Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/i1ie9c4GMnYQoCsx7Yuzj440HHI.roa
File: i1ie9c4GMnYQoCsx7Yuzj440HHI.roa (raw, json)
Hash identifier: HVHSYqE+j6lFd7e4TSqFTWlzRCs5JeGENi7PBrCwnZE=
Subject key identifier: 8B:58:9E:F5:CE:06:32:76:10:A0:2B:31:ED:8B:B3:8F:8E:34:1C:72
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019422FB6B5077065B2D2DF2DC7D1E75B1B3
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/i1ie9c4GMnYQoCsx7Yuzj440HHI.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202611
IP address blocks: 188.72.103.0/24 maxlen: 24
188.72.104.0/24 maxlen: 24
188.72.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6b:50:77:06:5b:2d:2d:f2:dc:7d:1e:75:b1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b589ef5ce06327610a02b31ed8bb38f8e341c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:21:b9:0f:43:21:0e:31:6b:da:cf:7f:bd:
e7:2b:48:82:43:ec:d8:92:db:1a:29:e9:c1:49:43:
1b:c7:e6:a4:f5:e8:e6:03:4e:3a:0a:5e:6b:52:65:
e0:6b:30:8d:8c:74:99:ba:a8:b0:39:a9:1a:55:44:
2f:ba:ed:e8:fb:82:af:f9:d7:d9:71:10:05:1b:f3:
7b:62:df:a0:12:b0:d9:d2:90:e2:bb:38:7f:25:3e:
22:b9:58:6f:22:4e:9d:67:74:7e:86:c3:6e:c6:ee:
c8:9b:ed:ee:d5:8c:d2:e1:8d:51:26:50:c3:4c:34:
4c:eb:90:69:72:80:89:e5:6c:22:10:ee:f2:e6:29:
6b:11:ed:e3:a5:09:1f:98:af:86:31:a3:f3:ff:7c:
d7:6c:ca:13:d1:3a:44:a0:d0:b3:72:f0:01:fd:9c:
70:13:c4:fe:e0:99:3c:f0:40:a3:14:26:35:5a:ce:
75:12:e1:c2:b5:28:93:f3:00:24:f8:ae:3a:2f:dd:
d9:a5:8b:a7:8a:a5:07:4e:5c:19:ca:d9:e6:f9:aa:
3d:df:74:68:06:b1:fb:3a:01:c1:9e:a4:4a:8f:e6:
f8:a0:95:ff:04:c9:a7:46:63:dc:04:97:b6:fc:3a:
ee:8e:9e:6c:6a:b4:1a:69:d9:77:a7:b1:45:83:42:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:58:9E:F5:CE:06:32:76:10:A0:2B:31:ED:8B:B3:8F:8E:34:1C:72
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/i1ie9c4GMnYQoCsx7Yuzj440HHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.103.0-188.72.105.255
Signature Algorithm: sha256WithRSAEncryption
ad:63:a5:fd:73:0c:17:55:54:33:41:86:f9:22:e7:65:b7:ba:
45:04:cd:3f:00:bf:0a:fe:63:af:e1:8a:2e:3a:0e:79:89:6a:
23:dc:59:08:11:d4:de:bf:13:95:06:e8:25:0b:8c:fd:bb:c5:
1e:2c:36:33:65:99:4f:91:d9:6b:6c:fd:46:b4:03:9d:f3:6f:
79:86:74:e4:59:9c:f4:ff:4b:ed:32:e9:8e:79:14:dc:c7:1d:
b8:03:e3:01:eb:e2:7f:26:6f:8d:8c:0f:b3:93:56:58:b6:75:
2a:5d:59:d6:fe:27:31:11:bd:05:dd:ec:fc:d2:e5:ea:0b:8a:
6c:c2:b8:a4:50:d6:53:51:6f:ef:99:3a:5c:3f:15:3b:d4:d7:
b1:64:11:35:3d:7d:31:46:70:f2:df:47:c2:57:1a:24:4d:26:
eb:1f:b2:00:0b:5e:df:3c:6a:a9:26:8b:9b:58:79:87:2d:1c:
3b:ad:49:06:62:d9:79:e0:95:81:9b:a6:3b:a8:80:a6:fa:81:
e2:46:f1:9d:9d:f3:03:02:d3:c8:c5:6d:0b:83:3d:4a:dc:ed:
64:16:c6:cc:dd:8f:d6:79:ee:7d:88:f1:07:b3:ac:55:f4:25:
c9:85:2b:6c:db:f1:b7:0b:e5:70:ad:8a:8c:37:94:a8:d0:9d:
0e:0a:fd:f8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+2tQdwZbLS3y3H0edbGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjUwMTAxMTc0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjU4OWVmNWNlMDYzMjc2MTBhMDJiMzFlZDhiYjM4ZjhlMzQxYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/chuQ9DIQ4xa9rPf73nK0iCQ+zY
ktsaKenBSUMbx+ak9ejmA046Cl5rUmXgazCNjHSZuqiwOakaVUQvuu3o+4Kv+dfZ
cRAFG/N7Yt+gErDZ0pDiuzh/JT4iuVhvIk6dZ3R+hsNuxu7Im+3u1YzS4Y1RJlDD
TDRM65BpcoCJ5WwiEO7y5ilrEe3jpQkfmK+GMaPz/3zXbMoT0TpEoNCzcvAB/Zxw
E8T+4Jk88ECjFCY1Ws51EuHCtSiT8wAk+K46L93ZpYuniqUHTlwZytnm+ao933Ro
BrH7OgHBnqRKj+b4oJX/BMmnRmPcBJe2/Drujp5sarQaadl3p7FFg0JmKQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFItYnvXOBjJ2EKArMe2Ls4+ONBxyMB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvaTFpZTljNEdNbllRb0NzeDdZdXpqNDQwSEhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC8SGcD
BAG8SGgwDQYJKoZIhvcNAQELBQADggEBAK1jpf1zDBdVVDNBhvki52W3ukUEzT8A
vwr+Y6/hii46DnmJaiPcWQgR1N6/E5UG6CULjP27xR4sNjNlmU+R2Wts/Ua0A53z
b3mGdORZnPT/S+0y6Y55FNzHHbgD4wHr4n8mb42MD7OTVli2dSpdWdb+JzERvQXd
7PzS5eoLimzCuKRQ1lNRb++ZOlw/FTvU17FkETU9fTFGcPLfR8JXGiRNJusfsgAL
Xt88aqkmi5tYeYctHDutSQZi2XnglYGbpjuogKb6geJG8Z2d8wMC08jFbQuDPUrc
7WQWxszdj9Z57n2I8QezrFX0JcmFK2zb8bcL5XCtiow3lKjQnQ4K/fg=
-----END CERTIFICATE-----
Generated at Wed Jan 22 17:26:03 2025 by rpki-client on console.sobornost.net