Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/_DVbXJIlrc4WueVJodx5_dUQQGU.roa
File: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (raw, json)
Hash identifier: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=
Subject key identifier: FC:35:5B:5C:92:25:AD:CE:16:B9:E5:49:A1:DC:79:FD:D5:10:40:65
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 01942368CB7ED87883D92BFB24F6446D6F2A
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/_DVbXJIlrc4WueVJodx5_dUQQGU.roa
Signing time: Wed 01 Jan 2025 19:47:37 +0000
ROA not before: Wed 01 Jan 2025 19:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24867
IP address blocks: 62.140.192.0/19 maxlen: 24
82.211.64.0/18 maxlen: 24
85.133.0.0/17 maxlen: 24
2a01:398::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:cb:7e:d8:78:83:d9:2b:fb:24:f6:44:6d:6f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Jan 1 19:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc355b5c9225adce16b9e549a1dc79fdd5104065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:6b:78:1f:85:24:35:6e:86:03:78:22:f3:
c3:51:db:01:7f:23:96:fe:90:00:77:a8:db:c2:a4:
7d:87:5c:04:aa:a6:17:c8:af:65:43:e4:b6:23:1e:
0f:17:c3:c8:e0:a6:f9:a7:7f:8a:30:bd:68:63:4f:
2b:b3:9e:8b:0e:7c:1d:8c:db:7f:3b:5b:fd:dd:50:
ac:66:78:b9:e3:fe:3e:7a:f6:f7:59:59:9b:ad:9a:
3e:c0:c1:7a:9c:5d:ee:45:82:61:22:fb:68:02:e0:
dc:64:dc:89:07:75:fd:81:79:5d:ba:5f:5a:8b:c3:
aa:76:58:24:c7:8b:31:f6:bc:5a:e0:21:d2:15:5b:
fe:d7:c6:c3:c0:8e:59:7d:a0:8e:93:be:b7:fa:81:
cb:c9:f3:f9:5a:c7:80:c8:d6:01:17:80:87:62:e1:
d2:fc:bc:bb:fb:b0:88:36:2b:32:7a:22:12:39:63:
eb:6f:a0:ef:bb:db:c7:be:47:4b:05:31:d5:f0:48:
91:02:08:4c:ff:db:fe:f3:79:75:52:1c:ff:0f:92:
a9:6e:06:a5:c1:95:70:87:63:a0:9c:e1:1a:a6:83:
7e:a6:a8:a9:d0:21:c1:14:6f:d1:bb:dd:59:31:d2:
68:01:81:40:65:a4:14:0a:db:4b:26:c6:e9:43:82:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:5B:5C:92:25:AD:CE:16:B9:E5:49:A1:DC:79:FD:D5:10:40:65
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/_DVbXJIlrc4WueVJodx5_dUQQGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.192.0/19
82.211.64.0/18
85.133.0.0/17
IPv6:
2a01:398::/32
Signature Algorithm: sha256WithRSAEncryption
58:2a:8f:1e:b7:7c:2a:4e:ae:29:9f:50:89:f8:98:f1:e0:60:
8d:d0:af:5c:e6:fd:0d:37:3b:1c:10:c6:d2:37:92:fe:e6:79:
12:2d:8b:b2:d7:71:dc:e7:4c:8d:6b:19:0c:84:6e:06:2a:f1:
ae:fd:64:50:9d:f9:3b:42:e2:5a:8e:c3:09:88:be:7d:c5:fe:
f6:27:c0:19:74:96:e1:d2:4e:fb:20:6c:c1:91:48:ce:b0:5c:
32:8d:c4:a3:a7:2d:bd:0b:ac:01:85:2c:3a:56:f8:2f:e1:f5:
69:6d:5f:1f:11:10:a0:f3:67:eb:89:47:74:ec:30:6b:b1:e4:
8e:56:6d:96:2a:5c:95:66:ec:e2:0d:40:6b:42:11:11:88:4c:
b0:1f:da:34:da:32:e1:6c:f7:2b:35:be:1b:bb:39:50:14:51:
3d:76:96:3f:0e:65:91:e3:8a:92:e4:9f:1a:c6:32:8d:9e:67:
8b:96:47:18:65:dc:49:4f:04:da:59:92:a2:f8:8f:55:ff:b2:
bd:1a:c0:72:e4:34:b3:4a:58:bf:5d:54:62:3b:fd:aa:a1:0d:
9c:d8:01:16:78:8d:76:31:f7:d4:cd:5b:29:a3:33:48:53:03:
75:c7:0b:6d:b3:b2:d8:a9:3a:d5:86:e5:51:f2:b6:d3:5d:00:
0b:b4:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net