Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/rsRHcAQsRZm8xo329vRETKcxCzw.roa
File: rsRHcAQsRZm8xo329vRETKcxCzw.roa (raw, json)
Hash identifier: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=
Subject key identifier: AE:C4:47:70:04:2C:45:99:BC:C6:8D:F6:F6:F4:44:4C:A7:31:0B:3C
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 01942521F303AA13C67EB057ABBF9CB71FA2
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/rsRHcAQsRZm8xo329vRETKcxCzw.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34080
IP address blocks: 45.129.24.0/22 maxlen: 22
93.95.32.0/21 maxlen: 21
217.196.208.0/20 maxlen: 20
217.197.32.0/20 maxlen: 20
2a02:1f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f3:03:aa:13:c6:7e:b0:57:ab:bf:9c:b7:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aec44770042c4599bcc68df6f6f4444ca7310b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:98:dc:69:27:12:79:4c:72:cd:40:3e:73:
cc:91:60:aa:7e:5c:8e:ea:35:fb:c7:b9:64:1c:5b:
a0:7a:f5:88:96:c6:6d:16:13:28:4b:2f:a0:44:31:
82:c8:e9:53:02:9a:06:0d:4c:55:2f:80:a3:c4:07:
96:76:90:c6:fd:f4:51:34:09:fd:aa:99:59:ef:ab:
12:3b:ff:5b:7d:58:06:25:c7:ae:1c:8c:2f:eb:1c:
6d:29:d5:3d:3c:ef:95:eb:fc:f7:67:cd:1f:13:24:
04:84:13:8c:42:d0:d7:a4:39:95:2a:63:97:8f:77:
44:56:a7:db:a4:20:f9:91:fd:df:d2:56:f4:b1:9f:
06:e6:c6:5e:09:35:21:73:dc:c2:72:c5:a4:59:cf:
cc:eb:ae:28:a8:5c:99:d5:81:b0:59:c4:2b:03:e0:
b8:a2:2e:f5:93:8b:61:1c:e7:e2:51:a5:5d:12:76:
60:71:e2:06:b6:ce:b5:77:28:11:cb:cd:75:e6:71:
21:1e:bb:a6:58:9e:80:6c:3a:15:31:09:98:5d:70:
1f:5e:50:3b:71:bd:87:12:a8:25:f1:32:4c:ee:10:
d3:1a:56:f8:6c:6b:62:72:b8:e8:bf:fb:4f:b8:06:
b4:4b:db:e9:f7:76:7c:c9:77:a9:01:bb:89:5d:f6:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:47:70:04:2C:45:99:BC:C6:8D:F6:F6:F4:44:4C:A7:31:0B:3C
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/rsRHcAQsRZm8xo329vRETKcxCzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.24.0/22
93.95.32.0/21
217.196.208.0/20
217.197.32.0/20
IPv6:
2a02:1f0::/32
Signature Algorithm: sha256WithRSAEncryption
68:f5:97:d6:fb:55:75:81:86:70:b0:6c:24:50:89:fa:c1:fd:
f9:07:e3:43:0f:36:84:5a:cb:e5:fa:98:f7:38:32:f7:c5:f8:
ce:2c:c2:ef:c0:ee:cf:c5:d8:d7:be:ef:27:12:21:95:8b:e9:
78:ac:f4:ba:cb:f4:13:a7:b3:79:f1:3d:a7:52:fe:62:7b:c1:
8a:f8:8c:c6:ee:60:48:07:58:17:9c:7e:dd:d1:72:19:67:bd:
b9:ba:99:c0:f4:0b:b7:a0:1a:63:b4:e5:89:75:65:f1:cb:be:
8b:36:07:8f:b3:d4:41:7c:b6:28:5f:69:2b:12:78:79:55:21:
ad:ff:43:77:f5:4f:da:bb:9c:50:47:77:20:a9:68:9f:40:78:
5d:dc:d3:79:2c:21:2b:dc:b3:99:4b:83:0a:02:bc:f4:5c:58:
83:81:88:4a:28:49:6b:08:22:26:e1:c5:4e:e0:1c:70:94:8e:
e3:c4:d8:a0:71:b2:ee:ad:83:8c:37:77:cf:4f:4a:c4:fc:43:
8d:15:93:9a:02:a3:cf:46:03:02:54:97:b7:cd:d5:b1:1b:d9:
ea:81:1f:9c:33:3a:11:85:27:8a:f2:48:a2:eb:71:dc:68:c1:
8a:ae:1a:96:d2:d5:ad:fd:e2:c4:a8:21:b3:e3:5c:68:52:47:
33:96:d3:37
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQlIfMDqhPGfrBXq7+ctx+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1
Mjc3ZjUwHhcNMjUwMTAyMDM0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWM0NDc3MDA0MmM0NTk5YmNjNjhkZjZmNmY0NDQ0Y2E3MzEwYjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW6Y3GknEnlMcs1APnPMkWCqflyO
6jX7x7lkHFugevWIlsZtFhMoSy+gRDGCyOlTApoGDUxVL4CjxAeWdpDG/fRRNAn9
qplZ76sSO/9bfVgGJceuHIwv6xxtKdU9PO+V6/z3Z80fEyQEhBOMQtDXpDmVKmOX
j3dEVqfbpCD5kf3f0lb0sZ8G5sZeCTUhc9zCcsWkWc/M664oqFyZ1YGwWcQrA+C4
oi71k4thHOfiUaVdEnZgceIGts61dygRy8115nEhHrumWJ6AbDoVMQmYXXAfXlA7
cb2HEqgl8TJM7hDTGlb4bGticrjov/tPuAa0S9vp93Z8yXepAbuJXfaa5wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFK7ER3AELEWZvMaN9vb0REynMQs8MB8GA1UdIwQY
MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt
NDNkN2ViNzI1NTFkLzEvcnNSSGNBUXNSWm04eG8zMjl2UkVUS2N4Q3p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk
LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLYEYAwQD
XV8gAwQE2cTQAwQE2cUgMA0EAgACMAcDBQAqAgHwMA0GCSqGSIb3DQEBCwUAA4IB
AQBo9ZfW+1V1gYZwsGwkUIn6wf35B+NDDzaEWsvl+pj3ODL3xfjOLMLvwO7PxdjX
vu8nEiGVi+l4rPS6y/QTp7N58T2nUv5ie8GK+IzG7mBIB1gXnH7d0XIZZ725upnA
9Au3oBpjtOWJdWXxy76LNgePs9RBfLYoX2krEnh5VSGt/0N39U/au5xQR3cgqWif
QHhd3NN5LCEr3LOZS4MKArz0XFiDgYhKKElrCCIm4cVO4BxwlI7jxNigcbLurYOM
N3fPT0rE/EONFZOaAqPPRgMCVJe3zdWxG9nqgR+cMzoRhSeK8kii63HcaMGKrhqW
0tWt/eLEqCGz41xoUkczltM3
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net