Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/1LWuminfGd450btHCMbnnbPQ_ZE.roa
File: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (raw, json)
Hash identifier: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=
Subject key identifier: D4:B5:AE:9A:29:DF:19:DE:39:D1:BB:47:08:C6:E7:9D:B3:D0:FD:91
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 01941F8C4DCBF83FF36837D7488D82299DF6
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/1LWuminfGd450btHCMbnnbPQ_ZE.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51101
IP address blocks: 88.135.186.0/24 maxlen: 24
178.217.112.0/21 maxlen: 21
185.230.224.0/22 maxlen: 22
195.43.66.0/23 maxlen: 23
2a0c:3100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4d:cb:f8:3f:f3:68:37:d7:48:8d:82:29:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b5ae9a29df19de39d1bb4708c6e79db3d0fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:ef:09:3a:2e:25:f2:f0:6d:13:bd:21:3a:
a9:91:05:ab:9b:6d:aa:17:ec:dc:56:bd:d4:3a:6b:
2f:a0:68:11:e1:f5:c3:ab:b8:d7:86:ee:cf:d0:59:
95:94:20:65:52:11:a9:63:54:23:f7:8f:58:0d:dd:
85:41:da:b3:03:34:37:a2:6a:b6:f8:d9:a2:47:cb:
f5:d2:fb:5c:26:ac:19:c6:87:2d:a7:9f:79:c0:96:
ce:e4:9b:00:d3:68:46:7d:04:4b:a9:e0:d7:00:3c:
94:93:b0:f1:05:51:a2:5e:3d:48:e6:9f:96:f7:8b:
fc:38:b0:2b:f9:66:12:fc:f6:8f:c7:c6:4e:f3:0c:
0a:55:94:20:a8:cc:3f:31:68:22:5b:44:67:63:db:
b0:cf:f0:ba:9c:7a:e5:2f:5c:5f:ca:7a:91:3d:1c:
a0:59:5e:6b:36:f5:59:c4:f1:f4:ff:31:91:be:fc:
3f:ce:57:ac:60:5c:5d:07:59:37:3d:d7:c3:a7:54:
83:8e:30:0d:b5:05:89:21:db:0b:e1:73:9f:47:36:
ef:1a:40:9f:e9:35:77:0e:13:95:e0:ba:74:c0:a6:
02:f2:00:09:f0:8d:ee:d5:17:c4:f1:76:93:af:94:
86:73:ed:87:b1:57:68:b2:e2:c7:6a:72:84:33:44:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:AE:9A:29:DF:19:DE:39:D1:BB:47:08:C6:E7:9D:B3:D0:FD:91
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/1LWuminfGd450btHCMbnnbPQ_ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.186.0/24
178.217.112.0/21
185.230.224.0/22
195.43.66.0/23
IPv6:
2a0c:3100::/29
Signature Algorithm: sha256WithRSAEncryption
2b:8d:84:b0:7e:f6:e4:d8:68:75:5d:d2:70:0c:a9:06:07:f7:
18:1a:cc:b3:77:c7:07:96:cc:fa:fa:c0:3c:2d:e5:45:2a:b9:
57:40:2b:8f:f3:0d:b2:5a:35:eb:94:ef:b0:6e:43:36:e5:f7:
76:5b:b3:20:c4:19:78:ee:7d:ed:ee:0e:78:32:17:06:1a:b3:
d0:39:b7:5a:1b:ba:db:5d:e2:2d:f0:a7:d2:83:3e:14:4d:72:
9e:be:f2:1c:19:a2:13:87:2e:c1:e7:6d:68:b6:d8:cd:28:00:
a3:7c:f6:87:08:55:f2:1e:6f:b7:e3:98:68:6b:93:bf:8f:ed:
a7:06:4e:54:58:c4:48:5f:1a:5c:08:94:0c:48:85:61:26:12:
ff:45:90:82:1f:af:45:f3:f9:12:8f:d1:0e:a7:2d:89:4b:c9:
b5:9f:0e:db:31:d9:f0:52:c2:c1:bb:6f:5f:de:4a:bc:52:d0:
ab:fc:e7:46:07:90:40:4a:d4:3d:8b:6b:93:cf:2d:d6:b9:09:
ef:e6:83:83:3c:5b:29:82:3b:d3:9a:3a:ef:ad:fe:b0:af:3c:
d5:6b:a4:43:c7:9c:f5:b2:0e:35:64:f9:36:20:5f:d3:67:c5:
8a:76:e7:47:e3:4d:84:c1:f4:ae:36:d1:49:99:36:5f:6a:a7:
00:d7:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net