Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa
File: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (raw, json)
Hash identifier: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=
Subject key identifier: 85:16:CD:00:6C:7B:2C:6D:B1:31:38:0F:E0:8C:7B:5C:62:CD:66:8C
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 0196195B8B0216B7E2E5D6828F1919C39895
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa
Signing time: Wed 09 Apr 2025 07:02:31 +0000
ROA not before: Wed 09 Apr 2025 07:02:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57087
IP address blocks: 5.182.130.0/24 maxlen: 24
5.182.131.0/24 maxlen: 24
193.163.42.0/23 maxlen: 24
193.163.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:5b:8b:02:16:b7:e2:e5:d6:82:8f:19:19:c3:98:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Apr 9 07:02:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8516cd006c7b2c6db131380fe08c7b5c62cd668c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:11:af:b7:f5:9c:44:80:58:d4:7f:f7:69:
54:3b:d1:e2:35:7a:76:de:5a:84:88:42:c0:7a:b5:
31:a2:ba:63:d9:a7:ba:2a:e7:5f:df:36:88:2e:12:
e6:86:9a:53:92:e5:1d:bd:87:d4:08:03:88:36:6f:
5b:a8:c5:ee:3f:c4:c8:37:29:3d:dc:58:20:67:12:
3c:f8:aa:3b:ad:14:fa:c2:93:ba:30:94:a9:bf:23:
31:5a:5d:86:2c:73:2b:27:11:60:ce:be:55:04:ad:
39:ca:4c:f9:8b:63:1d:03:d0:47:58:20:e1:97:9b:
d1:88:d1:55:ec:4b:0a:b0:d0:94:d3:c7:a8:f0:6e:
6b:01:b9:1e:0b:3d:87:a0:91:a3:a5:6d:48:70:39:
a4:32:77:ec:94:ea:11:7c:d6:43:48:37:51:51:49:
5d:17:5f:16:23:76:94:3e:fe:4f:ed:a0:2d:26:0e:
51:04:f1:02:79:9d:66:24:32:78:37:4b:b0:65:01:
03:c9:e4:85:a5:76:8e:1e:87:58:3b:5c:a0:f0:a6:
86:da:75:69:b8:26:a6:25:de:86:9d:fd:aa:c7:aa:
72:68:97:77:6d:36:7d:00:08:c6:c7:a9:f8:79:34:
5e:02:2a:9d:d8:77:97:ef:96:3f:80:45:5b:58:2a:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:CD:00:6C:7B:2C:6D:B1:31:38:0F:E0:8C:7B:5C:62:CD:66:8C
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.130.0/23
193.163.42.0-193.163.44.255
Signature Algorithm: sha256WithRSAEncryption
52:5c:7f:56:16:1a:0f:16:93:5f:4b:6e:25:90:e5:d8:b6:1d:
e1:90:14:1b:65:87:46:0f:04:1e:02:e4:ae:69:bf:e3:48:fb:
65:61:ff:1d:ba:3c:47:88:09:08:ad:b8:9e:0b:96:d8:be:68:
dd:3e:ac:4a:2c:e9:48:51:53:eb:c7:14:e4:7a:0a:d1:0b:c9:
1b:74:4d:08:1e:92:43:3b:6a:66:f5:64:d9:d9:ca:4e:47:cf:
49:e1:3f:de:03:79:16:f5:77:1e:c9:26:2f:56:9e:93:8a:ea:
2b:64:a9:45:11:eb:8e:d7:7e:c3:00:d9:e6:19:64:8b:ec:d4:
66:77:7c:c4:bd:e2:41:50:f1:83:7f:bf:89:d3:92:5b:b0:eb:
2f:95:a0:03:d0:33:a4:f5:fb:38:11:af:21:ea:d1:25:58:71:
f2:22:ae:f1:a8:33:86:0d:1e:b0:52:8c:26:8e:46:9b:72:95:
ac:17:a7:4a:6c:8a:88:bb:21:75:62:ef:9f:1d:25:24:21:9d:
1d:40:1f:4f:08:74:52:9c:29:87:85:7d:d6:be:6a:4a:51:00:
09:1b:6b:75:66:5b:ea:79:bd:fc:ec:bb:a7:c0:92:37:a5:a2:
67:e8:a0:05:6d:ec:09:54:d9:03:20:8d:ee:fc:71:c4:cd:35:
7c:93:03:2c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZYZW4sCFrfi5daCjxkZw5iVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh
ZjUxZDIwHhcNMjUwNDA5MDcwMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTE2Y2QwMDZjN2IyYzZkYjEzMTM4MGZlMDhjN2I1YzYyY2Q2NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8IRr7f1nESAWNR/92lUO9HiNXp2
3lqEiELAerUxorpj2ae6Kudf3zaILhLmhppTkuUdvYfUCAOINm9bqMXuP8TINyk9
3FggZxI8+Ko7rRT6wpO6MJSpvyMxWl2GLHMrJxFgzr5VBK05ykz5i2MdA9BHWCDh
l5vRiNFV7EsKsNCU08eo8G5rAbkeCz2HoJGjpW1IcDmkMnfslOoRfNZDSDdRUUld
F18WI3aUPv5P7aAtJg5RBPECeZ1mJDJ4N0uwZQEDyeSFpXaOHodYO1yg8KaG2nVp
uCamJd6Gnf2qx6pyaJd3bTZ9AAjGx6n4eTReAiqd2HeX75Y/gEVbWCo00wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIUWzQBseyxtsTE4D+CMe1xizWaMMB8GA1UdIwQY
MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt
YTk4OTM1NDVjM2M1LzEvaFJiTkFHeDdMRzJ4TVRnUDRJeDdYR0xOWm93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1
LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBBbaCMAwD
BAHBoyoDBADBoywwDQYJKoZIhvcNAQELBQADggEBAFJcf1YWGg8Wk19LbiWQ5di2
HeGQFBtlh0YPBB4C5K5pv+NI+2Vh/x26PEeICQituJ4Llti+aN0+rEos6UhRU+vH
FOR6CtELyRt0TQgekkM7amb1ZNnZyk5Hz0nhP94DeRb1dx7JJi9WnpOK6itkqUUR
647XfsMA2eYZZIvs1GZ3fMS94kFQ8YN/v4nTkluw6y+VoAPQM6T1+zgRryHq0SVY
cfIirvGoM4YNHrBSjCaORptylawXp0psioi7IXVi758dJSQhnR1AH08IdFKcKYeF
fda+akpRAAkba3VmW+p5vfzsu6fAkjelomfooAVt7AlU2QMgje78ccTNNXyTAyw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net