Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KhodZzsXJp_Uny1oosxJR347Kms.roa
File: KhodZzsXJp_Uny1oosxJR347Kms.roa (raw, json)
Hash identifier: xddjPWoPi4DDKbX6E533KyBhsz3wLAeFp11Jpgm1GgA=
Subject key identifier: 2A:1A:1D:67:3B:17:26:9F:D4:9F:2D:68:A2:CC:49:47:7E:3B:2A:6B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422201024DD482BCCDE41D8C1AFFBA4A5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KhodZzsXJp_Uny1oosxJR347Kms.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211301
IP address blocks: 5.175.249.0/24 maxlen: 24
77.90.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:10:24:dd:48:2b:cc:de:41:d8:c1:af:fb:a4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a1a1d673b17269fd49f2d68a2cc49477e3b2a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:39:ab:98:8d:4e:cf:5d:ac:f4:f2:72:37:
d8:00:e8:1e:08:fa:24:6f:2b:75:88:4d:dc:2e:89:
1a:81:ba:13:35:fa:3e:1a:9b:14:23:24:0c:8e:11:
f1:fc:a8:7e:8d:c2:7d:7b:25:95:b5:2e:7f:f2:ca:
79:16:82:76:83:2e:6c:d3:89:ea:e8:dc:bd:41:e1:
38:14:28:97:e6:a5:44:18:e5:17:03:10:0c:3c:eb:
de:59:dd:72:6b:1f:9e:98:01:ca:b4:b9:e1:55:3d:
fd:43:32:9a:93:fd:ba:af:05:a4:59:3b:cc:5d:19:
45:74:5c:ba:bc:e3:5c:af:7b:42:87:ea:d6:10:4a:
9f:ee:e2:64:dd:2c:37:21:aa:5e:f1:6a:a7:c8:ad:
87:9a:c4:82:93:7d:6d:19:b5:3a:fa:1e:29:94:e4:
fa:5e:57:dd:bd:68:17:3e:fd:40:33:c4:c9:83:a6:
67:ff:26:0a:e5:b7:cb:51:f2:31:7d:1e:86:a0:f2:
fc:10:30:97:ea:d2:5b:c4:2e:f0:31:f9:75:40:cb:
ec:f2:c9:c0:50:9e:af:75:03:8c:4a:77:55:09:1c:
3d:d3:2e:a4:14:b6:ce:c0:d1:6c:64:23:c1:95:e3:
d5:09:59:bf:13:69:f3:12:db:a3:56:db:ac:5e:e4:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:1D:67:3B:17:26:9F:D4:9F:2D:68:A2:CC:49:47:7E:3B:2A:6B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KhodZzsXJp_Uny1oosxJR347Kms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.249.0/24
77.90.57.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:82:69:00:44:d8:90:e4:d9:c5:11:5b:6b:79:80:89:ca:8c:
5b:c7:5e:48:50:dd:06:ed:3d:86:9d:ef:8d:b8:8e:8f:be:15:
64:6b:ab:da:cb:5d:b2:1d:84:de:cf:61:60:9e:20:3d:c2:bf:
30:19:26:d6:51:c1:75:c7:ab:80:56:f1:87:16:5b:b4:ea:28:
31:a6:20:88:0e:3b:10:8b:0c:d3:32:48:2f:cf:51:55:e1:21:
f5:87:1f:3c:e4:f5:ee:22:c0:df:23:dd:e9:a6:95:1a:40:db:
44:b0:a2:7d:bb:49:b5:9b:82:8c:fc:81:0f:ba:db:50:e4:f0:
29:49:e9:81:f6:a5:0f:a6:a3:7a:10:fe:16:4e:6e:c2:f8:07:
9b:44:7f:13:7f:de:0a:03:b1:04:f3:a3:4b:3e:b1:c2:81:91:
eb:fe:14:d8:d3:7e:99:d6:67:3b:f2:15:26:11:3a:0d:4c:be:
87:1c:e0:18:50:c2:b9:9e:6e:2f:f3:c4:b4:d7:d1:2f:9b:19:
e8:a1:ff:b0:29:d1:46:10:dd:7f:cc:62:28:a7:06:dd:72:fe:
34:26:37:f0:80:cc:9b:9d:80:67:21:ec:a9:45:17:36:e0:0f:
fd:ac:87:42:a0:11:6e:85:a6:5f:b8:70:51:4a:3b:24:41:73:
82:06:aa:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIBAk3UgrzN5B2MGv+6SlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTFhMWQ2NzNiMTcyNjlmZDQ5ZjJkNjhhMmNjNDk0NzdlM2IyYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCI5q5iNTs9drPTycjfYAOgeCPok
byt1iE3cLokagboTNfo+GpsUIyQMjhHx/Kh+jcJ9eyWVtS5/8sp5FoJ2gy5s04nq
6Ny9QeE4FCiX5qVEGOUXAxAMPOveWd1yax+emAHKtLnhVT39QzKak/26rwWkWTvM
XRlFdFy6vONcr3tCh+rWEEqf7uJk3Sw3Iape8WqnyK2HmsSCk31tGbU6+h4plOT6
XlfdvWgXPv1AM8TJg6Zn/yYK5bfLUfIxfR6GoPL8EDCX6tJbxC7wMfl1QMvs8snA
UJ6vdQOMSndVCRw90y6kFLbOwNFsZCPBlePVCVm/E2nzEtujVtusXuS3uwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCoaHWc7Fyaf1J8taKLMSUd+OyprMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvS2hvZFp6c1hKcF9Vbnkxb29zeEpSMzQ3S21zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa/5AwQA
TVo5MA0GCSqGSIb3DQEBCwUAA4IBAQDLgmkARNiQ5NnFEVtreYCJyoxbx15IUN0G
7T2Gne+NuI6PvhVka6vay12yHYTez2FgniA9wr8wGSbWUcF1x6uAVvGHFlu06igx
piCIDjsQiwzTMkgvz1FV4SH1hx885PXuIsDfI93pppUaQNtEsKJ9u0m1m4KM/IEP
uttQ5PApSemB9qUPpqN6EP4WTm7C+AebRH8Tf94KA7EE86NLPrHCgZHr/hTY036Z
1mc78hUmEToNTL6HHOAYUMK5nm4v88S019Evmxnoof+wKdFGEN1/zGIopwbdcv40
JjfwgMybnYBnIeypRRc24A/9rIdCoBFuhaZfuHBRSjskQXOCBqoe
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:56 2025 by rpki-client