Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/VTMTtjqH-zixo9hQexyKWnuO0p4.roa
File: VTMTtjqH-zixo9hQexyKWnuO0p4.roa (raw, json)
Hash identifier: QpOOm2VlJ9G/CZEjnwWuM3L+t5sPw22wtkcRl/OMgAk=
Subject key identifier: 55:33:13:B6:3A:87:FB:38:B1:A3:D8:50:7B:1C:8A:5A:7B:8E:D2:9E
Certificate issuer: /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial: 019420685D44AEC14CE8E373130080E2BF78
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/VTMTtjqH-zixo9hQexyKWnuO0p4.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50266
IP address blocks: 5.132.0.0/17 maxlen: 24
31.201.0.0/16 maxlen: 24
37.143.80.0/21 maxlen: 24
85.144.0.0/15 maxlen: 24
85.146.0.0/17 maxlen: 24
85.146.128.0/18 maxlen: 24
185.35.112.0/22 maxlen: 24
185.180.148.0/22 maxlen: 24
195.191.16.0/23 maxlen: 24
2a02:4240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5d:44:ae:c1:4c:e8:e3:73:13:00:80:e2:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553313b63a87fb38b1a3d8507b1c8a5a7b8ed29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:a4:46:f7:dd:27:f2:7c:f1:40:f7:aa:1a:
05:ce:2a:af:59:82:83:e8:10:a3:28:23:d1:e4:f9:
36:ee:e7:a9:67:e7:56:a9:3a:c1:59:2c:28:ab:9a:
46:0b:a2:5a:89:5b:58:b7:f1:4a:48:1d:3b:c5:4a:
8a:a7:10:7e:a0:e2:00:38:0f:c0:d5:dc:89:c5:12:
62:89:43:83:64:75:51:75:ac:61:ac:f9:2e:6d:86:
eb:2d:a4:ac:6c:d3:f4:02:2d:9e:f9:23:58:14:d1:
dc:81:22:69:1c:4c:4f:f8:36:ea:1c:89:3a:a4:31:
23:66:ce:bb:2c:29:4c:f0:dd:00:39:eb:09:98:84:
16:1c:b4:64:f2:09:ff:85:30:3c:3a:44:dd:01:d5:
93:34:fb:1c:58:ca:13:47:cb:60:42:d4:2b:87:6e:
f5:8b:16:5d:16:63:32:40:8a:61:ce:b4:3b:d4:30:
da:5b:bc:45:c5:a2:d6:a4:e0:82:11:e9:d5:3d:03:
f7:81:f7:75:46:4c:53:b7:df:39:50:48:51:55:7e:
d2:2a:6c:c1:40:de:a0:d2:bf:ac:d4:7e:06:c1:61:
03:39:f3:59:ff:36:6b:5d:dc:68:ce:1c:42:88:4b:
62:d8:b5:17:87:31:e4:54:5f:07:42:1a:10:17:7f:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:13:B6:3A:87:FB:38:B1:A3:D8:50:7B:1C:8A:5A:7B:8E:D2:9E
X509v3 Authority Key Identifier:
keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/VTMTtjqH-zixo9hQexyKWnuO0p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.132.0.0/17
31.201.0.0/16
37.143.80.0/21
85.144.0.0-85.146.191.255
185.35.112.0/22
185.180.148.0/22
195.191.16.0/23
IPv6:
2a02:4240::/32
Signature Algorithm: sha256WithRSAEncryption
59:e6:1e:cd:1e:28:d2:ed:c9:78:b6:6b:c6:3c:a8:e6:3e:cb:
13:45:ac:b1:ae:d3:f5:e3:30:00:1e:94:6e:d0:55:f2:1a:74:
ef:5d:75:e4:89:d8:be:82:c0:1c:4e:ad:50:51:6d:89:a4:57:
97:4f:21:6d:87:85:95:1f:93:ec:7b:f8:47:f8:5f:c5:64:a3:
1c:fa:e2:8f:09:3b:74:ab:12:38:5d:cd:ac:c0:ca:7d:29:74:
d2:db:4a:fb:42:f5:29:f2:f1:c6:10:d0:46:8b:8c:93:bc:3a:
e6:56:b6:c1:c8:ff:94:84:85:21:b9:f7:a8:4a:4c:5d:01:2a:
1a:ff:c9:9f:79:b2:6e:c5:e0:85:48:a7:6b:6e:fc:ae:10:28:
12:18:c2:41:11:fd:51:6d:fb:95:b6:0e:5a:a9:1a:cf:a8:63:
97:9a:e0:7a:10:ab:be:8f:92:a8:64:67:60:15:b1:aa:82:a9:
e3:4e:e6:6e:34:0f:68:27:b7:a9:c7:ff:a9:b3:b0:0f:5a:30:
3c:24:c0:a8:df:0c:e3:77:14:19:40:72:ee:14:78:4c:0c:dc:
4c:f3:1f:aa:0a:52:1f:26:2e:33:0d:2c:77:12:35:2b:ff:fe:
04:c4:95:60:60:9c:9c:00:a4:7c:09:19:f1:09:b3:67:02:c4:
7c:01:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net