Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/CufUT2fMUqvz9LGxO18OZgdQp_g.roa
File: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (raw, json)
Hash identifier: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=
Subject key identifier: 0A:E7:D4:4F:67:CC:52:AB:F3:F4:B1:B1:3B:5F:0E:66:07:50:A7:F8
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 01942444B8E19287975D311CD60277B0AAB5
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/CufUT2fMUqvz9LGxO18OZgdQp_g.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211200
IP address blocks: 92.119.39.0/24 maxlen: 24
194.180.60.0/22 maxlen: 22
194.180.60.0/24 maxlen: 24
194.180.61.0/24 maxlen: 24
194.180.62.0/24 maxlen: 24
194.180.63.0/24 maxlen: 24
2a0b:e340::/32 maxlen: 32
2a0b:e341::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b8:e1:92:87:97:5d:31:1c:d6:02:77:b0:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ae7d44f67cc52abf3f4b1b13b5f0e660750a7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:f5:4c:25:96:80:65:99:c0:89:c9:8d:ab:
08:70:26:86:3b:69:c6:a0:43:93:87:c4:ee:73:5d:
5b:7d:b4:4a:d0:c5:8b:c3:23:5a:5e:31:d7:57:45:
c5:41:18:11:4d:8d:aa:ec:7a:9f:2e:db:cd:b5:aa:
77:90:0a:07:39:4d:82:4e:c1:d6:ff:15:31:d1:3e:
7e:78:02:ad:73:dc:1b:fc:92:2b:af:d3:1a:3d:cb:
30:20:cc:61:30:9f:61:59:5a:27:06:d1:70:f4:7b:
a2:87:2a:f5:93:5f:e8:ed:3f:89:b9:43:ea:b8:92:
4f:e2:69:be:86:c6:c8:60:1f:8c:46:64:43:1e:00:
74:82:5d:64:ce:0e:ca:e8:b6:c9:db:d2:0b:62:02:
0f:61:ae:dc:b5:8a:51:04:29:c4:ae:41:b0:66:88:
2d:e0:ca:75:ae:f9:d2:6f:92:2c:2e:fe:0f:b9:bf:
d4:c1:a6:1f:94:00:d1:83:c3:db:4a:c7:e7:ca:46:
97:75:8e:4b:69:42:e5:14:b6:78:66:ec:d9:71:09:
5b:34:da:bc:d0:33:73:11:9a:bf:55:d4:76:ee:f4:
9b:e1:b4:61:9a:19:85:44:3e:f1:c2:ef:dc:26:49:
12:06:d7:51:6d:0f:d4:5a:ff:b4:d4:50:b3:97:d0:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E7:D4:4F:67:CC:52:AB:F3:F4:B1:B1:3B:5F:0E:66:07:50:A7:F8
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/CufUT2fMUqvz9LGxO18OZgdQp_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.39.0/24
194.180.60.0/22
IPv6:
2a0b:e340::/31
Signature Algorithm: sha256WithRSAEncryption
af:c2:15:75:57:67:53:d6:7c:8d:06:b3:d0:1b:83:ec:c7:2f:
5a:fd:5b:38:17:ac:96:97:a8:10:51:d6:73:d3:cb:3e:9f:43:
6e:f4:8d:b8:d3:4d:96:c2:8b:d6:d0:f5:e1:cf:27:3a:d0:14:
bc:a3:f0:f0:b5:d9:ef:d5:53:83:cd:dd:1b:8e:25:ee:0b:26:
94:42:43:dc:a2:8e:d4:62:11:8a:c2:a4:13:d7:51:c5:81:82:
33:ba:d4:15:68:f3:9f:25:ac:07:b8:16:3b:6e:7c:e5:49:ac:
57:a5:32:61:23:80:75:48:00:d3:ae:4c:bd:d5:c3:7b:b7:36:
f8:34:c2:8e:c2:8e:6f:94:7a:15:9d:d6:cc:01:d9:6c:ee:f8:
9b:06:2a:25:c1:ae:c3:62:a8:41:da:9b:27:bf:69:11:72:3c:
f7:28:59:0e:54:b9:86:1d:48:a4:af:55:41:5c:da:9b:c9:9c:
22:fc:65:84:3d:0f:00:36:a9:7d:1b:87:06:bd:31:b3:92:c5:
16:7a:6f:da:f1:35:db:68:58:87:f3:1a:8d:03:62:cf:e1:90:
73:1e:b8:ff:9c:a2:af:af:e7:75:72:0d:2b:31:22:0a:20:32:
47:3d:c9:ba:0d:5d:ed:0e:da:fb:95:6b:9b:55:1c:4c:cb:96:
12:02:58:c4
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQkRLjhkoeXXTEc1gJ3sKq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw
OGQxMGMwHhcNMjUwMTAxMjM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWU3ZDQ0ZjY3Y2M1MmFiZjNmNGIxYjEzYjVmMGU2NjA3NTBhN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliX1TCWWgGWZwInJjasIcCaGO2nG
oEOTh8Tuc11bfbRK0MWLwyNaXjHXV0XFQRgRTY2q7HqfLtvNtap3kAoHOU2CTsHW
/xUx0T5+eAKtc9wb/JIrr9MaPcswIMxhMJ9hWVonBtFw9Huihyr1k1/o7T+JuUPq
uJJP4mm+hsbIYB+MRmRDHgB0gl1kzg7K6LbJ29ILYgIPYa7ctYpRBCnErkGwZogt
4Mp1rvnSb5IsLv4Pub/UwaYflADRg8PbSsfnykaXdY5LaULlFLZ4ZuzZcQlbNNq8
0DNzEZq/VdR27vSb4bRhmhmFRD7xwu/cJkkSBtdRbQ/UWv+01FCzl9AhzQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFArn1E9nzFKr8/SxsTtfDmYHUKf4MB8GA1UdIwQY
MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt
MTczNzRiZmZiNzFhLzEvQ3VmVVQyZk1VcXZ6OUxHeE8xOE9aZ2RRcF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh
LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXHcnAwQC
wrQ8MA0EAgACMAcDBQEqC+NAMA0GCSqGSIb3DQEBCwUAA4IBAQCvwhV1V2dT1nyN
BrPQG4Psxy9a/Vs4F6yWl6gQUdZz08s+n0Nu9I24002WwovW0PXhzyc60BS8o/Dw
tdnv1VODzd0bjiXuCyaUQkPcoo7UYhGKwqQT11HFgYIzutQVaPOfJawHuBY7bnzl
SaxXpTJhI4B1SADTrky91cN7tzb4NMKOwo5vlHoVndbMAdls7vibBiolwa7DYqhB
2psnv2kRcjz3KFkOVLmGHUikr1VBXNqbyZwi/GWEPQ8ANql9G4cGvTGzksUWem/a
8TXbaFiH8xqNA2LP4ZBzHrj/nKKvr+d1cg0rMSIKIDJHPcm6DV3tDtr7lWubVRxM
y5YSAljE
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net