Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/_NtdAshoDnlOJZsbDUhHb5DpQ-8.roa
File: _NtdAshoDnlOJZsbDUhHb5DpQ-8.roa (raw, json)
Hash identifier: RxY1ucf+m1KziN998xY04kbjZueKaMFRsQImUOWnCMQ=
Subject key identifier: FC:DB:5D:02:C8:68:0E:79:4E:25:9B:1B:0D:48:47:6F:90:E9:43:EF
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0194266C1B1FFED90F56268EEFC6F2549F11
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/_NtdAshoDnlOJZsbDUhHb5DpQ-8.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56740
IP address blocks: 87.252.234.0/24 maxlen: 24
87.252.237.0/24 maxlen: 24
87.252.238.0/24 maxlen: 24
91.149.167.0/24 maxlen: 24
93.125.18.0/24 maxlen: 24
93.125.60.0/23 maxlen: 23
93.125.114.0/24 maxlen: 24
178.172.164.0/24 maxlen: 24
178.172.165.0/24 maxlen: 24
178.172.212.0/24 maxlen: 24
178.172.217.0/24 maxlen: 24
178.172.220.0/24 maxlen: 24
178.172.247.0/24 maxlen: 24
178.172.251.0/24 maxlen: 24
178.172.255.0/24 maxlen: 24
213.184.236.0/24 maxlen: 24
213.184.240.0/24 maxlen: 24
217.21.44.0/24 maxlen: 24
217.21.52.0/24 maxlen: 24
217.21.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1b:1f:fe:d9:0f:56:26:8e:ef:c6:f2:54:9f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcdb5d02c8680e794e259b1b0d48476f90e943ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:05:e6:46:85:60:38:a0:8d:ed:51:1e:03:
82:d2:f0:38:a5:5b:d2:e0:7a:33:ec:b5:40:98:27:
cd:3d:ff:68:df:c6:4d:c4:bc:26:75:92:51:a9:a9:
e4:fa:94:de:a5:6b:c3:ea:23:43:26:ed:5b:b6:c0:
d5:38:80:33:25:1a:13:f0:ce:10:3d:4e:53:6f:4d:
fa:46:80:6a:3f:9a:0f:4a:14:28:68:55:57:19:e0:
af:f0:bb:57:a7:82:34:36:2b:09:e6:02:c5:f3:c2:
7a:26:af:c9:78:3b:bf:db:a2:15:54:3c:ec:bf:5e:
10:48:3d:3d:99:a7:c8:20:b6:73:4a:da:28:0e:03:
c9:9f:69:75:fa:c8:3c:eb:02:6e:b4:e0:74:9f:e0:
85:4e:cb:11:95:42:4e:6e:ef:c5:8a:62:b2:39:8c:
e8:03:59:54:5f:3c:5a:f8:db:2d:1b:60:d3:86:62:
5b:f0:d3:36:7a:d8:b1:ef:cd:93:82:95:0a:1f:a2:
ac:5b:6b:95:ca:d1:6c:03:d6:3b:35:4d:a4:8c:be:
b0:d4:6a:0d:4b:67:e0:92:7c:46:bf:0b:a9:7d:e2:
92:fb:de:63:9b:6a:cf:50:a5:fc:8f:ce:fd:93:74:
ec:f0:18:80:1f:41:05:06:97:e7:70:ec:51:93:2f:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:5D:02:C8:68:0E:79:4E:25:9B:1B:0D:48:47:6F:90:E9:43:EF
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/_NtdAshoDnlOJZsbDUhHb5DpQ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.234.0/24
87.252.237.0-87.252.238.255
91.149.167.0/24
93.125.18.0/24
93.125.60.0/23
93.125.114.0/24
178.172.164.0/23
178.172.212.0/24
178.172.217.0/24
178.172.220.0/24
178.172.247.0/24
178.172.251.0/24
178.172.255.0/24
213.184.236.0/24
213.184.240.0/24
217.21.44.0/24
217.21.52.0/23
Signature Algorithm: sha256WithRSAEncryption
51:af:5e:ad:cf:bc:d2:4f:8f:15:f7:e6:9b:3f:0f:82:50:70:
10:81:4a:f2:53:fc:49:0f:ec:67:05:a8:d9:e5:84:3f:0e:82:
a1:1a:f0:c3:b6:8c:74:27:52:33:28:4e:36:05:38:fa:52:e4:
c6:5c:b3:98:fa:b1:05:9e:59:8c:dd:b8:a0:80:f7:9c:b8:f5:
97:93:af:aa:57:d4:97:d6:ab:1a:85:30:69:34:41:8a:f6:e3:
b6:95:11:59:de:65:87:63:9e:34:b6:23:6d:cc:5b:7a:aa:a6:
51:89:10:ea:c4:5e:42:b0:5d:8c:c4:db:3e:30:25:09:64:f8:
72:80:c0:e6:36:90:b2:85:e6:c0:e7:f0:2a:0c:13:4a:9a:34:
7b:d9:a5:ff:9b:5c:b9:2a:79:e7:79:d4:46:4b:b8:3d:83:e0:
3d:75:11:89:c2:03:cd:b5:55:f2:15:b3:c3:e8:e4:86:63:d9:
3a:f6:b9:36:1f:cf:c9:ed:f5:0d:60:48:70:65:71:60:63:0e:
b7:a2:ae:00:4d:a7:13:b5:c0:ef:bd:47:d9:44:74:4e:ea:69:
eb:89:da:99:10:10:0e:1f:41:d8:75:27:bc:ba:1f:25:08:e3:
64:82:23:9e:80:f6:be:92:44:e1:97:56:06:dc:1d:6d:bf:c5:
c5:a3:c6:dc
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZQmbBsf/tkPViaO78byVJ8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj
ZmViYzEwHhcNMjUwMTAyMDk1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2RiNWQwMmM4NjgwZTc5NGUyNTliMWIwZDQ4NDc2ZjkwZTk0M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTMF5kaFYDigje1RHgOC0vA4pVvS
4Hoz7LVAmCfNPf9o38ZNxLwmdZJRqank+pTepWvD6iNDJu1btsDVOIAzJRoT8M4Q
PU5Tb036RoBqP5oPShQoaFVXGeCv8LtXp4I0NisJ5gLF88J6Jq/JeDu/26IVVDzs
v14QSD09mafIILZzStooDgPJn2l1+sg86wJutOB0n+CFTssRlUJObu/FimKyOYzo
A1lUXzxa+NstG2DThmJb8NM2etix782TgpUKH6KsW2uVytFsA9Y7NU2kjL6w1GoN
S2fgknxGvwupfeKS+95jm2rPUKX8j879k3Ts8BiAH0EFBpfncOxRky/00wIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFPzbXQLIaA55TiWbGw1IR2+Q6UPvMB8GA1UdIwQY
MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct
YWFiMGU0MTRjYzYzLzEvX050ZEFzaG9EbmxPSlpzYkRVaEhiNURwUS04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz
LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAFf86jAM
AwQAV/ztAwQAV/zuAwQAW5WnAwQAXX0SAwQBXX08AwQAXX1yAwQBsqykAwQAsqzU
AwQAsqzZAwQAsqzcAwQAsqz3AwQAsqz7AwQAsqz/AwQA1bjsAwQA1bjwAwQA2RUs
AwQB2RU0MA0GCSqGSIb3DQEBCwUAA4IBAQBRr16tz7zST48V9+abPw+CUHAQgUry
U/xJD+xnBajZ5YQ/DoKhGvDDtox0J1IzKE42BTj6UuTGXLOY+rEFnlmM3biggPec
uPWXk6+qV9SX1qsahTBpNEGK9uO2lRFZ3mWHY540tiNtzFt6qqZRiRDqxF5CsF2M
xNs+MCUJZPhygMDmNpCyhebA5/AqDBNKmjR72aX/m1y5KnnnedRGS7g9g+A9dRGJ
wgPNtVXyFbPD6OSGY9k69rk2H8/J7fUNYEhwZXFgYw63oq4ATacTtcDvvUfZRHRO
6mnridqZEBAOH0HYdSe8uh8lCONkgiOegPa+kkThl1YG3B1tv8XFo8bc
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:50 2025 by rpki-client on console.sobornost.net