Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa
File: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (raw, json)
Hash identifier: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=
Subject key identifier: 0E:62:40:70:73:4B:E6:DB:F4:0D:79:57:BE:90:50:3D:28:F9:B1:0A
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D64D9FC9CB81704A3E2676BAA35A0B
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29667
IP address blocks: 78.130.132.0/22 maxlen: 22
78.130.136.0/22 maxlen: 22
78.130.140.0/23 maxlen: 23
78.130.142.0/24 maxlen: 24
84.22.2.0/23 maxlen: 23
84.22.4.0/23 maxlen: 23
84.22.25.0/24 maxlen: 24
84.22.27.0/24 maxlen: 24
84.22.28.0/24 maxlen: 24
87.116.96.0/20 maxlen: 20
87.118.142.0/24 maxlen: 24
87.118.156.0/22 maxlen: 22
89.25.16.0/22 maxlen: 22
89.25.24.0/21 maxlen: 21
89.25.25.0/24 maxlen: 24
89.25.26.0/23 maxlen: 23
89.25.28.0/22 maxlen: 22
89.25.112.0/21 maxlen: 21
89.25.112.0/22 maxlen: 22
89.25.116.0/23 maxlen: 23
89.25.118.0/24 maxlen: 24
213.145.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4d:9f:c9:cb:81:70:4a:3e:26:76:ba:a3:5a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e624070734be6dbf40d7957be90503d28f9b10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:f6:e6:10:ab:79:29:38:3c:60:58:09:5b:
03:af:ef:14:a7:dd:69:fe:75:bf:4f:de:bd:fb:d1:
62:55:26:87:40:4a:47:72:88:c2:27:72:ee:65:bd:
8c:60:68:71:d9:47:0a:e7:5c:e1:43:1b:15:02:f6:
4e:a6:f8:fb:64:29:d9:01:ea:28:f2:bd:a5:13:8e:
02:29:bf:10:e6:c7:66:b3:58:16:df:a3:4e:37:3e:
a6:f2:15:30:74:20:79:5b:e3:3c:35:cb:27:09:d0:
20:07:9c:7d:69:38:57:82:8a:cb:c0:94:58:b9:e8:
11:3b:91:93:bc:cb:62:ef:22:b5:0c:f1:6d:76:30:
2a:c4:cc:10:ce:a3:68:70:92:c2:81:f3:db:0f:01:
29:4e:cb:89:3e:32:15:a1:0d:9f:a7:c5:58:ed:e7:
02:52:80:8b:44:64:89:92:85:e5:9f:a5:83:a8:24:
6e:65:70:0c:2b:2b:52:08:fe:f3:e1:da:fc:c3:20:
ec:ca:4f:63:f4:35:39:30:a4:c7:b2:4c:ba:c7:a5:
28:89:c5:48:d6:42:77:ab:5a:f8:f2:72:f6:87:b5:
ac:99:96:3f:02:68:d5:f2:14:d4:6b:3e:62:96:74:
fc:ae:cf:e9:fa:8d:4b:ae:80:17:4d:ff:3b:1b:3e:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:40:70:73:4B:E6:DB:F4:0D:79:57:BE:90:50:3D:28:F9:B1:0A
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.132.0-78.130.142.255
84.22.2.0-84.22.5.255
84.22.25.0/24
84.22.27.0-84.22.28.255
87.116.96.0/20
87.118.142.0/24
87.118.156.0/22
89.25.16.0/22
89.25.24.0/21
89.25.112.0/21
213.145.105.0/24
Signature Algorithm: sha256WithRSAEncryption
be:18:c1:b1:6d:45:6f:5b:ec:62:ba:38:48:0a:04:b6:ee:07:
77:80:aa:21:67:f8:88:9a:d1:40:95:6a:73:2e:5a:6d:e8:b6:
6a:7c:c0:2b:04:9b:98:79:28:4b:b3:3b:96:5c:56:9c:4b:6e:
df:a5:71:2f:74:43:fc:2d:a0:80:d8:67:10:0a:7d:cd:55:d3:
cf:60:24:8c:7a:b6:0a:56:10:7b:12:8d:5a:fc:3a:19:0c:94:
24:8d:20:f9:07:20:a9:4d:db:39:b3:b1:2b:cf:f8:e2:c2:fd:
e4:4c:de:6b:f6:30:14:1f:70:56:fe:57:98:7d:3f:a8:6b:50:
75:8e:22:01:c2:e0:e8:48:84:03:29:3b:d8:5f:cf:dc:e8:b7:
2f:39:15:86:03:8b:7e:8f:86:2b:3a:1c:97:c6:e4:44:73:40:
ae:4e:48:b2:6b:43:2c:43:46:fd:2b:5a:e7:7d:60:1c:6d:4d:
c1:f5:17:da:cc:a0:cd:4a:b4:95:b2:25:e5:76:f0:38:67:3d:
1e:c2:b9:4e:18:94:15:6d:1a:b3:06:18:6d:6f:f5:72:80:4b:
8b:b1:83:11:74:42:b9:b7:d2:5b:88:06:f5:70:ce:6c:2d:66:
e5:a7:71:6d:91:b6:5f:0c:5d:3b:13:50:29:80:e8:c3:23:11:
bf:90:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net