Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa
File: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (raw, json)
Hash identifier: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=
Subject key identifier: DA:4E:A3:03:EC:C5:2A:B9:E5:DC:03:4A:B9:C5:AD:5F:7F:83:03:E6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 019546B1F56BDBD00D86E2CB344C12A9A8CB
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa
Signing time: Thu 27 Feb 2025 09:17:02 +0000
ROA not before: Thu 27 Feb 2025 09:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201902
IP address blocks: 5.182.8.0/22 maxlen: 24
185.59.92.0/22 maxlen: 24
2a02:6a20::/48 maxlen: 48
2a02:6a20:10::/48 maxlen: 48
2a02:6a20:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:b1:f5:6b:db:d0:0d:86:e2:cb:34:4c:12:a9:a8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Feb 27 09:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da4ea303ecc52ab9e5dc034ab9c5ad5f7f8303e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:12:19:86:67:33:5a:a1:a7:23:55:72:bc:
bf:99:3c:06:d9:cf:cb:e6:b9:3c:fe:c1:35:1c:bf:
97:bf:64:55:b3:14:71:1d:aa:84:b3:f7:35:d9:ea:
32:ba:5f:fa:dd:b6:ec:9d:24:38:b8:0f:63:07:8e:
ca:c0:7f:38:72:f5:59:5f:8c:76:0a:44:54:e3:d9:
4e:00:4e:d7:c7:2a:a6:06:9c:70:01:1a:4f:3a:e2:
af:39:01:48:66:8f:69:76:e2:4a:d6:03:c4:56:6e:
58:b3:29:e7:3c:03:b6:bc:35:36:87:98:c2:fc:3f:
af:cd:91:be:b0:9d:f7:f1:2a:c8:7d:03:90:19:e6:
07:a3:bd:71:e2:b1:b4:6c:ae:48:0c:ff:30:71:4a:
96:5d:6f:37:d9:64:31:a0:5a:77:d3:04:26:5c:97:
2d:a2:07:2f:5d:c3:b6:53:30:fd:55:bb:41:75:76:
2d:65:6e:db:25:38:5b:14:d3:ba:bc:53:c4:f1:cc:
94:d4:4d:84:87:79:48:32:40:9c:ee:69:eb:6f:be:
94:b2:d7:70:eb:1c:8b:8d:e8:3d:2a:5f:aa:c7:86:
92:a3:00:88:d4:4f:02:5f:41:87:fd:0e:28:8c:15:
4a:45:9b:ef:27:ad:2d:a7:ed:51:9b:18:94:db:02:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:A3:03:EC:C5:2A:B9:E5:DC:03:4A:B9:C5:AD:5F:7F:83:03:E6
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.8.0/22
185.59.92.0/22
IPv6:
2a02:6a20::/48
2a02:6a20:10::/48
2a02:6a20:20::/48
Signature Algorithm: sha256WithRSAEncryption
4b:59:9c:50:8f:2f:00:e3:30:6d:71:3d:ec:6f:bf:8c:04:71:
45:1a:c4:26:68:69:c5:a3:d1:95:4a:50:85:30:4d:28:9a:08:
9f:a6:13:50:2a:9f:53:46:51:42:5c:df:bb:90:66:d0:00:7a:
61:6a:ea:0d:98:59:56:13:c3:66:dc:93:f5:23:d1:12:25:74:
b3:61:16:df:d4:12:ba:40:03:60:d5:a9:71:d5:34:1c:f1:31:
e4:17:15:47:18:47:ae:0a:ae:69:e4:82:e2:81:c0:cc:8e:cd:
c3:92:4d:50:51:71:3e:31:82:07:ee:af:06:99:d0:98:56:cc:
06:87:2c:ef:85:69:31:ae:a8:b2:db:81:db:54:e1:d2:2d:f5:
d5:23:4f:41:52:ce:05:ce:92:c6:28:ff:dc:85:80:2c:0e:5e:
92:40:8a:f1:da:fb:f6:50:73:6d:5c:e9:6c:ac:9c:b1:00:fd:
e6:7a:bd:21:4b:c8:1f:24:11:bd:37:3e:24:04:dd:07:e1:59:
e1:56:e2:6f:1d:2e:ff:88:f1:0d:bc:8f:c4:65:0b:33:6d:c1:
c5:e2:12:6c:40:a5:32:fb:bd:57:fe:91:03:cf:b9:29:2a:a8:
6b:3d:a3:82:16:5c:34:37:64:51:01:6f:db:63:89:3b:a4:7a:
91:b7:c5:b5
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZVGsfVr29ANhuLLNEwSqajLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDU2NzRmMDFmZWM1NjU5NzFjOTUwZjM1MTIxNjVjNDNm
ZmRmYjYwHhcNMjUwMjI3MDkxNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTRlYTMwM2VjYzUyYWI5ZTVkYzAzNGFiOWM1YWQ1ZjdmODMwM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ngSGYZnM1qhpyNVcry/mTwG2c/L
5rk8/sE1HL+Xv2RVsxRxHaqEs/c12eoyul/63bbsnSQ4uA9jB47KwH84cvVZX4x2
CkRU49lOAE7XxyqmBpxwARpPOuKvOQFIZo9pduJK1gPEVm5YsynnPAO2vDU2h5jC
/D+vzZG+sJ338SrIfQOQGeYHo71x4rG0bK5IDP8wcUqWXW832WQxoFp30wQmXJct
ogcvXcO2UzD9VbtBdXYtZW7bJThbFNO6vFPE8cyU1E2Eh3lIMkCc7mnrb76Ustdw
6xyLjeg9Kl+qx4aSowCI1E8CX0GH/Q4ojBVKRZvvJ60tp+1RmxiU2wJVawIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFNpOowPsxSq55dwDSrnFrV9/gwPmMB8GA1UdIwQY
MBaAFLlFZ08B/sVllxyVDzUSFlxD/9+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUt
NTUzY2I3NzY5Y2E5LzEvMms2akEtekZLcm5sM0FOS3VjV3RYMy1EQS1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUtNTUzY2I3NzY5Y2E5
LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzASBAIAATAMAwQCBbYIAwQC
uTtcMCEEAgACMBsDBwAqAmogAAADBwAqAmogABADBwAqAmogACAwDQYJKoZIhvcN
AQELBQADggEBAEtZnFCPLwDjMG1xPexvv4wEcUUaxCZoacWj0ZVKUIUwTSiaCJ+m
E1Aqn1NGUUJc37uQZtAAemFq6g2YWVYTw2bck/Uj0RIldLNhFt/UErpAA2DVqXHV
NBzxMeQXFUcYR64KrmnkguKBwMyOzcOSTVBRcT4xggfurwaZ0JhWzAaHLO+FaTGu
qLLbgdtU4dIt9dUjT0FSzgXOksYo/9yFgCwOXpJAivHa+/ZQc21c6WysnLEA/eZ6
vSFLyB8kEb03PiQE3QfhWeFW4m8dLv+I8Q28j8RlCzNtwcXiEmxApTL7vVf+kQPP
uSkqqGs9o4IWXDQ3ZFEBb9tjiTukepG3xbU=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net