Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/9ia0_iaxbX6JryuxqnLg3hd0L3g.roa
File: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (raw, json)
Hash identifier: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=
Subject key identifier: F6:26:B4:FE:26:B1:6D:7E:89:AF:2B:B1:AA:72:E0:DE:17:74:2F:78
Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial: 019427B6123706B08E146807D4081A04646A
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/9ia0_iaxbX6JryuxqnLg3hd0L3g.roa
Signing time: Thu 02 Jan 2025 15:50:31 +0000
ROA not before: Thu 02 Jan 2025 15:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15433
IP address blocks: 31.193.32.0/21 maxlen: 24
77.242.208.0/20 maxlen: 24
109.235.104.0/21 maxlen: 24
185.45.40.0/22 maxlen: 24
185.45.68.0/22 maxlen: 24
185.86.61.0/24 maxlen: 24
185.86.62.0/24 maxlen: 24
185.86.63.0/24 maxlen: 24
194.183.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:12:37:06:b0:8e:14:68:07:d4:08:1a:04:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f626b4fe26b16d7e89af2bb1aa72e0de17742f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:6e:e4:02:ab:b7:b2:bb:c1:51:cb:f1:7a:
20:b3:15:31:ec:86:1f:df:1c:e0:07:5f:df:06:9f:
89:94:99:5f:37:92:d9:ac:a7:01:95:f6:9e:c3:f9:
14:85:38:59:bb:ce:d8:26:e4:f2:78:e0:9d:ef:d1:
13:db:22:33:10:ac:8b:a3:70:0b:b1:01:9f:09:8a:
6d:aa:4f:f7:f5:96:7b:da:1d:26:c3:14:19:60:d0:
c7:32:91:50:a3:ea:0f:f1:af:d7:24:84:10:db:b2:
39:5e:79:85:fa:34:3f:af:f4:25:2c:db:4b:37:5f:
d0:3c:f0:1b:82:3b:f7:5c:e9:74:c6:b8:f3:ee:0a:
e1:98:d6:95:96:c8:a6:8e:a1:de:37:c6:09:58:15:
d2:dc:cb:cb:d6:d0:4f:3a:77:22:e0:7c:97:b5:81:
00:d3:05:67:d5:10:12:d4:42:1c:36:f0:b6:ef:c3:
86:37:c8:94:d0:90:34:8d:a9:a7:f2:fd:ce:21:9f:
d0:73:ee:9e:6c:8b:4a:d8:d6:8e:63:af:60:1e:44:
25:5a:e7:2a:ac:88:1d:b7:70:64:77:9f:6d:00:12:
a9:6c:9e:0b:dc:37:a1:24:02:7d:a6:b7:2b:c8:d3:
d9:94:79:cb:f3:88:f3:68:b5:1f:23:c8:b6:93:5e:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:B4:FE:26:B1:6D:7E:89:AF:2B:B1:AA:72:E0:DE:17:74:2F:78
X509v3 Authority Key Identifier:
keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/9ia0_iaxbX6JryuxqnLg3hd0L3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.32.0/21
77.242.208.0/20
109.235.104.0/21
185.45.40.0/22
185.45.68.0/22
185.86.61.0-185.86.63.255
194.183.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:25:77:8a:6a:3b:2c:5f:b8:ad:36:75:fa:3e:66:8a:bb:88:
cc:21:f5:1e:f2:d5:63:7b:e7:34:a4:b5:95:96:6f:96:37:f8:
c0:52:5e:3e:ca:0f:06:e1:d3:46:26:39:d0:8d:3a:d5:51:e3:
94:0d:a6:78:25:f0:a5:81:f5:eb:0c:00:93:1e:ef:70:0f:90:
cb:13:ab:82:56:2e:70:e1:fc:5c:8f:50:a8:3b:45:45:41:8e:
30:bb:2e:e7:57:6d:69:e2:e5:8b:aa:a2:9b:48:0b:eb:1f:f0:
ad:c3:0e:58:a4:80:0c:1c:8b:2c:86:ed:5a:ea:5b:72:63:bb:
38:6a:71:4e:ea:ba:19:12:a7:d3:70:52:bb:d7:16:c2:ba:93:
ae:86:fa:47:c8:77:94:6c:1b:c8:f8:8d:a1:85:9b:d1:dd:da:
42:67:0e:8b:b4:a3:06:74:ee:42:fe:f1:c4:5c:9c:83:c5:02:
e9:63:2d:43:bf:b7:d4:af:da:de:85:9b:2d:fc:3a:09:b4:88:
81:ed:55:a1:da:d4:1e:78:5c:fd:5f:be:f3:8e:ea:5d:42:24:
0a:f2:ce:a7:97:4a:f9:12:b0:05:de:d6:85:64:98:5c:ac:a0:
09:e9:82:b3:20:e9:f3:13:1c:d1:79:3d:89:27:b2:b0:e2:38:
93:00:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net