Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/NETt5LyS--lV9_ycDBmp9TmpxP4.roa
File: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (raw, json)
Hash identifier: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=
Subject key identifier: 34:44:ED:E4:BC:92:FB:E9:55:F7:FC:9C:0C:19:A9:F5:39:A9:C4:FE
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 0194221FD5E699A3402D37469EB574E90F3A
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/NETt5LyS--lV9_ycDBmp9TmpxP4.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3240
IP address blocks: 194.182.108.0/24 maxlen: 24
195.231.128.0/20 maxlen: 20
195.231.144.0/20 maxlen: 20
195.231.160.0/19 maxlen: 19
195.231.224.0/19 maxlen: 19
2a10:cf80:1000::/48 maxlen: 48
2a10:cf80:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d5:e6:99:a3:40:2d:37:46:9e:b5:74:e9:0f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3444ede4bc92fbe955f7fc9c0c19a9f539a9c4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:e9:92:c8:49:30:db:86:53:ae:77:34:ce:
84:44:ae:69:99:44:20:dc:71:4b:18:23:6f:1f:d2:
c6:51:e8:cd:61:7f:58:54:83:a7:b1:05:b3:4c:9b:
31:8d:08:ca:6c:3c:ad:85:41:f4:a2:f2:19:17:24:
c0:1e:30:14:89:f3:47:bf:d9:73:ae:03:db:ab:9c:
44:7e:a3:93:be:28:4a:6f:06:37:1b:64:6f:db:e9:
d3:66:5a:eb:4b:f6:10:2e:c1:f0:f4:f9:a2:a3:c9:
85:10:ab:91:69:22:f4:0a:e3:c5:2c:6a:0c:f6:cf:
79:1f:07:23:eb:77:b8:18:fa:a5:b5:79:ec:a7:1d:
cc:40:f5:2e:7e:15:48:1f:e6:73:9c:9a:7b:97:c2:
b5:2d:65:b1:84:18:88:28:c8:df:32:c0:83:f0:c0:
e9:9b:e2:bf:2f:05:36:11:31:0b:68:8d:d6:c3:5f:
e3:02:a5:9d:c8:c8:06:a8:b5:25:45:cb:34:f3:b2:
2a:07:f6:75:5a:56:cf:34:aa:79:c3:a9:b0:79:f5:
fe:06:ac:5f:8c:85:79:f7:81:17:c0:f1:0b:82:0a:
a0:7b:ec:2c:93:00:48:30:2b:35:1f:80:3e:22:29:
53:5a:a2:5d:f9:c7:1e:d7:e3:37:52:33:eb:ca:2f:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:44:ED:E4:BC:92:FB:E9:55:F7:FC:9C:0C:19:A9:F5:39:A9:C4:FE
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/NETt5LyS--lV9_ycDBmp9TmpxP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.182.108.0/24
195.231.128.0/18
195.231.224.0/19
IPv6:
2a10:cf80:1000::/48
2a10:cf80:2000::/48
Signature Algorithm: sha256WithRSAEncryption
b1:56:c2:96:2d:a8:d1:a8:46:fb:6a:16:f9:86:a1:41:98:37:
03:d2:17:64:70:d8:98:ae:fd:9f:e4:5a:72:3c:49:e4:41:db:
02:3c:4c:55:00:0f:c7:68:e6:1b:be:0d:38:c3:86:61:ec:8e:
b7:0b:00:97:1a:2d:a8:99:c8:35:e1:0f:7e:d8:f0:2b:1a:1b:
74:ea:49:08:58:fd:5e:68:66:f3:08:0f:03:80:e4:97:58:1e:
45:e3:7f:6d:47:ec:e8:6d:32:8e:09:8d:79:8f:74:3e:e9:4a:
36:e7:60:c3:59:bb:d8:db:a8:01:39:6d:55:74:a3:9f:ea:ee:
20:61:07:56:ed:4c:a2:59:d8:4d:5d:e6:84:05:3e:d2:ca:de:
e2:6e:26:b0:89:c3:7c:a1:4c:f1:5e:5b:e6:eb:b9:3a:d2:5d:
f4:8a:f9:fb:12:a7:4c:8c:0b:78:ea:72:5c:1f:51:0b:81:19:
ce:bc:a0:f7:11:5d:22:c3:b1:2d:9d:e9:44:f0:bc:0c:ab:74:
75:2d:60:a7:1b:cc:2d:0b:2a:47:80:68:65:4a:bc:28:6a:f7:
d4:45:44:ca:db:57:db:b1:82:b9:81:59:6e:13:71:b8:04:74:
5c:5d:94:5d:54:a1:40:ef:f2:b8:9c:1c:bd:0e:cb:de:db:8b:
49:32:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net