Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/03T6Ckg3bpc-p5cm7cOlm-zySj4.roa
File: 03T6Ckg3bpc-p5cm7cOlm-zySj4.roa (raw, json)
Hash identifier: GaU7qAyWTpaD6XW2vb7eV2GbZlXe5YPckflNVF6042I=
Subject key identifier: D3:74:FA:0A:48:37:6E:97:3E:A7:97:26:ED:C3:A5:9B:EC:F2:4A:3E
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 0195F8714E767A3D00E87CECDFB0E97C7039
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/03T6Ckg3bpc-p5cm7cOlm-zySj4.roa
Signing time: Wed 02 Apr 2025 21:38:49 +0000
ROA not before: Wed 02 Apr 2025 21:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213431
IP address blocks: 82.129.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:71:4e:76:7a:3d:00:e8:7c:ec:df:b0:e9:7c:70:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Apr 2 21:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d374fa0a48376e973ea79726edc3a59becf24a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:c6:ef:2d:cc:7e:7c:d2:57:20:3e:f2:20:
6e:87:b5:b8:c1:36:f5:fe:a1:09:fe:d5:e6:82:3b:
de:7c:b1:3d:b7:71:46:d4:4b:87:1a:a1:d1:2d:d6:
0a:ff:e2:da:3a:48:2c:04:95:78:3c:2f:a1:98:3d:
25:e8:eb:0f:62:30:8a:43:13:a1:cf:09:ea:b4:66:
cb:04:37:bc:1b:62:17:1e:65:17:82:f7:1b:19:21:
71:91:82:84:46:96:86:4d:7b:48:a7:67:ff:f3:18:
d4:85:fe:a4:c7:32:fa:58:42:06:7f:cc:61:c1:62:
9c:cb:62:92:4d:1c:4a:cf:2f:a4:5e:e4:ec:38:b8:
6e:81:8b:c1:b0:5d:f3:96:9b:1d:93:7a:f2:2e:5f:
fa:bd:e8:0d:6d:44:c3:0e:c1:1d:8b:47:82:17:13:
71:2d:99:90:5a:f2:cb:f1:a2:35:f1:bb:d6:71:0b:
0c:13:58:65:dd:a2:b1:39:c2:63:b5:1a:71:63:db:
e5:75:76:4f:ad:62:53:c4:ee:f8:1a:e1:01:3f:a0:
e5:e5:cb:0e:8d:77:9f:e3:72:92:cf:93:3d:3f:da:
c8:36:c4:33:86:3f:a5:e9:f9:12:cc:08:18:42:3d:
da:70:82:43:4f:d7:58:4b:2c:83:95:97:23:59:55:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:FA:0A:48:37:6E:97:3E:A7:97:26:ED:C3:A5:9B:EC:F2:4A:3E
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/03T6Ckg3bpc-p5cm7cOlm-zySj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.129.4.0/24
Signature Algorithm: sha256WithRSAEncryption
83:57:e8:e5:f1:b1:8b:69:d6:33:a4:02:48:9d:90:48:26:8f:
cc:da:dc:83:7d:b1:5f:60:5b:c6:d7:83:ef:69:fe:83:b4:36:
ff:8b:ea:e8:81:ef:6f:47:2a:d5:bc:07:9b:15:87:17:15:6b:
eb:68:fd:36:36:c5:4c:c3:bf:32:5c:b8:cc:fc:17:78:c4:e0:
3a:a6:92:33:2f:9f:f9:be:86:70:6f:23:64:a1:6f:67:40:1e:
20:f4:a3:0d:33:64:25:a7:be:3f:46:fe:a7:aa:3e:22:98:0e:
22:bf:4a:59:53:67:f2:8a:7f:98:00:99:91:59:8e:44:15:c4:
1d:d5:55:c8:43:42:b2:61:46:13:30:bc:2b:37:fc:8e:b3:77:
b0:0b:a1:09:df:d2:69:50:1c:9e:0a:7f:97:60:5d:7c:0e:30:
ad:53:7c:54:ce:30:6c:e2:b6:af:35:45:6d:e2:ec:b8:23:80:
79:a4:ed:ac:8c:86:0d:a5:c1:f7:e7:bb:9c:bb:bf:86:a5:82:
c0:c8:e3:74:5a:7f:a2:c3:d5:e7:4b:ab:a1:2a:e2:34:af:7d:
db:03:d5:1d:e1:f2:09:68:65:95:2a:32:c4:be:5e:90:9f:bb:
c4:65:e6:9d:85:df:86:b5:9c:42:21:bd:2e:ce:ec:20:8b:2a:
7c:cd:f8:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX4cU52ej0A6Hzs37DpfHA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2
ZGI5OWUwHhcNMjUwNDAyMjEzODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzc0ZmEwYTQ4Mzc2ZTk3M2VhNzk3MjZlZGMzYTU5YmVjZjI0YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuorG7y3MfnzSVyA+8iBuh7W4wTb1
/qEJ/tXmgjvefLE9t3FG1EuHGqHRLdYK/+LaOkgsBJV4PC+hmD0l6OsPYjCKQxOh
zwnqtGbLBDe8G2IXHmUXgvcbGSFxkYKERpaGTXtIp2f/8xjUhf6kxzL6WEIGf8xh
wWKcy2KSTRxKzy+kXuTsOLhugYvBsF3zlpsdk3ryLl/6vegNbUTDDsEdi0eCFxNx
LZmQWvLL8aI18bvWcQsME1hl3aKxOcJjtRpxY9vldXZPrWJTxO74GuEBP6Dl5csO
jXef43KSz5M9P9rINsQzhj+l6fkSzAgYQj3acIJDT9dYSyyDlZcjWVU8/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNN0+gpIN26XPqeXJu3DpZvs8ko+MB8GA1UdIwQY
MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt
OTU2ZjZiNWM2MTcwLzEvMDNUNkNrZzNicGMtcDVjbTdjT2xtLXp5U2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw
LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUoEEMA0G
CSqGSIb3DQEBCwUAA4IBAQCDV+jl8bGLadYzpAJInZBIJo/M2tyDfbFfYFvG14Pv
af6DtDb/i+roge9vRyrVvAebFYcXFWvraP02NsVMw78yXLjM/Bd4xOA6ppIzL5/5
voZwbyNkoW9nQB4g9KMNM2Qlp74/Rv6nqj4imA4iv0pZU2fyin+YAJmRWY5EFcQd
1VXIQ0KyYUYTMLwrN/yOs3ewC6EJ39JpUByeCn+XYF18DjCtU3xUzjBs4ravNUVt
4uy4I4B5pO2sjIYNpcH357ucu7+GpYLAyON0Wn+iw9XnS6uhKuI0r33bA9Ud4fIJ
aGWVKjLEvl6Qn7vEZeadhd+GtZxCIb0uzuwgiyp8zfiL
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net