Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/4IQYmCkKpv6juYCCCaaIoBaqO5k.roa
File: 4IQYmCkKpv6juYCCCaaIoBaqO5k.roa (raw, json)
Hash identifier: Sh2/vzqNAY+MeLga4UwXRhObRnEpq/pH9jlueCnYdZ0=
Subject key identifier: E0:84:18:98:29:0A:A6:FE:A3:B9:80:82:09:A6:88:A0:16:AA:3B:99
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01943DF38CC46B894BF357323AAFA011AC4B
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/4IQYmCkKpv6juYCCCaaIoBaqO5k.roa
Signing time: Mon 06 Jan 2025 23:29:18 +0000
ROA not before: Mon 06 Jan 2025 23:29:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 5.23.0.0/19 maxlen: 19
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
80.231.112.0/21 maxlen: 21
80.231.176.0/21 maxlen: 21
80.231.187.0/24 maxlen: 24
80.231.202.0/24 maxlen: 24
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
195.219.41.0/24 maxlen: 24
195.219.43.0/24 maxlen: 24
195.219.168.0/23 maxlen: 23
195.219.204.0/24 maxlen: 24
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
2a01:3e0::/29 maxlen: 29
2a01:3e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3d:f3:8c:c4:6b:89:4b:f3:57:32:3a:af:a0:11:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 6 23:29:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0841898290aa6fea3b9808209a688a016aa3b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:59:0e:02:f9:c2:2c:cb:85:10:68:8b:2b:
06:83:00:a0:ba:ca:05:4d:ec:1f:c1:a3:af:b2:d9:
28:10:0a:49:3f:80:0a:fb:07:0c:e3:be:4e:c4:c6:
a3:4b:5c:1f:f4:f4:bb:48:cc:cb:3b:5c:07:c6:33:
3a:c5:d9:57:7d:56:78:21:c5:d6:30:32:ab:58:2b:
b8:8f:a1:29:47:8a:bc:57:f0:d2:9a:78:7e:62:00:
87:5c:d9:23:c5:60:bc:69:d5:bf:d5:56:c0:7b:9d:
1c:cb:a6:f5:06:9e:bf:38:d2:4c:ea:26:7b:2c:bb:
1f:eb:a3:ee:89:d4:9d:e2:27:ed:a7:e3:3c:af:a1:
d0:18:9d:c5:ad:c5:09:68:97:6c:e9:cc:65:4e:1a:
6b:74:d3:38:2e:66:1c:bf:14:7d:7e:c4:ff:10:4a:
33:ee:3e:ec:73:ac:1b:0d:37:1e:d1:94:ae:51:2f:
74:ca:99:cd:44:f5:7f:8e:c8:d6:ac:41:ec:55:8b:
f2:87:ba:29:e4:fd:ff:32:c8:1b:8b:5b:ad:4e:c7:
1e:dd:16:0c:a8:25:26:17:02:02:68:9f:6e:b2:88:
c6:29:c2:1e:31:49:31:a3:76:0f:2b:d2:68:06:63:
fb:3d:f9:1f:f9:93:a8:d3:15:2e:f2:82:6d:d7:90:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:18:98:29:0A:A6:FE:A3:B9:80:82:09:A6:88:A0:16:AA:3B:99
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/4IQYmCkKpv6juYCCCaaIoBaqO5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
e1:7c:90:b7:64:79:f3:10:f5:05:8c:88:33:ae:c9:b2:83:41:
73:30:ad:de:6e:ed:29:46:f7:6e:f4:06:79:b7:75:42:ef:ff:
85:25:74:70:b3:50:da:24:9b:b6:cf:1e:61:c6:8c:42:30:30:
62:4a:ee:8a:2d:b3:d6:f1:21:2b:a8:04:2b:30:85:56:d6:b8:
81:a1:f9:68:49:65:95:30:a0:cc:d3:62:61:a6:da:96:ca:c3:
96:92:35:f1:7d:33:e3:fa:0f:69:eb:43:1e:7b:c6:fa:bd:34:
19:3b:24:64:db:d6:8c:1e:8e:e9:ac:61:ac:71:51:0c:dd:a2:
32:a1:a7:67:3a:d1:59:f7:7c:bb:33:5a:2a:22:40:87:1a:16:
e3:ce:6c:3e:f8:96:05:35:45:05:38:40:1b:82:3d:97:33:c6:
7e:b8:78:c3:44:37:97:53:cd:98:f6:be:91:d6:43:e9:5f:f5:
ce:fd:fd:52:2a:35:0f:76:7a:64:d8:2a:06:f2:0d:bd:fd:de:
de:f2:18:7f:ef:e6:ae:b2:b7:6f:1e:bf:0b:44:a4:2c:13:73:
d9:f9:79:be:08:f6:71:00:06:ff:ca:11:3e:ef:20:91:2e:47:
04:07:dc:4b:5d:8b:d9:f9:42:94:96:37:e7:bf:a6:3e:c4:a1:
71:67:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:36 2025 by rpki-client on console.sobornost.net