Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/ETvmywd5Rir-J3y7qRm8frtoDkU.roa
File: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (raw, json)
Hash identifier: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=
Subject key identifier: 11:3B:E6:CB:07:79:46:2A:FE:27:7C:BB:A9:19:BC:7E:BB:68:0E:45
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01951D2F6F6A54EE7EF36915FED575ED18E1
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/ETvmywd5Rir-J3y7qRm8frtoDkU.roa
Signing time: Wed 19 Feb 2025 07:50:02 +0000
ROA not before: Wed 19 Feb 2025 07:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41368
IP address blocks: 89.29.128.0/20 maxlen: 20
89.29.129.0/24 maxlen: 24
89.29.132.0/24 maxlen: 24
89.29.133.0/24 maxlen: 24
89.29.135.0/24 maxlen: 24
89.29.144.0/21 maxlen: 21
89.29.149.0/24 maxlen: 24
89.29.150.0/24 maxlen: 24
89.29.151.0/24 maxlen: 24
89.29.152.0/22 maxlen: 22
89.29.155.0/24 maxlen: 24
89.29.156.0/24 maxlen: 24
89.29.157.0/24 maxlen: 24
89.29.158.0/24 maxlen: 24
89.29.159.0/24 maxlen: 24
89.29.232.0/22 maxlen: 22
89.29.233.0/24 maxlen: 24
89.29.234.0/24 maxlen: 24
89.29.236.0/22 maxlen: 22
89.29.254.0/24 maxlen: 24
176.57.104.0/22 maxlen: 22
176.57.108.0/22 maxlen: 22
176.57.108.0/24 maxlen: 24
176.57.110.0/23 maxlen: 23
185.40.37.0/24 maxlen: 24
185.40.38.0/23 maxlen: 23
185.64.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:2f:6f:6a:54:ee:7e:f3:69:15:fe:d5:75:ed:18:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Feb 19 07:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=113be6cb0779462afe277cbba919bc7ebb680e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:28:2f:37:67:2d:4b:54:9b:0e:79:94:29:
51:78:ae:cf:9e:2a:dd:c8:b5:5a:03:71:85:3e:63:
23:fc:08:40:7d:e0:d2:0c:aa:f9:19:9d:ca:30:e7:
ff:21:c2:7e:19:65:31:fc:86:f9:b6:69:b0:e9:77:
8a:f6:03:bd:50:76:9a:72:57:a3:68:bc:dd:d6:05:
da:1e:d6:f2:2a:c4:bc:eb:f2:2e:8e:aa:ef:f1:41:
6c:cf:0a:02:98:4f:6b:97:1b:84:78:c8:36:16:12:
0c:31:cc:1b:cc:1a:54:c8:54:d6:9c:75:06:91:16:
cc:39:9e:93:f4:9f:17:ec:11:b2:2e:b6:f0:55:ea:
51:0e:ba:96:58:aa:77:d5:29:a7:2c:e9:e8:05:82:
73:ef:21:0f:f9:dd:ed:b4:0a:58:e2:78:c0:78:36:
38:e3:81:69:05:ab:3d:be:3f:9a:c0:a6:35:d7:b4:
ef:0f:97:7e:2b:27:93:a9:b0:fa:5b:66:0c:89:6b:
79:7d:f4:a7:de:de:d7:aa:e1:ef:c7:16:ac:e7:be:
b8:d7:86:50:26:c5:5c:18:e7:61:01:0a:39:39:15:
05:31:29:5b:60:0f:43:21:79:ad:cf:a2:a0:a2:f1:
8c:05:58:9c:e8:d4:6e:eb:c0:91:21:9b:ce:31:56:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3B:E6:CB:07:79:46:2A:FE:27:7C:BB:A9:19:BC:7E:BB:68:0E:45
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/ETvmywd5Rir-J3y7qRm8frtoDkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.128.0/19
89.29.232.0/21
89.29.254.0/24
176.57.104.0/21
185.40.37.0-185.40.39.255
185.64.243.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d4:ee:b4:70:3c:42:d5:31:b4:7d:5d:71:f4:bd:2c:f7:ad:
dd:d8:a9:e7:99:d1:75:af:c9:0f:f9:b2:0e:2c:76:59:db:7f:
9f:cd:b9:72:20:50:71:ea:45:53:8f:ba:74:aa:0d:14:50:6f:
66:bc:2b:29:55:12:fe:eb:97:23:c1:5c:2c:b9:37:40:52:52:
e4:2f:ae:e5:9c:ca:81:cd:68:44:50:a2:08:b7:c5:68:a1:bf:
d9:74:2b:ca:e1:4e:98:b8:04:ad:72:2e:2b:58:66:ef:08:6b:
02:71:01:06:a8:97:20:d0:b5:5d:ff:0a:ff:8f:c2:2d:42:e0:
ca:d6:e4:00:2a:bf:5c:1b:b9:52:98:f0:c3:b4:a8:78:9e:fa:
4c:03:f9:cc:a1:82:28:59:54:dd:6d:20:8a:64:c1:1f:9a:e7:
69:dd:1f:c9:39:41:f8:8a:24:f4:69:5d:98:a4:32:5f:49:2e:
82:19:8a:ad:61:53:b4:e6:32:30:24:21:29:a7:bc:e9:b4:44:
b0:73:39:41:a7:71:fd:be:8d:ec:fa:d4:32:25:a6:ad:74:ae:
fb:48:17:3c:5a:5d:85:5f:11:de:74:e4:1c:5e:88:73:e4:8c:
69:7c:1e:a7:db:f5:d9:a0:13:56:40:74:63:e5:fe:4c:44:1f:
66:d1:b7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net