Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa
File: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (raw, json)
Hash identifier: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=
Subject key identifier: 66:3E:09:C0:53:0D:E8:7E:58:78:7B:78:72:F3:57:96:DC:82:74:4E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0195F1DAE7265DE72B4D12E79147AFDB824A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa
Signing time: Tue 01 Apr 2025 14:56:49 +0000
ROA not before: Tue 01 Apr 2025 14:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214382
IP address blocks: 5.180.104.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
2a13:a440:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:da:e7:26:5d:e7:2b:4d:12:e7:91:47:af:db:82:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 1 14:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=663e09c0530de87e58787b7872f35796dc82744e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:a2:66:91:7d:44:a1:50:71:f5:09:24:59:
6a:b3:28:33:14:48:6a:7c:8a:b8:71:2b:3e:c5:37:
77:55:ca:e7:25:30:fa:6d:a7:55:ef:3c:dc:ee:a0:
f4:55:4e:84:4f:a1:bb:45:29:b2:f4:6f:d9:36:3e:
2e:36:6a:91:5d:83:a8:7b:1b:ee:85:01:46:f9:4a:
a7:e7:fe:84:73:55:4f:55:d2:72:68:51:e3:15:c4:
9d:1c:11:a6:92:94:2c:16:05:b3:00:d9:61:3a:6b:
a4:f8:03:dd:a9:91:63:3d:9f:67:87:3d:b8:b3:b1:
86:5a:2f:22:12:d3:80:0e:ff:88:f6:da:34:7a:c1:
35:69:56:f6:3f:95:14:b5:5f:60:0b:10:42:50:79:
ff:11:a6:c7:18:59:42:21:42:63:e7:95:f3:c2:bb:
99:25:10:ef:88:4f:a7:52:ef:57:7a:0f:60:81:6b:
9e:95:7f:af:5f:ef:db:09:66:81:2c:fc:47:49:d8:
55:54:3e:8a:b9:d5:f4:48:d3:35:6c:33:38:76:ad:
69:a7:5d:03:1d:fe:b4:8f:f7:ad:d8:d3:b5:01:ed:
05:d0:3a:06:c4:dc:08:1c:db:0d:3b:03:4d:39:bb:
ca:cd:3d:1d:97:8a:db:d1:b3:09:64:b2:a7:14:ee:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3E:09:C0:53:0D:E8:7E:58:78:7B:78:72:F3:57:96:DC:82:74:4E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.141.150.0/24
194.116.229.0/24
IPv6:
2a13:a440:8::/48
Signature Algorithm: sha256WithRSAEncryption
68:95:76:b4:1d:13:94:fe:50:50:bc:b4:94:4d:75:bf:11:0e:
08:c0:8d:eb:65:1f:d1:a0:df:83:24:1d:2d:ae:fa:47:2f:60:
66:ce:92:86:92:bb:03:9e:15:8d:24:4f:c2:15:42:2c:58:05:
af:6c:1c:65:dd:31:1b:a3:ad:db:4d:f3:86:21:f6:fe:93:ab:
83:2b:22:6b:7d:29:46:6b:0f:19:b4:67:8f:b4:ed:7e:a9:22:
79:fa:c4:d9:5a:6a:9f:99:28:cc:19:aa:27:8c:d7:64:12:20:
a5:94:7b:5f:00:8c:5f:a2:bd:a2:eb:e5:b9:81:5b:a9:79:31:
eb:2b:e7:58:74:f6:9b:21:aa:88:b9:1f:88:1c:d1:e5:80:df:
81:19:ec:dc:8c:80:77:47:46:f9:3f:40:8d:67:75:02:9e:f1:
0f:31:1c:5a:dc:6d:1b:b1:ee:2b:d1:16:70:ae:79:eb:cd:e2:
ee:d4:17:5c:bf:58:f8:82:83:1a:2a:0a:00:9a:67:b6:41:64:
84:ce:bb:02:c8:1e:81:95:3f:74:97:a9:2f:36:5a:02:a5:6e:
8d:22:8e:26:23:86:fd:93:4a:83:a3:21:75:56:a1:87:3c:c0:
98:40:bf:4f:ba:18:ef:46:66:94:27:d1:4d:15:ff:1f:64:0a:
bc:b7:1a:b6
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZXx2ucmXecrTRLnkUev24JKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUwNDAxMTQ1NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjNlMDljMDUzMGRlODdlNTg3ODdiNzg3MmYzNTc5NmRjODI3NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg6iZpF9RKFQcfUJJFlqsygzFEhq
fIq4cSs+xTd3VcrnJTD6badV7zzc7qD0VU6ET6G7RSmy9G/ZNj4uNmqRXYOoexvu
hQFG+Uqn5/6Ec1VPVdJyaFHjFcSdHBGmkpQsFgWzANlhOmuk+APdqZFjPZ9nhz24
s7GGWi8iEtOADv+I9to0esE1aVb2P5UUtV9gCxBCUHn/EabHGFlCIUJj55XzwruZ
JRDviE+nUu9Xeg9ggWuelX+vX+/bCWaBLPxHSdhVVD6KudX0SNM1bDM4dq1pp10D
Hf60j/et2NO1Ae0F0DoGxNwIHNsNOwNNObvKzT0dl4rb0bMJZLKnFO73lwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFGY+CcBTDeh+WHh7eHLzV5bcgnROMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvWmo0SndGTU42SDVZZUh0NGN2TlhsdHlDZEU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQABbRoAwQA
LY2WAwQAwnTlMA8EAgACMAkDBwAqE6RAAAgwDQYJKoZIhvcNAQELBQADggEBAGiV
drQdE5T+UFC8tJRNdb8RDgjAjetlH9Gg34MkHS2u+kcvYGbOkoaSuwOeFY0kT8IV
QixYBa9sHGXdMRujrdtN84Yh9v6Tq4MrImt9KUZrDxm0Z4+07X6pInn6xNlaap+Z
KMwZqieM12QSIKWUe18AjF+ivaLr5bmBW6l5Mesr51h09pshqoi5H4gc0eWA34EZ
7NyMgHdHRvk/QI1ndQKe8Q8xHFrcbRux7ivRFnCueevN4u7UF1y/WPiCgxoqCgCa
Z7ZBZITOuwLIHoGVP3SXqS82WgKlbo0ijiYjhv2TSoOjIXVWoYc8wJhAv0+6GO9G
ZpQn0U0V/x9kCry3GrY=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net