Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa
File: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (raw, json)
Hash identifier: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=
Subject key identifier: 09:54:C2:0C:EE:23:DD:EC:3F:BE:F5:4C:67:EE:5A:F3:98:8A:93:AC
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 0194274831FBA5474DBB0E7BF60C2E13F102
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50305
IP address blocks: 193.104.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:31:fb:a5:47:4d:bb:0e:7b:f6:0c:2e:13:f1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0954c20cee23ddec3fbef54c67ee5af3988a93ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:bf:ed:13:b6:a5:2e:c2:cf:9a:cd:17:13:
06:bc:c9:43:6d:59:8c:27:bc:ee:6c:37:46:fc:b1:
cb:db:50:0f:ed:91:2d:9c:a8:d1:b5:ec:f0:48:ca:
c6:74:27:b6:42:3d:6f:d9:8d:ab:b9:bd:7d:22:98:
0a:31:12:8c:be:7c:67:f9:84:4f:e2:7f:7a:53:79:
8b:9d:8c:fe:37:9a:6a:2a:c9:02:9b:2b:a0:5d:48:
1e:0e:1d:32:fb:20:5c:e9:b0:c4:74:5a:b2:dc:be:
28:2f:39:7e:ef:90:25:e0:f1:67:30:30:5e:d1:4e:
9d:9a:f1:70:71:dc:b9:93:8a:48:e9:a2:7c:6d:35:
c3:0a:02:55:e4:16:be:0f:9b:62:8d:ae:14:c2:a6:
9a:68:23:dc:cd:0d:c8:2b:6a:48:4e:4a:63:cd:78:
54:93:c1:78:b9:6a:73:ce:02:9a:eb:77:01:10:1a:
ba:a1:da:5d:27:30:85:b7:fd:12:ac:7e:49:60:55:
6b:84:50:75:81:30:9c:a7:b9:e8:4f:14:90:78:62:
6f:76:d2:0b:c8:7a:58:75:6e:3a:82:9c:6e:eb:04:
7b:ad:84:5f:d3:2b:33:93:13:da:da:ac:8a:6f:8d:
8d:4a:66:a1:ee:dd:89:21:c5:4f:bd:b6:28:77:db:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:C2:0C:EE:23:DD:EC:3F:BE:F5:4C:67:EE:5A:F3:98:8A:93:AC
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:81:0b:c2:bc:67:32:73:3e:35:36:5c:31:35:01:2a:77:3f:
ab:2e:a6:eb:e7:7e:98:3a:e6:4e:0e:56:50:af:28:58:b3:a3:
20:a0:3b:de:d2:23:f6:4e:9a:db:ab:55:4c:2b:b1:8a:40:81:
25:57:3a:82:d6:7f:5f:09:f2:0c:dc:86:14:e0:6a:39:1a:96:
c8:c3:a1:3d:c7:62:29:19:16:a5:c5:b6:35:be:dc:65:5c:c1:
81:1e:e4:25:74:24:05:d7:ce:ea:55:0a:73:d1:85:00:1d:e3:
bd:bb:2c:6f:25:43:2b:1a:80:d6:03:5c:c2:0a:dc:e4:99:0b:
de:39:2f:e6:a2:a1:d8:fe:be:ca:13:25:db:33:bc:29:7a:44:
bc:50:d9:8e:82:15:ad:e8:f5:43:c1:cc:06:7e:55:ba:c3:eb:
c9:d0:fc:09:bc:6f:5b:e0:7b:80:00:af:7c:b0:f8:5e:46:5b:
bf:1b:20:ce:5c:5a:14:bb:0c:7a:de:bd:ea:7b:65:a7:74:96:
83:e2:12:66:94:45:7c:94:5f:b0:58:ed:ba:eb:72:9c:38:d3:
07:79:2f:60:ca:ae:47:af:30:7b:c0:62:2d:a3:20:80:00:f4:
d9:e8:6f:77:17:c1:c3:c4:4b:24:5b:06:f7:f2:07:06:78:3e:
93:eb:ae:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSDH7pUdNuw579gwuE/ECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzU5OGViYjVkMWQwOGViMGRhNDM4ZDA1MmNlYmFhNGZk
Yzc2OGYwHhcNMjUwMTAyMTM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTU0YzIwY2VlMjNkZGVjM2ZiZWY1NGM2N2VlNWFmMzk4OGE5M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3+/7RO2pS7Cz5rNFxMGvMlDbVmM
J7zubDdG/LHL21AP7ZEtnKjRtezwSMrGdCe2Qj1v2Y2rub19IpgKMRKMvnxn+YRP
4n96U3mLnYz+N5pqKskCmyugXUgeDh0y+yBc6bDEdFqy3L4oLzl+75Al4PFnMDBe
0U6dmvFwcdy5k4pI6aJ8bTXDCgJV5Ba+D5tija4UwqaaaCPczQ3IK2pITkpjzXhU
k8F4uWpzzgKa63cBEBq6odpdJzCFt/0SrH5JYFVrhFB1gTCcp7noTxSQeGJvdtIL
yHpYdW46gpxu6wR7rYRf0yszkxPa2qyKb42NSmah7t2JIcVPvbYod9vQPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAlUwgzuI93sP771TGfuWvOYipOsMB8GA1UdIwQY
MBaAFBs1mOu10dCOsNpDjQUs66pP3HaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wNTYyZjgtMjY3MC00NDBmLTg1MDIt
MWJhMGViYWE4YTg2LzEvQ1ZUQ0RPNGozZXdfdnZWTVotNWE4NWlLazZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wNTYyZjgtMjY3MC00NDBmLTg1MDItMWJhMGViYWE4YTg2
LzEvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWjQMA0G
CSqGSIb3DQEBCwUAA4IBAQA8gQvCvGcycz41NlwxNQEqdz+rLqbr536YOuZODlZQ
ryhYs6MgoDve0iP2Tprbq1VMK7GKQIElVzqC1n9fCfIM3IYU4Go5GpbIw6E9x2Ip
GRalxbY1vtxlXMGBHuQldCQF187qVQpz0YUAHeO9uyxvJUMrGoDWA1zCCtzkmQve
OS/moqHY/r7KEyXbM7wpekS8UNmOghWt6PVDwcwGflW6w+vJ0PwJvG9b4HuAAK98
sPheRlu/GyDOXFoUuwx63r3qe2WndJaD4hJmlEV8lF+wWO2663KcONMHeS9gyq5H
rzB7wGItoyCAAPTZ6G93F8HDxEskWwb38gcGeD6T666p
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net