Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/rR9_uvw4xytf2agupQ_iUhFHPXQ.roa
File: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (raw, json)
Hash identifier: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=
Subject key identifier: AD:1F:7F:BA:FC:38:C7:2B:5F:D9:A8:2E:A5:0F:E2:52:11:47:3D:74
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 019425FC91D4A6BA20B45AF5B08238E1BC66
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/rR9_uvw4xytf2agupQ_iUhFHPXQ.roa
Signing time: Thu 02 Jan 2025 07:48:16 +0000
ROA not before: Thu 02 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31449
IP address blocks: 185.57.128.0/22 maxlen: 22
185.57.128.0/23 maxlen: 23
185.57.130.0/23 maxlen: 23
217.112.176.0/20 maxlen: 20
217.112.176.0/21 maxlen: 21
217.112.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:91:d4:a6:ba:20:b4:5a:f5:b0:82:38:e1:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Jan 2 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad1f7fbafc38c72b5fd9a82ea50fe25211473d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:93:d4:66:5c:65:69:32:b1:3c:ff:4d:f8:
53:a6:08:4b:c2:21:cf:00:f4:65:ef:7e:49:69:b3:
af:aa:26:7b:82:78:04:b2:b5:80:c6:89:fb:de:67:
52:5d:fa:53:ec:ad:8f:75:9d:a0:5d:bf:94:8b:00:
fc:04:60:6e:ec:e5:fe:6e:d1:a0:99:7c:3d:9f:25:
f9:e0:96:61:8d:0c:dc:0a:26:d4:49:e5:1a:ad:7e:
b0:b1:d2:4a:da:ec:d1:25:32:70:42:5c:cd:53:8c:
0c:1e:a3:54:66:fa:dd:14:4b:a6:74:33:b7:1a:c9:
45:f8:7c:e3:f8:aa:4c:a5:56:db:50:c3:49:f3:32:
5e:3b:69:d8:b2:ee:98:1c:18:9d:76:ac:3e:ed:4d:
4a:66:33:9b:a5:f8:53:1b:ec:30:d0:54:b4:3d:36:
80:2d:9a:3e:b6:9b:f7:b3:61:0f:8b:d8:45:b9:04:
28:76:60:11:dc:13:27:10:19:23:36:c6:df:86:10:
c2:c8:14:91:33:1c:c6:10:4f:98:40:32:a8:73:55:
53:da:e1:d9:1a:d2:cc:90:55:8c:7d:91:0a:c3:d3:
8d:98:67:14:c5:93:88:3e:8f:9a:9d:c4:cd:68:9c:
07:fd:e1:3a:da:b1:15:e7:04:14:42:b2:b8:ae:20:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1F:7F:BA:FC:38:C7:2B:5F:D9:A8:2E:A5:0F:E2:52:11:47:3D:74
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/rR9_uvw4xytf2agupQ_iUhFHPXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.128.0/22
217.112.176.0/20
Signature Algorithm: sha256WithRSAEncryption
13:03:bf:5d:19:78:6e:3b:09:d4:70:07:40:e3:ed:0e:da:d1:
18:c6:8c:1f:e3:1e:80:9b:a2:a8:87:a6:fe:72:b1:91:11:3e:
0f:e9:0f:e9:fa:06:26:4b:13:b8:0d:82:1c:a5:0e:81:21:0c:
fe:33:de:8e:56:14:d5:27:2d:4b:85:ba:51:a3:fc:30:08:37:
2d:63:a7:47:4a:fb:1d:64:46:a9:21:62:1f:61:cb:90:65:52:
7e:1e:db:38:1d:1f:5e:85:fe:c8:e4:7a:03:f2:eb:35:87:42:
50:d0:20:93:12:0b:19:f3:55:a4:66:36:ae:3e:8c:ab:30:66:
ea:c0:20:40:35:d1:aa:75:73:de:f5:71:3e:70:c1:78:c8:ef:
94:30:71:f7:50:ac:a5:93:c3:8d:b1:f3:58:f5:28:2a:d0:10:
7d:d5:7c:18:0e:5f:ba:bb:20:b5:49:94:b8:e6:f3:e6:9c:15:
a4:19:ea:5d:35:a5:43:ab:ba:16:e3:a4:48:57:66:f1:7a:f6:
2e:2b:f9:c4:cd:0b:a5:e5:6f:35:c0:71:a0:55:63:9e:35:f3:
ba:7f:02:bf:20:4f:e8:e6:ce:d9:1b:00:b8:a7:a4:84:cf:e9:
59:bc:e4:2f:c0:d4:32:8f:45:fc:ab:2c:b8:0d:4e:c8:87:ff:
b1:ed:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net