Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/T16pm2MQEAUE2FMbSssYLk6CkTk.roa
File: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (raw, json)
Hash identifier: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=
Subject key identifier: 4F:5E:A9:9B:63:10:10:05:04:D8:53:1B:4A:CB:18:2E:4E:82:91:39
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0194236A3B60D75CA6FA45C20CCD0828487E
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/T16pm2MQEAUE2FMbSssYLk6CkTk.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59847
IP address blocks: 94.250.20.0/24 maxlen: 24
94.250.21.0/24 maxlen: 24
94.250.22.0/24 maxlen: 24
94.250.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3b:60:d7:5c:a6:fa:45:c2:0c:cd:08:28:48:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5ea99b6310100504d8531b4acb182e4e829139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:ac:d9:ca:77:c8:c8:74:bf:b5:69:eb:7b:
6c:b5:94:38:22:d2:73:aa:fe:ae:44:a4:9e:2a:95:
a0:22:b1:c3:3d:65:e1:9a:1c:9e:01:3b:04:1d:b8:
1d:bf:72:89:ce:bc:70:5d:bf:0f:ff:7a:5a:1c:5e:
6f:b3:6b:87:a2:85:63:f2:aa:87:84:69:f7:ac:ef:
c3:b8:22:29:7b:7a:d0:fd:c3:52:7d:4c:78:28:b2:
06:b4:7f:30:4a:7b:bf:97:a4:40:99:ad:88:21:ae:
df:9d:ae:2f:11:6e:a6:8b:26:d1:ed:7a:6f:b9:e3:
aa:84:58:87:c2:bb:bb:9d:dc:8f:66:15:44:96:82:
10:87:99:71:4b:77:2a:06:7b:ca:b6:6f:f4:ca:03:
e5:05:18:0b:86:36:a7:e2:54:34:16:ba:ff:e8:69:
90:f4:41:48:cd:93:a4:08:e0:01:d3:3e:96:51:0e:
00:7b:07:92:0d:7c:1c:8a:5f:55:b3:90:22:3a:68:
c3:e5:ef:4b:2a:e5:66:ae:56:54:6b:95:4a:a4:95:
d9:63:59:8d:00:0a:59:69:8b:5d:7d:6d:b6:65:b8:
33:f5:db:6e:52:2a:96:17:aa:bb:6c:ef:15:a4:20:
2d:23:f3:4a:bb:d7:1e:09:a3:01:09:0a:5f:12:5d:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5E:A9:9B:63:10:10:05:04:D8:53:1B:4A:CB:18:2E:4E:82:91:39
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/T16pm2MQEAUE2FMbSssYLk6CkTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.20.0/22
Signature Algorithm: sha256WithRSAEncryption
57:5d:fb:8d:97:0b:2e:ba:ae:c3:10:02:dc:94:6f:b3:2d:23:
b8:d2:ac:e9:0b:e3:d6:09:71:35:f1:44:83:b6:33:36:62:cb:
b9:e2:80:4a:10:ef:c5:fe:9a:b7:08:5b:b2:fc:15:b9:27:a6:
23:87:df:d7:aa:37:0a:eb:6c:e0:c8:db:99:4f:47:d1:33:0e:
79:c9:d9:60:cd:27:3e:87:4a:20:62:f2:9c:c3:c2:7b:61:3b:
61:f4:65:fc:cb:b5:e0:71:73:ba:18:63:e6:a9:e4:da:a1:47:
df:7b:98:d0:a1:a6:33:07:7d:d7:1b:f9:d1:52:21:ee:23:88:
a6:d0:4f:e1:25:b1:f3:e5:a8:34:28:ce:cf:15:c2:33:41:c9:
ec:41:86:a1:7d:4f:b6:21:22:10:5c:bd:1c:2f:ab:3c:67:a6:
39:2c:e1:c1:69:6c:28:e5:2f:9c:a5:74:1b:4a:b0:69:4e:97:
a7:8c:e5:cd:f2:16:b0:a9:1f:ab:37:ae:1c:7f:02:0e:6e:6c:
ee:73:96:eb:43:56:3b:b4:39:14:3b:19:dc:01:c0:9e:ba:b3:
32:eb:db:a9:f5:6c:c4:ad:76:10:85:e0:43:78:1a:82:b4:7e:
dd:14:ad:ff:6c:70:dd:43:43:58:5e:96:6b:70:06:32:cd:17:
6a:ee:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net