Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kuVEqRAI27tp85zRC3diSmUtvCU.roa
File: kuVEqRAI27tp85zRC3diSmUtvCU.roa (raw, json)
Hash identifier: 7XP8OdxU7fNthtmHBlMhAvfFuck8NlyKeW/fGonKHp0=
Subject key identifier: 92:E5:44:A9:10:08:DB:BB:69:F3:9C:D1:0B:77:62:4A:65:2D:BC:25
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01960FD04757CFD7EFB889CD28F88A8E6648
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kuVEqRAI27tp85zRC3diSmUtvCU.roa
Signing time: Mon 07 Apr 2025 10:33:50 +0000
ROA not before: Mon 07 Apr 2025 10:33:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61002
IP address blocks: 80.96.107.0/24 maxlen: 24
80.97.54.0/23 maxlen: 23
81.180.36.0/23 maxlen: 23
81.180.204.0/23 maxlen: 23
85.120.44.0/23 maxlen: 23
85.122.44.0/24 maxlen: 24
217.156.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:d0:47:57:cf:d7:ef:b8:89:cd:28:f8:8a:8e:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 7 10:33:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92e544a91008dbbb69f39cd10b77624a652dbc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:8c:53:c5:81:63:e7:eb:12:a2:60:19:31:
0e:2c:6a:9c:bc:eb:14:e0:34:78:fe:63:10:67:c8:
b1:9b:92:07:fd:36:5a:72:bb:ad:34:f3:64:a7:58:
2c:5a:55:8f:94:08:5e:14:a7:74:94:7f:33:e4:b9:
ad:c1:a7:98:2d:8e:99:be:0d:fe:c0:43:70:58:7b:
05:60:ab:20:50:95:4c:94:cb:ef:07:a8:ba:a0:9f:
cc:dc:6a:8b:21:8a:e6:0b:10:37:b5:67:87:7f:a8:
7f:a7:14:9a:0e:33:bb:c5:08:49:7a:b5:6a:a2:45:
5a:73:a4:e6:d1:3d:b7:59:58:2c:a0:86:35:6b:02:
57:22:78:17:c5:2d:48:a2:2c:39:d2:3a:aa:99:de:
8a:99:20:35:14:c9:0a:1f:11:e2:26:58:c8:77:38:
9b:45:e4:11:e4:ca:6d:81:0a:15:11:09:66:5c:77:
26:6a:cc:cc:da:40:db:16:d2:b0:08:10:e4:22:11:
86:b9:ef:cb:3d:60:5f:26:68:6f:fb:91:47:87:38:
ce:b2:c9:ae:dd:31:7f:94:11:1b:17:cc:39:ee:0a:
45:e7:a5:ff:17:0c:30:cd:a6:d9:a2:3a:9d:33:d8:
d2:a0:0f:6e:5b:40:c3:81:fb:29:8c:c9:15:d4:8f:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:44:A9:10:08:DB:BB:69:F3:9C:D1:0B:77:62:4A:65:2D:BC:25
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/kuVEqRAI27tp85zRC3diSmUtvCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.107.0/24
80.97.54.0/23
81.180.36.0/23
81.180.204.0/23
85.120.44.0/23
85.122.44.0/24
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:cf:c6:41:2d:da:64:3c:4b:7c:fa:17:7b:c8:d9:6c:ae:b7:
6e:fc:ae:67:1d:76:70:7d:c4:c6:bc:f1:c9:73:9f:23:9c:cf:
ff:94:71:d9:75:1f:1f:2b:ff:ff:44:31:98:df:ba:98:d8:37:
72:b2:d6:f6:ee:3c:e8:34:d0:17:e2:a2:7b:58:ca:77:87:28:
4d:ea:e4:8f:46:ec:23:fd:ec:ef:d8:9d:1e:b0:60:94:7e:c6:
dd:a4:9a:4a:23:d0:8c:2a:02:b8:8c:a5:92:74:97:0e:5e:6f:
6e:1f:16:64:8d:b2:2e:08:bc:b7:16:68:38:51:e7:81:83:de:
3c:b3:b3:cd:71:91:79:05:af:42:80:4c:f3:40:a9:41:28:8e:
e6:0b:56:eb:ce:9f:5d:27:5b:5f:42:d6:29:4f:3c:b8:b8:4e:
ee:03:f6:23:da:22:91:8f:b7:67:0e:fa:c2:81:4f:76:7f:d0:
05:78:38:1b:60:a3:fb:e0:36:57:f0:d5:2e:d6:43:2a:c7:44:
d3:f0:05:2a:38:17:ea:8c:3b:76:04:50:34:8d:12:a4:04:d0:
7d:d2:ff:17:1f:ad:b1:8d:27:3c:6c:e2:2d:78:3b:cc:77:b3:
cf:74:90:97:d8:15:b4:47:f2:c5:0b:71:4e:c4:22:c1:07:2f:
2a:a5:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net