Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/mmY1ARivIWLIbuStJrmVTjbcqd0.roa
File: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (raw, json)
Hash identifier: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=
Subject key identifier: 9A:66:35:01:18:AF:21:62:C8:6E:E4:AD:26:B9:95:4E:36:DC:A9:DD
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 0195A2AB4CDAEC4F0486036AE8CA02298F4F
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/mmY1ARivIWLIbuStJrmVTjbcqd0.roa
Signing time: Mon 17 Mar 2025 05:54:49 +0000
ROA not before: Mon 17 Mar 2025 05:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44725
IP address blocks: 5.250.192.0/19 maxlen: 19
37.114.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:ab:4c:da:ec:4f:04:86:03:6a:e8:ca:02:29:8f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Mar 17 05:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a66350118af2162c86ee4ad26b9954e36dca9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:c6:af:6a:b9:40:94:47:4c:64:eb:1a:58:
cf:bd:67:3b:13:d4:ed:2a:3d:ec:81:06:22:1c:76:
a6:0a:e8:57:7f:c2:c6:ae:da:ca:c1:e3:18:30:5d:
f8:8b:7b:d9:d8:4d:02:cf:dc:4b:bf:b9:2f:f6:b1:
4a:4b:fd:cb:6e:14:2e:55:6c:af:71:80:a6:d3:84:
3a:0a:51:26:a0:60:a2:a2:7c:5a:fe:76:d5:b1:1e:
ca:3a:13:b0:7d:b0:31:ae:a1:6e:14:c6:8f:1d:a7:
62:62:a0:7f:e5:b9:af:8f:67:5c:d2:04:26:99:32:
f6:63:6b:9f:82:de:77:4b:e8:ad:a8:9a:50:ea:cb:
6c:33:12:65:ac:0c:10:47:86:3e:fa:c8:e9:5a:9d:
e5:d4:e5:35:48:51:e2:4c:2b:82:e5:d0:b4:e3:97:
37:ec:37:db:fb:6b:e9:66:23:5e:6c:09:1b:29:4f:
8f:fd:6c:9e:5e:c0:1d:bc:ae:71:d7:6f:36:b2:07:
00:fe:61:7f:85:34:2b:52:ce:3a:6c:db:03:ad:7d:
1b:c1:69:14:df:38:0b:41:ea:96:9f:f6:a2:75:24:
6b:3d:1e:fd:37:b2:5a:07:4c:a4:93:06:94:c8:99:
47:2c:9b:ae:c9:7a:76:ec:c7:74:00:e2:43:0d:89:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:35:01:18:AF:21:62:C8:6E:E4:AD:26:B9:95:4E:36:DC:A9:DD
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/mmY1ARivIWLIbuStJrmVTjbcqd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.192.0/19
37.114.128.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d1:7f:44:af:df:ed:66:65:11:09:81:3c:24:1b:c1:71:ae:
c3:fb:3e:57:d3:cd:6d:3f:f9:08:90:87:cb:a2:e6:4f:0f:55:
af:7c:96:ea:db:ec:91:c4:76:37:40:02:5e:25:a3:3b:c8:9a:
0a:c1:c5:56:e9:ba:bf:4f:8c:d2:4a:88:ab:9b:0c:6a:2f:b7:
60:90:40:d3:a8:ca:9c:cf:d8:ac:9b:ee:84:21:d8:1e:96:39:
b0:e9:3f:72:47:3b:2f:fc:0f:f1:ee:e4:74:5b:13:05:c5:8e:
77:e3:93:23:c2:fe:ac:d8:97:5e:68:1a:41:e2:02:a7:b0:16:
41:3d:56:10:af:25:6e:3d:ef:0f:2a:97:89:69:13:d7:60:6e:
91:85:d2:80:b8:40:d2:a0:79:9d:2e:4b:08:b0:e1:82:cc:fa:
e5:78:50:3f:cd:4e:23:1d:18:0f:66:24:01:b5:25:d7:3c:a6:
0f:90:44:d8:15:aa:c2:1f:9b:ef:fd:38:a6:02:60:7a:24:b4:
a1:7a:a3:e2:85:6c:a6:75:96:91:0c:30:e9:55:ba:78:4f:03:
59:cf:7c:83:9a:e4:41:94:c1:08:ec:f3:b7:16:d5:c1:cd:d2:
46:46:08:d6:83:68:ed:3e:de:41:8e:f3:33:57:dd:a3:1b:24:
47:45:a0:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWiq0za7E8EhgNq6MoCKY9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi
MDk2ZmQwHhcNMjUwMzE3MDU1NDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTY2MzUwMTE4YWYyMTYyYzg2ZWU0YWQyNmI5OTU0ZTM2ZGNhOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zzGr2q5QJRHTGTrGljPvWc7E9Tt
Kj3sgQYiHHamCuhXf8LGrtrKweMYMF34i3vZ2E0Cz9xLv7kv9rFKS/3LbhQuVWyv
cYCm04Q6ClEmoGCionxa/nbVsR7KOhOwfbAxrqFuFMaPHadiYqB/5bmvj2dc0gQm
mTL2Y2ufgt53S+itqJpQ6stsMxJlrAwQR4Y++sjpWp3l1OU1SFHiTCuC5dC045c3
7Dfb+2vpZiNebAkbKU+P/WyeXsAdvK5x1282sgcA/mF/hTQrUs46bNsDrX0bwWkU
3zgLQeqWn/aidSRrPR79N7JaB0ykkwaUyJlHLJuuyXp27Md0AOJDDYkZdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJpmNQEYryFiyG7krSa5lU423KndMB8GA1UdIwQY
MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt
MTVkNWRlYjIyOGRkLzEvbW1ZMUFSaXZJV0xJYnVTdEpybVZUamJjcWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk
LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFBfrAAwQA
JXKAMA0GCSqGSIb3DQEBCwUAA4IBAQBC0X9Er9/tZmURCYE8JBvBca7D+z5X081t
P/kIkIfLouZPD1WvfJbq2+yRxHY3QAJeJaM7yJoKwcVW6bq/T4zSSoirmwxqL7dg
kEDTqMqcz9ism+6EIdgeljmw6T9yRzsv/A/x7uR0WxMFxY5345Mjwv6s2JdeaBpB
4gKnsBZBPVYQryVuPe8PKpeJaRPXYG6RhdKAuEDSoHmdLksIsOGCzPrleFA/zU4j
HRgPZiQBtSXXPKYPkETYFarCH5vv/TimAmB6JLSheqPihWymdZaRDDDpVbp4TwNZ
z3yDmuRBlMEI7PO3FtXBzdJGRgjWg2jtPt5BjvMzV92jGyRHRaBM
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net