Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/eWko6N8o92sydmO-CLOWyDSPRgM.roa
File: eWko6N8o92sydmO-CLOWyDSPRgM.roa (raw, json)
Hash identifier: OFHnOqpQY27rMBStDKU/8UqXYobL2kujmH61StlC3ck=
Subject key identifier: 79:69:28:E8:DF:28:F7:6B:32:76:63:BE:08:B3:96:C8:34:8F:46:03
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01951876F1D18B9B192C134F40B37E1264A4
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/eWko6N8o92sydmO-CLOWyDSPRgM.roa
Signing time: Tue 18 Feb 2025 09:50:03 +0000
ROA not before: Tue 18 Feb 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393336
IP address blocks: 94.74.187.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:76:f1:d1:8b:9b:19:2c:13:4f:40:b3:7e:12:64:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 18 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=796928e8df28f76b327663be08b396c8348f4603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b5:29:fa:27:12:b5:9c:c4:1e:85:a9:fa:b3:
19:07:a7:c9:cd:5d:7b:0f:1d:57:5e:83:20:ec:35:
39:d6:3b:13:be:48:dd:cc:e6:d4:46:0d:c5:03:60:
06:01:3e:19:5e:87:1a:4a:24:a6:6e:7d:8d:1a:81:
77:2a:bc:7e:03:9e:a6:2a:53:0f:90:7f:0b:8c:95:
62:af:95:5a:4c:d8:47:41:e0:fe:a9:f7:15:d9:84:
8e:d9:b8:53:46:09:ae:7c:56:72:03:b0:4e:03:77:
81:c7:32:31:3e:76:f3:ef:cb:6f:c7:cb:f3:21:b7:
f7:c0:d1:14:c4:d1:52:fa:61:9b:0b:d0:b1:47:d4:
ff:41:2a:8a:6c:f9:70:c3:e2:b3:f0:52:82:5a:9e:
2f:8d:7d:7a:58:ac:7a:4a:8e:8c:99:50:bf:93:d0:
46:a0:22:72:c6:c2:10:bd:cb:de:7c:f4:33:b8:9f:
12:e3:06:e4:e3:91:7b:16:70:04:5c:9d:3e:b0:fc:
3a:ca:f7:f1:ae:63:de:c8:1b:f2:b7:3f:74:41:39:
d5:69:d3:c9:f4:83:77:a2:2a:1e:aa:9b:ee:f7:2c:
34:04:7a:da:24:ed:95:19:72:0c:92:05:6b:0e:f1:
2c:f3:0f:24:b6:86:d1:9c:27:62:0c:eb:1e:ff:4a:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:28:E8:DF:28:F7:6B:32:76:63:BE:08:B3:96:C8:34:8F:46:03
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/eWko6N8o92sydmO-CLOWyDSPRgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.187.0/24
176.46.148.0/23
176.46.153.0-176.46.154.255
176.46.156.0/24
Signature Algorithm: sha256WithRSAEncryption
65:de:1d:d2:2f:63:54:54:42:3d:34:2a:11:93:3c:9a:87:4f:
a1:c2:75:c7:d2:65:1f:d0:1b:7f:a5:dc:4c:35:a6:01:77:04:
1f:44:64:78:c1:90:36:b4:e8:2b:4f:4e:33:22:0b:7c:3d:d5:
71:75:bd:dd:78:12:4e:ed:1d:c9:b6:a6:1a:ea:de:12:9d:2a:
ee:4d:25:e6:ad:0d:38:1f:d6:b8:3a:a5:83:5d:1c:11:75:22:
68:66:3d:c0:70:11:3e:a5:d6:25:7b:50:83:9b:e5:69:09:83:
52:62:a5:d4:c9:35:bc:bc:ba:16:56:ed:ac:e9:cc:3c:5b:a4:
e8:61:7b:c6:d0:63:3a:17:8b:95:a7:65:c8:56:9a:48:f4:8a:
43:7e:b2:fe:92:d1:19:f6:c2:32:45:aa:4f:bd:00:f7:9e:e3:
ea:bd:f5:01:14:f3:c2:24:62:77:cb:ce:50:ce:27:ed:8c:8b:
8a:19:d5:eb:ee:2f:b5:cd:b5:7d:79:c8:cf:27:c9:ff:88:85:
73:ac:cc:7b:40:51:94:cc:f1:3d:eb:2a:a2:b1:b5:9f:7b:06:
77:52:cb:68:d6:18:40:1a:a8:83:94:9b:66:0b:d9:77:4a:fb:
55:12:26:65:93:0b:12:cb:96:a3:46:20:7d:f2:dc:2a:84:03:
bb:e4:ca:30
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZUYdvHRi5sZLBNPQLN+EmSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjUwMjE4MDk1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTY5MjhlOGRmMjhmNzZiMzI3NjYzYmUwOGIzOTZjODM0OGY0NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rUp+icStZzEHoWp+rMZB6fJzV17
Dx1XXoMg7DU51jsTvkjdzObURg3FA2AGAT4ZXocaSiSmbn2NGoF3Krx+A56mKlMP
kH8LjJVir5VaTNhHQeD+qfcV2YSO2bhTRgmufFZyA7BOA3eBxzIxPnbz78tvx8vz
Ibf3wNEUxNFS+mGbC9CxR9T/QSqKbPlww+Kz8FKCWp4vjX16WKx6So6MmVC/k9BG
oCJyxsIQvcvefPQzuJ8S4wbk45F7FnAEXJ0+sPw6yvfxrmPeyBvytz90QTnVadPJ
9IN3oioeqpvu9yw0BHraJO2VGXIMkgVrDvEs8w8ktobRnCdiDOse/0q2ywIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHlpKOjfKPdrMnZjvgizlsg0j0YDMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvZVdrbzZOOG85MnN5ZG1PLUNMT1d5RFNQUmdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAXkq7AwQB
sC6UMAwDBACwLpkDBACwLpoDBACwLpwwDQYJKoZIhvcNAQELBQADggEBAGXeHdIv
Y1RUQj00KhGTPJqHT6HCdcfSZR/QG3+l3Ew1pgF3BB9EZHjBkDa06CtPTjMiC3w9
1XF1vd14Ek7tHcm2phrq3hKdKu5NJeatDTgf1rg6pYNdHBF1ImhmPcBwET6l1iV7
UIOb5WkJg1JipdTJNby8uhZW7azpzDxbpOhhe8bQYzoXi5WnZchWmkj0ikN+sv6S
0Rn2wjJFqk+9APee4+q99QEU88IkYnfLzlDOJ+2Mi4oZ1evuL7XNtX15yM8nyf+I
hXOszHtAUZTM8T3rKqKxtZ97BndSy2jWGEAaqIOUm2YL2XdK+1USJmWTCxLLlqNG
IH3y3CqEA7vkyjA=
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:01 2025 by rpki-client on console.sobornost.net