Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/6l_UCqzRawisLlnnkvrB_yZDW-Y.roa
File: 6l_UCqzRawisLlnnkvrB_yZDW-Y.roa (raw, json)
Hash identifier: nu5s/Lg7djoJ0SnulUQNf9V9SRxWSj0KGIC1XHbRhUU=
Subject key identifier: EA:5F:D4:0A:AC:D1:6B:08:AC:2E:59:E7:92:FA:C1:FF:26:43:5B:E6
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 019544680710FCECFECBB087257E5520CE71
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/6l_UCqzRawisLlnnkvrB_yZDW-Y.roa
Signing time: Wed 26 Feb 2025 22:37:02 +0000
ROA not before: Wed 26 Feb 2025 22:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 185.31.156.0/22 maxlen: 22
185.31.156.0/24 maxlen: 24
185.31.157.0/24 maxlen: 24
185.31.158.0/24 maxlen: 24
185.90.56.0/22 maxlen: 22
185.90.57.0/24 maxlen: 24
185.90.59.0/24 maxlen: 24
185.204.111.0/24 maxlen: 24
185.248.35.0/24 maxlen: 24
194.39.124.0/22 maxlen: 22
194.39.125.0/24 maxlen: 24
194.39.126.0/24 maxlen: 24
194.39.127.0/24 maxlen: 24
2a00:bc20::/32 maxlen: 32
2a05:df40::/29 maxlen: 29
2a10:7b40::/29 maxlen: 29
2a10:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:68:07:10:fc:ec:fe:cb:b0:87:25:7e:55:20:ce:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Feb 26 22:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea5fd40aacd16b08ac2e59e792fac1ff26435be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:5f:d7:4c:89:60:d9:75:1a:90:bc:92:9a:
1c:48:db:8b:96:64:12:7d:1c:d9:4c:6f:f7:f5:23:
0d:e1:62:1b:e0:a3:27:6a:eb:1a:01:3e:96:c9:be:
14:00:1b:ad:c2:5e:51:51:20:d4:2a:cd:40:5e:a4:
e2:4d:b0:a6:19:4a:8c:bb:53:0c:70:c6:04:94:a4:
6f:6b:bf:fc:41:1a:57:02:2c:82:dc:72:13:90:d4:
f9:00:5b:45:e9:00:1c:a1:c4:b2:a9:f9:60:f1:5a:
a6:9d:89:9a:42:c5:02:98:03:87:a7:13:a7:fb:4c:
ed:db:13:03:8f:62:5e:2a:03:d2:af:9d:fa:62:b3:
93:62:03:6e:f5:f5:61:96:85:51:99:04:e5:b3:ee:
8c:58:ae:12:60:fa:e8:87:6f:79:e7:7e:62:4b:ba:
c6:2f:d4:80:f7:6a:65:9c:6b:7a:9a:44:ab:e1:21:
f6:c8:67:6c:21:2e:11:12:6d:de:30:ff:87:78:c3:
c1:fc:c0:25:f6:98:bb:20:7c:40:fa:bc:07:bc:a8:
9f:fc:72:90:41:18:b4:1e:49:4f:90:14:2f:1d:0c:
8f:9b:a0:6c:49:e6:1b:81:89:2a:e7:29:85:37:96:
7c:19:b0:32:18:32:8f:d3:7a:34:1c:9d:aa:86:9e:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:D4:0A:AC:D1:6B:08:AC:2E:59:E7:92:FA:C1:FF:26:43:5B:E6
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/6l_UCqzRawisLlnnkvrB_yZDW-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.156.0/22
185.90.56.0/22
185.204.111.0/24
185.248.35.0/24
194.39.124.0/22
IPv6:
2a00:bc20::/32
2a05:df40::/29
2a10:7b40::/29
2a10:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:91:07:41:0e:64:a1:bd:9a:0e:87:77:06:81:e3:74:e5:4b:
9f:17:49:54:eb:ae:22:20:09:b3:21:18:60:bb:28:46:34:a7:
ca:f7:1c:c9:cb:03:79:ab:d0:cc:c2:66:97:fd:bd:8c:54:81:
53:03:ed:d6:19:4e:85:7f:ea:7d:d6:6f:de:e8:b6:c9:09:dc:
26:26:11:95:17:9b:76:dc:c8:7c:77:d5:ab:fb:56:62:57:03:
2f:f8:2e:09:30:39:41:11:3f:0d:c3:9e:33:29:26:d0:83:8d:
b0:5b:c8:80:ac:98:31:d7:c4:05:00:c4:6b:16:7d:1f:df:fe:
64:71:01:bd:fb:2c:b6:50:79:73:fa:4e:85:82:49:fa:29:40:
aa:ef:c2:8a:5e:f4:71:d7:c3:85:66:21:e4:7a:bc:5f:e6:9a:
af:5c:56:d5:20:0d:8b:9f:3e:50:d5:52:4f:a4:66:6f:9a:44:
2e:38:21:5c:36:87:24:58:2d:9e:8a:65:1a:84:20:5a:c7:84:
47:b2:73:d5:0d:a0:83:9d:7e:ef:82:74:c5:19:1d:92:c4:e9:
3e:a2:55:4a:74:48:42:5e:03:71:ed:b9:1d:2a:ac:af:fb:d6:
62:74:09:c4:c7:9b:b7:69:7c:5c:c5:05:df:dc:4a:54:22:b9:
33:c8:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:44 2025 by rpki-client on console.sobornost.net