Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/COiOJlNhkw7oyE7_CjG4wzI_Has.roa
File: COiOJlNhkw7oyE7_CjG4wzI_Has.roa (raw, json)
Hash identifier: 8/lIfM84EcdzcDMM/2GUz4VN/PyuQhy9fYkjMmQOIDI=
Subject key identifier: 08:E8:8E:26:53:61:93:0E:E8:C8:4E:FF:0A:31:B8:C3:32:3F:1D:AB
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019547CB4B771B7A6C1429C05D8B58EE78BE
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/COiOJlNhkw7oyE7_CjG4wzI_Has.roa
Signing time: Thu 27 Feb 2025 14:24:20 +0000
ROA not before: Thu 27 Feb 2025 14:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44565
IP address blocks: 79.171.16.0/24 maxlen: 24
79.171.17.0/24 maxlen: 24
79.171.18.0/24 maxlen: 24
79.171.19.0/24 maxlen: 24
79.171.20.0/24 maxlen: 24
79.171.21.0/24 maxlen: 24
93.186.112.0/24 maxlen: 24
93.186.113.0/24 maxlen: 24
93.186.114.0/24 maxlen: 24
93.186.115.0/24 maxlen: 24
93.186.116.0/24 maxlen: 24
93.186.117.0/24 maxlen: 24
93.186.118.0/24 maxlen: 24
93.186.119.0/24 maxlen: 24
93.186.120.0/24 maxlen: 24
93.186.121.0/24 maxlen: 24
93.186.122.0/24 maxlen: 24
93.186.123.0/24 maxlen: 24
93.186.124.0/24 maxlen: 24
93.186.126.0/24 maxlen: 24
93.186.127.0/24 maxlen: 24
188.124.1.0/24 maxlen: 24
188.124.2.0/24 maxlen: 24
188.124.4.0/24 maxlen: 24
188.124.6.0/24 maxlen: 24
188.124.7.0/24 maxlen: 24
188.124.8.0/24 maxlen: 24
188.124.9.0/24 maxlen: 24
188.124.10.0/24 maxlen: 24
188.124.11.0/24 maxlen: 24
188.124.12.0/24 maxlen: 24
188.124.13.0/24 maxlen: 24
188.124.14.0/24 maxlen: 24
188.124.15.0/24 maxlen: 24
188.124.16.0/24 maxlen: 24
188.124.17.0/24 maxlen: 24
188.124.18.0/24 maxlen: 24
188.124.19.0/24 maxlen: 24
188.124.20.0/24 maxlen: 24
188.124.21.0/24 maxlen: 24
188.124.23.0/24 maxlen: 24
188.124.24.0/24 maxlen: 24
188.124.25.0/24 maxlen: 24
188.124.26.0/24 maxlen: 24
188.124.27.0/24 maxlen: 24
188.124.28.0/24 maxlen: 24
188.124.29.0/24 maxlen: 24
188.124.30.0/24 maxlen: 24
188.124.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:cb:4b:77:1b:7a:6c:14:29:c0:5d:8b:58:ee:78:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Feb 27 14:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08e88e265361930ee8c84eff0a31b8c3323f1dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:99:1b:9d:32:16:b3:93:51:09:58:be:03:
d9:aa:24:1d:31:e6:8a:60:7f:bd:08:36:6d:8e:1a:
21:1a:b3:84:9c:ef:67:37:b6:97:db:d4:2c:ae:ea:
e0:ef:25:78:7a:9f:f7:e4:8e:ff:c7:f7:9c:c7:b3:
d9:14:76:8b:f0:74:f0:77:48:8c:f9:d4:7c:47:93:
00:19:7a:a4:0f:07:05:68:82:9e:bf:a0:42:b8:fc:
cd:d5:3f:3d:72:1a:6f:7a:36:0d:e4:01:86:69:3c:
c6:b3:d7:96:ba:45:c4:5c:44:ca:d7:33:57:c9:82:
26:c7:ad:ad:2f:84:4f:20:61:62:e5:91:92:a5:22:
53:22:93:33:a6:50:09:29:85:8f:20:13:b0:a6:a9:
98:89:7d:f5:7c:0c:81:64:32:cf:1d:a5:da:4c:86:
0b:94:78:61:b7:1f:b6:2b:1d:9b:a4:94:29:07:67:
d6:78:7d:ad:79:6f:54:ba:0a:87:bf:8f:d5:fd:3d:
2a:02:0c:d2:89:02:aa:ab:bb:cc:81:bc:fd:23:5b:
82:d3:e9:f3:c1:8f:60:ff:e8:21:d1:0b:e3:25:62:
9a:4e:76:8b:4d:02:8f:40:ae:d0:63:e5:bd:d7:55:
5d:f5:72:04:d0:84:c4:a7:18:27:2b:ff:71:62:6b:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:8E:26:53:61:93:0E:E8:C8:4E:FF:0A:31:B8:C3:32:3F:1D:AB
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/COiOJlNhkw7oyE7_CjG4wzI_Has.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.16.0-79.171.21.255
93.186.112.0-93.186.124.255
93.186.126.0/23
188.124.1.0-188.124.2.255
188.124.4.0/24
188.124.6.0-188.124.21.255
188.124.23.0-188.124.31.255
Signature Algorithm: sha256WithRSAEncryption
8b:3b:62:9b:5e:da:ef:c8:04:6f:90:86:28:ac:06:d0:cc:51:
ae:0e:06:87:5f:85:c2:16:f1:1a:85:c9:49:fd:b5:bd:28:3b:
02:8b:5c:16:f2:7e:f7:57:20:f6:c8:9d:57:78:5b:c6:3c:73:
84:2d:ce:66:42:2b:ed:68:c2:4a:e1:72:aa:82:19:12:39:a6:
60:4d:3d:72:dc:48:96:3e:7d:f3:76:6a:3a:20:42:19:37:17:
4d:31:b9:51:8e:0e:11:5b:9e:24:ac:97:c1:b1:11:34:cf:12:
97:09:8a:a5:ee:93:02:d4:b8:7a:61:11:2a:3e:a3:69:77:f5:
8d:6b:4d:b0:f7:cb:2b:34:f4:7b:bc:65:94:e6:3e:c4:42:a8:
47:c3:9d:da:5d:02:a3:1f:dd:d5:4a:6a:c3:4b:74:2c:4f:e1:
48:70:d9:4c:ff:82:e6:9d:9d:1a:00:6c:bb:41:6f:77:f5:e1:
53:7b:67:a8:ff:e8:5f:67:49:eb:95:7f:4b:10:e3:74:47:9a:
38:a4:8d:2e:18:c7:d1:ad:6c:ef:ed:81:c7:9a:9f:37:44:94:
fb:72:5c:92:88:5c:f7:5d:f4:8d:db:3a:30:92:4a:ee:13:e5:
d8:e5:3d:3c:07:ff:45:53:b8:4e:9c:97:14:98:10:d5:28:f6:
72:72:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net