Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EIupxuoq_HOkoMih8q8EdJlk0Wo.roa
File: EIupxuoq_HOkoMih8q8EdJlk0Wo.roa (raw, json)
Hash identifier: pIxxwuGPQpFPwHVERQ/YA5DkXiImYo3mtVUU2xsUEf0=
Subject key identifier: 10:8B:A9:C6:EA:2A:FC:73:A4:A0:C8:A1:F2:AF:04:74:99:64:D1:6A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0195ED38610FB5F406163B5FD97715CD4E2C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EIupxuoq_HOkoMih8q8EdJlk0Wo.roa
Signing time: Mon 31 Mar 2025 17:20:49 +0000
ROA not before: Mon 31 Mar 2025 17:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213355
IP address blocks: 45.129.196.0/24 maxlen: 24
88.214.48.0/24 maxlen: 24
88.214.49.0/24 maxlen: 24
88.214.50.0/24 maxlen: 24
193.176.20.0/24 maxlen: 24
193.176.21.0/24 maxlen: 24
193.176.22.0/24 maxlen: 24
193.176.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:38:61:0f:b5:f4:06:16:3b:5f:d9:77:15:cd:4e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 31 17:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=108ba9c6ea2afc73a4a0c8a1f2af04749964d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:a0:26:e7:43:b5:a9:d1:8f:7c:76:6d:89:
e1:b5:8f:02:f5:ba:66:1f:f2:98:c2:23:f1:d8:5b:
9f:1b:59:ab:9c:9e:d5:cb:62:e2:4b:92:7a:91:a1:
67:8c:95:21:f2:d4:59:00:27:62:b6:3f:cf:59:2a:
d4:35:ed:db:46:68:2a:d2:57:5e:6e:11:0d:50:03:
8a:39:6c:fb:d1:54:df:0d:85:23:17:d4:92:b6:04:
da:43:67:dc:e3:32:87:4a:dd:2f:05:71:ed:a1:7b:
c2:ce:06:ff:c8:cf:5f:40:d3:c7:b2:18:3e:49:f0:
ba:42:cb:0d:cd:37:02:f1:1c:a8:fd:e5:ba:98:5c:
13:e5:0b:f8:a8:ae:ed:54:a0:fe:e7:6d:e8:43:a1:
2e:9c:b0:7f:3f:52:95:c4:91:e0:a7:d7:ec:88:b3:
11:6f:63:46:47:f8:cf:33:6b:c8:5d:b7:a3:2f:d5:
2b:41:a1:0d:04:e1:90:64:6d:f8:cf:f6:f5:79:80:
4e:03:67:d6:2f:42:3b:f9:b6:cb:5f:39:c8:1e:7e:
ed:24:b1:19:eb:fa:ca:e0:cb:bb:5a:ea:d8:60:6d:
35:bf:37:15:12:0c:71:75:82:c3:2d:f7:4b:95:84:
67:e8:e8:70:1a:25:c0:f6:d8:89:0f:5c:a3:32:35:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:A9:C6:EA:2A:FC:73:A4:A0:C8:A1:F2:AF:04:74:99:64:D1:6A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EIupxuoq_HOkoMih8q8EdJlk0Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.196.0/24
88.214.48.0-88.214.50.255
193.176.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:1e:e0:50:e6:c9:d9:e6:5e:01:2a:1b:8d:87:09:5c:5a:9a:
36:6c:15:59:54:2b:81:b4:be:f0:c2:63:5a:23:48:66:c4:f5:
5d:23:5a:24:7f:8c:d0:62:96:fc:1b:7b:d8:6a:05:fd:d1:6d:
33:ff:33:5d:db:27:0f:67:20:24:f8:58:1c:7a:af:03:e8:43:
7d:ca:08:8f:08:24:d6:31:68:ac:da:4b:16:3a:ea:c7:ac:a5:
be:8a:51:e3:4e:17:6a:0c:a0:42:f8:fc:61:bd:bf:5f:2c:d7:
ce:71:e9:18:d0:6a:dc:2e:eb:fc:eb:8b:75:36:de:5a:41:80:
47:22:b5:89:70:ba:28:ef:6b:8a:3b:96:ea:b6:2a:7c:5d:5f:
6b:3e:4d:3d:a0:44:42:d5:c2:99:11:6e:58:60:6f:92:08:38:
08:aa:28:c9:03:64:b2:2d:2c:d5:0e:a6:8f:47:86:1d:50:07:
da:fa:ba:8d:3f:39:3c:02:39:06:29:f1:09:7f:12:a5:43:6f:
77:e5:a8:9c:b4:54:15:c6:71:f4:9a:d5:d7:bf:6f:c2:7f:e5:
f0:fc:81:ab:e4:77:4f:60:23:95:96:44:59:96:e4:3e:3e:df:
ba:14:f5:77:c6:cd:cd:24:80:61:6e:42:c9:65:f7:d1:64:5e:
c4:36:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:52:45 2025 by rpki-client on console.sobornost.net