Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/luYdx-235O5C675vRSxXJGmnMdM.roa
File: luYdx-235O5C675vRSxXJGmnMdM.roa (raw, json)
Hash identifier: bZVISw7D6DTDuJByW5KjSkQB7Un2DX5m4fFU0oOqokQ=
Subject key identifier: 96:E6:1D:C7:ED:B7:E4:EE:42:EB:BE:6F:45:2C:57:24:69:A7:31:D3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019629FB56C8590DD3417BC5CD3D71D24B1D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/luYdx-235O5C675vRSxXJGmnMdM.roa
Signing time: Sat 12 Apr 2025 12:30:59 +0000
ROA not before: Sat 12 Apr 2025 12:30:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 193.124.35.0/24 maxlen: 24
194.58.57.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.24.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
195.133.63.0/24 maxlen: 24
195.133.66.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:fb:56:c8:59:0d:d3:41:7b:c5:cd:3d:71:d2:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 12 12:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96e61dc7edb7e4ee42ebbe6f452c572469a731d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:f3:b5:05:4b:fe:4a:81:12:a9:0f:87:f5:
19:50:64:6f:9e:97:13:4d:3b:74:29:65:3b:5d:48:
52:f6:72:6b:2b:2d:56:1f:98:a0:72:75:42:28:ad:
cc:e3:e9:2e:69:17:c2:60:af:04:ac:2b:7c:c8:17:
c6:a8:3b:60:56:38:b1:6d:19:70:c3:57:20:4c:60:
0e:47:59:ab:05:5b:bc:5c:c3:89:91:8e:1c:12:e7:
8b:18:bb:ce:69:29:fe:f6:8c:db:eb:25:f2:60:5d:
09:13:b0:d4:43:93:d4:3c:18:21:92:99:4b:d2:b4:
d8:6d:1a:0d:d9:ad:54:eb:3b:5e:06:92:24:ec:dd:
fd:b0:80:82:22:28:7c:26:b6:e8:d2:66:00:f7:c6:
aa:0e:51:c7:33:3a:f2:c2:40:23:e5:87:e3:3e:59:
4a:71:ef:e0:6b:3d:35:ae:69:a4:1d:45:e5:4f:6b:
d1:e8:e8:4a:55:89:64:9d:48:25:b2:14:c6:1b:1f:
4c:9c:e0:94:0b:fa:2b:48:ba:d1:46:20:80:8d:ea:
44:ea:e0:30:e0:72:03:1b:f0:7c:74:68:ef:ad:e4:
96:ce:f3:b0:fd:4c:33:d6:c2:42:e5:ed:c1:6b:c2:
f7:c8:3c:c7:4a:8b:6d:07:ad:b2:57:87:69:ed:c3:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E6:1D:C7:ED:B7:E4:EE:42:EB:BE:6F:45:2C:57:24:69:A7:31:D3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/luYdx-235O5C675vRSxXJGmnMdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.35.0/24
194.58.57.0/24
194.87.26.0/23
194.87.44.0/24
194.87.49.0/24
194.87.83.0/24
194.87.115.0/24
194.87.130.0/24
194.87.134.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.220.0-194.87.222.255
194.87.243.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.133.14.0/23
195.133.20.0/23
195.133.24.0/24
195.133.40.0/23
195.133.63.0/24
195.133.66.0/24
195.133.76.0/23
195.133.81.0/24
212.192.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:71:c6:14:a1:53:52:fb:05:b8:c1:81:1c:58:97:ee:cb:3c:
35:6d:a9:be:3e:c8:c8:35:6b:fa:dc:d2:e5:f0:c4:9f:fb:c2:
43:b3:3f:91:3d:18:1f:37:27:63:11:c0:68:20:17:32:90:39:
0b:c2:79:42:c2:e3:47:45:1e:1e:b9:9c:c8:ec:de:0a:76:c9:
86:97:16:59:e7:5b:02:6c:75:f0:d6:9f:7a:07:c5:b3:01:78:
c7:d4:60:20:84:f1:86:5c:24:0c:97:00:2e:40:5a:03:53:21:
9a:89:27:80:28:bb:fa:b3:cd:f5:a5:ff:fe:4b:80:87:92:ae:
6d:8d:5a:4c:ea:d4:8c:9f:71:38:a6:f1:8d:6f:10:3a:d7:78:
b9:da:93:54:d6:30:df:19:d4:f6:1a:6f:61:79:c4:2f:dc:3e:
0d:10:75:89:26:27:b7:64:6a:7b:e5:6d:b7:db:a4:0a:94:5a:
6c:94:3f:c5:e7:c8:54:07:23:5a:73:4d:93:e5:08:1b:cb:ec:
8e:d4:16:21:72:cb:54:6b:f0:88:27:d1:4b:9f:b2:6d:3b:0a:
75:c0:87:90:1b:0c:42:ff:05:44:6f:2f:98:1f:59:61:3d:7b:
36:e9:49:b6:6a:4e:e6:bd:b8:eb:3c:26:31:f3:48:a7:e4:bf:
dc:36:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net