Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/27P-M6RaZradAhI02XRCxNJRajc.roa
File: 27P-M6RaZradAhI02XRCxNJRajc.roa (raw, json)
Hash identifier: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=
Subject key identifier: DB:B3:FE:33:A4:5A:66:B6:9D:02:12:34:D9:74:42:C4:D2:51:6A:37
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 0194258F1AA6B7DDBAE101AC24171FEB6BC5
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/27P-M6RaZradAhI02XRCxNJRajc.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49435
IP address blocks: 31.47.224.0/21 maxlen: 24
151.237.248.0/21 maxlen: 24
185.108.184.0/22 maxlen: 24
188.94.112.0/21 maxlen: 24
2a02:2260::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1a:a6:b7:dd:ba:e1:01:ac:24:17:1f:eb:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbb3fe33a45a66b69d021234d97442c4d2516a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:1a:45:91:eb:58:ce:5b:8e:3a:49:39:fd:
71:ce:52:00:2e:3a:4f:b8:dd:11:9a:51:b5:8a:47:
84:53:b5:08:95:07:f8:5a:95:bf:bd:6e:f1:96:f8:
bd:f3:fa:0d:c1:8a:57:b0:07:55:2a:2a:48:6e:45:
bd:8f:cd:bf:9e:2b:20:2f:89:62:80:fa:2b:a5:23:
b7:b6:65:de:7b:b0:dc:9d:da:9a:f1:03:dd:c2:eb:
82:eb:78:bf:41:b7:28:0b:1f:f7:f5:2f:8e:53:13:
ab:bb:58:02:c8:a9:d5:2c:78:88:64:70:0c:34:1e:
5b:24:b1:c8:ca:52:f7:f9:a7:a7:c0:f7:45:8b:8c:
15:d5:88:c3:26:4d:15:32:8a:f7:e6:1e:08:6a:42:
c3:57:46:f4:84:fb:12:8f:c9:b2:fd:88:d0:1f:dc:
1f:24:b4:7f:85:a6:10:11:ab:04:38:22:0d:4b:1c:
ac:f7:54:cd:2e:bb:ff:21:ca:39:76:c3:d7:98:60:
9f:bb:eb:48:c1:37:db:76:82:74:b4:f8:56:dd:31:
56:c7:a0:57:09:93:45:41:da:33:e8:ad:f2:a3:e0:
2d:0d:80:0a:1d:e7:72:8a:b7:b1:0c:1d:09:16:23:
bd:83:12:15:a1:7c:27:5a:75:57:32:63:3b:fa:aa:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:FE:33:A4:5A:66:B6:9D:02:12:34:D9:74:42:C4:D2:51:6A:37
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/27P-M6RaZradAhI02XRCxNJRajc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.224.0/21
151.237.248.0/21
185.108.184.0/22
188.94.112.0/21
IPv6:
2a02:2260::/32
Signature Algorithm: sha256WithRSAEncryption
20:2a:27:42:a4:09:31:9f:b5:fe:e0:5a:fb:6c:7d:8d:cc:c0:
36:44:69:11:a7:05:91:83:f5:65:0b:8e:fc:cf:15:36:44:12:
f1:79:2d:0c:e8:44:58:24:b0:e9:3f:2f:7e:ad:76:b3:3b:38:
f5:df:f5:55:ec:3f:ad:75:41:10:2b:06:a9:4b:85:c0:82:e6:
f0:50:ed:48:7b:33:f4:d4:5f:f1:f2:69:cd:6e:d7:53:9f:8e:
b7:26:db:23:9f:1b:d0:91:bb:ef:1f:9c:4b:b7:12:55:fc:ef:
23:a9:c0:63:aa:0e:24:4d:db:e5:dd:3e:1d:43:f0:5e:3d:a6:
b1:6d:7b:35:e7:bf:f4:4a:37:37:a8:e0:46:50:72:d9:c6:6a:
da:80:5e:d1:5d:7d:3d:b6:c5:6e:30:a9:fb:80:ef:3d:7c:37:
29:f7:f1:8e:c1:33:2c:6e:30:f0:50:48:26:73:2a:20:cb:7d:
aa:0a:a8:d0:59:5e:2e:ee:d6:d2:71:56:90:af:5d:89:cb:ab:
37:dd:cb:95:5b:6f:bd:cf:1b:f8:72:57:7e:38:62:99:80:7b:
7d:03:c5:ae:cb:03:02:a6:e1:ac:c9:b0:af:fb:cc:8c:52:e9:
8a:cc:f0:f9:f4:64:76:d5:c6:58:67:ca:68:af:92:a1:56:41:
51:8c:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net