Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/t9fTM1TKvJ-oUXQJ9lDM9WsVyDc.roa
File: t9fTM1TKvJ-oUXQJ9lDM9WsVyDc.roa (raw, json)
Hash identifier: bT5E6LtHCC1AluQgd2lvyOIQ+/FsjKMjc8eOVOWcAoQ=
Subject key identifier: B7:D7:D3:33:54:CA:BC:9F:A8:51:74:09:F6:50:CC:F5:6B:15:C8:37
Certificate issuer: /CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Certificate serial: 0194266B850E131A0DEBDB2A2DA3DFD54473
Authority key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/t9fTM1TKvJ-oUXQJ9lDM9WsVyDc.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61221
IP address blocks: 5.252.144.0/24 maxlen: 24
5.252.146.0/24 maxlen: 24
185.14.244.0/23 maxlen: 23
185.14.244.0/24 maxlen: 24
185.14.245.0/24 maxlen: 24
185.14.246.0/23 maxlen: 23
185.14.246.0/24 maxlen: 24
185.14.247.0/24 maxlen: 24
2a03:b840:2::/48 maxlen: 48
2a03:b840:3::/48 maxlen: 64
2a03:b840:12::/48 maxlen: 48
2a03:b840:13::/48 maxlen: 48
2a03:b840:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:85:0e:13:1a:0d:eb:db:2a:2d:a3:df:d5:44:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7d7d33354cabc9fa8517409f650ccf56b15c837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:09:3e:ff:01:a7:42:b7:55:03:2d:7b:41:
e9:d8:c6:8d:d7:c6:ca:94:88:6f:76:0f:89:e0:80:
76:2f:fd:7b:28:32:c5:d4:5f:56:3e:eb:a6:11:4e:
d0:0c:86:4f:08:3d:00:a6:df:cc:b1:0f:ff:fb:c0:
dd:47:9d:9b:dc:b0:2d:3b:24:32:30:1d:d0:b1:0c:
47:70:5b:ca:9a:e1:f1:b2:78:7e:81:39:55:27:86:
90:b4:52:e6:90:5f:a8:2e:ba:d0:7f:b5:d3:87:fd:
0f:b7:bd:bb:b3:d0:7c:f4:8a:21:09:90:e4:36:a3:
95:99:ea:3f:2f:a8:17:de:c9:8f:63:8e:f6:56:fc:
d3:15:35:27:f6:97:37:84:f9:bb:4e:65:c3:12:d2:
c2:70:e3:63:6a:d4:34:d4:9e:fc:a7:9d:87:85:90:
ae:e7:28:89:8c:d4:b9:82:82:5c:0a:d8:d6:e9:8c:
c4:cb:d6:9b:1c:f7:29:35:9f:6f:be:c2:f8:80:15:
e6:e6:e2:b6:3b:30:89:ec:dd:63:e8:60:49:29:eb:
62:c7:8d:c5:26:37:57:eb:0a:1f:c8:d0:1f:d2:7d:
39:18:a0:4f:79:bf:d3:84:63:e2:65:da:f9:a5:4c:
ff:51:f1:94:90:b5:94:73:89:9f:32:e6:7d:a3:14:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:D3:33:54:CA:BC:9F:A8:51:74:09:F6:50:CC:F5:6B:15:C8:37
X509v3 Authority Key Identifier:
keyid:15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/t9fTM1TKvJ-oUXQJ9lDM9WsVyDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.144.0/24
5.252.146.0/24
185.14.244.0/22
IPv6:
2a03:b840:2::/47
2a03:b840:12::/47
2a03:b840:100::/48
Signature Algorithm: sha256WithRSAEncryption
7f:00:99:62:90:ea:65:2e:63:58:87:ff:88:3b:44:a6:df:c1:
c6:42:61:25:c9:13:83:28:5e:7e:e1:1a:04:fa:2e:00:63:04:
0a:5e:a3:a5:1b:1f:31:dd:cc:06:5f:06:b6:46:11:21:41:98:
9e:6b:f5:2a:a8:e4:2d:d1:4a:e3:9a:60:af:8a:32:91:39:c6:
36:2e:0d:fb:37:ef:26:e4:ef:f5:37:e4:20:09:1b:66:1c:01:
23:fd:a1:99:ad:9b:5b:0f:a7:e7:20:ac:5c:11:df:d3:45:ad:
a9:a7:39:49:42:20:b1:9d:21:23:5d:37:5f:e8:c3:d8:33:8e:
a3:2f:e0:03:72:d5:94:e6:05:90:4f:db:f0:83:0a:dc:2f:a9:
02:fb:a9:17:10:ec:74:2c:e7:2c:22:18:a3:b1:eb:08:2c:58:
37:86:b7:86:b3:15:af:13:02:63:38:5d:94:13:0b:96:a6:37:
37:4d:c2:01:6a:20:54:d4:98:44:0d:3a:6f:74:04:65:cf:fa:
cc:bd:c4:33:d7:e0:21:c7:4d:6a:2a:89:ae:d7:11:e6:43:5b:
14:6b:bf:77:a6:3d:b1:8d:85:67:6d:fd:1c:74:1c:e4:eb:59:
3a:35:50:4e:b0:58:06:13:08:f4:fd:c6:7b:c6:f7:00:db:14:
6b:ac:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net