Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/U2tphYuFM8kk0W7orOWXNfbZPqw.roa
File: U2tphYuFM8kk0W7orOWXNfbZPqw.roa (raw, json)
Hash identifier: fWhJtmDdcAYyNt0CvDorvB/6p7uqlch+/pvi2XMjyPs=
Subject key identifier: 53:6B:69:85:8B:85:33:C9:24:D1:6E:E8:AC:E5:97:35:F6:D9:3E:AC
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019421B1EEAF5A5914F00E434F7759E23351
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/U2tphYuFM8kk0W7orOWXNfbZPqw.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34369
IP address blocks: 84.241.0.0/18 maxlen: 24
94.182.0.0/15 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ee:af:5a:59:14:f0:0e:43:4f:77:59:e2:33:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=536b69858b8533c924d16ee8ace59735f6d93eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:e3:f6:a0:9c:1d:51:10:f8:39:72:c6:09:
a3:10:31:3c:a0:ac:86:fa:ea:84:63:31:7c:7d:91:
15:20:be:78:5e:5a:e1:98:4f:41:09:e9:15:62:eb:
56:98:60:2e:d4:d7:2e:83:b8:07:2d:8a:fb:ee:ed:
a3:eb:ff:40:b4:3a:5c:bb:63:cc:b8:4d:df:3e:48:
fa:a9:5b:41:f1:72:35:97:a6:3d:86:ee:36:2d:86:
0c:a8:63:29:db:93:ce:00:f0:8c:1f:4c:3d:79:3b:
a9:21:ca:b5:fc:75:72:da:0a:45:db:a1:08:8d:93:
ba:7e:e7:a7:64:b1:66:ac:e0:5e:e3:06:0a:62:99:
bb:fb:99:db:50:a3:1c:c4:a0:d0:79:50:fc:82:5d:
65:3a:70:54:3c:eb:14:ae:b1:01:4a:cf:a6:55:18:
b7:a6:fe:f9:6f:15:f7:1a:2a:19:32:70:f8:c6:80:
73:5b:7d:4d:ca:52:88:72:5b:07:85:f7:16:55:e2:
7a:20:ef:52:fb:0b:74:73:ad:08:55:91:3f:32:71:
9f:cd:01:5a:ea:cf:37:dc:61:ab:cd:dc:7f:4d:7d:
36:2f:3e:4a:36:c5:ee:57:67:6a:36:3e:b7:36:d1:
81:68:cb:37:54:07:a3:38:ce:08:55:6d:c6:e8:2a:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:69:85:8B:85:33:C9:24:D1:6E:E8:AC:E5:97:35:F6:D9:3E:AC
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/U2tphYuFM8kk0W7orOWXNfbZPqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.0.0/18
94.182.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b5:4f:3f:1d:5f:90:c2:c6:79:ce:be:bc:7f:a3:87:69:f7:63:
60:fd:0c:f7:5b:86:4a:bf:33:af:fc:f2:49:e0:2c:e7:f1:7a:
15:9e:88:2b:b8:54:d9:f9:8d:21:ee:b5:7a:32:06:c0:38:9a:
f1:04:12:48:74:5a:86:a1:7a:1d:ea:02:a5:08:19:bf:b4:2a:
b5:e1:fb:a6:71:0f:2d:9c:f3:19:7e:56:56:4a:98:db:34:85:
7c:31:fb:27:89:5b:54:77:e6:1e:d1:92:3e:13:25:68:b0:a6:
cf:1a:45:2e:80:38:d4:a8:76:72:98:3d:68:5e:81:54:72:43:
db:cc:bf:21:47:72:36:cd:f6:49:ee:79:1d:33:f7:c4:c0:b9:
0e:8b:d7:0c:58:e6:cf:54:01:94:71:9e:70:fe:37:5d:ab:41:
4d:e9:75:59:9f:93:43:f8:e4:70:3c:16:62:a8:11:b9:ed:88:
89:43:b3:78:bd:93:64:83:96:6d:69:a2:4e:0b:06:f5:a6:8b:
42:7a:ed:79:3e:20:cc:ef:0a:e6:c1:c0:ae:a8:79:3a:4c:00:
f8:60:30:20:06:e1:8b:c7:70:1b:b5:18:cb:41:c3:e0:60:b6:
c0:0f:2b:51:6a:ea:f5:6a:8a:52:f1:0c:92:b8:8f:59:98:0d:
ff:7b:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net