Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Du7F2RJm5agz3daFo9PURGnmsX0.roa
File: Du7F2RJm5agz3daFo9PURGnmsX0.roa (raw, json)
Hash identifier: kCTzkj1FmMV2xudTVUUI5L4uvZ5KjanxMR579BAs7bE=
Subject key identifier: 0E:EE:C5:D9:12:66:E5:A8:33:DD:D6:85:A3:D3:D4:44:69:E6:B1:7D
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01942445537091F47BE25BACCB7AB670881A
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Du7F2RJm5agz3daFo9PURGnmsX0.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33830
IP address blocks: 31.145.72.0/24 maxlen: 24
31.145.171.0/24 maxlen: 24
62.244.244.0/24 maxlen: 24
213.248.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:53:70:91:f4:7b:e2:5b:ac:cb:7a:b6:70:88:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eeec5d91266e5a833ddd685a3d3d44469e6b17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:e3:56:4a:ee:51:29:e6:fd:64:98:d0:04:
1a:2f:17:9c:0a:fa:fc:37:c6:f6:83:36:be:4e:a4:
0f:96:2d:e2:98:4e:a7:4d:cf:95:7c:2b:a4:f4:c5:
61:60:f4:19:56:a5:a2:4a:31:9a:fa:0f:82:b7:52:
9a:23:8e:9e:a3:ed:e0:d6:35:c3:f0:40:4c:ce:eb:
8a:ad:e1:1c:1d:84:79:08:3d:60:51:89:f7:d3:df:
92:24:fd:c9:ef:17:c6:ee:38:37:2d:fd:5c:fd:06:
5f:32:b9:d4:c3:cd:44:e0:10:21:38:1d:a5:14:ba:
96:98:fc:e1:f4:47:06:d2:9f:48:10:bc:18:84:91:
ce:fd:7c:93:c5:a9:0c:83:cf:4c:c9:41:f3:b2:d6:
0a:a0:65:70:e1:41:5c:d5:f4:d8:ea:07:f9:b5:a5:
90:fa:db:73:41:f9:c4:7c:c1:d4:71:4e:63:a3:1f:
45:0d:f9:bd:8b:b6:d0:51:0c:42:dd:97:4c:af:83:
5a:d1:f1:6d:c4:d9:eb:8b:77:43:04:d1:75:34:47:
72:83:73:fc:5c:01:c8:e8:14:6e:da:26:45:a9:80:
bd:1c:29:fc:1d:0e:c1:44:22:c9:28:0b:ec:35:07:
f5:c8:68:72:4e:66:13:d0:99:20:84:16:a2:e1:d0:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:C5:D9:12:66:E5:A8:33:DD:D6:85:A3:D3:D4:44:69:E6:B1:7D
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Du7F2RJm5agz3daFo9PURGnmsX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.72.0/24
31.145.171.0/24
62.244.244.0/24
213.248.141.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1e:2f:f2:bc:22:c7:aa:dc:de:d8:f8:68:77:4e:1c:f0:33:
26:c0:b2:47:64:b8:30:ab:1e:51:a5:b3:d3:d4:60:37:d8:09:
f9:ef:92:c5:a6:f2:eb:fa:a8:ad:2b:38:2b:de:3f:e7:69:d5:
60:94:6d:d6:79:0a:ea:34:03:c5:28:99:01:86:e9:2e:60:6d:
f6:ae:cd:a3:e9:61:64:e2:ab:3f:a7:74:8e:d7:bb:73:12:ce:
b5:ce:4f:f2:cc:b0:70:d5:58:96:6b:3e:89:cd:bb:fa:61:81:
64:af:72:f7:25:21:fd:43:d0:f3:02:9a:18:24:36:b9:43:9d:
ac:88:da:8d:c1:ad:d5:29:46:15:66:a8:f0:b2:1c:3b:dc:fe:
9e:ea:59:7d:83:f1:e7:ed:b3:4b:0b:bf:5d:9e:68:69:a1:8a:
a4:f8:5a:c3:41:f8:90:2b:b9:b1:0a:8c:08:8b:80:3e:cb:19:
87:f2:58:2c:00:90:3c:bb:63:44:d3:0e:e0:52:d5:9d:23:79:
89:1a:bd:1f:6f:e2:03:db:be:d6:0b:ee:15:40:79:5c:89:3c:
ba:13:45:62:75:c0:de:61:51:41:33:da:13:22:c2:18:3c:5d:
4b:2c:24:41:bc:08:fc:d7:2a:51:5e:c7:74:a8:dc:60:3a:04:
c8:50:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net