Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/Bk6LpR2SuWu8fRSsV0xzB4UC_IU.roa
File: Bk6LpR2SuWu8fRSsV0xzB4UC_IU.roa (raw, json)
Hash identifier: j/J2oRTkkYgui2J7eRgka7Cw0EIccLYKY06thUFlc0w=
Subject key identifier: 06:4E:8B:A5:1D:92:B9:6B:BC:7D:14:AC:57:4C:73:07:85:02:FC:85
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 0195E83FCBACB454F03F13A1C351A9CFE7A0
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/Bk6LpR2SuWu8fRSsV0xzB4UC_IU.roa
Signing time: Sun 30 Mar 2025 18:10:49 +0000
ROA not before: Sun 30 Mar 2025 18:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 94.232.40.0/24 maxlen: 24
94.232.41.0/24 maxlen: 24
94.232.42.0/24 maxlen: 24
94.232.43.0/24 maxlen: 24
94.232.44.0/24 maxlen: 24
94.232.45.0/24 maxlen: 24
94.232.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e8:3f:cb:ac:b4:54:f0:3f:13:a1:c3:51:a9:cf:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Mar 30 18:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064e8ba51d92b96bbc7d14ac574c73078502fc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:20:a9:4e:a0:1d:43:7c:63:af:d0:a5:87:
35:17:c5:99:13:41:94:46:d0:f4:60:e9:16:51:23:
64:f8:74:dd:ea:95:86:12:c6:be:2b:58:f9:ee:17:
0f:b2:a9:c9:bd:7a:b0:41:9d:1d:65:36:e0:18:64:
d3:74:67:95:11:c6:2d:89:79:19:15:5f:7e:c4:a6:
d4:f2:7c:35:30:4e:82:b3:2c:26:9e:94:dc:da:f7:
3f:80:05:a3:61:f6:b7:a9:0c:87:44:72:3a:8e:b9:
cf:c1:c8:6f:c5:0f:d7:06:b9:c9:b1:3d:9e:d3:e5:
29:3b:5b:a1:4e:b0:b7:b0:0f:03:9a:62:29:b0:e0:
a8:b0:df:4b:d9:17:9c:fe:45:2e:65:58:51:db:ba:
8a:df:9b:14:14:92:ad:a3:c7:1f:45:29:24:4b:46:
7a:a7:96:42:03:c3:44:19:4c:da:9b:6a:7d:be:5f:
3a:97:15:62:8c:a0:c3:bc:e9:65:d1:0a:2f:8c:7f:
0a:df:f3:6f:95:26:48:4d:df:7d:0e:f7:98:d3:eb:
ac:df:ad:11:3e:aa:95:a5:2e:cc:46:e8:1f:4c:46:
98:66:34:7b:ec:36:28:5c:a9:97:81:fa:a8:c7:08:
98:12:a5:87:06:55:36:ec:12:41:ce:a2:57:39:ce:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:8B:A5:1D:92:B9:6B:BC:7D:14:AC:57:4C:73:07:85:02:FC:85
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/Bk6LpR2SuWu8fRSsV0xzB4UC_IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.40.0-94.232.46.255
Signature Algorithm: sha256WithRSAEncryption
75:8a:20:42:97:f9:42:ef:32:9c:60:d3:79:9f:a9:d9:6b:7a:
c2:05:7c:f9:18:b7:d7:16:5b:a4:80:b2:b4:64:e5:7d:23:a5:
b7:44:11:71:05:c6:5a:8f:8b:46:75:0b:3d:ae:7a:2e:31:74:
e4:47:0f:88:67:13:16:0b:b5:f9:a7:b8:86:4b:ac:d8:8a:ec:
85:aa:37:a3:4e:50:19:41:dd:d0:59:27:6c:20:12:60:38:7f:
e0:a4:1b:b7:ba:54:04:bf:e9:6a:03:01:09:5d:36:0e:c4:4a:
d4:30:68:2d:f6:d5:08:f0:86:16:8d:37:3e:d7:01:4e:af:b2:
4b:82:7d:7e:13:09:80:5d:4e:ae:59:77:01:69:cb:6e:9a:ad:
7e:e1:ad:ef:77:33:b6:f0:c8:df:cb:94:6f:1c:3c:92:b7:30:
d6:4c:e2:bb:95:d6:64:ab:1a:1a:fd:90:bc:d0:fe:c5:86:6f:
86:8b:a9:8d:fb:39:1c:b0:9f:40:d3:74:d4:a6:3d:5f:12:db:
90:98:f0:d2:9a:fb:78:71:44:c5:8a:d1:36:16:5b:aa:66:44:
c6:40:5b:53:0e:da:19:8a:ab:f2:2b:ac:9f:d4:3c:d6:82:04:
12:56:37:3c:fd:15:d5:16:d6:05:18:e1:d6:28:04:35:c8:ea:
82:2f:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:50:47 2025 by rpki-client on console.sobornost.net