Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/V2iErHznYxHa67Dmd9GrV4Z44fs.roa
File: V2iErHznYxHa67Dmd9GrV4Z44fs.roa (raw, json)
Hash identifier: Xohxl37O6fZIHwZ4OmgVMYp1wr/3Q0d5lJRkRmrAJkI=
Subject key identifier: 57:68:84:AC:7C:E7:63:11:DA:EB:B0:E6:77:D1:AB:57:86:78:E1:FB
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019422FC284FCFB2443D71A396021100BFDC
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/V2iErHznYxHa67Dmd9GrV4Z44fs.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25502
IP address blocks: 94.131.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:28:4f:cf:b2:44:3d:71:a3:96:02:11:00:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=576884ac7ce76311daebb0e677d1ab578678e1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:7c:5e:cb:51:ce:84:a2:bd:10:cd:c1:8c:
83:64:d9:93:a2:0f:0f:f3:cf:9d:4d:8d:a6:e6:59:
91:79:e2:24:91:bf:8f:53:7e:46:4f:58:dc:6f:52:
0d:74:97:cc:55:a7:39:17:06:70:23:40:df:60:3d:
e1:47:b1:65:59:e4:fb:b9:41:9c:c7:72:5b:60:18:
a1:f2:c6:b5:ab:63:a8:e4:1d:26:1a:23:8b:2c:f0:
6f:cb:13:9a:3f:ef:e8:da:c9:5c:5d:56:cb:20:5b:
21:8b:1e:67:9e:12:0c:78:f8:e1:3a:9a:f2:a5:99:
12:6a:d3:68:21:bf:7a:36:b7:4b:9e:81:c3:7f:d6:
53:3d:1c:08:6c:20:ad:bc:2b:67:4a:4c:51:26:cc:
20:75:53:33:28:3c:98:6c:a3:4e:d8:b3:78:0b:2f:
fd:c8:d6:f1:b0:f4:0f:b2:3b:46:b8:79:91:80:24:
1e:d4:05:fc:1b:29:b7:84:93:ed:04:4c:0b:07:33:
10:75:19:18:95:e1:76:cf:02:35:df:42:7a:1d:cf:
41:88:50:e4:30:ce:aa:89:57:86:fa:63:79:5c:07:
66:99:36:71:d1:78:37:09:0f:30:70:bb:a5:57:c0:
d5:0a:6f:46:1c:97:97:98:d4:44:7d:74:b2:b7:1a:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:84:AC:7C:E7:63:11:DA:EB:B0:E6:77:D1:AB:57:86:78:E1:FB
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/V2iErHznYxHa67Dmd9GrV4Z44fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.208.0/24
Signature Algorithm: sha256WithRSAEncryption
21:50:a6:d4:85:1c:ce:6e:df:69:41:d7:c9:2b:be:8d:3a:8b:
c8:0a:69:7c:b6:47:ac:29:c2:06:9c:1c:07:cb:64:57:5f:76:
ce:b3:88:35:3d:a0:11:11:d5:86:8e:53:42:c5:5c:26:b5:99:
7c:96:d9:80:28:64:94:03:a6:dd:1d:3e:0b:41:ea:5d:93:ab:
8e:bc:61:90:9a:a9:21:ba:03:48:1b:40:2a:cd:2e:e5:bd:17:
14:38:23:37:ec:df:cf:bb:e3:60:57:26:9c:02:4e:f9:bd:f7:
c2:9e:52:6e:cb:66:c4:93:62:0b:88:4d:25:71:4d:5e:72:f6:
52:13:23:28:7f:76:89:fe:c3:84:5e:a7:a0:ae:9a:92:dd:57:
48:60:71:74:08:5b:75:1a:3c:f7:82:ea:8e:b4:08:5d:e5:11:
16:6f:ca:38:46:75:81:10:bd:eb:a0:91:00:31:37:9d:af:ec:
d7:ba:bc:85:8f:7d:b2:7c:b2:c4:a4:78:c8:1a:5b:c7:8f:73:
54:e3:4c:98:e2:56:4d:5d:35:59:08:39:1d:21:fc:c0:d7:cc:
6d:18:89:75:d8:ad:d9:88:a7:55:c9:84:ca:c4:44:93:06:a6:
96:89:b4:3d:1c:6f:eb:59:8a:1c:a4:79:21:76:78:a7:de:0b:
44:df:b6:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/ChPz7JEPXGjlgIRAL/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux
YjBmM2YwHhcNMjUwMTAxMTc0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzY4ODRhYzdjZTc2MzExZGFlYmIwZTY3N2QxYWI1Nzg2NzhlMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT98XstRzoSivRDNwYyDZNmTog8P
88+dTY2m5lmReeIkkb+PU35GT1jcb1INdJfMVac5FwZwI0DfYD3hR7FlWeT7uUGc
x3JbYBih8sa1q2Oo5B0mGiOLLPBvyxOaP+/o2slcXVbLIFshix5nnhIMePjhOpry
pZkSatNoIb96NrdLnoHDf9ZTPRwIbCCtvCtnSkxRJswgdVMzKDyYbKNO2LN4Cy/9
yNbxsPQPsjtGuHmRgCQe1AX8Gym3hJPtBEwLBzMQdRkYleF2zwI130J6Hc9BiFDk
MM6qiVeG+mN5XAdmmTZx0Xg3CQ8wcLulV8DVCm9GHJeXmNREfXSytxqMvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdohKx852MR2uuw5nfRq1eGeOH7MB8GA1UdIwQY
MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt
ZGY1NzJmZTk2NzJhLzEvVjJpRXJIem5ZeEhhNjdEbWQ5R3JWNFo0NGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh
LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoPQMA0G
CSqGSIb3DQEBCwUAA4IBAQAhUKbUhRzObt9pQdfJK76NOovICml8tkesKcIGnBwH
y2RXX3bOs4g1PaAREdWGjlNCxVwmtZl8ltmAKGSUA6bdHT4LQepdk6uOvGGQmqkh
ugNIG0AqzS7lvRcUOCM37N/Pu+NgVyacAk75vffCnlJuy2bEk2ILiE0lcU1ecvZS
EyMof3aJ/sOEXqegrpqS3VdIYHF0CFt1Gjz3guqOtAhd5REWb8o4RnWBEL3roJEA
MTedr+zXuryFj32yfLLEpHjIGlvHj3NU40yY4lZNXTVZCDkdIfzA18xtGIl12K3Z
iKdVyYTKxESTBqaWibQ9HG/rWYocpHkhdnin3gtE37bI
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:05 2025 by rpki-client on console.sobornost.net