Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/jxP3zWsY1gZpCGxBiysaY7EpSc4.roa
File: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (raw, json)
Hash identifier: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=
Subject key identifier: 8F:13:F7:CD:6B:18:D6:06:69:08:6C:41:8B:2B:1A:63:B1:29:49:CE
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019426D96547A6B6DABBE284637E410591B6
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/jxP3zWsY1gZpCGxBiysaY7EpSc4.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51083
IP address blocks: 5.183.104.0/22 maxlen: 22
45.92.252.0/22 maxlen: 22
193.23.164.0/23 maxlen: 23
193.23.164.0/24 maxlen: 24
193.23.246.0/23 maxlen: 23
2a0e:c400::/29 maxlen: 29
2a10:a080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:65:47:a6:b6:da:bb:e2:84:63:7e:41:05:91:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f13f7cd6b18d60669086c418b2b1a63b12949ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:47:45:18:42:53:27:b6:96:09:11:e4:8e:
24:bf:31:45:9d:7b:27:23:97:dd:57:65:4a:fb:de:
e4:10:19:15:17:26:b1:1b:aa:3c:5a:74:71:03:df:
6f:21:2e:80:1f:e1:d3:1c:90:84:e0:de:46:bd:8c:
ac:f6:b3:52:c5:87:7b:7b:e7:43:ed:68:96:64:88:
d7:f6:09:82:e5:8c:67:8d:a1:8f:58:57:be:61:03:
6c:c6:9e:fa:20:64:f8:5c:aa:4c:5a:03:4b:71:0b:
82:37:bd:26:cc:ce:ab:f7:b3:d8:de:5e:15:e4:05:
91:00:12:af:0f:88:7f:65:4c:b6:cd:cb:c8:ba:d6:
3b:28:21:08:5d:0d:ed:4d:07:2a:84:6f:e9:f1:c9:
89:09:05:95:ae:a0:3d:8d:75:ba:5c:ca:71:64:4a:
ec:66:b6:0a:ed:66:3b:3a:6b:93:19:c8:e7:35:d9:
42:fd:ac:96:85:6f:1e:7c:4f:10:f5:31:12:26:ec:
41:49:da:e2:d4:c4:ca:18:57:14:4b:af:ca:77:6e:
98:0d:34:7d:3c:70:43:b5:f3:18:07:86:32:a0:64:
8d:79:25:60:eb:67:dd:8e:a7:19:59:18:ed:c9:79:
a0:e4:18:32:07:34:69:8d:d2:69:e0:66:bd:71:e2:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:13:F7:CD:6B:18:D6:06:69:08:6C:41:8B:2B:1A:63:B1:29:49:CE
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/jxP3zWsY1gZpCGxBiysaY7EpSc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.104.0/22
45.92.252.0/22
193.23.164.0/23
193.23.246.0/23
IPv6:
2a0e:c400::/29
2a10:a080::/29
Signature Algorithm: sha256WithRSAEncryption
16:a5:09:f5:5d:53:69:bc:d4:18:b9:d2:00:06:f4:a5:a0:d0:
d5:bb:d1:41:9c:0f:76:6f:44:cf:38:cc:0b:63:ca:73:70:85:
db:dc:e7:9c:ef:2a:19:1b:9c:84:95:f2:b5:b8:55:ba:fc:3e:
e6:72:0f:ac:8f:66:e4:4f:c5:4e:9c:4e:ba:0c:ff:1d:9b:bf:
c9:cd:e1:62:34:d0:09:31:e8:7e:65:75:61:7e:75:7f:ab:5a:
12:83:56:e2:50:23:af:13:f4:c0:1e:60:06:1f:f8:7e:7a:11:
b8:ef:63:84:43:e0:cb:3c:78:43:02:19:cb:fe:b3:f5:3e:a8:
8e:ac:2a:ad:9d:ec:bd:8f:a0:6d:cf:2c:24:06:cc:a9:19:9a:
dc:77:00:bd:38:9a:5d:39:14:b1:b3:f9:13:eb:0c:76:80:2e:
f2:31:0f:17:f3:a7:91:d2:64:4a:90:dd:b9:7f:3c:e4:c4:01:
d5:3b:29:8c:86:20:a2:c9:39:bb:79:99:a9:ff:97:97:ed:21:
2e:dd:64:63:6b:6a:0f:96:4d:ac:24:a4:c2:b1:f1:5d:fa:5a:
cb:12:bc:90:d6:bb:10:be:a2:bd:cf:17:4a:7f:30:92:af:03:
54:fd:ed:ba:7c:5c:52:07:ba:1e:dc:90:24:37:19:a7:a5:57:
c2:3f:5c:69
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQm2WVHprbau+KEY35BBZG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk
NWY1ZjMwHhcNMjUwMTAyMTE0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjEzZjdjZDZiMThkNjA2NjkwODZjNDE4YjJiMWE2M2IxMjk0OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0JHRRhCUye2lgkR5I4kvzFFnXsn
I5fdV2VK+97kEBkVFyaxG6o8WnRxA99vIS6AH+HTHJCE4N5GvYys9rNSxYd7e+dD
7WiWZIjX9gmC5YxnjaGPWFe+YQNsxp76IGT4XKpMWgNLcQuCN70mzM6r97PY3l4V
5AWRABKvD4h/ZUy2zcvIutY7KCEIXQ3tTQcqhG/p8cmJCQWVrqA9jXW6XMpxZErs
ZrYK7WY7OmuTGcjnNdlC/ayWhW8efE8Q9TESJuxBSdri1MTKGFcUS6/Kd26YDTR9
PHBDtfMYB4YyoGSNeSVg62fdjqcZWRjtyXmg5BgyBzRpjdJp4Ga9ceKWUwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFI8T981rGNYGaQhsQYsrGmOxKUnOMB8GA1UdIwQY
MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt
ODc3ZDMxYzE2MWMzLzEvanhQM3pXc1kxZ1pwQ0d4Qml5c2FZN0VwU2M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz
LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCBbdoAwQC
LVz8AwQBwRekAwQBwRf2MBQEAgACMA4DBQMqDsQAAwUDKhCggDANBgkqhkiG9w0B
AQsFAAOCAQEAFqUJ9V1TabzUGLnSAAb0paDQ1bvRQZwPdm9EzzjMC2PKc3CF29zn
nO8qGRuchJXytbhVuvw+5nIPrI9m5E/FTpxOugz/HZu/yc3hYjTQCTHofmV1YX51
f6taEoNW4lAjrxP0wB5gBh/4fnoRuO9jhEPgyzx4QwIZy/6z9T6ojqwqrZ3svY+g
bc8sJAbMqRma3HcAvTiaXTkUsbP5E+sMdoAu8jEPF/OnkdJkSpDduX885MQB1Tsp
jIYgosk5u3mZqf+Xl+0hLt1kY2tqD5ZNrCSkwrHxXfpayxK8kNa7EL6ivc8XSn8w
kq8DVP3tunxcUge6HtyQJDcZp6VXwj9caQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net