Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/RWf3DVveZH4QLyKGQca82kY-7Qw.roa
File: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (raw, json)
Hash identifier: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=
Subject key identifier: 45:67:F7:0D:5B:DE:64:7E:10:2F:22:86:41:C6:BC:DA:46:3E:ED:0C
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0194266C18B9C2B64907D27D5C9FD7ED295D
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/RWf3DVveZH4QLyKGQca82kY-7Qw.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49091
IP address blocks: 178.172.150.0/24 maxlen: 24
178.172.253.0/24 maxlen: 24
185.70.14.0/24 maxlen: 24
185.70.15.0/24 maxlen: 24
217.21.38.0/24 maxlen: 24
217.21.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:18:b9:c2:b6:49:07:d2:7d:5c:9f:d7:ed:29:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4567f70d5bde647e102f228641c6bcda463eed0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:3e:3b:c9:74:80:37:e0:9b:21:91:6a:65:
42:65:58:c3:cc:1d:a2:2c:2f:59:ab:1f:19:98:67:
16:32:fb:5e:9f:6f:1a:a6:61:0c:4a:39:4e:f1:df:
1d:16:67:7e:79:02:d7:45:8a:6d:69:b0:d1:74:0d:
73:8a:08:1b:e2:1e:34:71:4f:15:53:c3:56:e5:56:
e3:9a:f6:d2:f4:5c:b1:f7:b4:97:db:84:b5:5d:75:
fc:5e:21:ff:a6:98:2d:4e:7e:13:d5:7c:78:dd:bb:
9a:6b:f0:fe:52:37:e3:72:ad:bd:a4:c4:a9:90:1f:
ba:4a:c1:49:40:fd:31:a4:ab:35:41:17:49:f9:06:
8b:f7:8f:13:00:7c:56:7a:a5:9d:fb:ee:41:9b:ce:
ae:53:96:7e:83:b1:11:66:c9:1d:5a:aa:10:35:00:
e3:d7:7e:d9:be:84:7c:b8:30:76:fd:7a:5d:b4:b5:
6f:d7:25:19:98:79:15:1c:22:4f:d1:b9:1c:7a:9f:
f7:76:b2:eb:5a:17:e9:9b:9a:72:69:46:92:19:a3:
ce:43:de:2d:43:9e:b9:a1:a2:d4:63:8d:8d:7f:21:
1c:72:0e:5d:62:8e:34:00:14:ea:50:01:ec:10:5f:
2f:af:ed:c2:67:ac:2b:52:7a:3d:d9:c8:ac:78:1a:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:F7:0D:5B:DE:64:7E:10:2F:22:86:41:C6:BC:DA:46:3E:ED:0C
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/RWf3DVveZH4QLyKGQca82kY-7Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.172.150.0/24
178.172.253.0/24
185.70.14.0/23
217.21.38.0/23
Signature Algorithm: sha256WithRSAEncryption
10:90:ce:77:01:f3:80:08:23:df:7a:92:02:5e:f5:02:a6:4b:
e5:64:cf:d9:10:58:90:3e:c9:64:fc:25:39:84:82:22:c2:07:
b2:b3:73:c4:db:02:75:1c:4f:6a:8d:78:a2:51:a2:a1:1b:bb:
af:37:7f:93:23:41:22:55:7b:e5:84:2e:02:02:6c:09:f0:c1:
92:9a:0c:2a:b4:11:ab:27:46:32:76:0b:6b:e4:0d:03:f6:8c:
dd:db:86:1e:db:28:d4:d4:6a:21:29:d1:43:2b:ed:c3:2b:36:
1f:f1:88:7b:76:05:3c:78:0f:28:69:6e:f8:cf:48:e2:cd:9b:
13:60:94:db:36:95:2d:8c:4f:10:84:fa:f9:4d:ab:b5:1f:4b:
e1:51:6b:95:46:47:7d:36:e1:d5:fe:af:ae:f9:f3:5c:d3:f1:
3c:a1:32:e2:fe:dc:86:f6:a3:b9:9e:61:61:82:a5:44:54:b0:
ae:be:ae:85:7c:8a:3d:67:b6:03:3b:fb:e1:5b:16:b6:ce:f0:
30:5e:cb:bf:3c:3d:16:93:62:cd:8a:2e:ad:d0:f0:71:26:b1:
8f:93:ce:0f:c0:89:17:ea:28:de:fc:30:9b:11:cb:43:3b:c6:
d0:68:dd:8c:5d:53:6b:ad:12:0b:15:23:0b:24:3f:0e:b4:8e:
62:f7:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net