Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/mQ9zePbKKPrER63rktmN5-Z8AoQ.roa
File: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (raw, json)
Hash identifier: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=
Subject key identifier: 99:0F:73:78:F6:CA:28:FA:C4:47:AD:EB:92:D9:8D:E7:E6:7C:02:84
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 019426D9926E2BF84F85F3E115017260E742
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/mQ9zePbKKPrER63rktmN5-Z8AoQ.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57793
IP address blocks: 91.227.26.0/24 maxlen: 24
95.131.81.0/24 maxlen: 24
95.131.82.0/23 maxlen: 24
95.131.84.0/22 maxlen: 24
134.0.16.0/21 maxlen: 21
185.27.32.0/22 maxlen: 22
185.42.196.0/22 maxlen: 22
185.53.92.0/22 maxlen: 22
185.164.44.0/22 maxlen: 22
188.114.112.0/21 maxlen: 21
2a02:ef8::/32 maxlen: 32
2a03:b980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:92:6e:2b:f8:4f:85:f3:e1:15:01:72:60:e7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=990f7378f6ca28fac447adeb92d98de7e67c0284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:fd:3f:2c:0a:e5:68:4a:27:0d:d0:60:1c:
31:92:6f:02:8b:b9:d5:4c:ed:55:0d:5f:a3:1d:dd:
4f:00:83:bf:d2:7a:d4:0f:7e:3a:55:87:cd:8b:be:
f5:5e:54:51:bb:4f:53:24:55:9e:22:72:09:47:48:
41:6c:48:12:56:c6:93:af:d7:b9:8f:65:69:5e:3e:
22:25:1e:b4:3e:ec:c0:e4:aa:0d:ac:dd:e7:0e:36:
72:4d:6a:d5:7d:37:8c:f1:e7:96:99:ea:b8:f8:72:
bd:f8:87:62:d9:6e:c6:11:a3:fd:f0:62:9d:86:67:
00:8d:f7:a2:ae:32:e7:7d:b6:28:1f:7a:4c:de:07:
34:6e:8e:36:64:e4:88:95:7e:8e:e3:4c:ed:20:ea:
af:db:f4:40:b4:fc:98:2c:34:c5:43:4c:78:6f:15:
10:2d:a0:d8:1b:e3:62:a1:6f:a5:6e:02:ef:38:58:
a3:bf:30:2b:82:fb:e4:03:96:6e:25:0f:c8:ab:8e:
84:bb:6c:97:3f:04:a4:43:41:1d:89:21:82:20:a9:
e7:79:81:db:b2:24:78:12:82:6c:3e:4b:e3:ad:28:
5b:07:96:86:27:7b:24:e7:60:e0:f7:e1:d0:e5:fd:
ae:ad:e6:6b:2f:3d:76:62:68:21:6e:06:17:a3:8e:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:73:78:F6:CA:28:FA:C4:47:AD:EB:92:D9:8D:E7:E6:7C:02:84
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/mQ9zePbKKPrER63rktmN5-Z8AoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.26.0/24
95.131.81.0-95.131.87.255
134.0.16.0/21
185.27.32.0/22
185.42.196.0/22
185.53.92.0/22
185.164.44.0/22
188.114.112.0/21
IPv6:
2a02:ef8::/32
2a03:b980::/32
Signature Algorithm: sha256WithRSAEncryption
12:c1:30:22:02:cc:0c:0c:73:73:dd:0c:e4:e0:85:b1:c7:91:
1c:1f:fd:f6:1b:71:57:47:1f:cb:bd:d2:db:22:28:b8:1f:f1:
bc:35:4e:5f:70:10:83:12:7b:7a:a2:29:96:40:11:e3:bd:00:
57:89:f2:96:d2:4b:85:ae:f5:1b:55:e9:bd:03:71:45:a5:7b:
09:89:ab:1a:55:b3:1a:00:92:d9:28:d3:23:32:d8:87:0c:d7:
00:d8:7f:ab:58:cb:15:a9:fc:16:31:88:6d:45:86:20:69:8f:
bb:3c:09:91:31:69:76:e5:5d:e6:c2:fc:1d:95:fd:6c:93:9f:
dd:fe:4f:9f:28:6f:99:f9:5b:05:1f:51:2a:45:37:34:99:41:
83:29:31:89:be:e3:04:b9:cd:76:f6:da:3a:e6:23:7a:44:25:
15:b0:f0:9b:76:df:a7:f2:b2:56:c8:28:b1:09:fb:c0:44:0a:
df:89:64:48:28:c4:b9:a2:04:47:fc:95:b6:28:8a:09:33:25:
0f:df:c1:98:42:f7:22:c3:a6:fe:ee:29:3a:b4:7d:67:41:6e:
9a:a6:72:6f:ff:aa:30:55:c2:40:ed:ce:34:d1:94:60:4c:06:
43:35:a4:9c:6c:0e:af:30:ab:d5:d2:26:17:c7:02:76:56:ed:
17:3f:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net