Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa
File: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (raw, json)
Hash identifier: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=
Subject key identifier: A8:CC:67:8D:4D:32:D8:18:AB:5B:C3:2C:A1:FD:49:7F:49:CF:57:A6
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 01942068431002853828BE8169EEECB9F6E5
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209912
IP address blocks: 37.44.232.0/22 maxlen: 22
37.44.232.0/24 maxlen: 24
37.44.233.0/24 maxlen: 24
37.44.234.0/24 maxlen: 24
37.44.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:43:10:02:85:38:28:be:81:69:ee:ec:b9:f6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8cc678d4d32d818ab5bc32ca1fd497f49cf57a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:4f:4c:b6:62:7c:01:47:c1:3e:a7:34:4d:
7c:b9:d9:c2:68:55:4d:0c:51:a3:d8:ed:0b:24:02:
7f:e4:01:3c:03:34:ed:ae:e7:48:f1:ba:fa:a2:2d:
36:fb:f2:94:c0:56:70:78:42:e4:83:6d:c0:0e:78:
5d:d7:74:49:e6:5b:6b:b6:f3:7f:e4:11:a0:08:fa:
de:b1:ab:8d:e7:ce:87:1d:7e:26:9f:3c:48:8e:7d:
92:5b:4c:7d:86:7e:fe:df:9b:c0:84:06:57:d1:88:
e2:41:1f:78:11:d1:a7:4a:fd:eb:c3:9d:87:50:1b:
21:70:c3:44:28:a4:bc:73:f0:cf:47:8e:90:0b:8c:
c4:41:04:cb:53:4a:ea:ec:01:dd:df:0f:f5:ab:d4:
0c:ba:d5:e7:30:e0:0c:3a:b1:35:4e:2b:68:2d:c5:
02:dd:8c:6f:b4:89:60:e5:3f:d1:6c:fe:0a:69:9e:
04:90:35:b5:b3:f2:ed:a9:1e:94:90:e7:4c:da:96:
89:c1:eb:2c:0b:d4:c5:5f:1a:69:cf:95:79:42:a5:
9f:40:a6:6e:fe:42:71:61:2d:16:35:45:37:6e:98:
d0:91:6b:9b:90:1b:26:e6:12:c7:df:b1:41:6e:88:
32:85:e8:ca:8a:eb:fd:c2:52:1a:17:97:40:b8:1e:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:67:8D:4D:32:D8:18:AB:5B:C3:2C:A1:FD:49:7F:49:CF:57:A6
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.232.0/22
Signature Algorithm: sha256WithRSAEncryption
64:32:3c:ab:2f:7a:a8:6b:bd:8e:f5:4b:a8:a8:96:2e:33:82:
a9:a1:6d:2e:b0:76:b2:1f:82:ed:1a:25:ab:0e:fe:e1:a4:ea:
50:d8:d0:dc:f6:5b:be:09:00:6c:9b:e1:16:ce:f1:d3:3d:f6:
80:2b:f3:4b:e6:65:04:2e:54:d0:23:74:e5:08:4c:f7:9d:c7:
16:8d:59:24:45:bf:47:9d:c6:06:5a:a1:57:a9:ea:d9:d7:17:
4f:dc:c5:0d:44:9f:d0:51:c0:e4:ed:89:44:fd:ba:6c:5b:59:
da:43:67:c1:66:07:e7:64:a4:12:1b:36:9a:e3:85:e4:fc:b2:
5d:af:2d:74:b1:53:72:7a:9d:80:3d:91:42:e6:b1:cd:83:c7:
00:a6:06:c8:6c:51:18:ca:cc:86:23:67:d5:dd:8a:d4:ad:d6:
ff:03:de:08:26:95:f4:ce:93:9f:3f:05:d7:97:03:e0:7f:53:
8b:c4:1e:12:87:a9:d4:9a:21:d7:cc:7b:73:b1:51:90:53:41:
82:70:6f:9a:c7:e2:0e:16:bc:35:23:25:f3:52:6d:4b:ef:51:
8b:b1:8f:99:55:d2:40:38:51:05:8f:e4:f7:f6:6c:67:59:77:
fa:c1:a6:09:2c:a3:c2:37:6a:d2:c5:4f:e7:a6:fa:b1:8a:75:
2e:a9:19:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaEMQAoU4KL6Bae7sufblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OWI0NzM5NDM3YjU1Zjk0NGQyMjI5ZDE2YjZlNmZhNTk5
MTk2ODcwHhcNMjUwMTAxMDU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGNjNjc4ZDRkMzJkODE4YWI1YmMzMmNhMWZkNDk3ZjQ5Y2Y1N2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu21PTLZifAFHwT6nNE18udnCaFVN
DFGj2O0LJAJ/5AE8AzTtrudI8br6oi02+/KUwFZweELkg23ADnhd13RJ5ltrtvN/
5BGgCPresauN586HHX4mnzxIjn2SW0x9hn7+35vAhAZX0YjiQR94EdGnSv3rw52H
UBshcMNEKKS8c/DPR46QC4zEQQTLU0rq7AHd3w/1q9QMutXnMOAMOrE1TitoLcUC
3YxvtIlg5T/RbP4KaZ4EkDW1s/LtqR6UkOdM2paJwessC9TFXxppz5V5QqWfQKZu
/kJxYS0WNUU3bpjQkWubkBsm5hLH37FBbogyhejKiuv9wlIaF5dAuB7jYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKjMZ41NMtgYq1vDLKH9SX9Jz1emMB8GA1UdIwQY
MBaAFKmbRzlDe1X5RNIinRa25vpZkZaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUt
ZTQ3NTY0Y2QwYmFlLzEvcU14bmpVMHkyQmlyVzhNc29mMUpmMG5QVjZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUtZTQ3NTY0Y2QwYmFl
LzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJSzoMA0G
CSqGSIb3DQEBCwUAA4IBAQBkMjyrL3qoa72O9UuoqJYuM4KpoW0usHayH4LtGiWr
Dv7hpOpQ2NDc9lu+CQBsm+EWzvHTPfaAK/NL5mUELlTQI3TlCEz3nccWjVkkRb9H
ncYGWqFXqerZ1xdP3MUNRJ/QUcDk7YlE/bpsW1naQ2fBZgfnZKQSGzaa44Xk/LJd
ry10sVNyep2APZFC5rHNg8cApgbIbFEYysyGI2fV3YrUrdb/A94IJpX0zpOfPwXX
lwPgf1OLxB4Sh6nUmiHXzHtzsVGQU0GCcG+ax+IOFrw1IyXzUm1L71GLsY+ZVdJA
OFEFj+T39mxnWXf6waYJLKPCN2rSxU/npvqxinUuqRme
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net