Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/n_kNJS9ULqAMB2OfluAKBmcxcVQ.roa
File: n_kNJS9ULqAMB2OfluAKBmcxcVQ.roa (raw, json)
Hash identifier: tcFM7oG1NtpqVo205mOhltMHL26lsbpdzWGLA8cVm/o=
Subject key identifier: 9F:F9:0D:25:2F:54:2E:A0:0C:07:63:9F:96:E0:0A:06:67:31:71:54
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0194D2D86DBFC02A65949E5592295D1CE251
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/n_kNJS9ULqAMB2OfluAKBmcxcVQ.roa
Signing time: Tue 04 Feb 2025 21:23:06 +0000
ROA not before: Tue 04 Feb 2025 21:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47894
IP address blocks: 94.103.36.0/24 maxlen: 24
94.103.37.0/24 maxlen: 24
94.103.38.0/24 maxlen: 24
94.103.39.0/24 maxlen: 24
94.103.41.0/24 maxlen: 24
94.103.42.0/24 maxlen: 24
94.103.43.0/24 maxlen: 24
185.35.20.0/24 maxlen: 24
185.35.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d2:d8:6d:bf:c0:2a:65:94:9e:55:92:29:5d:1c:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Feb 4 21:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ff90d252f542ea00c07639f96e00a0667317154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:e3:b4:1c:f0:7a:d3:26:10:e8:76:43:11:
39:1f:22:03:00:01:e7:8f:b2:3e:69:fe:c9:c0:39:
5f:a8:cb:68:c4:c5:26:ae:4a:aa:d5:77:4f:b0:43:
4e:5d:d2:d0:f3:c0:4f:24:4f:25:72:c8:5f:06:05:
a0:b4:5c:63:e7:da:4a:6b:71:b7:d4:92:50:11:a8:
97:7c:94:d4:59:1f:fc:30:01:21:a0:14:40:1a:7b:
84:49:67:6a:ee:bc:89:e5:b7:9e:da:8d:f8:b2:c9:
6b:e8:f4:b8:c8:63:ea:49:1d:aa:32:14:1e:af:45:
8b:a9:e0:98:e3:97:30:dd:38:01:df:08:27:ec:78:
d2:c6:65:1f:bb:1a:b4:5a:e5:d5:92:72:d5:57:da:
aa:7b:f8:02:c8:5e:7d:7c:49:0f:83:27:d6:cb:07:
39:46:db:eb:11:e7:31:76:0b:0e:1f:aa:75:de:6a:
68:b0:00:a5:e2:a0:59:4d:ad:0d:02:62:10:44:a1:
ad:b9:33:c3:c8:1a:c5:ff:5d:17:62:f1:5e:51:32:
6b:8c:db:71:a6:2b:74:6c:46:6a:a2:7e:38:ae:51:
e8:60:a9:e4:4b:7f:bc:b7:24:bd:d7:57:29:d8:41:
32:5d:5c:0c:a3:9a:db:ca:44:90:fb:e4:01:0e:a3:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:0D:25:2F:54:2E:A0:0C:07:63:9F:96:E0:0A:06:67:31:71:54
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/n_kNJS9ULqAMB2OfluAKBmcxcVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.36.0/22
94.103.41.0-94.103.43.255
185.35.20.0/24
185.35.23.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5a:f0:9c:73:ed:3c:94:fa:12:b4:df:9c:7d:94:f5:98:36:
21:8d:da:49:aa:79:33:b0:a1:78:7a:69:75:67:f4:94:3e:98:
cd:c3:83:ea:20:ed:ca:b3:2b:f8:ec:fd:3e:4c:e0:d0:a6:a6:
5b:71:0b:90:4f:54:81:03:33:b2:46:cc:be:09:d8:c5:cf:cc:
3c:7e:9e:7b:9d:a0:03:ed:b4:ee:05:f3:b5:f6:e3:d4:c4:25:
81:ab:d9:2c:6c:1c:c5:5b:6f:60:cf:39:c1:6c:bd:c0:fc:12:
6c:3e:26:e0:24:9d:50:1c:cf:5b:ad:f0:eb:07:17:ff:52:c6:
38:93:5b:36:76:ce:fa:dd:44:24:7f:62:6b:b8:b8:10:fd:4b:
3b:a8:f1:4f:a8:b2:70:7a:c6:49:03:2a:4c:ce:e3:67:54:82:
ca:ee:d8:8c:56:2a:6d:a0:d0:aa:32:97:f8:f1:36:33:2e:ae:
43:b4:1a:d3:d0:d3:26:ad:7b:49:c1:18:a6:cf:5a:3f:9d:88:
67:ad:f2:55:b9:47:7d:14:46:8c:f6:f5:03:e3:4b:c8:65:8b:
a3:a1:0b:b0:16:3c:6b:67:e2:52:20:62:3b:e9:b0:ed:7d:98:
59:3b:87:82:c1:ae:ed:af:ff:f4:83:39:f5:e9:d3:51:0d:7c:
ba:72:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:41 2025 by rpki-client on console.sobornost.net