Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa
File: iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa (raw, json)
Hash identifier: xavQWQ+h3Wh68WfrJKGu7Ge405dFSg9FX+cO3lDgnEY=
Subject key identifier: 88:8F:0E:AE:5C:E0:6F:A5:55:BB:0E:33:19:C7:80:93:86:3F:81:DA
Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial: 019421439EB575B6ED0D348EDBC05BB3D0A3
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa
Signing time: Wed 01 Jan 2025 09:47:47 +0000
ROA not before: Wed 01 Jan 2025 09:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215489
IP address blocks: 170.237.6.0/23 maxlen: 23
170.237.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:9e:b5:75:b6:ed:0d:34:8e:db:c0:5b:b3:d0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Validity
Not Before: Jan 1 09:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=888f0eae5ce06fa555bb0e3319c78093863f81da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:c9:fd:24:9f:eb:c7:8f:74:20:05:c2:df:
03:bf:ac:d1:e2:ee:5b:98:29:f5:59:79:5f:6e:da:
db:3b:b3:82:00:ea:9c:da:2c:0d:45:8c:2a:d0:68:
87:7f:01:0e:0b:04:61:17:49:19:d3:14:e9:fe:1b:
6c:bc:49:5a:26:15:22:45:57:e0:28:61:59:9b:c8:
00:17:4f:1b:fa:3a:56:4a:11:b0:a7:cf:e1:57:da:
70:46:dc:b0:bf:ee:1d:bd:6c:e9:1e:bc:60:f0:05:
ed:85:d0:30:eb:13:50:60:db:dc:a5:c1:69:08:d2:
97:f0:a2:7a:24:80:e0:17:05:dc:23:25:1a:e1:a2:
b2:8d:9e:53:fa:56:22:58:71:7c:77:d1:c4:4e:2b:
6c:9e:79:88:ad:09:c6:7d:16:be:8e:fc:63:48:4b:
24:a7:c2:86:ca:e2:78:aa:25:a6:07:5c:4f:dc:fb:
af:82:ba:1c:95:91:cc:73:bb:14:7b:3e:ab:dd:d9:
eb:fb:30:e7:ea:ff:98:fd:63:c8:6e:85:48:3c:2d:
fe:49:68:21:49:aa:f0:a0:ee:15:d6:57:84:ef:da:
2f:d5:ee:25:57:ec:99:9e:e6:15:b2:e9:e4:66:27:
6b:61:94:16:68:79:03:88:47:98:65:60:70:33:53:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8F:0E:AE:5C:E0:6F:A5:55:BB:0E:33:19:C7:80:93:86:3F:81:DA
X509v3 Authority Key Identifier:
keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.237.6.0-170.237.9.255
Signature Algorithm: sha256WithRSAEncryption
46:e9:ed:97:68:1d:43:b9:4c:08:f2:73:c4:3b:ca:5b:c2:42:
6a:f2:b8:e5:03:54:b8:79:d6:45:94:49:8a:67:d2:60:9f:07:
05:85:8a:3d:f3:f8:cb:94:49:27:20:0e:8a:cc:38:f1:e0:66:
88:ee:c5:ee:9f:8f:c7:af:cc:b6:b8:f8:90:d6:75:c0:ad:c0:
f6:28:ec:7a:ac:26:69:b6:74:5b:f5:08:fb:3f:33:39:6c:9c:
8a:ac:6c:87:d0:94:b1:e7:e1:be:6a:ec:6d:a6:bb:d6:04:de:
8f:10:05:1c:b9:26:87:f9:54:92:a1:e6:3c:06:10:d1:f6:db:
c9:a6:1c:92:13:7b:ae:33:b4:01:2c:63:26:0f:80:a6:0c:b6:
48:88:ef:5b:c9:58:c3:69:3a:2b:5a:94:d7:65:7f:01:de:ca:
ca:73:62:b4:12:2a:6f:88:a2:b5:52:ec:72:11:50:da:4a:16:
5a:cd:7e:4b:ab:fc:08:86:65:93:53:6f:22:a2:20:fb:b9:5c:
9d:a1:bf:7e:d8:1c:86:57:38:2e:59:a4:eb:30:fe:07:ad:67:
3d:26:96:e1:e6:53:56:75:d0:f1:bd:5e:24:07:04:40:fc:63:
a5:ef:fe:52:50:c1:0c:e3:a0:f2:e0:3d:81:bb:34:bf:a2:e5:
b8:75:df:b1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhQ561dbbtDTSO28Bbs9CjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzI0OWViNmZhNmI1ZGJhZjZhYjlkZWIzYTc3NzhlZTBl
YjM0ODcwHhcNMjUwMTAxMDk0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODhmMGVhZTVjZTA2ZmE1NTViYjBlMzMxOWM3ODA5Mzg2M2Y4MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50/J/SSf68ePdCAFwt8Dv6zR4u5b
mCn1WXlfbtrbO7OCAOqc2iwNRYwq0GiHfwEOCwRhF0kZ0xTp/htsvElaJhUiRVfg
KGFZm8gAF08b+jpWShGwp8/hV9pwRtywv+4dvWzpHrxg8AXthdAw6xNQYNvcpcFp
CNKX8KJ6JIDgFwXcIyUa4aKyjZ5T+lYiWHF8d9HETitsnnmIrQnGfRa+jvxjSEsk
p8KGyuJ4qiWmB1xP3PuvgroclZHMc7sUez6r3dnr+zDn6v+Y/WPIboVIPC3+SWgh
SarwoO4V1leE79ov1e4lV+yZnuYVsunkZidrYZQWaHkDiEeYZWBwM1NY6QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIiPDq5c4G+lVbsOMxnHgJOGP4HaMB8GA1UdIwQY
MBaAFKXCSetvprXbr2q53rOnd47g6zSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut
MzJlYjNhNGVhZDQzLzEvaUk4T3JsemdiNlZWdXc0ekdjZUFrNFlfZ2RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz
LzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGq7QYD
BAGq7QgwDQYJKoZIhvcNAQELBQADggEBAEbp7ZdoHUO5TAjyc8Q7ylvCQmryuOUD
VLh51kWUSYpn0mCfBwWFij3z+MuUSScgDorMOPHgZojuxe6fj8evzLa4+JDWdcCt
wPYo7HqsJmm2dFv1CPs/MzlsnIqsbIfQlLHn4b5q7G2mu9YE3o8QBRy5Jof5VJKh
5jwGENH228mmHJITe64ztAEsYyYPgKYMtkiI71vJWMNpOitalNdlfwHeyspzYrQS
Km+IorVS7HIRUNpKFlrNfkur/AiGZZNTbyKiIPu5XJ2hv37YHIZXOC5ZpOsw/get
Zz0mluHmU1Z10PG9XiQHBED8Y6Xv/lJQwQzjoPLgPYG7NL+i5bh137E=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net