Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa
File: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (raw, json)
Hash identifier: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=
Subject key identifier: 55:8A:C9:C8:A7:52:4D:F2:7D:68:E4:8F:24:C0:91:84:8B:67:E8:ED
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 019425FC46C65B569E40CFB4ADB0D5A93616
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa
Signing time: Thu 02 Jan 2025 07:47:57 +0000
ROA not before: Thu 02 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48921
IP address blocks: 83.223.48.0/22 maxlen: 22
195.20.32.0/24 maxlen: 24
2a04:16c0::/29 maxlen: 29
2a04:16c0:201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:46:c6:5b:56:9e:40:cf:b4:ad:b0:d5:a9:36:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=558ac9c8a7524df27d68e48f24c091848b67e8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:96:1d:43:9f:1b:6e:33:37:63:c1:f4:e5:
2f:9b:da:63:90:22:51:ab:b6:3f:6d:83:16:e4:3a:
f1:c8:f9:1e:4a:bb:20:e8:74:4f:8f:a0:7c:b9:6f:
17:99:ba:98:64:80:6d:3c:51:47:04:fb:86:2f:83:
ae:0d:45:b2:e8:34:da:5d:8b:0f:0d:ae:f1:e5:ce:
be:fe:92:12:e2:64:df:a5:6a:35:f9:7c:c8:c0:64:
e2:ff:1c:e5:c2:49:49:4b:29:e5:7d:56:29:9e:a7:
0d:70:88:c5:6b:68:1f:02:f9:fd:bd:75:4a:31:a3:
e5:a7:86:54:b5:b7:9a:04:29:ba:47:46:5a:25:92:
b5:5c:f0:3a:06:3b:f1:13:e5:11:1a:40:f8:c4:70:
e3:ba:98:d2:5e:65:9a:5f:6c:8a:af:5e:84:ec:c4:
a2:62:bd:da:3b:9d:15:75:74:4f:a0:9b:61:6a:3b:
e7:32:78:2d:91:3b:4b:92:a6:b2:e5:1f:44:8f:21:
d3:42:d2:4b:d5:84:13:9d:e8:5e:27:4a:39:02:4f:
99:df:88:8a:b8:aa:e8:da:a7:72:3d:bd:dd:ac:48:
3a:5d:4a:c4:16:b7:09:88:ac:26:30:36:a8:77:65:
f1:6c:a9:59:83:82:92:a4:b7:93:26:5e:fc:65:7d:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8A:C9:C8:A7:52:4D:F2:7D:68:E4:8F:24:C0:91:84:8B:67:E8:ED
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.48.0/22
195.20.32.0/24
IPv6:
2a04:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:c1:01:6f:7e:9a:25:84:f1:97:0b:cb:3b:41:25:99:eb:62:
9c:0e:5d:9c:84:ea:7e:f3:d3:69:1e:84:57:ad:81:03:ce:f5:
a9:55:e8:32:83:fc:b4:3a:d1:b3:71:4d:52:77:af:11:b3:ae:
10:08:7e:ac:6f:f2:4e:4f:b3:1c:3c:e4:21:3b:4b:1e:90:f1:
89:35:f8:70:57:26:17:d4:fc:da:49:e6:8e:be:23:59:94:a9:
f1:45:a6:83:af:87:b5:5c:bd:89:db:12:8e:8b:cd:57:29:9d:
d7:01:fb:97:3b:ff:a3:69:3e:ed:0e:b9:d5:2d:9b:6e:07:b7:
f5:55:b7:67:84:59:1f:82:7d:f1:43:f3:a8:05:dd:54:ed:ed:
0d:47:55:20:8d:70:ea:20:8b:03:b9:f0:82:3a:8d:bd:dc:12:
b2:98:d4:e1:7f:bd:8e:89:f7:2b:9c:cd:fd:e3:6e:7b:1e:31:
62:86:94:ee:c5:63:ce:f3:13:17:4a:1d:92:7d:46:0d:0e:42:
5e:41:3a:23:c8:fd:59:44:2a:2c:10:3b:ec:31:ee:14:d7:04:
b4:0f:44:c4:b1:e6:6d:c4:b5:20:60:1c:57:39:55:f6:bd:34:
65:c6:98:a5:52:ef:ab:14:37:8b:29:c9:b1:c0:1b:20:fe:93:
06:35:ee:01
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQl/EbGW1aeQM+0rbDVqTYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi
YTE2NTYwHhcNMjUwMTAyMDc0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NThhYzljOGE3NTI0ZGYyN2Q2OGU0OGYyNGMwOTE4NDhiNjdlOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDSWHUOfG24zN2PB9OUvm9pjkCJR
q7Y/bYMW5DrxyPkeSrsg6HRPj6B8uW8XmbqYZIBtPFFHBPuGL4OuDUWy6DTaXYsP
Da7x5c6+/pIS4mTfpWo1+XzIwGTi/xzlwklJSynlfVYpnqcNcIjFa2gfAvn9vXVK
MaPlp4ZUtbeaBCm6R0ZaJZK1XPA6BjvxE+URGkD4xHDjupjSXmWaX2yKr16E7MSi
Yr3aO50VdXRPoJthajvnMngtkTtLkqay5R9EjyHTQtJL1YQTneheJ0o5Ak+Z34iK
uKro2qdyPb3drEg6XUrEFrcJiKwmMDaod2XxbKlZg4KSpLeTJl78ZX1M9wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFWKycinUk3yfWjkjyTAkYSLZ+jtMB8GA1UdIwQY
MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt
Njk4MDlkOGI5YzIwLzEvVllySnlLZFNUZko5YU9TUEpNQ1JoSXRuNk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw
LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCU98wAwQA
wxQgMA0EAgACMAcDBQMqBBbAMA0GCSqGSIb3DQEBCwUAA4IBAQAxwQFvfpolhPGX
C8s7QSWZ62KcDl2chOp+89NpHoRXrYEDzvWpVegyg/y0OtGzcU1Sd68Rs64QCH6s
b/JOT7McPOQhO0sekPGJNfhwVyYX1PzaSeaOviNZlKnxRaaDr4e1XL2J2xKOi81X
KZ3XAfuXO/+jaT7tDrnVLZtuB7f1VbdnhFkfgn3xQ/OoBd1U7e0NR1UgjXDqIIsD
ufCCOo293BKymNThf72OifcrnM394257HjFihpTuxWPO8xMXSh2SfUYNDkJeQToj
yP1ZRCosEDvsMe4U1wS0D0TEseZtxLUgYBxXOVX2vTRlxpilUu+rFDeLKcmxwBsg
/pMGNe4B
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net