Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa
File: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (raw, json)
Hash identifier: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=
Subject key identifier: E4:EF:8B:83:85:C3:54:28:EC:5C:D7:CC:B4:B2:EC:9C:84:8C:45:5A
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019424B38BD279DAEACE176632D7105B5938
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24971
IP address blocks: 77.93.192.0/19 maxlen: 19
80.79.16.0/20 maxlen: 20
81.31.32.0/20 maxlen: 20
83.167.224.0/19 maxlen: 19
85.118.128.0/21 maxlen: 21
89.185.224.0/19 maxlen: 19
149.62.144.0/21 maxlen: 21
178.238.32.0/20 maxlen: 20
185.58.40.0/22 maxlen: 22
2a01:430::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8b:d2:79:da:ea:ce:17:66:32:d7:10:5b:59:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4ef8b8385c35428ec5cd7ccb4b2ec9c848c455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:7f:ef:a9:94:cf:c8:31:41:16:92:47:22:
3d:f2:0c:ab:a6:32:06:08:17:2d:61:8d:45:70:90:
57:43:fa:99:3e:a1:b0:08:fe:79:d9:2c:3c:5c:16:
59:50:44:b7:46:4f:23:78:0e:28:e7:7d:32:8b:14:
dd:dd:0b:f4:ce:8a:e4:1a:f1:a7:14:b3:db:c0:51:
8a:4a:14:f9:53:c9:09:6d:6f:26:21:04:ee:d2:84:
44:3c:f1:d3:bf:32:47:d7:6c:4c:bd:c2:68:17:bf:
dc:cc:fe:a3:9e:0b:fa:1a:b7:e2:79:52:d1:76:66:
19:04:c8:c6:a7:d4:fd:a8:1f:13:e4:cc:ce:9c:63:
97:7f:b0:9b:9a:b4:77:65:77:15:62:70:95:d0:4e:
2e:67:55:ae:ca:3f:cc:12:7e:fd:25:90:91:d6:2f:
26:67:26:59:3c:45:47:a0:89:09:a9:74:4f:c6:e7:
97:2e:9c:c9:d9:bd:f9:5b:b7:ef:5f:43:66:8d:65:
73:83:a4:97:3f:47:8d:26:da:ef:82:15:53:4a:4d:
19:73:13:10:98:39:66:f2:39:5e:ee:93:43:68:92:
00:84:8c:95:5e:4d:5d:98:f6:c2:06:26:bd:d3:4e:
72:70:6c:c8:8c:87:25:11:de:62:57:84:95:75:b1:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:8B:83:85:C3:54:28:EC:5C:D7:CC:B4:B2:EC:9C:84:8C:45:5A
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.192.0/19
80.79.16.0/20
81.31.32.0/20
83.167.224.0/19
85.118.128.0/21
89.185.224.0/19
149.62.144.0/21
178.238.32.0/20
185.58.40.0/22
IPv6:
2a01:430::/32
Signature Algorithm: sha256WithRSAEncryption
7e:4e:8f:a3:69:75:1c:f0:95:eb:08:43:9d:21:f3:04:89:43:
df:d2:72:1a:69:53:0c:0f:6e:26:6b:51:e1:d3:04:f4:a1:bc:
69:80:d7:71:5e:f2:99:24:a5:5d:d5:1d:cf:02:b5:88:68:bb:
bc:9b:da:00:65:40:22:52:60:c5:47:ee:2c:ce:fd:b6:fb:f6:
e7:d9:76:63:76:04:ea:73:b2:24:59:a6:9e:9e:6b:5d:d8:1c:
b4:88:fd:66:a1:b2:84:2c:b8:2c:d4:43:4a:42:29:58:26:b8:
06:d0:94:34:ea:74:40:b4:70:1b:af:0f:7c:66:86:3c:56:7d:
43:37:4d:b4:ed:c8:51:80:5e:dd:f9:91:3e:40:22:0b:a8:cd:
28:84:88:f0:74:6b:4c:d5:8a:e9:db:61:65:a7:ed:f9:76:f7:
64:00:96:f6:62:0f:2c:42:8f:a6:a0:96:60:33:5c:29:70:b8:
73:8c:03:1c:7b:a7:cd:3f:f7:fe:3e:dc:a4:03:fc:ec:27:28:
de:7a:e8:97:a8:7a:7a:bb:20:c9:b7:59:c6:19:c6:84:7d:0e:
d5:ed:d3:cb:53:2f:3a:f4:6d:cb:e8:00:b3:53:6c:8a:8b:ff:
68:0a:50:54:0c:63:1b:19:a2:2d:ba:05:45:58:0a:11:08:78:
dc:b2:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net