Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa
File: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (raw, json)
Hash identifier: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=
Subject key identifier: A8:1D:59:A3:D7:93:AB:41:9F:E9:10:00:BD:E2:6B:27:31:E3:91:F1
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 0194221F892A50340AC3D152AC16D8CA98DD
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201996
IP address blocks: 87.246.40.0/24 maxlen: 24
87.246.41.0/24 maxlen: 24
87.246.42.0/24 maxlen: 24
87.246.43.0/24 maxlen: 24
212.5.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:89:2a:50:34:0a:c3:d1:52:ac:16:d8:ca:98:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a81d59a3d793ab419fe91000bde26b2731e391f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:30:56:c0:43:92:8b:0b:1d:36:5e:75:95:
f0:85:92:a5:c1:f6:39:97:32:08:19:74:e5:b1:f3:
ba:e5:c2:71:e7:dc:fe:54:b2:e1:65:1f:b9:77:2c:
e2:88:ae:d2:4a:af:2a:7a:ce:76:b0:72:72:76:b4:
60:7a:c4:f6:61:5a:b1:c6:2b:2a:6d:41:9d:8e:14:
05:5b:bd:9d:e4:7f:77:d8:ad:bb:56:6c:61:64:4c:
56:a8:37:d0:49:26:e7:c5:aa:aa:05:17:4c:32:d0:
05:dc:1d:86:58:df:4e:16:64:6c:f1:b8:29:96:98:
ee:ac:9e:cd:60:55:06:18:90:a9:29:5a:81:15:f1:
fe:89:56:5b:11:0b:3c:9c:bc:55:82:5f:82:a9:4f:
c4:01:f7:f9:cc:db:8e:fb:f7:0c:14:fc:5b:a0:fe:
b1:0a:6c:c5:ce:34:0c:06:b2:39:7c:45:37:33:07:
0c:0e:b1:9a:b9:e9:db:59:f5:36:95:74:b2:17:3c:
32:7c:41:8b:a9:a7:a4:d2:16:d3:7d:d4:7e:ac:d7:
df:e6:bf:bc:87:b9:46:50:66:5d:c6:9c:84:2a:72:
ce:9b:bf:bd:62:81:73:e0:6c:80:e0:9a:c7:68:69:
0d:f0:6b:64:a3:60:23:04:d9:95:d3:b6:e4:8b:23:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:59:A3:D7:93:AB:41:9F:E9:10:00:BD:E2:6B:27:31:E3:91:F1
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.40.0/22
212.5.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d5:8f:6d:c9:d4:f6:06:1c:1e:2f:5f:d3:0c:f4:8c:e8:6c:
54:82:72:70:df:58:67:1b:c9:33:2c:a4:48:b3:38:64:83:0d:
7f:06:47:f2:f9:3b:61:3e:57:4a:a8:6d:ac:1c:1b:1d:27:80:
15:c6:87:67:e3:6f:ad:8e:2c:42:89:fb:19:b2:0c:d4:be:12:
92:4a:7d:d1:1f:7a:0c:87:b1:28:ac:3d:21:ee:3d:5e:05:cd:
04:81:21:70:55:ba:70:da:d1:f8:ef:5a:8b:e0:52:2a:4c:fe:
29:5e:1a:83:e3:e6:a4:43:76:c5:81:6d:2d:5c:6e:d8:b9:27:
43:2f:c9:18:ed:b7:d3:99:6e:cb:c8:74:c8:30:56:f2:13:e3:
0b:ef:81:d7:1d:fd:77:17:08:b1:8c:6e:a6:68:48:b1:d3:64:
14:b3:86:6f:b0:d3:14:b6:3a:78:f1:51:4c:80:0b:d3:bb:db:
86:dd:fc:b4:01:9d:02:d4:c4:8d:01:59:ff:af:67:69:20:ae:
f8:4a:2d:5b:a6:59:b6:94:f8:17:8c:cb:0f:ff:ee:5a:a8:c7:
a5:e5:62:27:50:ab:c8:a2:06:8c:66:a9:d7:da:90:a1:fc:a2:
65:e2:4b:74:51:ba:24:a6:3f:04:26:9d:ec:4e:7a:0d:d8:f8:
c7:a7:4b:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH4kqUDQKw9FSrBbYypjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3
MWEyYTIwHhcNMjUwMTAxMTM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODFkNTlhM2Q3OTNhYjQxOWZlOTEwMDBiZGUyNmIyNzMxZTM5MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSEwVsBDkosLHTZedZXwhZKlwfY5
lzIIGXTlsfO65cJx59z+VLLhZR+5dyziiK7SSq8qes52sHJydrRgesT2YVqxxisq
bUGdjhQFW72d5H932K27VmxhZExWqDfQSSbnxaqqBRdMMtAF3B2GWN9OFmRs8bgp
lpjurJ7NYFUGGJCpKVqBFfH+iVZbEQs8nLxVgl+CqU/EAff5zNuO+/cMFPxboP6x
CmzFzjQMBrI5fEU3MwcMDrGauenbWfU2lXSyFzwyfEGLqaek0hbTfdR+rNff5r+8
h7lGUGZdxpyEKnLOm7+9YoFz4GyA4JrHaGkN8Gtko2AjBNmV07bkiyNpIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKgdWaPXk6tBn+kQAL3iaycx45HxMB8GA1UdIwQY
MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt
ZmQyMmRmM2I1N2Y2LzEvcUIxWm85ZVRxMEdmNlJBQXZlSnJKekhqa2ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2
LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCV/YoAwQA
1AU8MA0GCSqGSIb3DQEBCwUAA4IBAQBs1Y9tydT2BhweL1/TDPSM6GxUgnJw31hn
G8kzLKRIszhkgw1/Bkfy+TthPldKqG2sHBsdJ4AVxodn42+tjixCifsZsgzUvhKS
Sn3RH3oMh7EorD0h7j1eBc0EgSFwVbpw2tH471qL4FIqTP4pXhqD4+akQ3bFgW0t
XG7YuSdDL8kY7bfTmW7LyHTIMFbyE+ML74HXHf13FwixjG6maEix02QUs4ZvsNMU
tjp48VFMgAvTu9uG3fy0AZ0C1MSNAVn/r2dpIK74Si1bplm2lPgXjMsP/+5aqMel
5WInUKvIogaMZqnX2pCh/KJl4kt0Ubokpj8EJp3sTnoN2PjHp0uV
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net