Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/EUICRwNR8sR91Lfm3GIv3mdVr9k.roa
File: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (raw, json)
Hash identifier: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=
Subject key identifier: 11:42:02:47:03:51:F2:C4:7D:D4:B7:E6:DC:62:2F:DE:67:55:AF:D9
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0194266C1A04C236F0A6E0A8D71883DF16FE
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/EUICRwNR8sR91Lfm3GIv3mdVr9k.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50593
IP address blocks: 93.125.50.0/24 maxlen: 24
178.172.204.0/24 maxlen: 24
178.172.214.0/24 maxlen: 24
178.172.228.0/24 maxlen: 24
178.172.234.0/24 maxlen: 24
213.184.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1a:04:c2:36:f0:a6:e0:a8:d7:18:83:df:16:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=114202470351f2c47dd4b7e6dc622fde6755afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:b4:41:16:a8:e4:5c:ca:26:d9:58:9f:25:
c3:13:b0:45:7f:df:a2:84:7f:fb:12:4d:a7:d9:5d:
bd:90:50:6e:75:7b:53:93:42:31:20:19:fe:1b:6b:
29:7d:57:00:41:e0:81:87:32:16:ab:47:53:01:9c:
7c:ab:a2:d5:77:28:48:ce:77:91:93:6f:3c:6a:a0:
14:9a:6a:c8:3d:9c:de:ed:59:5e:b3:84:e7:18:48:
6e:b2:4a:d5:ae:2d:80:04:a8:3b:3c:46:87:c1:ce:
62:86:34:66:b4:db:a1:2a:75:26:f4:3d:41:42:f1:
78:6d:4d:55:92:34:14:92:6e:0a:eb:08:ee:b1:41:
86:ca:1d:ac:13:58:90:b5:f5:2d:e0:ea:d0:2d:a6:
8e:93:95:43:07:92:5f:be:47:c4:fd:a4:78:5c:7b:
ee:b5:20:c2:c7:97:9e:8f:b8:c2:8f:b2:c7:45:b9:
cc:2a:cd:e1:71:17:87:52:56:34:43:e9:2d:18:f4:
5a:c7:7e:84:7e:84:04:9f:0b:1d:40:a7:4d:ec:cb:
19:14:7a:a2:8e:b3:17:d1:e4:67:0b:bb:3b:84:3d:
a2:f5:5d:da:55:6a:19:be:9a:a9:e5:b4:c0:ce:97:
65:01:01:02:09:0c:69:a2:5f:d1:e8:48:1a:4b:7c:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:02:47:03:51:F2:C4:7D:D4:B7:E6:DC:62:2F:DE:67:55:AF:D9
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/EUICRwNR8sR91Lfm3GIv3mdVr9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.50.0/24
178.172.204.0/24
178.172.214.0/24
178.172.228.0/24
178.172.234.0/24
213.184.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:39:e6:fe:93:2c:36:08:1b:92:9d:78:ae:44:8e:31:d0:49:
d0:ab:67:34:7f:56:f9:00:a2:0f:95:43:b7:8d:b9:ba:88:75:
7b:75:e8:d8:8f:cd:bf:77:3f:36:32:47:fd:70:97:94:76:b2:
f4:3e:b5:32:25:82:ee:1f:af:fa:ba:2d:c0:4e:0e:07:1f:6c:
a2:2a:f1:d6:a0:1a:23:de:2b:03:c0:3a:9e:80:52:9a:bb:49:
9c:f8:78:af:58:fe:72:18:3d:65:3d:89:a1:1e:d6:54:7e:1e:
0c:5a:ad:35:72:47:8c:7a:7f:ee:b1:b1:1b:ab:94:82:f5:0a:
98:17:ce:7d:26:f9:2d:b3:92:8a:04:0e:fb:e2:a9:c6:9b:53:
51:58:4f:06:96:a3:ae:5f:1e:bd:d5:43:30:a0:9d:c9:b4:e5:
7e:60:ac:c0:48:c5:07:02:2b:d4:32:58:e8:db:b4:fd:9a:0d:
8c:84:79:62:89:ea:50:d7:82:ff:39:8d:d7:6f:ee:a5:a4:76:
c1:38:94:ce:d3:50:25:92:a7:67:e8:15:04:68:14:6f:26:45:
0a:9b:7a:d7:05:81:49:00:e5:a0:81:e7:31:7c:5e:92:0e:43:
4f:86:d0:af:42:94:a7:dc:9a:59:44:e6:2d:15:ac:ea:00:91:
f0:17:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net