Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/r8lD_AoxI_vqECkRvj5MGM36UnA.roa
File: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (raw, json)
Hash identifier: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=
Subject key identifier: AF:C9:43:FC:0A:31:23:FB:EA:10:29:11:BE:3E:4C:18:CD:FA:52:70
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 01961552D44FFD16D323BA7618955E99769A
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/r8lD_AoxI_vqECkRvj5MGM36UnA.roa
Signing time: Tue 08 Apr 2025 12:14:31 +0000
ROA not before: Tue 08 Apr 2025 12:14:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209014
IP address blocks: 62.3.43.0/24 maxlen: 24
91.196.155.0/24 maxlen: 24
146.19.146.0/24 maxlen: 24
185.128.225.0/24 maxlen: 24
185.245.56.0/23 maxlen: 23
194.93.68.0/22 maxlen: 22
2a0d:140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:52:d4:4f:fd:16:d3:23:ba:76:18:95:5e:99:76:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Apr 8 12:14:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afc943fc0a3123fbea102911be3e4c18cdfa5270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:19:32:30:4a:af:18:b4:ee:62:a7:8a:57:
80:bc:cc:86:26:47:97:07:67:46:a4:79:da:13:87:
56:88:8b:59:ef:56:ce:63:cc:a3:2c:74:f1:e0:de:
42:57:62:91:91:cb:12:dc:e6:eb:ff:35:6e:a6:5c:
d8:3b:a2:f9:49:c6:71:c9:c1:2c:fb:4f:87:1c:73:
d9:e1:f5:48:48:20:ab:f9:12:f0:40:1e:55:b7:35:
01:3f:e6:44:90:8a:1e:4d:c1:a0:33:f8:88:19:bc:
56:69:f2:44:d7:9d:73:bc:22:4b:80:fe:ad:06:59:
35:43:0c:a7:03:e7:9a:c4:20:0c:11:3c:25:7f:3f:
7d:e1:76:7c:1d:db:7c:c4:a0:90:aa:a4:0e:76:23:
0f:b8:ff:ef:c6:7d:70:88:46:2d:c7:8e:08:0c:4b:
a8:59:5a:b7:d8:af:2d:e7:87:cb:43:92:a5:dc:a2:
18:da:1d:2c:a2:cc:1f:3b:1a:07:92:8e:83:25:49:
69:03:21:27:32:d2:a9:7d:5d:95:2c:6c:7c:0a:f2:
8d:b1:ed:2e:0e:83:de:7e:d0:5b:e2:1c:8f:cc:4e:
da:c2:52:7f:a8:1a:bb:11:29:fe:c6:7d:8a:a2:49:
86:24:ca:65:9a:b3:eb:74:09:94:32:17:1e:3d:4f:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C9:43:FC:0A:31:23:FB:EA:10:29:11:BE:3E:4C:18:CD:FA:52:70
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/r8lD_AoxI_vqECkRvj5MGM36UnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.43.0/24
91.196.155.0/24
146.19.146.0/24
185.128.225.0/24
185.245.56.0/23
194.93.68.0/22
IPv6:
2a0d:140::/29
Signature Algorithm: sha256WithRSAEncryption
43:e3:96:cc:c1:a2:fe:ce:89:c4:d4:96:99:51:de:a5:07:9a:
f0:ae:6b:80:e3:de:6a:a1:bd:67:8d:24:34:7b:23:68:e2:21:
fe:66:c5:ae:87:43:42:02:31:5a:1f:31:8d:7f:73:00:f0:76:
a8:eb:95:9c:04:c8:b5:33:18:f4:6c:2d:1d:58:8c:1c:4f:9e:
54:7a:b6:94:92:ae:04:3b:cd:1e:82:90:9b:76:3a:c8:fc:fc:
f1:7b:44:1b:a0:ea:13:12:ff:81:74:db:ca:b5:9b:c3:2a:e5:
8d:ab:7f:a5:dc:be:0f:cc:22:9d:93:24:e0:5e:97:b1:f1:7c:
56:8b:b4:cd:a1:48:4e:d9:74:da:c1:53:80:fc:32:f7:b6:fe:
e3:3d:ce:5f:ee:a2:96:17:d8:9c:e3:80:8f:97:65:7b:55:05:
23:95:f3:f7:af:d8:f3:47:1d:46:ed:dc:b4:02:d3:32:f0:d2:
e2:d5:82:94:02:67:0c:50:1c:3c:87:2f:71:5f:af:18:c4:16:
2b:6e:b1:d2:02:9d:03:78:9c:b6:68:93:c6:f4:49:94:52:0b:
ad:48:2d:83:16:51:34:9e:6e:91:ec:1b:a8:e6:6d:a7:da:16:
3d:5c:5c:15:92:9e:b4:55:ea:5e:31:72:13:8d:97:12:b7:cb:
3a:51:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net