Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/rOX9zRwObaYZKZTR0WDKGvQYCI8.roa
File: rOX9zRwObaYZKZTR0WDKGvQYCI8.roa (raw, json)
Hash identifier: AVl8Cu7AhfVM1Wh1VdzrltPVEMOUXlEEy7ZTpT+wzAA=
Subject key identifier: AC:E5:FD:CD:1C:0E:6D:A6:19:29:94:D1:D1:60:CA:1A:F4:18:08:8F
Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial: 01942369BB430642F8271EDE39527712F5FC
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/rOX9zRwObaYZKZTR0WDKGvQYCI8.roa
Signing time: Wed 01 Jan 2025 19:48:39 +0000
ROA not before: Wed 01 Jan 2025 19:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 194.34.199.0/24 maxlen: 24
194.35.11.0/24 maxlen: 24
194.35.73.0/24 maxlen: 24
194.35.75.0/24 maxlen: 24
194.104.99.0/24 maxlen: 24
2a00:7940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:bb:43:06:42:f8:27:1e:de:39:52:77:12:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Validity
Not Before: Jan 1 19:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ace5fdcd1c0e6da6192994d1d160ca1af418088f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:d3:8d:46:24:e6:6b:3f:c0:26:4b:16:d9:
ae:a7:f8:8b:6f:90:88:da:c2:ef:92:19:16:28:31:
c9:ad:87:f8:c9:a2:a7:12:21:fc:37:f7:dd:e8:74:
c5:9f:56:80:2e:1a:9d:c1:bb:87:31:80:99:70:f3:
6f:a8:07:ee:47:05:9f:2a:90:a5:83:f3:e0:7a:0c:
71:0e:0d:12:45:d8:88:24:62:bc:1e:73:20:a7:3a:
91:05:6a:dd:a6:da:dc:5f:3c:eb:13:53:b8:7e:a9:
97:82:d0:34:c1:79:76:14:f8:9c:f7:f8:31:4b:c0:
e7:97:a9:eb:81:f1:87:42:b5:46:5f:e3:34:82:51:
d5:8b:54:c0:13:83:d7:b8:58:f4:0d:61:55:08:66:
bf:fb:b6:34:0f:52:24:26:1b:f0:46:f9:61:52:68:
ef:94:61:9d:e2:ee:bb:72:ab:82:d2:b2:81:05:e9:
69:c2:b6:c9:e5:b1:91:c9:0e:a3:8e:40:e2:f0:a5:
87:24:60:a0:4f:e5:bd:8a:0e:60:18:3a:ad:4b:df:
f6:1b:e9:75:b6:95:9b:3c:d5:5a:7b:47:e5:16:05:
60:59:18:8f:3c:eb:21:20:6d:75:6c:dc:4d:75:71:
f5:59:e1:d7:5c:dd:e7:9b:63:22:9d:a5:6c:a6:34:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E5:FD:CD:1C:0E:6D:A6:19:29:94:D1:D1:60:CA:1A:F4:18:08:8F
X509v3 Authority Key Identifier:
keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/rOX9zRwObaYZKZTR0WDKGvQYCI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.199.0/24
194.35.11.0/24
194.35.73.0/24
194.35.75.0/24
194.104.99.0/24
IPv6:
2a00:7940::/32
Signature Algorithm: sha256WithRSAEncryption
68:15:8c:b9:b6:28:0d:94:5b:8c:98:f8:f2:21:10:b9:fc:2e:
69:18:39:eb:a6:16:2f:75:29:bf:e6:05:58:03:68:4d:e3:95:
18:39:7d:cc:c5:9c:64:66:52:22:a1:0e:07:4a:42:0f:f1:3e:
3e:b0:0e:56:a9:cc:50:56:dc:e7:51:3b:7e:77:bd:97:20:ea:
c4:f0:a6:d2:22:77:29:b0:a2:e8:7d:58:ba:57:b2:0c:84:46:
2b:28:e8:5a:5f:3d:d3:8f:40:a9:e7:72:68:c6:46:7b:49:60:
33:33:bf:ad:f8:de:10:18:bd:68:35:c5:70:71:1b:1d:ec:94:
72:16:c3:6d:17:dd:bc:94:86:90:e0:97:da:fd:91:8a:25:35:
8c:63:49:39:1c:52:81:70:a6:de:66:c6:f3:1e:a3:65:51:ec:
b2:07:1d:f6:2a:7e:ce:54:10:b8:50:02:72:8b:8d:17:c0:e0:
4a:28:f1:8f:87:f6:7b:05:84:ba:dd:78:e2:da:31:79:a8:ea:
05:2b:49:a2:96:f5:7b:27:76:b3:da:dd:ee:12:2f:bc:fa:e8:
70:f2:d1:75:30:5b:75:1d:93:65:fe:45:b3:7c:a2:c7:37:18:
38:72:76:1a:df:09:17:91:c1:cc:c5:41:3d:6f:47:19:45:ee:
99:6f:b8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net