Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa
File: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (raw, json)
Hash identifier: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=
Subject key identifier: E9:29:78:0B:65:45:AC:75:77:62:40:4C:A5:44:C1:AD:86:DD:44:F4
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 0195D2004DEAFDA0EC62A2A651081AC3491F
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa
Signing time: Wed 26 Mar 2025 10:29:49 +0000
ROA not before: Wed 26 Mar 2025 10:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210392
IP address blocks: 93.126.14.0/24 maxlen: 24
93.126.23.0/24 maxlen: 24
93.126.30.0/24 maxlen: 24
93.126.31.0/24 maxlen: 24
93.126.36.0/24 maxlen: 24
93.126.37.0/24 maxlen: 24
93.126.38.0/24 maxlen: 24
93.126.45.0/24 maxlen: 24
93.126.46.0/24 maxlen: 24
93.126.47.0/24 maxlen: 24
93.126.48.0/24 maxlen: 24
93.126.50.0/24 maxlen: 24
93.126.57.0/24 maxlen: 24
93.126.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:00:4d:ea:fd:a0:ec:62:a2:a6:51:08:1a:c3:49:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Mar 26 10:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e929780b6545ac757762404ca544c1ad86dd44f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:c1:8c:c4:9e:6b:07:30:4e:32:01:44:98:
26:18:86:0e:2b:4f:a3:dc:41:f7:5a:eb:06:f0:c1:
e5:e6:c2:d2:a2:c0:78:be:32:e7:01:e5:5f:84:82:
8c:be:2a:e5:c9:62:a7:77:8a:b1:e9:64:7d:74:d5:
99:d3:78:d9:ec:0c:0d:e9:49:85:f9:90:c6:7d:4f:
01:c3:f9:f2:87:9c:05:9a:f8:41:30:b1:2a:be:d2:
17:4a:70:86:0d:38:0e:5a:14:d5:87:c7:4b:86:44:
be:38:cf:36:59:0f:7a:3e:f9:45:f3:8f:87:8f:ad:
c0:58:1e:aa:39:ef:37:b4:f7:1a:f2:36:b9:ec:d5:
59:2e:64:c6:a8:40:ae:15:f6:db:ce:40:5f:26:4a:
43:8b:ac:b4:63:66:1e:99:c2:80:17:f8:44:30:be:
1d:7f:ad:d7:14:fc:4c:30:9c:d3:c0:c2:26:e8:9a:
48:23:ac:c2:2f:0d:1b:c6:3a:c1:94:01:23:a2:9a:
c3:1d:d2:7c:6f:e3:9c:d8:a8:0f:32:3b:99:2e:a8:
42:21:45:95:e2:d5:90:78:cd:f9:e0:36:b0:3d:94:
26:70:6f:9b:14:38:85:05:a0:73:a9:d3:c7:81:91:
f8:6a:e5:d5:9e:5e:af:4f:e1:89:22:c7:23:c0:99:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:78:0B:65:45:AC:75:77:62:40:4C:A5:44:C1:AD:86:DD:44:F4
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.14.0/24
93.126.23.0/24
93.126.30.0/23
93.126.36.0-93.126.38.255
93.126.45.0-93.126.48.255
93.126.50.0/24
93.126.57.0-93.126.58.255
Signature Algorithm: sha256WithRSAEncryption
44:96:25:66:3d:14:69:95:91:2c:a9:8a:52:a9:65:70:3e:ed:
44:d1:31:28:fb:93:23:76:10:50:2f:75:7e:37:13:d4:c0:f5:
e3:8d:f0:04:e5:e8:38:55:12:95:18:fe:7b:57:a5:5a:02:86:
c7:20:64:fd:f9:8d:71:bc:88:11:2b:4d:39:f2:11:25:b6:c3:
b5:fe:c9:73:9f:65:8d:6e:f5:c1:57:5f:8b:ee:6e:2a:c5:f3:
c6:0f:5d:96:ac:5c:fb:da:82:8c:f0:70:c2:a2:2b:65:64:e0:
8c:c9:7d:e9:c4:3a:02:9a:48:d9:2b:0f:72:bf:05:b7:2e:c6:
68:4f:e3:c3:ae:c3:7f:d2:fc:3e:f5:c8:cf:70:69:8d:49:e6:
67:5e:9a:67:8c:84:e4:79:95:4e:65:e2:dd:ed:ae:a1:42:17:
e0:74:5b:28:aa:66:89:37:a6:15:01:6e:c7:60:b4:08:a9:6a:
70:60:da:94:6a:08:df:a6:33:b4:a5:4b:66:53:b2:c8:59:27:
9e:4e:74:7f:53:0e:c2:ab:e6:a4:84:5f:5b:4d:84:3e:4b:8a:
9d:21:09:03:4a:c1:70:d8:81:01:e7:ea:c3:a5:4d:03:50:e0:
f0:24:58:5b:df:a7:5d:ad:e6:8e:a1:2b:cf:2f:7f:4b:05:75:
8a:b6:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net