Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/9-o0NLiGvlKmMx-qIL22lBoBavY.roa
File: 9-o0NLiGvlKmMx-qIL22lBoBavY.roa (raw, json)
Hash identifier: x3fjMZ9f1cmTHw/gRrQuIfz02fOQCT025xB0UcuPW+Y=
Subject key identifier: F7:EA:34:34:B8:86:BE:52:A6:33:1F:AA:20:BD:B6:94:1A:01:6A:F6
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 0195AD163A303BD9D3137F01A313E097994B
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/9-o0NLiGvlKmMx-qIL22lBoBavY.roa
Signing time: Wed 19 Mar 2025 06:27:49 +0000
ROA not before: Wed 19 Mar 2025 06:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 79.141.224.0/20 maxlen: 20
193.43.140.0/24 maxlen: 24
193.43.145.0/24 maxlen: 24
193.43.149.0/24 maxlen: 24
193.43.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:16:3a:30:3b:d9:d3:13:7f:01:a3:13:e0:97:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Mar 19 06:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7ea3434b886be52a6331faa20bdb6941a016af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:79:a9:a2:ef:25:39:ee:35:64:0f:18:2e:
d7:76:bc:dd:a1:87:44:53:e9:3a:1b:4f:f5:4c:5b:
ae:a8:9b:5c:8f:19:e3:ef:d6:05:b9:f9:28:a7:84:
dd:01:1f:26:c5:e4:54:b9:19:8f:c5:d7:fd:0c:bf:
91:b6:84:81:8b:5b:dc:66:af:03:9f:d1:f1:25:6a:
d4:0c:a4:91:14:d4:87:5f:93:0d:c8:ce:16:0e:2e:
37:f0:35:ad:72:57:07:12:48:5d:5a:80:67:57:62:
60:8d:97:3f:77:1a:0f:8f:c1:07:e1:b0:4b:5a:67:
0d:70:08:a5:70:99:a9:16:3e:fa:b3:7a:07:74:78:
9e:e2:bf:23:fa:bc:0b:2b:14:11:49:9f:ad:59:e2:
1f:38:8a:42:73:f7:33:a1:61:45:54:6a:43:f6:05:
6d:21:6f:07:41:0e:35:61:ea:8a:f9:53:bc:30:80:
e3:70:16:0f:b7:41:ce:ef:45:03:df:f3:7d:e3:b3:
ce:fa:92:26:cd:b4:14:fa:2e:3a:7a:1f:cf:62:94:
d9:2b:ca:83:5f:1c:aa:72:61:f3:3c:de:ed:ae:44:
8b:7c:b3:82:72:55:26:8e:76:20:e9:6c:47:5f:3b:
42:8f:72:48:4c:16:11:d1:1a:d7:ff:c3:f2:26:a4:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:34:34:B8:86:BE:52:A6:33:1F:AA:20:BD:B6:94:1A:01:6A:F6
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/9-o0NLiGvlKmMx-qIL22lBoBavY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.224.0/20
193.43.140.0/24
193.43.145.0/24
193.43.149.0/24
193.43.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:77:df:99:1d:d5:4c:4e:55:d2:e2:d1:d2:46:48:c5:6a:
41:1c:50:24:d4:5c:81:5c:cb:ca:81:21:f6:88:c6:5f:1e:08:
19:89:a1:4f:76:b6:f5:80:0f:d3:61:1a:81:d6:59:45:c3:68:
70:c8:b1:66:c0:77:02:86:7e:fb:8d:ab:6b:b3:9f:fd:ac:8c:
49:86:a8:51:ea:84:4a:de:f1:e4:aa:88:3f:17:91:d9:c2:9a:
f3:70:aa:84:da:fe:bb:0b:13:27:70:1d:c2:b4:43:99:e1:b1:
ff:5f:fe:18:d3:17:8d:ee:aa:81:b6:d4:fb:67:97:30:f6:cc:
7e:30:4a:47:8e:a4:9c:82:86:f1:4b:3e:22:f0:22:51:e7:7a:
11:67:9f:51:19:f9:d8:d4:16:5f:f4:35:c1:34:7b:cb:48:69:
ca:b0:49:83:87:02:d9:3f:c6:6c:59:de:73:fa:ee:be:95:37:
cb:a0:87:48:c4:5e:dd:0b:d3:c6:74:3b:7e:bf:5c:e3:2c:d4:
44:f1:bc:e5:80:fc:88:0e:26:b1:72:e7:87:e2:51:b8:31:ee:
82:5c:cf:36:b4:8a:5e:ce:7c:f4:02:4d:4c:1e:d8:04:20:0c:
cd:39:cc:a6:80:8a:a2:b3:c6:c7:ad:4d:21:16:0f:ff:9c:ee:
9b:ba:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net