWE0MDJiNzQ2NDU5ZDY2MGJhZWZhYTI2NTFlNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8hYFTC/lpa6gLSJ7u91blZIjyJE
4vci6V/G65WOVSvtHRtuXs6nLOL2q1pm/hg0f+1bVyUSAkkG1b22HfLnyUnWYvn1
xcIdVmWV25XDRHTaOrlgwXMPJRjnRV1AeGmSBw0I7bVM70WqqDHmHepgVg4244wz
QFGxhwkHqw8QkBAq62IAV+8BLwT0GHSyoQ9zkCprRxVBLZ6i1gUJjo29msNVbFd2
mTTnl7tkNCOqmfmOqTjK38HTjVGNaBJgb9gFvrOML3JHHTt7/ITx0yL4ZKYfyJWw
+doQvt0dLoGIxX1WPr8EBsK2vza4dedRgFsA6Eg96bXvIMYJq2FRxvWI1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJA2RM46kArdGRZ1mC676omUeXoMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvMGtEWkV6anFRQ3QwWkZuV1lMcnZxaVpSNWVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTqTMA0G
CSqGSIb3DQEBCwUAA4IBAQCkcLPQcOpXL6qj370EAJifBbjyVjzujVd3tr91wAcG
+ToCNej+cvCYoMU/gRY+AGqCe9RADinvHg0iIBGGjw3LAoBwye1PbVNyTQaaBUNx
eRGBkNLWrJF8FgzY+LGK+hVIDT+HWb8l4AUUPnSxtgaC3dJ2enZLHofxqKjlC2Qp
2L0H6QQlgto2Y+8y67dn84FymrgmAgUqIZWAoBDL/VA2fkaBFKJyYijuwt4LiOK3
LCDzaW6pe9WxSCedpmXy6XwwAQtiAA/14pHUB/UnrAqS8kru0PXTZ4cUunoN+fbn
+yTJXrzaVtOmCMz1dgHgEQdePTfWGZ+WpAuuUc+bnGsm
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net