Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa
File: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (raw, json)
Hash identifier: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=
Subject key identifier: A3:81:5D:E7:76:22:F2:07:F5:67:61:39:49:A4:2B:8F:D3:AA:0F:F6
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 01941F8C2E193D6E74F660DF2D9F7BE9A54C
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207715
IP address blocks: 185.229.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2e:19:3d:6e:74:f6:60:df:2d:9f:7b:e9:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3815de77622f207f567613949a42b8fd3aa0ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:ee:ca:4f:ce:4c:35:2c:22:10:cf:40:c0:
7b:5f:b0:9f:b5:c4:34:7d:e8:fc:a8:ee:03:24:cb:
9b:8d:da:a4:bc:0c:89:c2:89:87:c4:74:0f:d8:54:
e0:f3:8e:55:60:4e:6a:63:d9:40:9b:ac:90:d3:c2:
0c:31:7d:ef:5f:e4:4a:42:4a:ce:50:44:84:f4:67:
5a:f4:65:e6:dc:ea:e3:13:e3:bc:c6:9a:80:06:1f:
45:2f:2f:aa:01:ea:3a:d1:6f:ca:9a:c8:1d:f3:b5:
58:bd:c3:8c:5d:10:5f:40:00:e7:5c:2c:5b:35:d4:
76:78:47:62:a3:16:67:12:40:2b:fe:dc:7d:83:ec:
61:33:46:9b:82:22:2e:56:c8:d2:44:a1:30:27:d6:
38:ca:c9:cd:72:8b:63:46:a0:55:17:77:2b:f4:48:
86:92:97:95:90:16:ae:4c:67:c9:94:33:9b:b3:e3:
22:7d:6f:10:5e:62:ee:b7:2b:39:94:fc:81:9a:f3:
f7:c8:92:d0:84:2e:7d:66:1f:bf:43:e0:e5:99:57:
8a:6a:5f:f0:08:e8:7e:1a:c0:47:9a:c9:77:ef:fa:
bd:db:7f:a4:2d:95:3b:a4:15:e3:4d:d7:9d:23:e9:
4b:94:9c:67:30:31:ae:cf:51:65:b6:d0:0f:c9:fa:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:5D:E7:76:22:F2:07:F5:67:61:39:49:A4:2B:8F:D3:AA:0F:F6
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.100.0/22
Signature Algorithm: sha256WithRSAEncryption
52:ad:57:60:7b:e1:83:d4:09:1d:8c:ee:f7:f4:04:94:ec:4e:
e6:36:d6:35:00:6a:f7:ad:a6:7d:66:1e:82:17:45:e0:8d:fb:
4e:72:28:b3:cc:a9:e0:34:67:ca:3f:5e:88:6b:b8:a0:3c:bb:
fb:7b:4e:6a:6a:08:21:6b:da:6b:68:d6:79:19:c0:c8:36:9b:
4e:e6:22:d5:da:80:55:bd:4d:b9:6b:60:56:3f:98:f9:da:17:
a0:52:9f:d4:6e:6d:be:39:dd:d4:63:ee:aa:bf:98:e8:d0:4f:
3d:6f:b5:7c:0c:3e:a5:2e:7f:43:03:07:e9:c5:e0:14:8e:4d:
f5:f9:65:4f:66:a8:c3:0f:e7:00:09:e7:74:86:9a:a4:f8:3e:
15:4d:3b:6c:d9:28:fb:db:cd:47:bd:91:40:c0:3a:ed:d2:32:
17:9b:90:2a:aa:c6:b0:8c:46:5b:09:50:5a:da:c0:08:d2:b1:
21:54:b1:cf:be:10:50:5c:45:b0:92:1f:5c:00:7b:0b:1d:ad:
86:d9:92:40:3e:d4:45:5d:5a:3d:f1:2f:a5:d4:22:88:4a:2f:
27:45:bf:a6:cd:42:d0:56:45:2d:8c:03:d9:aa:85:23:b9:09:
8d:b6:99:22:59:e1:54:44:e4:32:00:92:e2:1f:4b:fe:27:1a:
00:83:50:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjC4ZPW509mDfLZ976aVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmI2MzI3Y2RmYTE2NTI0ZGM3ZDAzMzcxMzhhZjMyNWZi
NWUyZDkwHhcNMjUwMTAxMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzgxNWRlNzc2MjJmMjA3ZjU2NzYxMzk0OWE0MmI4ZmQzYWEwZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mvuyk/OTDUsIhDPQMB7X7CftcQ0
fej8qO4DJMubjdqkvAyJwomHxHQP2FTg845VYE5qY9lAm6yQ08IMMX3vX+RKQkrO
UESE9Gda9GXm3OrjE+O8xpqABh9FLy+qAeo60W/Kmsgd87VYvcOMXRBfQADnXCxb
NdR2eEdioxZnEkAr/tx9g+xhM0abgiIuVsjSRKEwJ9Y4ysnNcotjRqBVF3cr9EiG
kpeVkBauTGfJlDObs+MifW8QXmLutys5lPyBmvP3yJLQhC59Zh+/Q+DlmVeKal/w
COh+GsBHmsl37/q923+kLZU7pBXjTdedI+lLlJxnMDGuz1FlttAPyfpWVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKOBXed2IvIH9WdhOUmkK4/Tqg/2MB8GA1UdIwQY
MBaAFAm7YyfN+hZSTcfQM3E4rzJfteLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzIt
ZTczNjAzMjMzMDNjLzEvbzRGZDUzWWk4Z2YxWjJFNVNhUXJqOU9xRF9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mZmZkZTEtOWQ4Ny00NDA4LWFjYzItZTczNjAzMjMzMDNj
LzEvQ2J0ako4MzZGbEpOeDlBemNUaXZNbC0xNHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueVkMA0G
CSqGSIb3DQEBCwUAA4IBAQBSrVdge+GD1AkdjO739ASU7E7mNtY1AGr3raZ9Zh6C
F0XgjftOciizzKngNGfKP16Ia7igPLv7e05qaggha9praNZ5GcDINptO5iLV2oBV
vU25a2BWP5j52hegUp/Ubm2+Od3UY+6qv5jo0E89b7V8DD6lLn9DAwfpxeAUjk31
+WVPZqjDD+cACed0hpqk+D4VTTts2Sj7281HvZFAwDrt0jIXm5AqqsawjEZbCVBa
2sAI0rEhVLHPvhBQXEWwkh9cAHsLHa2G2ZJAPtRFXVo98S+l1CKISi8nRb+mzULQ
VkUtjAPZqoUjuQmNtpkiWeFUROQyAJLiH0v+JxoAg1BB
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net