Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/UY47b1nKTBymo-_2aL9oMC7vX38.roa
File: UY47b1nKTBymo-_2aL9oMC7vX38.roa (raw, json)
Hash identifier: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=
Subject key identifier: 51:8E:3B:6F:59:CA:4C:1C:A6:A3:EF:F6:68:BF:68:30:2E:EF:5F:7F
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 01942825470BF2C52E9E86A736C0BEEEEE74
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/UY47b1nKTBymo-_2aL9oMC7vX38.roa
Signing time: Thu 02 Jan 2025 17:51:59 +0000
ROA not before: Thu 02 Jan 2025 17:51:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20552
IP address blocks: 93.105.72.0/24 maxlen: 24
93.105.73.0/24 maxlen: 24
93.105.74.0/24 maxlen: 24
93.105.75.0/24 maxlen: 24
178.235.240.0/22 maxlen: 22
178.235.240.0/24 maxlen: 24
178.235.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:47:0b:f2:c5:2e:9e:86:a7:36:c0:be:ee:ee:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 17:51:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=518e3b6f59ca4c1ca6a3eff668bf68302eef5f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:11:f4:0c:9c:dc:b8:d9:41:04:9d:e7:76:
08:4c:f0:e3:09:6b:99:8a:21:6b:cf:06:7b:9c:22:
cb:c6:d1:aa:16:a2:d4:b6:e5:d0:40:67:1a:23:b1:
87:84:97:49:4f:59:0f:3e:50:35:ed:4d:58:8e:5e:
51:c8:60:d0:a8:59:f0:2d:a8:bc:42:00:2b:3a:19:
bb:f1:1f:08:13:88:80:08:b8:49:44:33:6c:af:92:
79:6e:9e:bb:ea:fb:d7:84:a2:61:8a:30:8b:20:48:
90:e5:77:d6:fe:9f:13:74:eb:79:61:77:75:bb:6f:
15:96:5d:54:8c:37:48:94:7b:24:0d:53:da:57:5b:
d4:4f:96:42:42:f0:5d:f0:8e:6a:36:0c:9f:58:22:
ee:35:80:a3:90:0b:07:9c:19:7a:11:e8:2a:7a:1b:
b4:af:62:29:e1:42:67:db:14:dd:2a:3a:e1:c0:81:
3d:bf:88:44:8e:02:e2:34:7f:bd:21:3b:f3:74:a7:
62:10:9a:54:16:32:53:0f:01:83:c9:67:bb:6d:95:
b9:9f:12:71:4d:3a:b2:e7:9f:c7:5f:aa:97:1f:f5:
32:35:48:b3:e4:26:c3:4b:2c:79:5e:35:82:91:11:
7f:8c:07:4c:79:13:a1:ff:7f:f3:41:af:ee:a1:84:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:3B:6F:59:CA:4C:1C:A6:A3:EF:F6:68:BF:68:30:2E:EF:5F:7F
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/UY47b1nKTBymo-_2aL9oMC7vX38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.72.0/22
178.235.240.0/22
Signature Algorithm: sha256WithRSAEncryption
56:e5:04:9d:a9:31:85:47:0b:50:e6:71:c5:ae:a5:e5:11:1d:
f7:c3:48:dc:53:6a:a0:57:78:9d:a5:cc:10:3b:2d:2b:da:62:
b9:5f:16:76:d0:c0:f3:e7:7b:04:02:48:2f:ce:fa:13:af:50:
36:d5:d2:63:07:63:85:f8:40:56:fc:c7:71:a4:c4:20:4f:41:
ad:18:a2:e2:40:d6:15:b8:46:d5:5e:27:50:c1:ab:56:22:5f:
58:51:47:f8:4a:6c:0f:ba:ae:80:9e:dd:38:74:a7:5c:d7:96:
62:11:1b:fb:15:f3:b9:c6:95:de:c7:1b:ad:cb:05:0e:a2:b4:
a6:6c:82:f5:5c:6e:0d:0e:d7:f8:9a:10:82:a8:fe:8e:ff:5c:
ab:59:8d:9e:00:6f:67:0e:bf:b3:3c:6e:b5:ed:b5:bd:3c:31:
39:b7:23:e2:4c:8b:7f:b4:6f:22:b3:28:e2:f0:b5:4a:fd:46:
b0:bc:e8:32:76:a2:e1:eb:12:68:61:e1:bd:70:82:4e:11:bf:
89:96:81:60:ec:4c:5d:6b:8f:94:16:05:28:08:10:5f:a5:b1:
18:3e:32:a1:c1:2e:93:b4:eb:84:49:65:34:d6:16:d5:7e:61:
f1:80:4a:d5:cd:7c:32:ae:81:fa:4e:e5:7d:bd:e9:f7:ef:b4:
bd:61:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net