Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/cA-3PBWL1bUwOarNEMZiyyIevMU.roa
File: cA-3PBWL1bUwOarNEMZiyyIevMU.roa (raw, json)
Hash identifier: cnw/uPeaFuZ+fncW2i8jJnwO4+wUVJ2d2gj1ViPSrJQ=
Subject key identifier: 70:0F:B7:3C:15:8B:D5:B5:30:39:AA:CD:10:C6:62:CB:22:1E:BC:C5
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 01942747CEB7D562DDE8A3C62085E089B8AF
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/cA-3PBWL1bUwOarNEMZiyyIevMU.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35584
IP address blocks: 89.33.96.0/22 maxlen: 22
193.200.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ce:b7:d5:62:dd:e8:a3:c6:20:85:e0:89:b8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=700fb73c158bd5b53039aacd10c662cb221ebcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:09:77:a3:12:7e:68:c8:04:de:25:da:c7:
0b:eb:45:02:4b:e9:ea:1a:7c:f9:53:4f:2a:32:96:
6f:72:0e:c0:88:b7:ae:26:55:7e:6a:9d:2b:64:06:
95:01:94:6e:f6:e3:ca:02:22:70:3d:d9:74:1d:17:
58:1f:52:70:53:4e:ca:9e:ba:ce:6f:69:65:fd:7e:
ff:39:c7:1d:8f:9d:ef:bb:fa:db:4f:a5:e0:c4:2e:
a9:09:54:da:17:c8:c3:67:3a:b4:cd:51:c5:02:1b:
2a:1f:7a:a5:ee:92:ba:dd:bf:ee:52:c5:55:8e:6b:
97:f6:3a:b3:76:d7:7f:ed:d5:26:c6:7e:06:a7:45:
24:71:3a:b8:e3:34:31:91:41:d0:1d:98:1d:67:91:
71:91:73:fb:30:11:1b:12:86:2b:7c:61:f2:25:43:
19:9b:bd:d6:2d:5f:95:94:0b:02:61:07:06:b7:44:
cb:5b:35:41:dd:28:43:f5:6c:bd:08:82:4e:84:3a:
81:75:55:fa:bb:0e:d9:f4:b2:83:af:61:ab:10:3c:
65:bf:58:4e:5f:d7:40:21:3c:2a:13:b6:2d:6a:e4:
4a:d7:cc:e4:c1:a3:7e:5b:b8:8b:d8:33:b2:95:af:
5d:32:0b:74:ae:54:24:33:a6:c2:2f:2e:a5:70:e4:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0F:B7:3C:15:8B:D5:B5:30:39:AA:CD:10:C6:62:CB:22:1E:BC:C5
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/cA-3PBWL1bUwOarNEMZiyyIevMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.96.0/22
193.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:39:13:19:b3:81:e1:ff:fb:59:5d:f1:d3:de:9d:6e:f8:ca:
0b:bb:fb:16:91:a5:bf:3b:50:96:45:4c:74:d5:8b:c1:17:61:
7c:08:5e:e9:5e:68:b7:01:b7:51:d4:8f:c6:b5:3f:77:f2:c8:
52:3e:b5:56:ff:36:b4:34:e8:5e:8f:3d:83:14:c5:76:6e:72:
ad:08:8a:a7:43:67:4b:af:7b:8a:6b:e8:f7:4c:da:49:a2:54:
7f:14:ad:ae:f8:b6:e7:dc:6d:71:a9:c3:38:30:6d:37:41:86:
15:20:f4:e7:14:66:80:2f:67:ad:04:ca:a6:2f:36:41:1a:fa:
f3:32:7a:d9:ec:7b:dd:c3:3a:30:44:01:1a:47:eb:da:e9:c1:
3c:ca:ce:80:f3:a2:13:05:d5:2c:a6:0f:10:f9:73:c3:a0:ba:
6f:af:32:6c:1a:cd:ab:76:fb:74:9f:6d:a9:ba:23:d5:ee:5f:
f2:c7:77:f0:21:49:79:90:1f:1f:b5:f9:a4:73:2c:19:02:2a:
e5:c7:0f:f7:3e:83:4b:56:46:f1:93:c9:33:bd:92:83:c5:42:
5a:0c:80:04:1c:18:b4:f7:56:e4:bb:91:b1:c3:d5:f8:26:55:
1a:92:c8:e2:de:2e:34:75:0f:f6:e2:12:a3:ea:f8:c3:c1:0e:
ba:08:ba:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR8631WLd6KPGIIXgibivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3
MjhlM2IwHhcNMjUwMTAyMTM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDBmYjczYzE1OGJkNWI1MzAzOWFhY2QxMGM2NjJjYjIyMWViY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07gJd6MSfmjIBN4l2scL60UCS+nq
Gnz5U08qMpZvcg7AiLeuJlV+ap0rZAaVAZRu9uPKAiJwPdl0HRdYH1JwU07KnrrO
b2ll/X7/Occdj53vu/rbT6XgxC6pCVTaF8jDZzq0zVHFAhsqH3ql7pK63b/uUsVV
jmuX9jqzdtd/7dUmxn4Gp0UkcTq44zQxkUHQHZgdZ5FxkXP7MBEbEoYrfGHyJUMZ
m73WLV+VlAsCYQcGt0TLWzVB3ShD9Wy9CIJOhDqBdVX6uw7Z9LKDr2GrEDxlv1hO
X9dAITwqE7YtauRK18zkwaN+W7iL2DOyla9dMgt0rlQkM6bCLy6lcOSMnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHAPtzwVi9W1MDmqzRDGYssiHrzFMB8GA1UdIwQY
MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt
NjU5OGI0Y2ViMDY5LzEvY0EtM1BCV0wxYlV3T2FyTkVNWml5eUlldk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5
LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWSFgAwQA
wcjIMA0GCSqGSIb3DQEBCwUAA4IBAQAaORMZs4Hh//tZXfHT3p1u+MoLu/sWkaW/
O1CWRUx01YvBF2F8CF7pXmi3AbdR1I/GtT938shSPrVW/za0NOhejz2DFMV2bnKt
CIqnQ2dLr3uKa+j3TNpJolR/FK2u+Lbn3G1xqcM4MG03QYYVIPTnFGaAL2etBMqm
LzZBGvrzMnrZ7HvdwzowRAEaR+va6cE8ys6A86ITBdUspg8Q+XPDoLpvrzJsGs2r
dvt0n22puiPV7l/yx3fwIUl5kB8ftfmkcywZAirlxw/3PoNLVkbxk8kzvZKDxUJa
DIAEHBi091bku5Gxw9X4JlUaksji3i40dQ/24hKj6vjDwQ66CLpt
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net