Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/95vGqOrfq-A06Cg8RsHNae6rv14.roa
File: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (raw, json)
Hash identifier: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=
Subject key identifier: F7:9B:C6:A8:EA:DF:AB:E0:34:E8:28:3C:46:C1:CD:69:EE:AB:BF:5E
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 019425FDC5D779BCE0D649DE5249165A993C
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/95vGqOrfq-A06Cg8RsHNae6rv14.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15829
IP address blocks: 213.180.224.0/24 maxlen: 24
213.180.227.0/24 maxlen: 24
213.180.232.0/22 maxlen: 22
213.180.236.0/22 maxlen: 22
213.180.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c5:d7:79:bc:e0:d6:49:de:52:49:16:5a:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f79bc6a8eadfabe034e8283c46c1cd69eeabbf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:3d:66:65:9a:47:01:d1:83:09:88:37:db:
4a:c8:2c:4a:fc:8f:e6:20:d8:fd:3f:1f:62:b7:c3:
87:2f:6a:f6:7a:0a:07:c0:da:27:29:e1:bd:e6:3b:
cf:5e:27:af:68:5b:5c:80:b0:b2:db:1c:0e:b2:4f:
d1:20:85:2d:01:79:5e:79:52:15:eb:d6:16:1b:93:
a6:53:af:a4:37:75:8f:6f:a2:2d:3e:fb:fa:29:c9:
4a:56:7c:47:cd:af:3e:50:2f:c6:01:d9:43:fb:3f:
c6:d8:d3:f4:b3:55:ed:83:5f:0b:26:75:a9:c3:be:
8b:59:5a:6b:72:00:ea:ad:94:51:f9:38:88:6a:b7:
b9:e2:3f:20:44:ef:22:f0:a8:be:e6:f4:63:83:25:
83:c2:41:fb:84:80:d9:db:3e:39:fe:92:e7:10:29:
95:c3:64:2e:37:0e:33:ae:37:39:f8:b5:06:2f:33:
be:ba:39:66:d0:8f:94:dc:2e:31:5d:0d:41:19:1a:
fc:b3:29:be:28:18:94:be:91:12:01:cc:6a:9e:5c:
0c:d0:a6:26:3a:31:29:68:c4:18:ce:4d:55:9c:0e:
79:74:1a:c2:a5:0d:46:d7:62:f5:49:e2:75:1b:95:
84:6c:12:a1:29:d2:98:0f:56:4d:0e:63:e9:5e:6a:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:C6:A8:EA:DF:AB:E0:34:E8:28:3C:46:C1:CD:69:EE:AB:BF:5E
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/95vGqOrfq-A06Cg8RsHNae6rv14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.180.224.0/24
213.180.227.0/24
213.180.232.0/21
213.180.248.0/22
Signature Algorithm: sha256WithRSAEncryption
76:9d:b1:cf:49:3b:50:a9:f8:b9:46:62:87:b6:b2:6d:b8:b4:
b6:37:a6:cd:b2:88:ad:ef:ea:f4:fe:8e:c3:ff:ca:d6:cf:62:
c8:8b:de:4a:66:a0:71:d8:1d:c3:a8:c1:ce:f2:33:c4:13:c4:
f2:95:b6:42:d8:bb:5b:26:be:4c:f8:63:fb:5e:f9:53:9e:4f:
fc:96:17:f1:fc:41:47:87:2a:5b:e8:4f:92:47:86:fe:5c:11:
48:23:fe:47:26:5b:03:50:e8:86:a0:38:f3:99:83:49:a6:26:
5b:9f:87:9a:1f:2b:8f:ed:0a:1c:4c:73:fb:7d:3f:31:b4:ad:
74:df:ba:35:4b:fa:94:61:9b:80:0f:64:81:05:05:a5:ff:da:
0e:c1:03:7a:8a:c4:7b:1e:3d:ba:e0:d8:07:40:4a:da:e5:2f:
04:fa:40:ce:f7:0b:51:3a:fc:1d:3d:b8:f8:6d:a4:81:28:e5:
dc:e6:78:9e:9d:50:ab:5a:87:e2:72:4f:49:29:07:07:49:2a:
cd:c5:35:87:ec:2c:6d:57:28:f4:db:d1:f9:a7:3b:a4:7a:19:
7e:e0:35:01:f4:04:60:20:a5:f3:fa:7f:e2:a3:7b:c0:72:be:
eb:44:55:71:68:02:98:4c:7f:a6:90:49:ec:45:f8:6f:14:25:
18:ab:49:1b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQl/cXXebzg1kneUkkWWpk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjUwMTAyMDc0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzliYzZhOGVhZGZhYmUwMzRlODI4M2M0NmMxY2Q2OWVlYWJiZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUs9ZmWaRwHRgwmIN9tKyCxK/I/m
INj9Px9it8OHL2r2egoHwNonKeG95jvPXievaFtcgLCy2xwOsk/RIIUtAXleeVIV
69YWG5OmU6+kN3WPb6ItPvv6KclKVnxHza8+UC/GAdlD+z/G2NP0s1Xtg18LJnWp
w76LWVprcgDqrZRR+TiIare54j8gRO8i8Ki+5vRjgyWDwkH7hIDZ2z45/pLnECmV
w2QuNw4zrjc5+LUGLzO+ujlm0I+U3C4xXQ1BGRr8sym+KBiUvpESAcxqnlwM0KYm
OjEpaMQYzk1VnA55dBrCpQ1G12L1SeJ1G5WEbBKhKdKYD1ZNDmPpXmrGRQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPebxqjq36vgNOgoPEbBzWnuq79eMB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvOTV2R3FPcmZxLUEwNkNnOFJzSE5hZTZydjE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1bTgAwQA
1bTjAwQD1bToAwQC1bT4MA0GCSqGSIb3DQEBCwUAA4IBAQB2nbHPSTtQqfi5RmKH
trJtuLS2N6bNsoit7+r0/o7D/8rWz2LIi95KZqBx2B3DqMHO8jPEE8TylbZC2Ltb
Jr5M+GP7XvlTnk/8lhfx/EFHhypb6E+SR4b+XBFII/5HJlsDUOiGoDjzmYNJpiZb
n4eaHyuP7QocTHP7fT8xtK1037o1S/qUYZuAD2SBBQWl/9oOwQN6isR7Hj264NgH
QEra5S8E+kDO9wtROvwdPbj4baSBKOXc5nienVCrWofick9JKQcHSSrNxTWH7Cxt
Vyj029H5pzukehl+4DUB9ARgIKXz+n/io3vAcr7rRFVxaAKYTH+mkEnsRfhvFCUY
q0kb
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net