Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7wlT36Esu-o-4cmmZXBHSdWLWlA.roa
File: 7wlT36Esu-o-4cmmZXBHSdWLWlA.roa (raw, json)
Hash identifier: dIRot8+zAicVRIfRgPDXkIvqo4dMUrKzIhNFl+x6cLM=
Subject key identifier: EF:09:53:DF:A1:2C:BB:EA:3E:E1:C9:A6:65:70:47:49:D5:8B:5A:50
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01942748383CD7882481A2440BFD9784AE3F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7wlT36Esu-o-4cmmZXBHSdWLWlA.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39640
IP address blocks: 167.160.31.0/24 maxlen: 24
178.19.32.0/23 maxlen: 23
185.226.195.0/24 maxlen: 24
201.49.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:38:3c:d7:88:24:81:a2:44:0b:fd:97:84:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef0953dfa12cbbea3ee1c9a665704749d58b5a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:a5:9a:19:23:bf:7c:03:52:a6:fa:3a:68:
34:40:64:3d:6c:f5:b4:d5:84:84:ac:47:0f:e6:84:
85:82:4b:1e:8d:21:db:b8:bf:29:18:16:c8:78:8a:
4d:10:b9:ef:54:10:f1:d3:9d:84:e2:45:97:23:a0:
eb:9f:92:da:01:3c:f6:4b:51:54:58:cd:68:5a:12:
29:a6:9a:8a:f7:58:c2:67:a9:dd:8a:c6:22:63:00:
9d:83:8b:74:19:4a:83:ce:95:85:5d:03:69:5f:8e:
0c:8c:c6:51:8c:a1:28:4d:d5:55:51:b0:c8:7b:ad:
f6:ad:4c:b0:81:6b:89:cc:2b:b9:ea:09:c3:71:cb:
23:b1:6d:77:7c:09:0c:fd:57:f7:bc:a7:97:7b:7e:
53:1c:12:18:5f:61:58:c1:d4:a6:d9:4c:5c:e6:e2:
58:c4:e3:5c:75:50:4d:94:72:08:3a:9e:dc:3a:cf:
62:f1:c9:f3:2a:49:3d:e7:f7:dc:a0:85:1c:10:da:
cc:78:ac:aa:dd:e5:3d:99:ee:a2:8f:2c:55:39:da:
53:76:8a:d6:19:38:6a:58:18:53:96:ca:dd:83:17:
42:bc:78:83:13:78:ba:82:14:51:19:ae:60:a5:f8:
85:a0:e1:64:6a:57:cc:f6:c5:49:d2:83:70:c2:91:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:09:53:DF:A1:2C:BB:EA:3E:E1:C9:A6:65:70:47:49:D5:8B:5A:50
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7wlT36Esu-o-4cmmZXBHSdWLWlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.31.0/24
178.19.32.0/23
185.226.195.0/24
201.49.188.0/22
Signature Algorithm: sha256WithRSAEncryption
85:87:25:a2:c7:bb:b0:c1:94:af:96:3f:a2:1d:9a:fd:0e:fb:
41:9e:5b:e7:19:2d:be:7c:69:76:c5:72:60:f3:3f:39:29:db:
3a:b4:14:43:f7:bd:21:a9:e7:73:24:6f:1a:33:2d:8f:b5:27:
f7:31:e4:af:78:5b:12:c2:8e:40:da:f7:22:79:e7:4f:c2:8a:
a0:87:0e:21:4f:28:67:3e:1e:30:e0:36:82:bf:df:4b:bc:43:
27:68:8b:a0:fe:3f:d9:41:f9:53:f8:5f:82:b1:05:24:69:ba:
58:d9:1e:b3:3c:09:a6:ee:24:2e:f2:0d:4c:92:b5:4c:ce:c4:
74:12:31:74:4a:9c:01:51:62:b6:36:c9:dc:0e:c8:72:cc:74:
12:ca:a8:24:36:d5:33:7a:e3:4d:f5:bb:4a:3c:9f:2c:73:94:
b6:2d:d4:d6:04:a3:3e:be:17:9f:46:75:8f:23:4c:05:d5:d2:
da:17:5e:03:17:cf:e6:bd:df:bb:68:c0:08:f5:63:fc:ef:69:
a2:5c:12:2b:25:47:6b:2a:0e:b4:78:f6:9e:e7:ed:ae:25:b7:
5e:15:3b:af:4c:f6:5c:bc:91:8b:92:fa:14:84:04:87:31:d8:
d3:18:91:1b:50:f7:bc:69:48:09:3a:4c:f6:af:a0:dd:68:47:
5f:6c:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:08:20 2025 by rpki-client on console.sobornost.net