Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/PSAVpGqbLcX36nvl195Ht9uZru0.roa
File: PSAVpGqbLcX36nvl195Ht9uZru0.roa (raw, json)
Hash identifier: zB4ZQEbAnrwd223bn2HnWhFXbaVVIUWcshlHHT8Vv9g=
Subject key identifier: 3D:20:15:A4:6A:9B:2D:C5:F7:EA:7B:E5:D7:DE:47:B7:DB:99:AE:ED
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019424B3A620C2904A9618ED0B95F52C183C
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/PSAVpGqbLcX36nvl195Ht9uZru0.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29522
IP address blocks: 94.152.0.0/16 maxlen: 24
94.152.254.0/24 maxlen: 24
94.152.255.0/24 maxlen: 24
185.11.100.0/22 maxlen: 24
185.140.120.0/22 maxlen: 24
194.60.251.0/24 maxlen: 24
195.149.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a6:20:c2:90:4a:96:18:ed:0b:95:f5:2c:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d2015a46a9b2dc5f7ea7be5d7de47b7db99aeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:35:30:9d:2d:b4:c7:85:0f:d6:fb:18:90:
83:46:77:fa:1f:16:79:53:67:a0:c9:ca:17:27:62:
51:35:5b:f4:a9:5b:52:6c:7a:63:5f:e1:f9:93:76:
1e:a3:05:84:b9:bd:84:ba:9a:15:1f:0a:00:fa:25:
4d:d0:ac:64:8e:bf:e1:7e:bf:ee:c3:85:ea:f3:ad:
bd:11:b1:90:9a:81:0b:b0:d1:8b:8b:70:bf:63:87:
f1:1c:59:44:87:3a:1c:dc:6e:97:75:48:57:cc:43:
df:7e:41:8d:29:4d:e5:12:40:e1:21:25:8f:d3:d7:
90:87:7d:ec:7a:29:f2:66:d1:0d:5f:9c:2e:7e:93:
7e:a7:14:48:3d:72:42:a8:97:9d:b3:90:af:a7:e9:
ad:cc:b5:b7:45:c7:f1:e4:11:69:4e:7d:d2:74:32:
6a:b0:69:f6:35:f1:52:64:34:bc:af:78:b9:cd:b5:
1c:65:78:fb:15:61:55:2f:b3:28:63:02:1f:75:e7:
4b:1e:6f:0b:52:15:0e:cb:81:f2:c7:4d:7f:00:e9:
de:2a:fd:78:d3:ca:fd:e4:fb:63:47:89:9a:e4:8a:
0e:da:70:58:f9:c3:60:e6:68:61:0a:cf:37:f8:be:
50:d1:b0:00:f6:a3:86:73:16:f3:60:c9:30:bc:73:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:15:A4:6A:9B:2D:C5:F7:EA:7B:E5:D7:DE:47:B7:DB:99:AE:ED
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/PSAVpGqbLcX36nvl195Ht9uZru0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.152.0.0/16
185.11.100.0/22
185.140.120.0/22
194.60.251.0/24
195.149.224.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:fe:1b:87:e7:02:e1:32:bb:6d:da:7b:cd:5d:f8:b3:8a:38:
3c:59:32:3a:5f:8f:18:2b:c9:65:9f:40:c7:a4:75:54:b0:3a:
19:3b:9e:6d:ee:d2:a5:a4:3d:37:56:52:b7:47:70:97:85:22:
9a:83:05:d7:47:86:cd:43:6b:36:00:82:a3:5d:7d:ff:23:bb:
c3:cc:d9:b5:2b:c3:53:fd:43:17:25:e1:b3:f0:99:21:a8:9e:
0a:c3:c6:23:90:90:76:39:9c:7a:de:f5:ef:d7:85:9a:3e:c0:
8e:de:1c:21:81:ba:1a:ad:bc:89:87:a6:86:55:f5:34:18:08:
bf:8b:b6:3f:3d:70:8d:2a:df:00:4b:ac:19:04:90:5c:00:96:
93:5a:3f:a5:3c:29:d6:6e:c0:93:df:aa:1b:04:57:c2:f7:98:
ad:b8:e8:93:09:91:f7:ce:f0:e4:0f:1c:2f:da:73:f0:0d:9c:
eb:fc:50:a9:24:e8:8a:e6:f9:30:99:d9:83:b2:4e:d6:de:42:
2e:25:5c:27:66:04:fe:77:81:37:9e:82:a6:f5:85:18:35:f4:
eb:8d:11:3d:2f:d6:80:52:4a:82:44:a3:49:47:a0:79:89:b1:
ca:98:43:08:71:d8:e6:0e:d6:99:c8:fd:41:02:08:43:36:4b:
59:d4:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net