Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/hSVOEYR3wkiN21Km9noHByidNkc.roa
File: hSVOEYR3wkiN21Km9noHByidNkc.roa (raw, json)
Hash identifier: gmgGps7iqZqgn7KgXcruM+0aV/wQZu+D+yKypERbLL0=
Subject key identifier: 85:25:4E:11:84:77:C2:48:8D:DB:52:A6:F6:7A:07:07:28:9D:36:47
Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial: 01941FFA7F20F1945AC2749D7F1940EA2EA0
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/hSVOEYR3wkiN21Km9noHByidNkc.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6786
IP address blocks: 81.169.191.0/24 maxlen: 24
85.214.9.0/24 maxlen: 24
85.214.11.0/24 maxlen: 24
85.215.0.0/19 maxlen: 24
2a01:238:cca::/48 maxlen: 48
2a01:238:3000::/36 maxlen: 48
2a01:238:e000::/35 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7f:20:f1:94:5a:c2:74:9d:7f:19:40:ea:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85254e118477c2488ddb52a6f67a0707289d3647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:2c:4f:03:66:ef:3b:dc:b5:29:0c:f4:f7:
b7:42:3a:81:3f:d6:92:ea:2a:15:b8:ef:31:ae:44:
32:3d:34:2e:99:5a:4f:5b:95:a1:99:0a:e4:d6:8b:
6e:80:c5:af:87:54:16:24:f1:91:a1:7d:8e:4c:32:
a9:a6:8a:f7:42:45:92:0a:99:b3:6e:11:01:8c:a2:
9c:4d:2a:b1:be:4c:4a:5a:6f:d8:90:2d:71:c8:f8:
a6:3c:6f:42:12:60:77:72:d3:ab:5d:2d:7d:4f:e0:
87:03:27:c6:a8:f9:ce:3e:6e:fa:41:65:01:03:91:
45:3b:76:59:a3:44:ec:ea:de:31:38:da:a1:ef:38:
2e:fe:43:de:2f:67:73:d1:04:49:6a:c5:06:f2:d1:
13:68:c5:0b:6c:d3:15:b6:6a:ef:aa:d9:ad:45:83:
fc:3f:8a:15:c8:b1:c2:42:22:d0:d9:cb:39:99:cc:
59:be:a3:50:05:4f:d1:2e:c5:00:37:59:94:03:f6:
f1:c7:bc:aa:e8:e4:46:a2:e6:88:bb:a7:2e:03:5d:
23:21:5f:78:b3:50:0f:84:40:96:1a:97:17:dd:06:
e5:b3:13:a6:73:49:60:b5:a3:ea:bf:04:a7:83:00:
63:b2:2d:f4:11:61:e1:d3:ad:5f:19:d7:8a:8c:2b:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:25:4E:11:84:77:C2:48:8D:DB:52:A6:F6:7A:07:07:28:9D:36:47
X509v3 Authority Key Identifier:
keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/hSVOEYR3wkiN21Km9noHByidNkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.169.191.0/24
85.214.9.0/24
85.214.11.0/24
85.215.0.0/19
IPv6:
2a01:238:cca::/48
2a01:238:3000::/36
2a01:238:e000::/35
Signature Algorithm: sha256WithRSAEncryption
37:83:5d:14:0e:51:6b:e2:f5:cc:d2:44:6b:5c:21:59:60:60:
0a:bf:4a:2f:78:95:df:a2:77:f0:32:ba:d8:dc:dc:ad:74:84:
a5:f1:7f:16:db:aa:ec:a0:20:83:db:f9:27:08:98:2a:3b:3f:
8c:93:c4:af:7f:63:ca:5b:4b:9e:a1:41:a7:a1:8a:41:c3:e0:
ef:10:98:3c:ca:bd:af:d2:15:79:36:5d:c0:0d:cc:74:21:2e:
29:c9:f6:3d:87:4c:89:a2:14:6e:f0:89:43:33:e9:33:c2:6c:
2b:d5:f9:78:89:c4:b8:3d:69:54:d0:32:92:28:cb:9d:40:53:
97:16:ce:c4:6c:09:cf:9f:c4:71:ec:c7:1b:ef:96:ce:bc:9d:
c8:b6:26:5d:47:63:05:6b:90:6c:64:32:2b:7b:68:b9:6d:5c:
e9:e7:43:dc:8b:a5:89:6a:4f:54:3c:1c:a3:4e:56:86:41:e8:
a7:2c:78:ae:ea:24:f0:e2:df:de:97:a0:3e:34:1f:54:cf:4a:
fa:d6:b8:cd:93:58:94:d7:ae:93:5d:f3:96:2c:dc:ad:b0:51:
27:03:3f:f2:99:9a:c4:57:6d:c7:d4:1f:80:6c:1f:56:64:3a:
c6:2f:68:49:6d:96:e8:68:03:bb:72:31:97:6c:5b:05:f7:69:
1e:fc:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net