Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/5Aldn9woElm6M1dmaUhOP-F2BD0.roa
File: 5Aldn9woElm6M1dmaUhOP-F2BD0.roa (raw, json)
Hash identifier: 8yUVLjs7mjQX42bSZj1Dpb0zoQfYIIcpbujYBE9VqOk=
Subject key identifier: E4:09:5D:9F:DC:28:12:59:BA:33:57:66:69:48:4E:3F:E1:76:04:3D
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019423D74F7E7A53B3578A5788673C40CB31
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/5Aldn9woElm6M1dmaUhOP-F2BD0.roa
Signing time: Wed 01 Jan 2025 21:48:20 +0000
ROA not before: Wed 01 Jan 2025 21:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201642
IP address blocks: 77.111.64.0/22 maxlen: 22
121.127.36.0/24 maxlen: 24
185.249.100.0/23 maxlen: 23
185.249.102.0/23 maxlen: 23
194.164.0.0/23 maxlen: 23
2a14:3200:2a14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:4f:7e:7a:53:b3:57:8a:57:88:67:3c:40:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Jan 1 21:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4095d9fdc281259ba33576669484e3fe176043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:25:a2:17:dd:a9:a2:20:38:e8:37:e7:70:
da:4e:a4:44:64:9a:07:66:ee:fd:ec:90:86:1c:cb:
8d:7d:c0:a0:99:fa:43:e3:fe:36:58:c3:cb:86:7c:
49:c4:72:07:51:67:51:31:51:6b:f2:0c:9d:eb:42:
23:f0:53:5d:7d:de:3e:39:38:5a:c9:1d:48:bb:df:
9b:cf:62:ea:b7:cd:15:12:fa:04:b2:2b:1d:01:ac:
b6:77:3a:0d:58:2e:76:f6:16:fd:15:e2:b2:d9:0d:
43:1c:6d:d4:85:77:b0:1e:d7:56:4e:c1:e4:16:87:
f1:fe:26:7f:13:f8:b1:34:8e:fb:4e:fb:89:5d:fe:
2f:68:16:bd:5b:39:0e:50:74:31:c0:5c:bd:5e:7e:
7c:30:65:db:b5:db:9f:61:34:28:cc:bb:28:88:1d:
b1:0f:3b:66:09:d8:92:67:27:bc:55:6c:98:ef:47:
c7:2d:fb:3b:f9:c8:b5:fc:49:d7:09:9e:62:0a:7b:
fb:13:45:01:6c:d1:3e:0e:fd:5d:59:75:5b:ff:eb:
64:de:96:e4:e2:92:53:0a:48:eb:44:32:5e:94:d9:
5d:0a:79:e6:d8:da:63:f4:9f:d9:50:97:ca:a1:a3:
f0:a5:93:e7:9a:2d:79:5d:62:57:53:14:77:25:6f:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:09:5D:9F:DC:28:12:59:BA:33:57:66:69:48:4E:3F:E1:76:04:3D
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/5Aldn9woElm6M1dmaUhOP-F2BD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.64.0/22
121.127.36.0/24
185.249.100.0/22
194.164.0.0/23
IPv6:
2a14:3200:2a14::/48
Signature Algorithm: sha256WithRSAEncryption
d3:25:d8:39:34:a9:eb:e6:8f:7d:8c:96:e4:37:8e:78:21:eb:
71:86:8e:de:d0:a1:0b:03:0b:d2:40:af:fd:30:5f:97:a0:37:
ea:c8:3f:15:0c:57:a0:98:5d:3a:ea:d1:25:3f:fa:31:9d:6a:
bc:86:3f:62:03:c8:c3:2d:0a:24:a1:f9:20:72:14:f7:f6:e4:
f7:c8:3e:6c:15:b9:d4:df:95:60:26:1c:a9:81:1b:48:cf:2a:
f5:45:09:f8:ec:4e:2a:9f:7b:7e:48:82:97:b2:09:cf:0a:85:
66:80:4e:b7:9e:fc:b0:4e:e1:d8:14:d0:66:13:16:d5:49:e6:
50:d6:1d:e2:82:1c:7f:7e:ad:d7:58:1a:06:69:29:20:fa:9a:
0d:ee:fa:f0:31:f7:d4:a6:fe:5e:db:dd:b5:d4:fe:e9:b6:b9:
55:43:de:c1:26:07:3c:01:cf:3e:5a:b2:d8:59:0e:66:5b:98:
0e:49:80:34:ff:5c:0b:57:89:da:ff:ca:e3:39:ca:84:a4:41:
41:23:83:16:c2:b2:45:db:9c:26:0f:be:93:4d:53:43:4e:fc:
04:f8:99:7e:24:20:15:b4:8b:6e:a2:0a:0b:26:c5:9c:b8:30:
8c:0a:ec:ed:35:5c:14:b8:25:81:b1:16:51:6a:23:be:1c:d5:
cb:e6:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:45:40 2025 by rpki-client on console.sobornost.net