Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/PHALUzcgKSrWpp9PLu5bWuqYals.roa
File: PHALUzcgKSrWpp9PLu5bWuqYals.roa (raw, json)
Hash identifier: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=
Subject key identifier: 3C:70:0B:53:37:20:29:2A:D6:A6:9F:4F:2E:EE:5B:5A:EA:98:6A:5B
Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial: 019426D9772305BDA88BAE330445468A8013
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/PHALUzcgKSrWpp9PLu5bWuqYals.roa
Signing time: Thu 02 Jan 2025 11:49:33 +0000
ROA not before: Thu 02 Jan 2025 11:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24703
IP address blocks: 176.111.48.0/23 maxlen: 23
176.111.48.0/24 maxlen: 24
176.111.49.0/24 maxlen: 24
176.111.57.0/24 maxlen: 24
176.111.58.0/23 maxlen: 23
176.111.58.0/24 maxlen: 24
176.111.59.0/24 maxlen: 24
176.111.60.0/22 maxlen: 22
176.111.60.0/24 maxlen: 24
176.111.61.0/24 maxlen: 24
176.111.62.0/24 maxlen: 24
176.111.63.0/24 maxlen: 24
193.111.8.0/23 maxlen: 23
193.111.8.0/24 maxlen: 24
193.111.9.0/24 maxlen: 24
195.128.16.0/22 maxlen: 22
195.128.16.0/24 maxlen: 24
195.128.17.0/24 maxlen: 24
195.128.18.0/24 maxlen: 24
195.128.19.0/24 maxlen: 24
195.234.212.0/22 maxlen: 22
195.234.212.0/24 maxlen: 24
195.234.213.0/24 maxlen: 24
195.234.214.0/24 maxlen: 24
195.234.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:77:23:05:bd:a8:8b:ae:33:04:45:46:8a:80:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Validity
Not Before: Jan 2 11:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c700b533720292ad6a69f4f2eee5b5aea986a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:db:41:21:e8:52:1e:e1:e0:00:e1:e2:d5:
ab:dd:22:be:fe:2a:32:07:a1:0c:fd:7d:eb:50:60:
23:8a:14:44:f9:f1:c9:7f:93:b2:9d:6a:c9:b4:eb:
8c:73:87:f5:4f:5a:5b:28:be:35:2c:29:70:4e:be:
58:46:f1:e3:1e:cd:0e:b1:aa:46:68:dd:7d:a1:27:
14:11:bb:c5:4d:c0:ed:a4:8e:9b:45:1a:87:42:90:
0e:dd:fc:5c:b7:83:16:24:57:17:84:f3:26:b2:27:
af:a3:cd:b6:34:23:ea:9f:c6:84:cd:e0:bd:3b:49:
4c:22:fa:de:da:fc:de:04:17:d7:d3:19:0b:69:98:
9f:6f:05:33:3b:d7:a5:81:f1:73:23:a9:21:24:a8:
d4:0f:4b:32:dd:c3:98:cc:1c:bf:b5:d6:f6:e4:bb:
e5:84:c2:d2:ce:4b:42:9a:57:77:7c:5e:65:47:79:
4d:1b:0e:94:08:fc:65:e6:a6:b2:b2:d1:be:86:97:
ad:7e:b7:94:bb:b2:e2:27:cd:8b:3e:65:26:a3:80:
0a:96:35:c1:b5:ad:85:58:26:29:3f:dd:25:43:13:
43:c3:43:34:6c:c7:a4:83:06:e6:eb:b8:60:d8:23:
53:2d:51:f9:64:28:7b:9e:4b:99:b7:4d:99:b6:84:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:0B:53:37:20:29:2A:D6:A6:9F:4F:2E:EE:5B:5A:EA:98:6A:5B
X509v3 Authority Key Identifier:
keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/PHALUzcgKSrWpp9PLu5bWuqYals.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.48.0/23
176.111.57.0-176.111.63.255
193.111.8.0/23
195.128.16.0/22
195.234.212.0/22
Signature Algorithm: sha256WithRSAEncryption
52:0e:27:08:5c:18:9a:2c:28:f7:b2:ee:d6:01:ad:51:32:96:
a0:9f:86:c5:cc:d9:08:eb:f4:57:3e:5e:97:b8:a5:42:74:89:
67:a1:b8:a0:a9:78:61:c4:c5:b6:81:28:7f:ee:09:4b:31:1f:
2b:58:8d:e1:db:79:51:f7:64:e6:41:86:a3:05:85:1e:4f:4d:
7d:26:7b:d3:f3:d3:34:21:9f:44:95:3e:6d:14:4c:62:ed:71:
9b:a9:4d:f8:a7:ec:66:5a:1d:f7:92:c8:fe:d0:be:ad:e1:68:
86:ab:8d:29:d8:d6:34:2c:0f:1c:b8:78:39:00:34:88:77:0d:
22:21:8c:51:a7:13:e4:46:a5:51:d8:57:31:7b:76:68:42:c3:
2c:57:1f:52:33:10:75:b8:22:6b:10:cd:8d:0e:21:93:82:39:
2d:da:d0:f7:9c:58:1a:88:24:94:2a:e9:b8:b2:58:13:12:b2:
02:a5:09:f8:dd:98:f8:0c:05:01:ca:c5:e1:96:c7:73:1a:24:
b2:77:66:1a:72:18:9d:56:8f:4f:ac:51:83:94:a3:c0:45:48:
ba:e3:6e:f5:ae:fa:24:18:c0:fa:8e:96:f6:6e:01:c7:2c:37:
22:f8:2f:72:52:28:84:9f:76:ba:f0:4c:a4:09:0a:dd:ae:ac:
9e:16:f5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net