Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/PGS1oZw9diLKm80xvba4ttY7lOY.roa
File: PGS1oZw9diLKm80xvba4ttY7lOY.roa (raw, json)
Hash identifier: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=
Subject key identifier: 3C:64:B5:A1:9C:3D:76:22:CA:9B:CD:31:BD:B6:B8:B6:D6:3B:94:E6
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 019420D5FDF9493B30485389649F330923E4
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/PGS1oZw9diLKm80xvba4ttY7lOY.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15753
IP address blocks: 149.177.128.0/22 maxlen: 22
149.177.148.0/22 maxlen: 22
149.177.152.0/22 maxlen: 22
149.177.164.0/22 maxlen: 22
149.177.176.0/21 maxlen: 21
149.177.192.0/23 maxlen: 23
149.177.194.0/23 maxlen: 23
149.177.212.0/23 maxlen: 23
149.177.214.0/23 maxlen: 23
149.177.216.0/23 maxlen: 23
149.177.218.0/23 maxlen: 23
149.177.224.0/22 maxlen: 22
149.177.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fd:f9:49:3b:30:48:53:89:64:9f:33:09:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c64b5a19c3d7622ca9bcd31bdb6b8b6d63b94e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:d4:ee:5e:2c:87:b2:ea:af:9c:7b:f6:06:
ca:7b:12:72:1b:b2:b6:59:ba:6c:e4:a2:36:1e:e6:
93:d1:92:ae:1c:85:27:d9:06:f2:7e:67:c5:c0:38:
bf:7a:c1:82:a6:72:ce:6b:7b:11:71:6a:bf:8b:00:
21:6d:4f:93:56:0f:2f:9b:a0:87:7c:49:2a:14:d0:
a5:3b:d6:a1:ce:48:94:05:bb:3b:02:78:c0:da:47:
10:a0:b8:a0:e7:0a:46:3d:b0:c0:02:29:01:e0:c4:
b0:d4:a6:08:02:41:a5:de:2a:ec:6d:8e:93:c1:6f:
60:96:dc:22:69:34:71:67:84:e1:fd:57:67:ba:93:
a1:9b:e0:36:54:48:4c:2d:43:fe:86:53:fd:8c:f7:
55:f2:ca:fb:09:50:15:d9:bd:53:a9:fd:39:66:4d:
71:eb:96:46:ac:bb:df:44:8c:4d:98:74:b1:52:62:
b2:9c:f5:64:15:62:a9:e0:c5:59:38:be:b9:ca:96:
e0:d3:39:d9:e3:b5:89:1d:e0:b5:a1:fa:3e:60:24:
fe:4e:6c:78:8a:7a:02:2d:d2:f7:93:fa:b7:3c:c9:
3c:98:1f:d9:fc:ff:1b:6d:61:d2:92:77:8c:a1:38:
ac:6b:5b:8f:ad:5a:ae:9d:f2:6a:00:86:94:81:1f:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:B5:A1:9C:3D:76:22:CA:9B:CD:31:BD:B6:B8:B6:D6:3B:94:E6
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/PGS1oZw9diLKm80xvba4ttY7lOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.177.128.0/22
149.177.148.0-149.177.155.255
149.177.164.0/22
149.177.176.0/21
149.177.192.0/22
149.177.212.0-149.177.219.255
149.177.224.0/21
Signature Algorithm: sha256WithRSAEncryption
16:bc:25:a4:bb:cf:46:ca:87:bc:ce:8a:8d:49:93:b0:6c:92:
0d:be:8f:91:59:12:50:7b:22:2a:53:96:f1:62:68:56:5e:85:
ec:21:08:4f:f7:9f:b4:a8:05:d8:2f:fd:64:45:7b:79:fc:99:
8f:a0:1f:64:24:8a:3a:26:bc:35:4c:47:d8:66:49:0b:8a:2c:
d2:19:cc:e4:62:14:4e:51:a4:cf:f3:f7:6c:71:33:0f:aa:33:
58:1c:57:ec:0b:4e:5f:ce:8e:c8:83:f5:d0:6a:c8:eb:6a:e1:
74:96:c5:6b:b2:cc:36:37:be:16:ba:7e:41:f2:8a:71:f6:00:
ac:30:26:7b:7b:a3:11:13:3f:24:9c:96:ce:5b:da:24:89:56:
96:f2:86:9a:d2:b4:ed:55:67:53:d8:50:d9:35:c8:89:c8:12:
bc:56:68:47:16:55:44:01:12:c4:96:cd:3a:98:e6:47:0e:77:
6d:83:50:f2:80:26:e0:92:a1:d1:fd:a1:5d:e0:2e:fa:81:ed:
7e:d8:fc:99:c0:ff:18:c9:de:9e:a5:cf:fe:c2:a6:da:2e:04:
37:65:72:2b:5e:48:5f:3e:5a:f5:f1:de:cf:b9:ec:f6:ea:60:
48:40:cc:b1:dd:4e:46:50:f9:8a:cd:af:a7:f6:f1:f4:5d:e9:
e1:92:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net