Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eirNM9lSLDXctPsaMa9_WZw85Wk.roa
File: eirNM9lSLDXctPsaMa9_WZw85Wk.roa (raw, json)
Hash identifier: dFd1yIRlvrmfTY0QiqFNGMiyEWAD+9thN+55zUlH6eA=
Subject key identifier: 7A:2A:CD:33:D9:52:2C:35:DC:B4:FB:1A:31:AF:7F:59:9C:3C:E5:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01961F48931DF6548D7138C6770442019208
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eirNM9lSLDXctPsaMa9_WZw85Wk.roa
Signing time: Thu 10 Apr 2025 10:39:31 +0000
ROA not before: Thu 10 Apr 2025 10:39:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197549
IP address blocks: 85.93.0.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
89.144.11.0/24 maxlen: 24
94.249.218.0/23 maxlen: 32
94.249.222.0/23 maxlen: 32
217.69.175.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:48:93:1d:f6:54:8d:71:38:c6:77:04:42:01:92:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 10 10:39:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a2acd33d9522c35dcb4fb1a31af7f599c3ce569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:15:2d:4b:eb:bc:19:ae:97:51:e7:cf:52:
10:25:bd:a8:97:84:d1:7a:c6:19:c5:87:9a:e8:33:
85:01:0a:68:b4:ac:eb:3b:a3:ad:6f:76:08:00:0a:
aa:27:fa:ce:e8:a6:76:30:15:aa:17:4f:66:4e:a5:
ae:16:90:61:2a:2f:39:5c:36:7c:de:4f:03:b4:b6:
99:d8:44:c8:a5:f4:0b:6d:3c:87:a6:ec:e3:9f:f5:
c6:5f:60:fe:38:99:4a:c9:66:58:de:28:35:0c:fd:
cc:e9:45:cf:a9:cd:ed:66:45:23:c7:a4:f2:bd:88:
ca:41:5e:7c:50:a1:52:d5:77:33:59:8e:b1:1f:b3:
d6:a3:ef:c9:84:0c:77:61:be:9b:89:31:e4:49:f9:
26:30:2c:fe:88:01:cf:ea:cc:6e:c3:cc:2a:c8:c4:
e5:e3:55:08:19:b4:0b:ac:91:29:b9:e9:99:b7:4b:
50:5e:54:d9:d5:fa:04:5a:27:3f:3d:29:ca:6e:28:
8f:56:53:7a:a1:f7:70:e9:3f:1a:eb:08:11:a6:df:
49:32:fc:9e:d5:54:ad:24:b5:b0:8d:ea:d3:b9:53:
91:0a:f3:97:22:31:b3:e1:74:79:3e:4b:b6:e8:99:
af:59:a4:6b:db:7d:5f:5e:74:51:b8:5a:2f:91:2b:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:CD:33:D9:52:2C:35:DC:B4:FB:1A:31:AF:7F:59:9C:3C:E5:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eirNM9lSLDXctPsaMa9_WZw85Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.0.0/19
89.144.0.0/18
94.249.218.0/23
94.249.222.0/23
217.69.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:70:59:f4:89:60:14:4d:f2:ea:d8:a8:0e:fb:ea:01:98:57:
7f:19:e1:df:b3:1f:37:80:a0:72:f8:81:22:b8:67:e2:2e:fe:
91:e9:a9:51:3e:8c:21:64:68:c1:1f:16:d5:ba:a4:f8:e5:d6:
2f:8a:98:86:3d:d0:47:9b:4c:8d:5d:e8:bf:0a:c9:38:e7:73:
a5:4c:1c:ea:5d:0a:f5:25:50:a4:30:fe:2c:de:33:53:a3:b8:
9f:00:5f:36:eb:be:f1:3f:56:5d:8d:bd:fe:2d:fb:4b:81:3d:
de:68:c4:f4:13:f0:15:9b:b5:ba:7d:da:34:4d:43:b2:b0:e5:
0a:81:aa:91:a1:21:ae:f8:31:b5:07:5a:8e:ce:eb:88:55:9a:
56:3e:f4:4f:65:61:2b:f5:30:fd:df:8b:1c:ef:3c:46:a2:ec:
56:28:f2:14:b6:51:84:88:3c:f2:74:76:dd:e6:1c:43:93:e3:
d1:72:d5:2d:01:45:fc:b7:d1:42:b0:83:bb:94:8d:df:96:08:
d2:89:05:c5:03:48:43:bb:2c:87:2a:4e:c3:9d:9b:0c:ea:ca:
3e:20:33:0c:a8:9b:d1:f5:fe:c1:ea:af:54:28:d7:27:12:88:
32:31:ce:43:7c:c5:b5:c5:15:7a:b8:1a:99:c6:56:17:49:c2:
a5:0f:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net