Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/n34nAFTJk7pyD4Fldmcf5TLggoo.roa
File: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (raw, json)
Hash identifier: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=
Subject key identifier: 9F:7E:27:00:54:C9:93:BA:72:0F:81:65:76:67:1F:E5:32:E0:82:8A
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 019424B2C08AE1A9205CDDAACF9662393D48
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/n34nAFTJk7pyD4Fldmcf5TLggoo.roa
Signing time: Thu 02 Jan 2025 01:48:01 +0000
ROA not before: Thu 02 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12539
IP address blocks: 212.122.64.0/24 maxlen: 24
212.122.66.0/23 maxlen: 23
212.122.74.0/23 maxlen: 23
212.122.76.0/23 maxlen: 23
212.122.78.0/24 maxlen: 24
212.122.82.0/23 maxlen: 23
212.122.84.0/22 maxlen: 22
212.122.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c0:8a:e1:a9:20:5c:dd:aa:cf:96:62:39:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Jan 2 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f7e270054c993ba720f816576671fe532e0828a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:cb:40:33:5b:a3:43:7d:f2:30:a0:43:5c:
bb:82:d7:e4:2a:60:1b:c5:cd:9b:86:32:97:25:53:
84:b5:19:a0:c7:8c:f6:19:ea:95:0e:8a:3b:e0:1f:
47:4d:a2:8b:34:ee:2a:c9:5e:0c:43:bf:0a:2b:4e:
54:fa:fd:83:46:8a:16:ae:9b:5c:af:70:db:34:39:
59:69:cb:17:d0:44:aa:70:34:fb:28:03:dd:59:1c:
81:86:e0:e5:9c:79:d2:d7:eb:4b:78:61:b5:13:1e:
3b:03:c7:89:89:2d:d6:d4:b4:6c:28:84:ad:34:6e:
01:4a:f8:87:11:96:1a:d0:3b:35:2e:bc:b9:ad:48:
74:10:96:bd:59:c7:7f:20:fe:34:b4:ff:f5:15:84:
69:6b:af:b1:22:25:eb:0c:f4:50:84:43:e1:cd:f4:
20:2a:55:53:6c:6d:fd:fc:7e:bc:81:8e:b7:93:45:
f8:31:28:f3:ca:63:cd:af:63:1e:4b:73:d2:af:b5:
04:a1:57:c7:e9:a1:5a:00:4e:d6:ab:29:79:9a:5c:
b1:00:87:00:ec:e6:20:d1:ed:a0:31:5e:1c:1d:cc:
1f:be:1e:69:e9:6f:a8:0f:04:0e:82:03:84:f7:11:
e3:19:e9:03:e2:61:92:a8:ae:e8:8d:92:78:52:52:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:27:00:54:C9:93:BA:72:0F:81:65:76:67:1F:E5:32:E0:82:8A
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/n34nAFTJk7pyD4Fldmcf5TLggoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.122.64.0/24
212.122.66.0/23
212.122.74.0-212.122.78.255
212.122.82.0-212.122.87.255
212.122.94.0/24
Signature Algorithm: sha256WithRSAEncryption
26:fa:a4:ec:9e:2c:15:4d:84:e6:97:6c:dd:c0:d5:79:17:c4:
e1:d0:28:97:59:da:27:8f:05:ad:be:56:ca:d2:c2:39:2b:03:
2a:8a:8c:d6:a9:40:64:50:b7:2c:6e:9d:fe:dd:a8:c0:6c:9d:
ab:1a:3f:ec:ce:0b:34:3a:f4:76:8c:6b:40:c3:c4:49:7b:af:
a6:52:b6:21:33:06:3c:3a:d9:8c:f5:38:6b:55:24:fc:72:0d:
28:a4:33:4f:d7:da:a5:5e:d3:39:eb:b3:9e:1f:c8:e7:e4:1c:
e9:41:26:d8:6b:28:09:56:27:78:70:45:3d:8a:3f:43:e5:be:
04:7e:32:36:21:a2:23:2d:b5:69:ae:5a:c9:ed:f6:25:8f:31:
c9:ce:6e:04:22:ff:03:2b:db:1e:7f:3d:80:79:16:5f:e2:d4:
13:60:09:f5:db:61:06:80:29:a3:91:f3:30:59:5d:91:a0:06:
1d:42:86:23:82:20:5e:96:77:a8:0e:1a:bf:71:20:7f:59:92:
bd:ef:fb:f9:49:ee:c4:19:48:c4:a9:5b:ba:b1:2f:4a:a0:ac:
f9:72:7a:d5:24:8a:43:61:0e:02:4e:da:25:51:d9:fd:87:d7:
ce:8e:3e:69:00:dd:8a:46:87:61:37:59:a6:dd:fa:10:e2:38:
95:90:fd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net