Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa
File: Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa (raw, json)
Hash identifier: umfGkIDiH0PEP4Dex0coyv4+UbwotSLBPIcupKuR1h8=
Subject key identifier: 4F:2A:3A:54:5D:44:2D:36:EF:C2:D2:72:4B:A9:D9:24:B0:3C:2B:ED
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 019427B3F0B78A12548C01A88891917FBD16
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa
Signing time: Thu 02 Jan 2025 15:48:11 +0000
ROA not before: Thu 02 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39401
IP address blocks: 85.217.224.0/20 maxlen: 24
85.217.224.0/24 maxlen: 24
85.217.225.0/24 maxlen: 24
85.217.226.0/24 maxlen: 24
85.217.227.0/24 maxlen: 24
85.217.228.0/24 maxlen: 24
85.217.229.0/24 maxlen: 24
85.217.230.0/24 maxlen: 24
85.217.231.0/24 maxlen: 24
85.217.232.0/24 maxlen: 24
85.217.233.0/24 maxlen: 24
85.217.234.0/24 maxlen: 24
85.217.235.0/24 maxlen: 24
85.217.236.0/24 maxlen: 24
85.217.237.0/24 maxlen: 24
85.217.240.0/22 maxlen: 24
85.217.240.0/24 maxlen: 24
85.217.241.0/24 maxlen: 24
85.217.242.0/24 maxlen: 24
85.217.243.0/24 maxlen: 24
85.217.244.0/23 maxlen: 24
85.217.244.0/24 maxlen: 24
85.217.245.0/24 maxlen: 24
85.217.246.0/24 maxlen: 24
85.217.247.0/24 maxlen: 24
85.217.248.0/23 maxlen: 23
85.217.248.0/24 maxlen: 24
85.217.249.0/24 maxlen: 24
85.217.250.0/23 maxlen: 23
85.217.250.0/24 maxlen: 24
85.217.251.0/24 maxlen: 24
85.217.252.0/23 maxlen: 23
85.217.252.0/24 maxlen: 24
85.217.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:f0:b7:8a:12:54:8c:01:a8:88:91:91:7f:bd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: Jan 2 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f2a3a545d442d36efc2d2724ba9d924b03c2bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:70:b2:9f:c9:a9:1a:ba:c2:0d:ff:10:6b:49:
2e:4c:9e:46:bb:9e:ed:76:3c:88:c2:fd:62:61:11:
2e:ad:9c:3b:62:4a:a0:cd:82:4e:3a:7f:2b:2b:e5:
d9:94:4c:21:3a:a2:22:53:b0:23:73:b7:7e:f9:2e:
21:d4:4f:b4:88:93:0e:d9:f8:08:67:c3:6a:05:60:
c9:17:3c:10:05:93:27:46:4d:74:6f:81:9b:57:9c:
94:66:df:d9:bf:38:23:c3:ce:43:ad:1a:01:57:7a:
e9:72:0b:65:9f:11:1b:c6:97:0c:c2:67:20:fc:46:
83:f7:b9:50:3a:70:04:01:ac:a1:10:04:bf:64:e3:
a6:6d:a7:b1:6e:eb:91:c4:c2:d4:87:15:dd:7a:85:
06:08:50:a9:6f:2f:98:56:c1:e8:39:05:c5:25:8c:
ad:91:b5:31:20:ba:b4:fe:8a:d8:9c:d2:32:4d:64:
2a:a4:68:ff:7d:70:e9:d6:02:8d:48:95:40:93:ea:
bc:ef:cb:63:03:fc:76:61:7b:c9:15:89:b8:0f:b0:
55:b7:5f:39:43:38:9b:8b:38:ff:cd:f3:c5:56:60:
6a:34:3c:35:20:55:f7:db:b0:ac:c5:a9:ad:77:79:
8b:78:61:41:0c:3e:1e:88:db:ff:82:c1:12:b7:10:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:3A:54:5D:44:2D:36:EF:C2:D2:72:4B:A9:D9:24:B0:3C:2B:ED
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.224.0-85.217.253.255
Signature Algorithm: sha256WithRSAEncryption
01:3a:e3:4c:38:e1:4a:60:51:98:e9:5c:3d:a8:47:f8:8f:ea:
ea:ea:a8:14:f4:98:e4:6d:45:17:69:fb:8c:4f:f2:eb:34:5f:
75:3e:b2:61:22:78:f7:3e:da:e9:69:7b:fe:0b:4e:7e:b0:e2:
69:31:04:51:35:56:27:69:de:67:d2:3c:f7:4b:b9:ff:9a:df:
54:ff:84:8e:26:34:38:5a:bd:4a:8b:07:07:3c:d2:84:d0:91:
68:82:c3:3c:dd:ba:ee:04:1b:5c:f4:fc:25:d0:12:c1:0b:db:
8d:1d:72:0a:00:73:73:64:b9:a6:2f:24:54:8c:dc:83:6c:ca:
3c:f2:63:ae:4f:48:a0:bc:1e:a4:46:fa:fc:67:a9:2a:89:3f:
28:9f:97:e7:e1:eb:f6:fb:99:d8:cf:5e:a4:6a:46:5f:26:ea:
05:30:2b:f2:27:d1:f5:74:3e:f9:32:ed:77:29:1e:d8:0f:df:
38:8c:6b:aa:90:dc:b7:4e:f4:28:e1:be:2a:4f:26:03:91:d8:
47:49:2d:10:01:c9:73:10:19:83:89:ca:2f:bb:9e:53:35:68:
9b:1b:22:a1:e6:f0:53:1a:2e:26:1d:ae:5b:ba:28:c8:f3:1d:
cb:19:1b:38:d5:1f:d2:62:43:99:16:93:5a:47:ff:a1:7c:d3:
dc:9c:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net