Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/CqiCeQuNX5qYQWUphyM9iUBKOh4.roa
File: CqiCeQuNX5qYQWUphyM9iUBKOh4.roa (raw, json)
Hash identifier: RxNADbHHkDaXqyxPAae3UN8wvqfkoDaWlyxd0mzE4zw=
Subject key identifier: 0A:A8:82:79:0B:8D:5F:9A:98:41:65:29:87:23:3D:89:40:4A:3A:1E
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 0194228DC48B61F60E736047DB6CD27D2ED8
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/CqiCeQuNX5qYQWUphyM9iUBKOh4.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34666
IP address blocks: 81.16.240.0/24 maxlen: 24
81.16.241.0/24 maxlen: 24
81.16.242.0/24 maxlen: 24
81.16.243.0/24 maxlen: 24
81.16.244.0/24 maxlen: 24
81.16.245.0/24 maxlen: 24
81.16.246.0/24 maxlen: 24
81.16.247.0/24 maxlen: 24
81.16.248.0/24 maxlen: 24
81.16.249.0/24 maxlen: 24
81.16.250.0/24 maxlen: 24
81.16.251.0/24 maxlen: 24
81.16.252.0/24 maxlen: 24
81.16.253.0/24 maxlen: 24
81.16.254.0/24 maxlen: 24
81.16.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c4:8b:61:f6:0e:73:60:47:db:6c:d2:7d:2e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aa882790b8d5f9a9841652987233d89404a3a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:f2:42:8a:b1:62:c0:a4:7f:3b:6b:06:57:
e1:ad:3a:0d:58:c9:a5:7f:36:ef:38:69:35:e1:64:
01:e2:e6:bd:a1:1d:4b:73:fa:cb:fe:db:67:7c:61:
5f:23:2f:de:17:93:55:cd:1c:e8:64:f9:46:02:0d:
ed:9c:f2:0d:d6:80:0b:03:7b:3a:93:5a:b1:a5:90:
11:d3:53:07:62:98:74:94:0a:96:d2:41:fd:d5:21:
0f:91:a8:e8:b2:7d:60:3d:09:1d:48:6e:e6:31:15:
e7:dd:a1:c3:ac:a7:71:f7:41:f9:fa:46:77:04:a2:
39:5e:65:15:d2:8d:d0:d1:22:4d:d0:b7:16:ca:f1:
bc:f7:54:2e:0b:fa:b6:06:61:7e:9e:90:55:f5:c6:
4f:79:c8:cd:95:cf:6d:a2:ef:5d:93:47:c6:73:3e:
12:c1:2e:3e:04:d7:1a:73:18:a8:95:59:42:94:02:
6f:55:4b:5e:76:48:b5:ef:ba:5d:9f:a2:ee:08:81:
a5:83:e2:51:34:f5:8a:a3:00:a5:2e:b3:97:01:e8:
53:f8:8b:73:c3:11:a3:19:53:8e:fa:92:6e:16:6a:
c1:e7:a0:7d:78:70:08:81:10:55:92:f5:2a:60:f6:
9d:f9:4f:03:94:82:a4:bf:10:6f:27:41:7b:e2:06:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:82:79:0B:8D:5F:9A:98:41:65:29:87:23:3D:89:40:4A:3A:1E
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/CqiCeQuNX5qYQWUphyM9iUBKOh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:20:84:d8:02:a6:7f:6e:eb:b6:ca:8a:fd:84:6e:f1:77:20:
c2:a5:c5:05:ec:1b:8b:d8:24:cc:fe:ba:7a:6a:80:1e:6e:52:
af:0d:f4:2e:a7:08:f6:e7:0b:c8:04:5b:b7:86:ce:05:74:c6:
f3:50:77:e0:b8:5d:fb:3b:5a:1c:aa:c8:ab:a4:ec:58:f5:15:
e6:bf:e6:42:7c:44:c0:b8:00:db:91:4c:b8:af:cc:65:64:47:
64:cc:d8:a6:d2:d8:c0:af:67:0f:28:08:41:39:95:a0:1d:4a:
d4:7c:00:97:46:23:fc:b3:39:74:cf:80:72:39:15:b8:51:14:
a1:3c:a5:d2:26:fb:21:2c:bd:af:7a:de:f5:c9:7e:0d:02:96:
ef:92:4d:90:92:00:3f:86:4c:4f:05:c7:6c:4d:45:b6:db:50:
84:29:ff:1c:8c:a1:5f:31:fc:c6:18:66:5f:44:0e:32:5a:2e:
df:0f:a9:f9:c7:d1:84:6c:2b:b9:e1:53:6e:87:bd:19:81:9c:
ae:58:c6:06:15:10:fd:23:09:59:41:64:31:a9:16:39:c6:8d:
e1:55:56:50:ed:30:24:1e:e8:32:ca:75:11:dd:07:b6:6c:64:
df:7a:0b:f1:ff:39:22:fc:3f:85:c5:48:d6:3b:9d:e2:ed:30:
d6:4e:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:24 2025 by rpki-client on console.sobornost.net