Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7M4uvN9sxhoPn3aqlvD3scYtJGk.roa
File: 7M4uvN9sxhoPn3aqlvD3scYtJGk.roa (raw, json)
Hash identifier: OmufU6JcmL9dKo1LMsfdtAf23qPN90eSFInQhtTCwb0=
Subject key identifier: EC:CE:2E:BC:DF:6C:C6:1A:0F:9F:76:AA:96:F0:F7:B1:C6:2D:24:69
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01961B714BC2A25732762E8BA330AC777A1D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7M4uvN9sxhoPn3aqlvD3scYtJGk.roa
Signing time: Wed 09 Apr 2025 16:45:31 +0000
ROA not before: Wed 09 Apr 2025 16:45:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 45.150.181.0/24 maxlen: 24
45.150.182.0/24 maxlen: 24
45.150.183.0/24 maxlen: 24
84.51.232.0/24 maxlen: 24
92.51.234.0/24 maxlen: 24
92.51.235.0/24 maxlen: 24
92.51.255.0/24 maxlen: 24
103.210.196.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
155.2.180.0/24 maxlen: 24
155.2.181.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
192.140.220.0/24 maxlen: 24
192.140.221.0/24 maxlen: 24
203.188.165.0/24 maxlen: 24
203.188.181.0/24 maxlen: 24
213.254.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:71:4b:c2:a2:57:32:76:2e:8b:a3:30:ac:77:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 9 16:45:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecce2ebcdf6cc61a0f9f76aa96f0f7b1c62d2469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:3f:7a:00:1c:98:ee:8f:42:01:8e:67:09:
ff:f4:19:b6:89:6a:97:be:4d:d9:6d:6e:8f:e1:07:
39:81:ea:d4:96:c1:c1:d9:e5:6c:9a:51:24:99:1d:
80:29:94:81:8d:2e:7f:57:13:e1:5f:ce:d7:b0:42:
2e:0e:04:e4:1f:f2:b3:c4:ee:c4:55:3e:e3:63:17:
e4:e4:40:30:ec:1f:a6:cf:f0:cf:c7:3e:ac:ef:6a:
3c:50:7c:3d:cb:bf:71:fc:62:32:ba:c8:02:de:94:
26:b4:ed:6e:e8:a3:28:ca:9a:93:cd:d7:a3:9e:71:
a2:b2:0e:11:fa:e4:06:69:b1:31:92:fc:ce:79:5c:
f7:69:dd:6c:65:76:25:8c:b2:60:fd:1e:72:74:91:
f0:b0:dc:75:3e:21:89:28:7e:02:ac:fa:40:7c:02:
85:90:d2:bd:66:96:e9:0b:4f:3c:6a:26:56:40:b2:
1b:d3:89:15:a8:fa:72:0a:5f:c8:90:1a:4a:ec:67:
be:42:39:b3:f4:21:aa:eb:9c:08:d1:a8:91:f7:7d:
d2:ec:db:0c:56:59:4e:89:fd:96:a8:80:40:6b:fa:
a8:24:e4:93:88:7e:f0:e6:a9:71:17:b3:d2:fd:2e:
fd:36:dd:ac:f6:61:70:18:e2:a1:cb:44:62:62:24:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CE:2E:BC:DF:6C:C6:1A:0F:9F:76:AA:96:F0:F7:B1:C6:2D:24:69
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7M4uvN9sxhoPn3aqlvD3scYtJGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.181.0-45.150.183.255
84.51.232.0/24
92.51.234.0/23
92.51.255.0/24
103.210.196.0/24
107.150.166.0/24
155.2.180.0/23
185.161.111.0/24
192.140.220.0/23
203.188.165.0/24
203.188.181.0/24
213.254.160.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ad:38:2b:ff:5c:99:8b:97:42:d1:30:a6:76:79:78:5b:c7:
a8:a7:d1:cf:91:f5:18:7f:6f:19:6a:92:76:ec:9d:4a:3f:c9:
27:d3:f9:25:5d:47:fa:c8:bc:1b:dd:58:a2:d1:f2:46:b1:b6:
6f:a6:0e:6e:92:f7:02:c5:d6:5b:14:ce:d0:1a:e6:0e:b2:ff:
c2:e5:9c:35:e6:66:84:9f:e7:97:ab:9f:61:71:e8:26:23:a4:
09:3a:2b:12:b7:0a:5f:3f:9e:02:0b:f6:67:8a:40:e6:59:b0:
21:15:24:df:4e:64:3b:b5:c4:c1:29:35:32:8a:cd:7b:6f:0f:
4a:27:d8:4b:db:d7:42:86:65:79:34:86:47:fb:d3:8e:b1:05:
e9:8f:84:a6:2a:f5:81:c9:ee:31:59:92:ea:95:0e:ae:f3:ca:
ef:61:b7:2f:a4:90:09:35:77:ef:4f:fc:c5:d2:b0:5c:3e:b2:
61:b9:3a:05:3e:b1:7a:66:68:ea:c2:ed:74:2a:a3:be:12:8b:
d4:b5:93:8b:fd:7a:e7:74:c1:25:62:f1:86:07:b7:af:f6:f7:
90:bd:e3:4b:a9:06:55:c3:5b:ba:1b:a2:0e:93:26:6c:7f:c8:
da:7d:dd:75:fe:1f:98:ac:cb:ea:80:9a:91:dc:29:9e:02:1e:
16:e7:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net