Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/peuDJmf6zM6U61VIEEyh_v80gok.roa
File: peuDJmf6zM6U61VIEEyh_v80gok.roa (raw, json)
Hash identifier: Wogbvdr+avtRUDbVrcdv31PQBFMPbgQzhKkNxPsoSfU=
Subject key identifier: A5:EB:83:26:67:FA:CC:CE:94:EB:55:48:10:4C:A1:FE:FF:34:82:89
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 019420D5AB672FE38D521117E808F1ED9F66
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/peuDJmf6zM6U61VIEEyh_v80gok.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202293
IP address blocks: 88.151.118.0/24 maxlen: 24
91.229.148.0/22 maxlen: 22
195.245.96.0/22 maxlen: 22
195.245.96.0/24 maxlen: 24
195.245.97.0/24 maxlen: 24
195.245.98.0/24 maxlen: 24
195.245.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ab:67:2f:e3:8d:52:11:17:e8:08:f1:ed:9f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5eb832667faccce94eb5548104ca1feff348289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:92:1f:b1:11:6d:4c:e3:f6:7d:4c:26:05:
60:a0:5c:73:e4:93:71:6d:5e:41:6e:f9:fa:7a:a6:
0c:cb:6b:0e:8a:9d:94:51:c1:3f:0f:32:e8:ce:d1:
65:b1:8c:81:2c:5b:5a:67:68:6f:5c:89:eb:9b:23:
0c:e6:ac:af:ce:c0:de:25:15:95:13:dd:06:cd:51:
85:91:a4:18:bf:da:07:6d:e1:6d:bc:39:8f:f3:9e:
81:80:45:52:98:8a:a7:21:9d:63:8d:a0:21:e8:27:
da:08:15:6e:ed:a4:37:36:3f:d6:47:3e:6d:cc:4a:
bb:a3:f4:56:fe:cb:98:ac:d7:06:f7:42:08:ab:8f:
6a:af:1e:01:2e:34:57:75:9e:28:76:6b:a9:3c:30:
47:8c:54:7f:e4:47:e6:0b:7d:1f:5f:f3:4d:1d:f9:
e9:fe:17:55:2b:04:e5:2c:9c:e6:a9:d4:4c:a7:1a:
94:e8:ec:1c:54:65:3c:d9:97:51:02:7f:b6:df:68:
81:5b:a7:ca:7f:c2:99:b4:85:d6:b3:c8:34:0c:95:
a4:7a:54:9f:51:91:20:a7:f2:ab:3c:ba:9c:ee:9f:
e7:7e:10:8b:a8:c4:ed:76:5b:a8:c4:34:d5:ac:39:
70:d0:c5:66:74:e9:b0:d9:22:3d:4d:9c:76:3a:37:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EB:83:26:67:FA:CC:CE:94:EB:55:48:10:4C:A1:FE:FF:34:82:89
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/peuDJmf6zM6U61VIEEyh_v80gok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.118.0/24
91.229.148.0/22
195.245.96.0/22
Signature Algorithm: sha256WithRSAEncryption
24:fd:4a:19:d7:ca:50:9c:7c:00:22:ba:fd:8a:af:d4:63:57:
70:51:bc:0d:eb:69:f6:35:7b:90:bc:31:e8:5b:af:3b:ae:dd:
06:d9:ca:e2:04:2c:67:17:bf:8e:21:54:ea:9b:a2:5f:74:65:
cf:ce:90:95:95:d2:66:b8:69:eb:58:d1:6b:d4:a1:05:d6:eb:
9f:c9:93:82:41:52:4c:80:56:c4:44:3c:4f:96:d3:da:90:d0:
d1:db:44:5f:6a:d8:a2:21:b5:88:ff:ec:85:c7:60:fa:69:43:
c6:4d:04:e0:28:b8:46:df:ee:ab:c3:3f:7a:6a:12:1a:90:ed:
79:ac:0d:44:36:03:18:43:13:06:1e:16:03:9f:9b:b8:e6:a5:
eb:df:b7:f3:1b:8d:8c:b8:b5:f3:f9:02:20:ca:9a:96:a8:3b:
6b:a9:ea:f6:f3:47:a5:b6:f5:92:f8:c6:93:ee:da:03:2d:1c:
dc:d6:3d:5e:ea:14:a4:1c:e2:bc:4c:96:94:db:68:4b:c4:0e:
8f:e0:e5:f1:bf:43:e9:35:a4:2e:29:7b:af:f2:a5:ed:b9:75:
68:53:76:e0:91:00:b0:fe:b2:9f:28:80:36:fb:06:b6:05:93:
67:b3:15:a6:b6:eb:66:30:64:72:26:ac:28:54:54:e5:47:22:
bc:97:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net