Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/lQwR3y5IAJ7kyCCFVo104fC4SsY.roa
File: lQwR3y5IAJ7kyCCFVo104fC4SsY.roa (raw, json)
Hash identifier: MwEmP7Sqq33K1HUPXLtLK+kd2q/HJrM3DtuK+SIM+zY=
Subject key identifier: 95:0C:11:DF:2E:48:00:9E:E4:C8:20:85:56:8D:74:E1:F0:B8:4A:C6
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 01941FFA56BA9E3637E76D2FC3E4BC623898
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/lQwR3y5IAJ7kyCCFVo104fC4SsY.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47846
IP address blocks: 64.190.62.0/23 maxlen: 32
91.195.240.0/23 maxlen: 32
2001:67c:64c::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:56:ba:9e:36:37:e7:6d:2f:c3:e4:bc:62:38:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=950c11df2e48009ee4c82085568d74e1f0b84ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:e7:02:35:d2:b7:31:ea:3c:42:f5:e5:0e:
98:50:e2:b1:31:8e:20:b5:c1:da:f6:d7:0f:15:f6:
e5:e1:64:af:13:d5:1f:70:73:f8:bf:75:5a:f8:9e:
63:36:c2:f7:b7:a3:99:e7:5f:07:4b:8e:52:48:2c:
4a:07:e1:a1:16:5c:33:f6:76:15:9c:51:e6:ab:ff:
04:52:5a:76:0f:02:6c:2b:79:85:cf:96:96:29:f8:
ad:77:04:79:31:ad:c1:55:96:c8:91:0e:9b:cc:0d:
ff:7f:7f:9a:28:5a:f8:a5:5d:f7:95:75:0a:f6:2c:
75:b8:14:36:0f:ac:7c:73:4a:72:ef:8c:9d:5f:52:
37:04:0e:20:1b:62:17:76:06:25:26:95:dd:c1:d2:
97:7c:0d:03:c6:05:b8:16:cf:5f:b3:0b:68:69:a1:
70:47:88:94:d6:ce:aa:ea:df:58:11:ba:ca:26:b0:
53:29:2d:83:f8:45:f0:71:9c:03:b7:f2:e1:e1:5c:
cd:74:23:0c:6f:01:c3:20:67:ad:90:c6:d4:b8:4c:
3a:27:b6:25:72:d7:89:3e:88:47:33:d5:31:27:e0:
af:9a:c0:70:a7:a9:05:00:ad:82:9e:26:a7:f5:8b:
ad:40:aa:26:70:e0:1e:3d:5f:b7:56:12:92:62:86:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:11:DF:2E:48:00:9E:E4:C8:20:85:56:8D:74:E1:F0:B8:4A:C6
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/lQwR3y5IAJ7kyCCFVo104fC4SsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.62.0/23
91.195.240.0/23
IPv6:
2001:67c:64c::/48
Signature Algorithm: sha256WithRSAEncryption
55:20:a8:b4:81:90:75:7a:d8:99:03:f4:fd:01:6c:89:d7:ff:
39:00:e0:cf:48:96:fc:de:d1:0e:65:46:db:ec:d7:3e:01:28:
63:58:c0:85:df:6f:57:75:b3:6b:5f:b9:0d:97:08:34:5d:38:
86:6b:a5:21:91:9e:8d:34:03:3e:97:40:b8:c4:e0:93:fd:77:
d9:d3:ac:43:c5:15:87:d3:2e:70:70:d4:39:0a:31:8d:c1:13:
14:f0:4c:33:5e:1e:1c:e5:d8:8b:25:50:0e:20:66:3c:b5:95:
5c:c9:5b:e4:84:8c:45:bd:6d:07:1e:a2:a5:96:85:1b:f3:cd:
ed:a5:19:2a:4a:12:00:b8:e6:92:75:c9:8e:9d:5e:ef:67:65:
70:d8:a7:d0:20:36:e6:ce:19:1f:3b:f4:f7:a4:9a:86:d3:26:
ed:1d:3f:13:6d:d2:c1:88:9c:ef:46:d3:bb:04:5e:13:40:ee:
f4:ba:77:3d:89:cb:0d:57:bb:86:00:69:11:34:0a:52:6b:87:
a7:47:76:49:8a:af:af:d3:2a:54:01:c5:2f:77:87:3b:24:2f:
64:eb:b2:21:56:ef:59:5b:72:e3:ba:55:13:50:da:2f:05:fa:
b2:1d:09:7e:bf:c2:3c:dc:11:ae:34:29:db:80:47:cc:a3:d5:
53:1c:2a:8c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQf+la6njY3520vw+S8YjiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjUxMGEzMTE2OTcyZmNlZDk1ZThhOGJkYWZkNmU0NTVk
ZWQwYmEwHhcNMjUwMTAxMDM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTBjMTFkZjJlNDgwMDllZTRjODIwODU1NjhkNzRlMWYwYjg0YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc7nAjXStzHqPEL15Q6YUOKxMY4g
tcHa9tcPFfbl4WSvE9UfcHP4v3Va+J5jNsL3t6OZ518HS45SSCxKB+GhFlwz9nYV
nFHmq/8EUlp2DwJsK3mFz5aWKfitdwR5Ma3BVZbIkQ6bzA3/f3+aKFr4pV33lXUK
9ix1uBQ2D6x8c0py74ydX1I3BA4gG2IXdgYlJpXdwdKXfA0DxgW4Fs9fswtoaaFw
R4iU1s6q6t9YEbrKJrBTKS2D+EXwcZwDt/Lh4VzNdCMMbwHDIGetkMbUuEw6J7Yl
cteJPohHM9UxJ+CvmsBwp6kFAK2Cnian9YutQKomcOAePV+3VhKSYoYIowIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJUMEd8uSACe5MgghVaNdOHwuErGMB8GA1UdIwQY
MBaAFEhlEKMRaXL87ZXoqL2v1uRV3tC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQt
YTVmNmMwYWExMWRlLzEvbFF3UjN5NUlBSjdreUNDRlZvMTA0ZkM0U3NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQtYTVmNmMwYWExMWRl
LzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBQL4+AwQB
W8PwMA8EAgACMAkDBwAgAQZ8BkwwDQYJKoZIhvcNAQELBQADggEBAFUgqLSBkHV6
2JkD9P0BbInX/zkA4M9Ilvze0Q5lRtvs1z4BKGNYwIXfb1d1s2tfuQ2XCDRdOIZr
pSGRno00Az6XQLjE4JP9d9nTrEPFFYfTLnBw1DkKMY3BExTwTDNeHhzl2IslUA4g
Zjy1lVzJW+SEjEW9bQceoqWWhRvzze2lGSpKEgC45pJ1yY6dXu9nZXDYp9AgNubO
GR879PekmobTJu0dPxNt0sGInO9G07sEXhNA7vS6dz2Jyw1Xu4YAaRE0ClJrh6dH
dkmKr6/TKlQBxS93hzskL2TrsiFW71lbcuO6VRNQ2i8F+rIdCX6/wjzcEa40KduA
R8yj1VMcKow=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net