Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7LuR1MvC2BKXveSKpYoqe6RGZaA.roa
File: 7LuR1MvC2BKXveSKpYoqe6RGZaA.roa (raw, json)
Hash identifier: BD4V2E5KmJ3X4uhZSMnpmA/QO7DHGpM6LbtTBXXsvQY=
Subject key identifier: EC:BB:91:D4:CB:C2:D8:12:97:BD:E4:8A:A5:8A:2A:7B:A4:46:65:A0
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01961B036F0D2E7F60EF591EEB53F291FB71
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7LuR1MvC2BKXveSKpYoqe6RGZaA.roa
Signing time: Wed 09 Apr 2025 14:45:31 +0000
ROA not before: Wed 09 Apr 2025 14:45:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.0.0/24 maxlen: 24
144.56.13.0/24 maxlen: 24
144.56.20.0/24 maxlen: 24
144.56.21.0/24 maxlen: 24
144.56.24.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
144.56.28.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:03:6f:0d:2e:7f:60:ef:59:1e:eb:53:f2:91:fb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 9 14:45:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecbb91d4cbc2d81297bde48aa58a2a7ba44665a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:a4:a7:52:55:ba:36:a3:81:cc:86:82:6d:
d5:d3:1a:64:7f:77:a4:64:c5:22:86:f8:f4:da:e2:
38:c4:52:01:54:af:f4:8b:9f:be:fe:4f:92:7e:b2:
f1:af:f8:13:2e:c1:d9:3e:16:e6:44:a6:a8:8d:46:
1a:e5:0b:08:f5:29:71:88:3e:c7:9b:69:94:61:2e:
24:08:01:5c:79:4c:f2:bb:fe:31:5a:b0:34:cd:90:
b1:2a:62:25:9b:39:4f:cf:ea:dd:c4:11:8a:26:b4:
c1:1f:63:89:c5:53:95:96:c3:38:82:97:12:58:4d:
15:88:fb:8a:5a:8c:d8:30:90:60:57:5d:d9:df:73:
08:43:30:e6:df:f8:2f:5d:a0:07:d3:d1:1d:fd:22:
70:f5:4d:d0:3d:1c:40:9a:6f:08:a6:13:b9:c4:80:
7a:a0:62:ab:80:4b:3e:fb:1b:25:a6:32:44:b7:d0:
28:60:ab:c8:ea:19:59:ec:16:cb:c3:0e:d8:87:b3:
f1:44:25:f0:1a:d2:f5:68:06:d5:9d:60:9f:5f:a4:
93:fb:60:55:de:f1:48:09:c4:b1:a1:94:13:bb:12:
38:ae:18:9f:44:db:0b:fa:e6:61:a6:7e:2c:47:7f:
ed:5d:22:ac:36:7f:41:93:9a:2e:5e:39:ed:69:d2:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BB:91:D4:CB:C2:D8:12:97:BD:E4:8A:A5:8A:2A:7B:A4:46:65:A0
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7LuR1MvC2BKXveSKpYoqe6RGZaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.0.0/24
144.56.13.0/24
144.56.20.0/23
144.56.24.0/24
144.56.27.0-144.56.28.255
144.56.31.0/24
144.56.33.0-144.56.34.255
Signature Algorithm: sha256WithRSAEncryption
24:7c:63:50:d7:be:ae:1a:3e:60:c0:14:ff:cc:50:c5:db:51:
f7:c3:b0:72:a3:28:54:a2:d2:f8:0a:c6:fb:16:91:e7:a6:6f:
a5:41:fe:d4:13:4d:11:c5:84:df:64:57:de:a2:24:76:4e:f4:
a1:7a:fd:65:8a:55:70:16:3b:6c:47:cb:f4:74:ba:a3:99:45:
97:97:b1:92:44:f0:73:fc:16:f2:b1:de:9b:ba:b9:8a:57:fe:
61:a6:ab:f2:a2:6e:8e:5d:4e:de:fe:32:1f:ec:c9:18:8f:44:
e0:a0:3a:55:84:a8:49:20:f4:4f:7c:54:dd:74:05:aa:3e:3b:
b7:a7:ae:6b:98:55:60:b8:52:01:84:b7:c5:94:0d:6c:4d:a2:
03:9e:f4:e0:cb:b8:4e:e2:07:9e:8b:93:ae:a5:c5:38:5f:80:
b8:71:d7:33:1c:25:fc:2a:8e:40:af:1e:a7:50:1e:3b:ef:d4:
bf:46:25:de:42:ca:5b:bb:0e:d5:d4:2d:35:f7:39:9a:17:80:
cd:80:f9:23:f4:9a:88:b5:2c:78:9c:11:82:d0:76:21:99:af:
98:88:60:9b:9a:71:5c:bf:72:ba:9a:96:f4:1e:c7:24:4d:d5:
c2:91:49:23:dc:4b:43:ef:0e:d2:f1:1b:da:44:4f:af:25:ee:
30:95:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net