Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/rSaIHtGhDT0jOkbwk5w9J-_5svc.roa
File: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (raw, json)
Hash identifier: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=
Subject key identifier: AD:26:88:1E:D1:A1:0D:3D:23:3A:46:F0:93:9C:3D:27:EF:F9:B2:F7
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019425FDB40C070A6F93CD52DF562491C78C
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/rSaIHtGhDT0jOkbwk5w9J-_5svc.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3339
IP address blocks: 91.200.244.0/22 maxlen: 22
176.97.224.0/22 maxlen: 22
185.72.12.0/22 maxlen: 22
185.72.12.0/24 maxlen: 24
185.73.188.0/22 maxlen: 22
185.95.56.0/22 maxlen: 22
185.177.168.0/22 maxlen: 22
185.209.120.0/22 maxlen: 22
185.233.76.0/22 maxlen: 22
185.255.104.0/22 maxlen: 22
192.145.40.0/22 maxlen: 22
2a0a:4280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b4:0c:07:0a:6f:93:cd:52:df:56:24:91:c7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad26881ed1a10d3d233a46f0939c3d27eff9b2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f4:b4:8b:cd:89:5f:db:19:9e:8e:f6:2f:73:
7c:d5:1e:ef:58:28:52:ff:e1:9e:6a:33:a2:89:fb:
4b:47:ac:06:3a:86:a5:63:ff:c7:3d:9c:50:c4:2d:
94:49:86:4f:a6:e1:c9:a5:c3:d2:de:09:de:75:a3:
dc:29:7e:44:c1:64:49:78:20:18:1d:48:16:50:5a:
e4:81:0a:ac:1c:ec:08:f9:8f:60:90:95:d0:0c:9b:
f7:fc:5b:bb:2f:e2:f5:6c:f9:e7:5c:ae:c1:0f:3c:
66:26:21:88:2c:d1:35:94:c6:80:f2:4f:8f:50:bf:
0f:d1:48:ff:d4:ba:e0:d1:d7:5a:d6:29:7e:4a:32:
ed:fe:bf:b4:48:f2:22:6b:9a:42:18:9d:28:45:f5:
ed:57:15:d1:f7:bb:de:8d:d3:45:42:a7:e6:5a:2c:
9c:09:96:f9:08:69:24:42:8f:b0:34:69:95:16:71:
74:be:a1:9c:3f:cf:c6:e9:59:c8:a2:3e:78:99:82:
f6:1f:5b:57:d5:1d:fb:8b:76:f9:56:00:82:95:bb:
b1:80:28:d5:11:4b:4e:aa:64:ae:58:e8:8e:62:b4:
fb:e3:d1:25:0f:36:11:e8:c4:28:18:c8:3d:9b:5c:
d2:cc:d2:65:d8:5b:1d:16:2f:51:a7:3a:7a:ca:98:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:26:88:1E:D1:A1:0D:3D:23:3A:46:F0:93:9C:3D:27:EF:F9:B2:F7
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/rSaIHtGhDT0jOkbwk5w9J-_5svc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.244.0/22
176.97.224.0/22
185.72.12.0/22
185.73.188.0/22
185.95.56.0/22
185.177.168.0/22
185.209.120.0/22
185.233.76.0/22
185.255.104.0/22
192.145.40.0/22
IPv6:
2a0a:4280::/29
Signature Algorithm: sha256WithRSAEncryption
b7:38:89:8e:0a:c5:ff:df:ae:9d:e4:d0:fc:7f:b3:9d:b4:35:
a9:04:19:ed:38:1f:b7:4e:a8:9a:e0:49:af:4f:a6:2c:45:cb:
6d:20:7a:3f:a1:27:2e:6a:ef:1f:71:72:4c:66:db:be:bb:4b:
1f:1a:77:70:7b:62:34:9e:a5:dd:34:48:06:e3:af:34:f3:df:
5a:db:1e:c4:98:63:98:65:b9:12:d2:62:64:41:86:05:a9:71:
e7:a7:44:c6:08:c6:8c:ed:20:e0:11:1d:04:4a:4b:b7:1e:de:
77:9f:37:ad:fb:6a:14:15:26:92:ad:b1:aa:c6:ab:ab:81:c7:
f9:be:c7:35:61:17:ae:3e:3c:6a:b8:46:ca:9f:d9:c8:b0:2e:
3a:c7:84:0c:2a:b3:b3:f0:94:39:a0:ca:b4:c4:93:28:40:00:
c3:80:3c:04:4a:44:ce:4e:30:16:3e:8f:fe:94:d3:1c:92:d1:
33:0b:f1:71:62:40:72:b9:a9:d5:ab:bc:6b:6e:1d:31:c2:a1:
9e:47:60:4f:bb:2b:d7:9f:73:6c:cf:48:ad:ac:a9:3b:11:aa:
10:a4:c9:6a:d1:87:a1:b5:43:10:3b:04:ff:a4:09:3e:06:ed:
65:f0:da:c7:62:55:1d:d4:1e:29:43:26:1c:8c:fb:71:5a:ca:
f7:87:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net