Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/0jE-nEfR5T_d7BILsWZTUD9dG5M.roa
File: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (raw, json)
Hash identifier: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=
Subject key identifier: D2:31:3E:9C:47:D1:E5:3F:DD:EC:12:0B:B1:66:53:50:3F:5D:1B:93
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 01941F8C97E428255DDFAAEFBA1BBDC81A2E
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/0jE-nEfR5T_d7BILsWZTUD9dG5M.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29644
IP address blocks: 31.193.216.0/21 maxlen: 24
77.75.96.0/21 maxlen: 24
178.250.112.0/21 maxlen: 24
185.51.104.0/22 maxlen: 24
2a03:5f00::/32 maxlen: 32
2a03:5f00:102::/48 maxlen: 48
2a03:5f00:103::/48 maxlen: 48
2a03:5f00:104::/48 maxlen: 48
2a03:5f00:105::/48 maxlen: 48
2a03:5f00:107::/48 maxlen: 48
2a03:5f00:108::/48 maxlen: 48
2a03:5f00:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:97:e4:28:25:5d:df:aa:ef:ba:1b:bd:c8:1a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2313e9c47d1e53fddec120bb16653503f5d1b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:19:f1:34:f2:5b:7f:13:cc:36:44:05:de:
a4:00:a6:8e:a3:fe:c0:e9:6b:31:04:e8:af:09:1b:
b3:00:d3:92:fd:1d:ce:17:4d:15:25:24:0e:9b:ce:
9b:29:48:03:f5:1a:84:b4:b2:8d:e6:e1:66:2d:39:
48:1d:7e:e8:02:7b:05:6b:1a:b8:da:ae:32:e2:62:
cf:7f:2e:4b:80:b8:d8:2a:45:0d:3c:54:1c:48:62:
4c:33:3f:db:4c:99:e0:b3:aa:a2:ae:b8:45:85:27:
65:59:c1:c3:d4:be:22:e4:a0:05:9e:de:87:68:a1:
77:5d:9d:5b:61:a1:37:9e:2b:6a:bb:40:ed:25:7d:
76:2a:8b:b2:8e:25:6c:fb:49:9c:d3:0b:4f:f7:2b:
2a:0c:9b:60:26:63:ea:fc:47:3d:03:50:aa:83:6d:
e1:a6:4e:36:0f:03:54:fe:d5:9f:aa:ec:66:1a:7c:
c5:42:41:40:0c:64:53:1c:c1:a4:fa:5a:b3:e8:3b:
40:b1:e9:f4:2e:47:b6:fa:65:40:59:09:27:9b:b9:
bd:38:83:39:06:29:5b:cd:d5:26:73:65:38:69:4b:
a8:4f:64:3b:35:54:f7:de:a7:85:c9:a2:b2:9e:f8:
93:37:b2:73:7d:20:ae:9d:03:04:9d:15:1b:90:d6:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:31:3E:9C:47:D1:E5:3F:DD:EC:12:0B:B1:66:53:50:3F:5D:1B:93
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/0jE-nEfR5T_d7BILsWZTUD9dG5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.216.0/21
77.75.96.0/21
178.250.112.0/21
185.51.104.0/22
IPv6:
2a03:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
22:e0:8d:d5:b1:13:87:db:b7:0d:f6:1c:07:55:dd:d4:7a:19:
e7:f7:1c:4c:75:20:1e:02:bb:5c:ab:ff:d6:78:c5:05:fa:a5:
8f:95:a7:90:46:d5:b8:a8:0e:33:21:e0:d0:c5:f9:cf:10:82:
d3:69:e1:26:7f:ac:a1:76:27:40:23:f1:1a:0b:65:25:63:76:
07:3b:d5:ad:55:da:31:27:87:37:6f:10:c3:04:38:fe:bd:42:
b1:a4:eb:e4:72:3a:1f:69:16:cd:a7:48:de:59:20:7f:ac:ed:
a9:1f:2c:76:95:bf:48:be:1a:0e:7b:c8:5e:14:1f:ad:01:96:
3c:45:60:8a:a4:75:3b:42:2f:9d:ec:0e:00:17:da:7d:30:ad:
99:4e:df:c1:82:4a:86:0d:1b:d2:48:b4:b4:cf:1e:fb:5c:32:
fe:c5:00:7f:c8:7f:d6:4d:5f:df:a0:1b:00:ef:cf:72:d1:1b:
b0:1c:3a:2e:5e:89:28:73:7d:3c:40:df:2d:d2:7d:9d:de:5f:
88:fc:95:57:2d:0d:6e:99:b2:f0:51:f4:21:70:e5:8d:8d:25:
b3:e1:d7:a8:51:83:c2:f1:42:0f:79:1f:37:dd:74:e4:ac:7c:
9d:bd:97:20:55:6b:6a:25:82:ae:8d:f8:70:6f:23:89:64:ff:
37:03:a6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net