Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/PhMpSawzWF4ex2C_9UJlDInR9Qw.roa
File: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (raw, json)
Hash identifier: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=
Subject key identifier: 3E:13:29:49:AC:33:58:5E:1E:C7:60:BF:F5:42:65:0C:89:D1:F5:0C
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 0194B76A54CDD45459C78F36689BD4514507
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/PhMpSawzWF4ex2C_9UJlDInR9Qw.roa
Signing time: Thu 30 Jan 2025 13:33:06 +0000
ROA not before: Thu 30 Jan 2025 13:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35401
IP address blocks: 87.244.0.0/21 maxlen: 24
87.244.6.0/24 maxlen: 24
87.244.16.0/21 maxlen: 24
87.244.32.0/21 maxlen: 24
87.244.40.0/21 maxlen: 24
87.244.48.0/21 maxlen: 24
87.244.52.0/24 maxlen: 24
87.244.53.0/24 maxlen: 24
87.244.54.0/24 maxlen: 24
87.244.55.0/24 maxlen: 24
87.244.56.0/22 maxlen: 24
87.244.60.0/23 maxlen: 24
87.244.62.0/24 maxlen: 24
87.244.63.0/24 maxlen: 24
185.138.160.0/23 maxlen: 24
185.138.161.0/24 maxlen: 24
217.170.112.0/20 maxlen: 24
217.170.112.0/21 maxlen: 21
217.170.120.0/21 maxlen: 21
2a02:26e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:6a:54:cd:d4:54:59:c7:8f:36:68:9b:d4:51:45:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Jan 30 13:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e132949ac33585e1ec760bff542650c89d1f50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:36:8d:81:ab:fc:5b:b5:c2:0b:e4:02:cc:
34:ce:0a:7e:f4:af:b7:6a:7a:3e:b2:3d:25:d9:c5:
1a:8d:e0:f9:f2:e2:7d:87:f0:d3:d1:1e:33:45:47:
c4:10:1e:c0:2f:f1:b6:56:43:35:88:ea:b5:90:da:
f3:01:f9:84:36:ff:09:72:b1:74:6b:55:22:50:70:
f7:2d:9f:19:d8:56:52:fb:86:f5:ba:46:6e:e4:cc:
39:56:17:b5:82:59:b1:21:fa:56:ef:25:ef:de:da:
a2:aa:75:09:da:65:1d:fe:f2:56:c6:63:8c:e0:fa:
94:5a:43:b9:45:26:92:00:8e:a8:57:ee:6e:12:b3:
a6:81:20:5b:f5:b0:ef:86:6e:ed:ab:a8:d7:70:ff:
95:9e:8f:a9:dd:8d:57:e2:10:6f:25:1d:e6:43:05:
c6:cf:4a:00:a3:f3:7c:c5:4d:23:88:0a:51:97:51:
cd:c5:94:b5:c1:23:cc:e8:4e:30:82:26:5f:94:a6:
28:24:38:34:3c:56:5d:2c:09:a2:ec:b8:4e:fe:de:
a5:de:b8:b6:72:a3:93:ea:3d:1c:76:2a:8f:7e:35:
f2:ff:f7:cf:ca:1d:f6:40:4d:15:00:ef:38:6e:6c:
20:e0:1c:52:73:56:bf:ea:1b:65:27:46:36:18:c7:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:29:49:AC:33:58:5E:1E:C7:60:BF:F5:42:65:0C:89:D1:F5:0C
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/PhMpSawzWF4ex2C_9UJlDInR9Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.244.0.0/21
87.244.16.0/21
87.244.32.0/19
185.138.160.0/23
217.170.112.0/20
IPv6:
2a02:26e0::/32
Signature Algorithm: sha256WithRSAEncryption
10:cb:5b:83:76:cc:3b:32:8a:cb:75:bb:4e:f8:a4:46:b0:dd:
79:62:00:07:74:45:cf:bf:2b:01:af:6f:65:17:09:88:c3:bb:
73:75:58:2d:4a:f8:38:27:84:8f:e3:20:02:91:68:8e:13:2c:
97:24:1c:7a:9d:a0:0a:d6:3f:17:38:0c:72:30:e6:2f:1f:26:
9e:78:13:52:30:5f:0a:1f:5a:d0:1c:dd:82:6c:22:8e:9b:ad:
57:87:83:19:16:ce:96:34:c4:6d:73:51:f5:ca:50:1c:83:b0:
5e:40:84:d5:bc:6c:8f:cd:56:ce:f0:a8:13:6e:09:8b:97:5f:
fc:4c:70:ca:68:f6:5c:5f:33:3c:3d:8c:fc:55:f6:c5:de:77:
46:43:a6:d4:eb:c6:e3:a0:e6:b3:e5:a5:94:46:86:f5:5b:ee:
59:d4:0c:e9:2e:f3:ab:b2:3c:f5:f2:f9:47:4e:1b:94:5c:a4:
38:39:44:d6:87:8a:df:93:d1:31:7f:81:0b:46:ba:40:0c:df:
fa:2a:9d:b7:b2:7e:cc:1e:c5:2c:d0:55:96:71:67:dd:8a:1e:
3e:a5:f8:f9:ba:4c:73:6b:22:1a:0f:30:02:1b:ab:76:cb:4f:
90:1d:39:db:2d:f6:d9:7d:f5:56:10:ef:78:d0:35:57:b0:7f:
60:08:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net