Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa
File: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (raw, json)
Hash identifier: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=
Subject key identifier: F5:EF:4A:13:61:7C:CC:2A:D8:AA:C3:91:D2:87:0A:07:7B:96:0B:48
Certificate issuer: /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial: 0194258F6E47C6ABF2F8F7329D7F68620A16
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31239
IP address blocks: 78.40.212.0/24 maxlen: 24
89.31.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6e:47:c6:ab:f2:f8:f7:32:9d:7f:68:62:0a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5ef4a13617ccc2ad8aac391d2870a077b960b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:09:21:08:bf:b8:2d:83:de:02:c3:7e:4c:
4f:84:33:13:c7:9b:ab:93:a5:96:0e:33:8b:0a:bc:
06:21:6c:9c:5b:41:db:22:59:8b:d4:99:14:4b:2e:
d6:43:0e:26:25:48:b7:fd:92:6c:4a:e1:14:b0:c4:
bf:61:6f:60:c1:34:04:fa:8f:80:4f:cc:65:68:f2:
55:6d:80:34:ff:30:e3:16:66:d7:90:51:34:19:73:
ec:85:e8:63:0d:5e:fb:fd:7b:fe:a9:1b:30:f6:95:
2c:28:44:f1:b0:ad:cb:0d:3e:1c:fc:18:b5:40:c7:
30:68:2e:e9:c3:3d:f9:68:e9:69:66:69:ef:b4:91:
54:e1:dc:4f:85:86:58:82:bc:30:ab:85:eb:89:c2:
9f:21:73:1e:86:32:1f:6d:0d:fe:45:4b:47:d9:02:
e2:e1:a1:8a:31:f3:3f:a0:53:13:6c:76:4a:a8:a2:
b5:a7:0d:5c:1d:f7:fa:ed:07:2f:86:37:9e:bf:fa:
40:07:a0:ef:4d:e1:48:81:74:3e:49:f5:fe:77:93:
47:ae:98:59:fd:b4:72:d0:39:ab:d7:e3:aa:56:a8:
7e:3f:89:71:82:0b:79:20:f1:38:86:c3:ec:4b:36:
e7:e7:85:69:13:a7:0e:85:fe:28:6a:22:1b:40:29:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EF:4A:13:61:7C:CC:2A:D8:AA:C3:91:D2:87:0A:07:7B:96:0B:48
X509v3 Authority Key Identifier:
keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.212.0/24
89.31.128.0/21
Signature Algorithm: sha256WithRSAEncryption
93:44:20:70:70:05:9b:7c:af:93:e6:81:6a:26:11:f8:c3:f7:
ff:e3:b4:03:83:36:57:ab:b0:40:f7:5c:03:ec:7d:46:be:60:
fc:b2:72:e2:56:72:4c:fe:93:d0:d8:d3:97:49:38:ee:dd:fd:
4c:30:26:df:23:27:71:82:c3:40:04:3e:62:d9:be:0b:2d:d6:
f3:c5:3f:4b:e9:e6:91:9a:38:d1:92:f9:f9:2a:0d:44:c1:fb:
76:ca:1b:f1:26:fb:11:00:d3:0d:16:c7:9b:8c:eb:3a:90:fd:
00:09:7d:87:78:0a:c8:00:82:6c:b1:71:12:b6:73:39:29:61:
e7:7d:a5:51:88:ca:14:54:b7:31:fb:1d:00:41:50:40:a5:e3:
bd:68:81:bd:a4:c0:cd:67:0f:ce:31:da:d2:eb:3f:6a:bd:41:
49:4c:0c:94:16:0d:e1:32:4b:70:e3:11:34:f4:68:9b:c0:8b:
ad:c2:8c:a8:a3:ae:37:74:9f:b6:2d:f7:e0:d8:f6:6f:55:ad:
59:e8:42:92:7b:a7:4c:ea:45:d5:24:92:f9:95:92:53:eb:bd:
3c:7e:a7:bc:a4:20:0c:ba:09:81:2d:f5:20:94:ab:18:c5:18:
24:1a:db:bd:1b:6a:65:38:cc:8f:f9:b3:b8:cd:13:ab:ff:0a:
05:86:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net