Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PW27trByE6RGkebd1r4kDdN6dv8.roa
File: PW27trByE6RGkebd1r4kDdN6dv8.roa (raw, json)
Hash identifier: NDV3EIFXG4y5AeQ7h86kpdmBrgvTON8hAp2TVF8Pn+M=
Subject key identifier: 3D:6D:BB:B6:B0:72:13:A4:46:91:E6:DD:D6:BE:24:0D:D3:7A:76:FF
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0195CF345B6904112B10943A9EA06D97B235
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PW27trByE6RGkebd1r4kDdN6dv8.roa
Signing time: Tue 25 Mar 2025 21:27:49 +0000
ROA not before: Tue 25 Mar 2025 21:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200193
IP address blocks: 194.116.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cf:34:5b:69:04:11:2b:10:94:3a:9e:a0:6d:97:b2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 25 21:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6dbbb6b07213a44691e6ddd6be240dd37a76ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:bc:8c:e9:ec:a5:4c:44:c6:78:87:b9:25:
33:48:59:47:43:8d:39:2c:15:4b:74:26:d3:11:e3:
7e:d9:69:38:6b:e8:d1:92:fa:0d:de:06:d4:1d:6c:
e3:19:97:02:a9:96:b7:76:bd:6e:52:f4:a8:ea:75:
05:5b:56:0a:1f:90:bd:b0:8c:5c:8e:ee:f5:79:22:
e6:9b:1b:e5:26:76:d8:e6:77:d3:19:d0:af:d5:bf:
8d:57:3c:73:67:1c:5c:60:25:c4:9f:0b:72:75:ae:
25:d7:50:58:a4:0d:01:ea:e6:27:3b:1c:db:1a:67:
8c:d2:6f:88:14:64:71:61:30:da:64:91:a2:f4:a8:
0b:0a:68:94:d8:53:fd:90:12:b9:bc:78:47:b5:4a:
30:08:37:a9:af:bd:35:37:70:e6:80:52:84:7f:f5:
39:2b:53:de:19:2f:bd:74:f8:ab:97:6f:13:16:1e:
52:53:8c:4a:cb:63:17:49:51:87:35:10:62:77:fb:
49:fb:d5:04:22:34:78:35:6e:c5:f9:db:35:a0:39:
f2:69:e0:13:f4:49:8d:0e:e2:22:cb:03:29:ac:c2:
c3:54:bc:0a:31:99:3d:7d:42:a3:31:70:8e:8b:f4:
a6:7b:91:a9:ea:00:ef:94:f7:f7:36:94:54:ed:32:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:BB:B6:B0:72:13:A4:46:91:E6:DD:D6:BE:24:0D:D3:7A:76:FF
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PW27trByE6RGkebd1r4kDdN6dv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5a:ce:69:d0:eb:e6:d0:41:cb:b6:f3:89:49:55:f3:a1:a0:
78:f9:e7:59:5b:a8:49:e9:e8:72:8d:ae:a3:4a:07:72:d0:d8:
01:83:70:08:8a:2c:8b:a0:50:6f:60:23:5b:61:21:fa:81:8a:
d1:95:e3:e5:f1:c5:22:4c:05:dc:2e:d3:e5:56:1e:cb:85:1c:
15:8e:b4:09:85:44:f3:93:5d:f3:3d:bc:14:b4:60:3d:bc:84:
73:3f:49:ac:26:30:ec:92:90:03:96:cb:b5:fc:c8:3d:4a:d7:
fa:42:7a:ce:ea:a3:40:85:57:8e:0b:38:a3:5c:6d:d6:f0:c3:
dd:63:02:fb:35:2c:45:8b:43:38:6a:8f:0a:02:7c:b6:3d:25:
24:1b:b3:81:14:4b:f8:5a:31:1c:b0:41:c5:84:cd:47:d7:1d:
d7:83:4a:ce:a9:7a:cb:2e:af:5d:e1:aa:00:63:cb:47:07:fe:
b3:48:60:32:ca:33:11:e7:35:32:39:76:a3:4e:e5:19:76:b4:
07:73:88:88:8c:35:30:3e:86:84:b3:00:c6:fe:e0:4f:fe:c9:
91:12:55:4a:95:be:26:3a:58:59:5e:d2:2c:c3:ac:60:a5:74:
02:80:88:f5:e4:60:6b:06:2f:b6:75:89:95:0d:c6:bf:5c:33:
b8:5c:ca:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXPNFtpBBErEJQ6nqBtl7I1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUwMzI1MjEyNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDZkYmJiNmIwNzIxM2E0NDY5MWU2ZGRkNmJlMjQwZGQzN2E3NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzK8jOnspUxExniHuSUzSFlHQ405
LBVLdCbTEeN+2Wk4a+jRkvoN3gbUHWzjGZcCqZa3dr1uUvSo6nUFW1YKH5C9sIxc
ju71eSLmmxvlJnbY5nfTGdCv1b+NVzxzZxxcYCXEnwtyda4l11BYpA0B6uYnOxzb
GmeM0m+IFGRxYTDaZJGi9KgLCmiU2FP9kBK5vHhHtUowCDepr701N3DmgFKEf/U5
K1PeGS+9dPirl28TFh5SU4xKy2MXSVGHNRBid/tJ+9UEIjR4NW7F+ds1oDnyaeAT
9EmNDuIiywMprMLDVLwKMZk9fUKjMXCOi/Sme5Gp6gDvlPf3NpRU7TLHUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1tu7awchOkRpHm3da+JA3Tenb/MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvUFcyN3RyQnlFNlJHa2ViZDFyNGtEZE42ZHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTlMA0G
CSqGSIb3DQEBCwUAA4IBAQBaWs5p0Ovm0EHLtvOJSVXzoaB4+edZW6hJ6ehyja6j
Sgdy0NgBg3AIiiyLoFBvYCNbYSH6gYrRlePl8cUiTAXcLtPlVh7LhRwVjrQJhUTz
k13zPbwUtGA9vIRzP0msJjDskpADlsu1/Mg9Stf6QnrO6qNAhVeOCzijXG3W8MPd
YwL7NSxFi0M4ao8KAny2PSUkG7OBFEv4WjEcsEHFhM1H1x3Xg0rOqXrLLq9d4aoA
Y8tHB/6zSGAyyjMR5zUyOXajTuUZdrQHc4iIjDUwPoaEswDG/uBP/smRElVKlb4m
OlhZXtIsw6xgpXQCgIj15GBrBi+2dYmVDca/XDO4XMq/
-----END CERTIFICATE-----
Generated at Wed Apr 2 00:23:28 2025 by rpki-client on console.sobornost.net