Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/wPTagVR3pNusa3J3LbaZykmYrdM.roa
File: wPTagVR3pNusa3J3LbaZykmYrdM.roa (raw, json)
Hash identifier: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=
Subject key identifier: C0:F4:DA:81:54:77:A4:DB:AC:6B:72:77:2D:B6:99:CA:49:98:AD:D3
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 0194252238A26DBF891945651049F7000509
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/wPTagVR3pNusa3J3LbaZykmYrdM.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16083
IP address blocks: 81.16.208.0/22 maxlen: 22
81.16.208.0/23 maxlen: 23
91.106.112.0/21 maxlen: 24
178.209.192.0/19 maxlen: 24
217.73.192.0/20 maxlen: 24
217.73.198.0/24 maxlen: 24
2a00:eb9::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:38:a2:6d:bf:89:19:45:65:10:49:f7:00:05:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f4da815477a4dbac6b72772db699ca4998add3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:be:76:20:38:7b:ab:ea:0c:ce:0b:70:02:
06:b1:75:a6:dc:8c:43:76:17:e3:cb:a4:30:cc:1a:
d3:f2:fe:21:34:20:f8:7c:c5:8a:56:d2:e7:56:dc:
e5:00:71:6c:e9:2f:3d:c0:91:e5:50:4d:9b:11:81:
da:ed:e6:0c:a3:4f:24:e0:e1:92:92:ab:81:f1:60:
d8:75:e0:f4:a2:98:ef:fb:e3:4d:2b:1f:74:e4:24:
f5:3d:44:ba:d3:44:56:34:42:02:46:a1:f3:27:70:
cb:96:2a:de:23:55:b7:b5:c4:81:28:17:32:cf:4b:
92:ee:db:69:4d:ca:15:ed:ed:a6:c2:12:c4:89:2e:
6c:0a:62:d4:a8:b2:6d:47:fc:02:83:ca:bb:2d:af:
a7:55:33:b7:45:59:0a:a2:e5:77:ef:5e:23:96:e9:
45:fd:13:48:d9:12:ac:56:62:30:5c:ab:5d:b5:7b:
b6:bf:b6:7a:f8:24:6e:4d:3e:dd:96:6c:1f:d4:33:
0e:e9:79:80:dd:b1:44:07:04:40:2c:f5:9b:77:35:
09:8a:02:31:8f:7d:24:0e:6d:a3:1e:ff:48:ef:6e:
3c:f3:8a:29:b4:b5:a7:76:87:2a:97:f4:ee:2b:d0:
6b:d3:cd:7c:b3:fd:17:e4:ee:98:96:51:03:e5:fd:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:DA:81:54:77:A4:DB:AC:6B:72:77:2D:B6:99:CA:49:98:AD:D3
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/wPTagVR3pNusa3J3LbaZykmYrdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.208.0/22
91.106.112.0/21
178.209.192.0/19
217.73.192.0/20
IPv6:
2a00:eb9::/32
Signature Algorithm: sha256WithRSAEncryption
54:ca:6d:69:35:ad:77:d6:d6:f5:02:ef:ea:4c:ea:7b:4b:31:
d1:a0:02:43:1f:46:83:a5:e9:3d:42:5f:aa:be:78:32:e9:06:
f9:b3:59:65:8d:14:cc:25:e7:c3:a6:31:eb:8a:ff:b2:55:ca:
0b:b8:e0:1f:11:47:ff:2f:36:bf:60:cd:83:92:19:a6:e8:df:
74:3b:1c:ea:9c:00:dd:48:eb:a2:a1:32:cd:61:e7:bc:d2:13:
7b:e4:b9:35:61:2d:da:66:a3:7d:01:64:0d:e4:11:4f:f5:e2:
cb:c1:0b:4b:bd:c6:d5:07:57:b1:1e:3b:b9:55:4a:5b:f9:6b:
bc:91:f3:3a:68:20:03:a9:21:77:00:0b:88:f1:97:2c:77:68:
bc:7c:3d:ff:44:43:b3:60:4e:ec:ae:5c:29:4a:12:87:0c:e9:
38:59:77:de:58:ad:44:ab:f4:b6:c4:ba:c9:0f:98:ee:89:bf:
54:23:2c:40:37:a6:3e:db:9a:12:9f:e4:fd:8d:53:90:8d:12:
f3:8a:1b:89:15:78:6a:81:86:9e:df:21:ab:1b:10:d3:48:d1:
16:cd:7e:1f:12:53:8e:af:dc:7e:97:a1:2a:cc:c2:7d:f0:2d:
a9:1b:f6:14:24:dd:c6:b2:2c:1b:9d:49:e8:13:01:51:dd:40:
95:39:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net