Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/3eUay2tu69uIVC2ydoh-KNcQB3E.roa
File: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (raw, json)
Hash identifier: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=
Subject key identifier: DD:E5:1A:CB:6B:6E:EB:DB:88:54:2D:B2:76:88:7E:28:D7:10:07:71
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 0194258EF4D60C3C3D3DD84711EF34A99B61
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/3eUay2tu69uIVC2ydoh-KNcQB3E.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31055
IP address blocks: 62.168.192.0/24 maxlen: 24
62.168.193.0/24 maxlen: 24
62.168.194.0/24 maxlen: 24
62.168.195.0/24 maxlen: 24
62.168.196.0/24 maxlen: 24
62.168.197.0/24 maxlen: 24
62.168.198.0/24 maxlen: 24
62.168.199.0/24 maxlen: 24
62.168.200.0/24 maxlen: 24
62.168.201.0/24 maxlen: 24
62.168.202.0/24 maxlen: 24
62.168.203.0/24 maxlen: 24
62.168.204.0/24 maxlen: 24
62.168.205.0/24 maxlen: 24
62.168.206.0/24 maxlen: 24
62.168.207.0/24 maxlen: 24
62.168.208.0/24 maxlen: 24
62.168.209.0/24 maxlen: 24
62.168.210.0/24 maxlen: 24
62.168.211.0/24 maxlen: 24
62.168.212.0/24 maxlen: 24
62.168.213.0/24 maxlen: 24
62.168.214.0/24 maxlen: 24
62.168.215.0/24 maxlen: 24
62.168.216.0/24 maxlen: 24
62.168.217.0/24 maxlen: 24
62.168.218.0/24 maxlen: 24
62.168.219.0/24 maxlen: 24
62.168.220.0/24 maxlen: 24
62.168.221.0/24 maxlen: 24
62.168.222.0/24 maxlen: 24
62.168.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f4:d6:0c:3c:3d:3d:d8:47:11:ef:34:a9:9b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dde51acb6b6eebdb88542db276887e28d7100771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:09:2f:01:ef:cd:a2:39:32:d2:56:d9:7c:
5c:91:6b:0b:c5:00:95:3c:61:72:88:32:91:34:94:
e8:a8:a8:8e:30:c7:65:8c:16:07:8c:7b:75:e7:9f:
ba:86:e8:6d:18:8e:e9:5a:37:eb:1d:75:f5:1f:9f:
7f:a5:4b:07:d2:98:97:c8:57:a9:51:38:f3:25:bf:
51:00:35:fa:8a:f2:c2:5b:5b:44:06:97:05:4b:a2:
a2:36:15:ea:28:ac:4b:09:dc:61:4d:d0:ee:5e:3a:
4e:2d:75:1a:59:b9:bf:aa:8a:d4:c3:a6:a1:3e:79:
e9:cf:be:95:96:88:0c:a2:0c:89:d5:17:10:ae:b1:
b2:83:83:5e:e8:76:07:e9:fb:c2:6c:f5:74:fb:2f:
3b:18:dd:a8:74:cc:35:8c:fc:ed:8a:33:49:60:b0:
93:93:0d:b3:e7:ff:bf:45:dc:04:c2:42:1a:ce:af:
f6:ff:c5:df:b4:7d:12:13:cd:81:d0:a8:52:0a:70:
4f:d8:2d:5d:fb:66:0c:e5:80:41:bd:47:35:c9:ee:
fe:94:01:1e:ca:72:9b:dc:b0:1e:b8:45:28:0f:4a:
67:23:e7:49:bb:4f:7b:25:2f:0b:b9:82:14:62:c8:
51:98:98:e5:9b:ac:c8:fd:e4:44:71:98:5b:68:29:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E5:1A:CB:6B:6E:EB:DB:88:54:2D:B2:76:88:7E:28:D7:10:07:71
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/3eUay2tu69uIVC2ydoh-KNcQB3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.168.192.0/19
Signature Algorithm: sha256WithRSAEncryption
18:66:ad:5b:3a:a3:51:96:0f:b3:0e:25:08:e6:29:78:ca:34:
7f:3c:fc:bc:6f:36:7d:10:63:e6:a0:1d:59:fd:dd:b5:3f:32:
a7:fe:e0:d9:d3:df:00:6a:5b:00:91:35:bb:d3:4a:a3:17:01:
71:d8:3c:63:8d:69:4a:7f:d7:4f:04:87:80:69:50:9f:3e:fd:
d3:bc:d4:aa:ed:e3:b9:dc:dd:f9:dc:75:63:9f:98:8b:b3:83:
b8:32:39:90:ac:ce:8e:a3:f7:5e:1c:9f:78:94:3a:87:2a:45:
aa:14:51:21:5a:74:56:47:3a:b8:29:4f:da:c2:2a:fe:4b:7c:
76:9c:0d:3a:dc:d0:71:b5:2a:0e:8e:db:f6:15:6a:6e:0e:d3:
28:6b:5f:84:ea:fe:7a:a3:61:82:9d:b3:95:69:dc:bf:45:3e:
35:96:81:91:c8:a5:3b:7a:21:e6:bc:62:1c:65:66:f1:5b:2f:
dc:1d:0f:45:76:75:d9:69:46:f6:c4:01:ae:1f:e1:d3:de:e7:
53:b0:3e:d3:88:ac:54:a8:5e:1c:d3:79:ed:f2:c4:e1:ea:a9:
97:88:88:a5:5b:f5:c0:13:1f:4c:64:67:5a:b0:0f:53:6e:8f:
9e:3e:ef:25:f5:c1:6f:2e:d3:0b:28:54:50:51:79:d1:27:98:
24:91:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net