Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ePbnFFaHTU8NM96UO7nbxeTM2wc.roa
File: ePbnFFaHTU8NM96UO7nbxeTM2wc.roa (raw, json)
Hash identifier: 318WXt1NBms0XTYNW95m9n8XucdzE6Uz0u+dVzohI0s=
Subject key identifier: 78:F6:E7:14:56:87:4D:4F:0D:33:DE:94:3B:B9:DB:C5:E4:CC:DB:07
Certificate issuer: /CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Certificate serial: 0194228DD6A19953FDBED37C5AC6CFCD178A
Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ePbnFFaHTU8NM96UO7nbxeTM2wc.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24776
IP address blocks: 194.2.74.0/24 maxlen: 24
194.3.136.0/24 maxlen: 24
194.29.206.0/24 maxlen: 24
194.187.192.0/22 maxlen: 22
213.161.192.0/19 maxlen: 19
217.25.176.0/20 maxlen: 20
2001:1650::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d6:a1:99:53:fd:be:d3:7c:5a:c6:cf:cd:17:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78f6e71456874d4f0d33de943bb9dbc5e4ccdb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:86:fd:24:79:e5:fd:a5:85:4e:30:2e:89:
ef:ba:78:f1:33:d5:52:99:c3:70:06:61:64:37:83:
97:27:f4:77:f1:bb:a6:01:00:e4:d5:f6:18:89:04:
4b:6c:59:57:b6:79:43:7b:65:76:f1:12:94:1c:74:
f7:79:d7:67:fc:e8:7b:9c:2f:a2:07:ca:a3:28:5a:
4c:ac:c7:6e:b5:2e:40:6f:6a:ce:97:2d:63:9e:f7:
1a:75:7a:07:0b:cc:dc:0b:66:5d:e4:93:51:99:35:
7b:0b:cd:a8:3c:cb:cf:7b:ef:13:6d:f1:8d:1a:9c:
b3:8c:1d:77:58:2e:ee:1a:f8:40:18:b9:8d:91:d2:
3e:79:d3:3c:97:11:c2:73:c8:e0:fe:87:52:72:cc:
aa:32:a8:8b:73:f6:f4:a3:28:43:2b:6f:6e:28:79:
02:86:b1:1c:65:01:7a:a7:ab:4b:f7:75:88:43:fe:
1c:07:7a:62:39:fc:5f:11:03:03:36:51:f1:3a:56:
75:5d:b7:d2:cb:d5:f0:48:f3:5d:03:3c:84:67:8b:
2e:6f:e0:3b:35:dd:f9:1d:76:1b:a3:db:fa:88:14:
c6:22:6e:9b:53:c4:83:d9:56:a5:a9:cf:a8:c6:15:
2c:27:b1:95:39:56:e2:7b:4d:51:0d:92:d2:58:9c:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:E7:14:56:87:4D:4F:0D:33:DE:94:3B:B9:DB:C5:E4:CC:DB:07
X509v3 Authority Key Identifier:
keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ePbnFFaHTU8NM96UO7nbxeTM2wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.2.74.0/24
194.3.136.0/24
194.29.206.0/24
194.187.192.0/22
213.161.192.0/19
217.25.176.0/20
IPv6:
2001:1650::/32
Signature Algorithm: sha256WithRSAEncryption
41:a8:3b:93:eb:d3:70:91:e1:43:29:2c:bd:64:83:2c:5c:40:
71:a5:c9:26:f0:34:b5:c0:da:db:69:85:af:96:fd:b5:2f:51:
22:ae:f7:bd:89:67:d4:61:66:86:9f:13:39:c8:c8:c2:ea:9b:
db:00:14:d8:a2:d3:41:bc:d6:a0:3c:94:cc:49:f0:6e:0e:1b:
d1:b3:34:b6:87:6f:ad:bf:e1:6e:0b:b5:da:7c:d3:b0:c8:ac:
82:80:a4:0b:51:a2:54:2f:da:4d:42:4b:a4:e0:f1:84:ca:8a:
0b:a8:04:14:d9:cd:62:32:90:d2:b8:36:b0:d2:d4:8a:a2:d9:
f7:d4:70:0d:99:9f:b0:c0:e7:aa:81:8b:18:f0:9c:38:94:ab:
81:34:79:cf:cf:53:87:61:f5:e6:a1:ea:3f:0d:55:46:a1:91:
48:e6:71:d9:29:79:b7:1e:a8:33:9f:2f:df:25:91:a3:16:38:
f2:4c:5f:93:73:0c:4a:cf:88:47:05:6f:d9:bc:c4:59:0b:92:
5e:7d:ac:11:ac:4d:04:52:33:d2:1f:d2:3c:11:73:7d:b1:12:
f6:82:74:05:b7:49:54:52:3f:81:37:6d:55:3e:13:4e:a2:ab:
9d:0e:b3:f3:38:84:5f:4c:4f:68:6b:d8:92:05:b6:81:2d:44:
d8:08:44:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net