Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/1e-R_RVRVy4XvdCy2aS6EF3_EtI.roa
File: 1e-R_RVRVy4XvdCy2aS6EF3_EtI.roa (raw, json)
Hash identifier: BQhqOOFjoi+Ex8s0CUIBtj7pTDkrOo0Z4PQBLWx35W8=
Subject key identifier: D5:EF:91:FD:15:51:57:2E:17:BD:D0:B2:D9:A4:BA:10:5D:FF:12:D2
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 019470CFFDFB4FC38641FBFA890135EE6CE1
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/1e-R_RVRVy4XvdCy2aS6EF3_EtI.roa
Signing time: Thu 16 Jan 2025 20:31:06 +0000
ROA not before: Thu 16 Jan 2025 20:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216188
IP address blocks: 45.10.24.0/24 maxlen: 24
45.133.9.0/24 maxlen: 24
88.218.227.0/24 maxlen: 24
91.210.224.0/24 maxlen: 24
152.89.239.0/24 maxlen: 24
185.45.149.0/24 maxlen: 24
185.245.96.0/24 maxlen: 24
185.248.140.0/24 maxlen: 24
193.135.10.0/24 maxlen: 24
2a13:fd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:cf:fd:fb:4f:c3:86:41:fb:fa:89:01:35:ee:6c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Jan 16 20:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5ef91fd1551572e17bdd0b2d9a4ba105dff12d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:f8:50:08:de:31:dd:ec:76:6e:d5:8d:7a:
a3:ef:20:f3:fe:f8:c9:57:c4:0e:54:5f:c5:a2:60:
1a:dd:21:b6:ab:1e:03:45:5e:04:5c:ef:10:bd:d6:
21:e4:22:9b:52:3e:b3:8d:42:06:fe:19:11:15:a3:
6b:ed:2d:25:d2:48:16:87:54:12:59:a5:fd:9f:dc:
04:43:e9:c6:c2:83:ce:a8:90:70:eb:16:a9:a4:96:
99:7a:f6:4a:73:1a:cb:6c:ce:ec:0f:b8:8a:73:9e:
db:d3:ad:56:1d:ad:f5:d7:c7:22:71:4a:85:99:fe:
40:8f:c2:7c:28:46:4d:9e:44:83:d9:10:d1:f6:40:
91:ff:14:b1:b8:19:6c:b9:b3:a3:8c:7b:a0:6e:94:
8a:42:af:3b:0c:0f:a5:6d:f7:9a:8e:de:38:21:99:
9e:0d:0c:7d:d3:88:75:90:54:75:41:b1:23:dc:1d:
3e:73:1b:80:a8:0a:e6:f3:a6:4c:ba:6a:bb:e7:c0:
02:23:63:ff:37:2a:a6:a5:1e:2c:49:d1:2f:88:3c:
32:c6:8c:ab:d7:a3:e6:2a:05:df:89:a0:ca:10:c0:
8f:bb:50:66:3b:5d:63:03:61:bc:bf:88:b1:00:22:
51:80:dd:83:5f:71:83:10:c1:85:a5:e1:ce:83:40:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:91:FD:15:51:57:2E:17:BD:D0:B2:D9:A4:BA:10:5D:FF:12:D2
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/1e-R_RVRVy4XvdCy2aS6EF3_EtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.24.0/24
45.133.9.0/24
88.218.227.0/24
91.210.224.0/24
152.89.239.0/24
185.45.149.0/24
185.245.96.0/24
185.248.140.0/24
193.135.10.0/24
IPv6:
2a13:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
3a:f2:d7:df:6c:84:55:d2:12:e5:08:f5:a6:4f:27:d9:a0:68:
9b:84:13:71:50:ac:0c:60:ca:ca:ea:06:a2:a5:bd:65:0f:3d:
03:bf:a2:91:f6:e6:29:59:df:e5:78:96:74:35:a2:26:67:cb:
2d:e9:28:2c:5d:29:ef:c6:bf:fe:53:73:e0:14:65:ef:97:c9:
1e:e9:19:17:3f:eb:c3:b9:07:20:33:28:52:8a:50:5c:38:d8:
58:70:0a:e7:9d:95:90:1f:70:3e:94:73:79:9e:37:76:cc:c7:
58:d1:85:7d:92:4a:ca:19:47:3a:64:92:f7:61:f1:c3:78:35:
07:fe:9f:15:c0:54:22:c7:fd:d3:91:c0:ac:90:4a:83:71:ba:
c3:78:d2:13:aa:0d:5f:d1:d3:f5:75:a0:ae:1e:1c:73:bd:60:
dc:ae:72:0e:0b:61:50:2c:53:f8:12:04:cc:74:3c:1a:c2:e3:
35:b6:32:a9:8e:85:80:e8:46:9c:c2:35:1a:90:61:c0:6a:f0:
3f:7b:1b:1e:05:9b:6a:5a:6c:bd:e6:40:35:1b:45:b3:1c:b2:
71:a0:7c:85:7b:36:e7:a4:97:7f:47:62:42:67:0f:81:92:f5:
a9:fa:cd:ee:8b:f8:3f:45:8b:d5:9b:1a:52:49:de:bd:1a:af:
e5:d4:73:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:10 2025 by rpki-client on console.sobornost.net