Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/8AIFGKciFanVAzz2ffCjgurgKok.roa
File: 8AIFGKciFanVAzz2ffCjgurgKok.roa (raw, json)
Hash identifier: ENHuCpEeFyA8Ue2RXX/1jBC56W6LtF659OqDyGOAcn0=
Subject key identifier: F0:02:05:18:A7:22:15:A9:D5:03:3C:F6:7D:F0:A3:82:EA:E0:2A:89
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 01952A27231594A9E3FAECA2E06A3265520C
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/8AIFGKciFanVAzz2ffCjgurgKok.roa
Signing time: Fri 21 Feb 2025 20:16:02 +0000
ROA not before: Fri 21 Feb 2025 20:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212136
IP address blocks: 5.172.178.0/24 maxlen: 24
81.22.46.0/24 maxlen: 24
81.22.47.0/24 maxlen: 24
91.214.116.0/24 maxlen: 24
176.56.32.0/24 maxlen: 24
185.228.248.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
194.31.9.0/24 maxlen: 24
213.232.254.0/24 maxlen: 24
2a10:aa80::/30 maxlen: 30
2a10:aa84::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2a:27:23:15:94:a9:e3:fa:ec:a2:e0:6a:32:65:52:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Feb 21 20:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0020518a72215a9d5033cf67df0a382eae02a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:0e:49:e5:d5:e6:f5:f3:50:09:22:f3:d0:
ca:c1:a0:e8:ae:6c:75:68:06:24:d3:4a:33:1c:43:
77:45:e7:34:6e:c4:1b:bb:89:d3:d0:e7:5a:6d:dc:
5b:4e:f5:0d:5c:93:03:25:75:47:bc:d9:75:00:1b:
a4:84:57:b2:45:2a:06:6a:b8:0f:b4:e6:14:f1:e2:
41:92:01:db:04:c8:9a:92:01:4b:f1:34:a5:32:1f:
2c:6b:23:01:55:05:09:40:2a:43:0f:5e:7b:83:d2:
5c:49:cc:86:66:d2:6e:18:91:88:d0:89:e5:e6:84:
0c:df:e9:aa:86:fe:0c:fd:e8:62:3e:97:5b:86:a9:
04:ed:13:20:7e:8c:86:1c:9f:6b:4a:9c:f4:98:60:
99:af:40:4c:64:48:6c:c3:bb:a1:80:a1:e9:cb:25:
08:01:32:bf:0e:3b:a9:30:48:9b:a9:27:45:a8:2c:
f7:fa:b9:44:9a:18:1b:81:fe:8d:20:48:3f:67:7b:
b5:9c:fa:bd:a4:64:a7:d1:81:67:f7:f0:8a:7f:d2:
7d:10:a2:41:23:81:94:c6:1e:9f:bd:0f:4e:84:5b:
d3:12:55:8e:81:68:af:ed:51:4d:11:e9:fe:ac:9d:
5c:5f:e2:4b:10:28:8c:1e:79:96:eb:25:ac:be:3f:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:05:18:A7:22:15:A9:D5:03:3C:F6:7D:F0:A3:82:EA:E0:2A:89
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/8AIFGKciFanVAzz2ffCjgurgKok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.178.0/24
81.22.46.0/23
91.214.116.0/24
176.56.32.0/24
185.228.248.0/24
185.247.187.0/24
194.31.9.0/24
213.232.254.0/24
IPv6:
2a10:aa80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:b0:75:e7:93:30:9e:22:a0:38:75:c7:77:4c:b3:0c:8d:c7:
06:e6:55:ca:7e:a6:0f:ef:59:2f:48:5c:41:0c:52:6e:ab:3a:
23:96:b8:4e:e9:ac:33:9d:fa:7c:b8:69:21:b6:cb:93:55:36:
d4:04:04:26:b0:99:f5:77:33:9d:49:f6:d1:b7:ea:e4:bd:e6:
2a:64:ae:a4:4d:30:b7:d9:61:c1:95:10:49:51:e9:73:12:0a:
ab:70:34:63:32:1a:4c:cf:d2:47:7c:65:54:d3:1e:33:c0:50:
7f:27:5c:5d:54:95:6e:1c:af:fc:49:74:f9:2e:40:9a:cc:74:
ce:5c:bd:75:98:70:02:ce:33:33:ce:4b:8b:f1:3e:e4:dc:a1:
1c:00:78:ba:25:72:7a:84:2d:72:32:5e:0e:f7:85:98:de:e0:
da:8c:f3:04:20:46:b2:33:9a:33:6c:49:ea:82:7c:af:e0:a5:
af:aa:21:15:c8:08:32:05:e9:14:46:c8:4c:72:19:16:f4:8f:
b0:2a:f7:a4:2f:59:35:ab:31:64:98:cb:f4:6a:10:17:16:bd:
94:8d:d7:59:fa:d1:8b:28:d5:7f:75:4e:7c:0e:45:b3:56:ab:
9d:83:ba:1a:72:97:e9:cf:5b:05:bb:56:7b:8e:8e:e3:80:d4:
08:94:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net