Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/al_N3HYOLrNTuau_CCfFO7yEUiw.roa
File: al_N3HYOLrNTuau_CCfFO7yEUiw.roa (raw, json)
Hash identifier: NAunKVF7AxRmUZ9rUiL7K0mW+mDR0UHnfOhLqItJeYs=
Subject key identifier: 6A:5F:CD:DC:76:0E:2E:B3:53:B9:AB:BF:08:27:C5:3B:BC:84:52:2C
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 01956A825035E14C4DA2B1C6C7B41724ABF7
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/al_N3HYOLrNTuau_CCfFO7yEUiw.roa
Signing time: Thu 06 Mar 2025 08:11:19 +0000
ROA not before: Thu 06 Mar 2025 08:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39498
IP address blocks: 146.19.127.0/24 maxlen: 24
185.122.244.0/23 maxlen: 23
185.122.244.0/24 maxlen: 24
185.122.245.0/24 maxlen: 24
185.122.246.0/23 maxlen: 23
185.122.247.0/24 maxlen: 24
2a0d:6700::/29 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:82:50:35:e1:4c:4d:a2:b1:c6:c7:b4:17:24:ab:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Mar 6 08:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a5fcddc760e2eb353b9abbf0827c53bbc84522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:d7:65:9e:f8:8e:a4:3d:4d:f2:17:f0:8b:
af:2e:8f:53:59:76:51:5c:0d:c5:92:69:af:b6:20:
d9:9f:77:12:87:91:c6:3b:63:f4:ab:85:a9:13:95:
e8:97:78:cd:6c:f3:11:14:4b:ee:36:c0:a4:eb:1d:
50:3d:09:34:6f:ee:32:c9:1f:31:fe:07:90:50:8d:
35:46:31:f8:ee:21:25:63:f5:51:b1:7f:ea:f1:6b:
e9:20:1c:c3:e5:48:87:eb:f2:cd:73:d8:91:8c:24:
32:d9:c5:33:ab:98:2c:7c:de:ee:59:1a:ea:35:04:
f5:d2:22:75:12:1f:3f:ce:e2:29:ac:72:0e:f0:b1:
d6:b8:de:2f:6b:8b:72:43:6c:5f:70:f8:8f:92:47:
f1:8c:ee:ac:69:85:39:4c:58:8d:43:1e:94:b5:82:
2b:2e:10:21:85:bd:d6:64:13:8e:d8:e2:c8:06:b7:
77:c4:ba:f2:2b:be:0b:85:1a:43:79:e9:2a:35:9b:
16:37:4f:59:32:cf:89:08:a2:1a:fa:32:2f:c1:72:
16:be:a5:f9:07:c9:73:90:39:0f:90:61:d2:77:16:
61:b5:54:1c:1d:a6:ba:1b:2f:2e:fd:6a:ed:ef:f8:
3d:b6:68:94:e1:3e:b3:f1:fc:ed:24:4e:d2:f4:25:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5F:CD:DC:76:0E:2E:B3:53:B9:AB:BF:08:27:C5:3B:BC:84:52:2C
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/al_N3HYOLrNTuau_CCfFO7yEUiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.127.0/24
185.122.244.0/22
IPv6:
2a0d:6700::/29
Signature Algorithm: sha256WithRSAEncryption
39:b3:02:b3:8a:d7:16:a1:66:a4:7a:78:0e:98:ed:9f:41:42:
40:af:d8:48:bb:f3:40:77:99:b9:ed:ff:6e:0f:5e:9b:c3:e3:
69:f5:89:73:63:08:21:f2:2b:61:3c:ca:ea:f3:bd:fd:7c:d0:
28:a6:38:ec:61:15:10:43:27:8d:4e:95:10:6e:9a:9a:16:3a:
0d:1c:f2:cb:53:b6:80:13:35:11:62:b1:52:96:ed:73:97:df:
0c:7e:61:05:ec:45:b6:43:c3:08:76:78:22:89:44:16:e2:78:
b8:4f:c6:ea:5b:2e:2f:74:b1:5b:57:c9:0c:a6:68:f3:86:52:
5b:ca:e9:c7:01:d6:b1:69:83:9d:e3:fa:6e:5a:26:b9:95:2a:
b2:82:ab:63:38:52:d8:6a:02:c8:a2:5e:2a:58:b6:e2:a5:e8:
ad:03:c5:52:2f:5d:29:2f:34:93:eb:1e:84:00:3d:42:22:5d:
5f:4e:5f:41:65:c0:aa:38:72:50:5b:7a:db:ae:7e:10:03:db:
4e:8d:fe:30:0a:35:92:5a:a3:e0:4f:0e:f1:e2:f4:9b:6f:2f:
9e:c3:85:cb:07:e4:39:3d:84:f4:58:46:8a:c2:dc:82:73:73:
ed:47:61:61:98:50:14:87:81:10:e0:df:61:af:8d:a0:4f:d9:
60:85:43:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:55:47 2025 by rpki-client on console.sobornost.net